Binwalk

What Binwalk is

Binwalk is a firmware analysis tool that identifies and can extract files and data embedded inside other files. Its signature scanning looks for known patterns; the project documents 111 supported signatures, of which 72 are extractable. Since detection relies on known signatures, it may not identify data outside that set. Binwalk can also generate entropy graphs to help locate sections that may be compressed or encrypted. The quick start guide demonstrates extraction with the -e option and recursive scanning with -M. Version 3 is rewritten in Rust, and the project includes a library for integration into Rust projects. Installation options include Docker, the Rust package manager, or compiling from source. Binwalk is free under the MIT License, which permits use and distribution subject to its terms. The project officially supports 64-bit Linux, preferably Ubuntu or an Ubuntu-based system; Windows and macOS are largely untested. Analysis requires at least as much free memory as the files being examined.