Binwalk
Analyse & extract embedded files from firmware.
KaliParrotLinuxpassive
pkg: binwalk
Binwalk scans binary/firmware images for embedded files and filesystems and can carve them out for analysis.
Syntax
binwalk [-e] {file}
Example
binwalk -e firmware.bin
Identifies embedded data and extracts (-e) recognised files/filesystems.
Options & flags
What each switch does. Toggle them in the builder below to assemble a command.
Command builder
Tick options (and fill any values) to build a ready-to-copy command.
binwalk
Usage examples
binwalk firmware.bin
Identify embedded files.
binwalk -Me firmware.bin
Recursively extract everything.
Advantages
- Essential for firmware analysis
- Auto-extraction of filesystems
- Entropy/signature views
Disadvantages
- Extraction can be incomplete
- Some formats need extra tools
- Carving false positives
Tags
#firmware#carving
Official docs: Binwalk ↗
Related commands
Frequently asked questions
What is Binwalk used for?
Binwalk scans binary/firmware images for embedded files and filesystems and can carve them out for analysis.
What is an example Binwalk command?
A common example is: binwalk -e firmware.bin — Identifies embedded data and extracts (-e) recognised files/filesystems.
Is Binwalk part of Kali Linux?
Yes. Binwalk ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install binwalk.
What category of security tool is Binwalk?
Binwalk is a Forensics tool with a passive-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.