Otp.bin Seeprom.bin [10000+ RELIABLE]
SEEPROM stands for Serial Electrically Erasable Programmable Read-Only Memory.
In the context of seeprom.bin, this usually refers to the NVRAM (Non-Volatile RAM) partition or an external EEPROM chip holding configuration data.
Unlike OTP, SEEPROM is rewritable (though with a limited cycle life, typically 100k to 1M writes). The seeprom.bin file is a raw dump of this memory. otp.bin seeprom.bin
Typical contents of SEEPROM:
| Tool | Purpose | Supported files |
|------|---------|------------------|
| seeprom-tools (Linux) | Dump/verify/restore serial EEPROM | seeprom.bin |
| otpdump (custom) | Parse e-fuse maps for AMLogic, Rockchip | otp.bin |
| binwalk | Analyze entropy, find embedded blobs | Both |
| hexdump -C | Visual inspection | Both |
| Lockpick_RCM (Switch) | Extract secure keys & OTP | otp.bin, seeprom.bin | # Find current MAC (assuming ASCII or hex
Example analysis command:
# Check entropy of OTP (should be high)
ent otp.bin
# Compare two SEEPROM dumps
diff -y <(hexdump -C seeprom_old.bin) <(hexdump -C seeprom_new.bin)
# Find current MAC (assuming ASCII or hex at offset 0x04)
hexdump -C seeprom.bin | grep -i "mac"
# Modify (example: offset 0x04, write new MAC)
printf '\x00\x11\x22\x33\x44\x55' | dd of=seeprom.bin bs=1 seek=4 conv=notrunc
Manufacturers include both in full device images to preserve: Manufacturers include both in full device images to
For SEEPROM via I²C (Linux):
# Detect SEEPROM on bus 0, address 0x50
i2cdetect -y 0
# Dump 32KB from 0x50 to a file
dd if=/dev/i2c-0 of=seeprom.bin bs=1 count=32768 skip=0
For OTP via JTAG (OpenOCD script):
# Assuming CPU is halted
targets
mdw 0x1FFFF000 0x40 # Read 256 bytes of OTP region
dump_image otp.bin 0x1FFFF000 0x100
For systems like Nintendo Switch (using Hekate or Lockpick):
The payloads Lockpick_RCM.bin and Hekate can dump both otp.bin and seeprom.bin directly to an SD card.