bulk_extractor
Scan images for emails, cards, URLs.
KaliParrotLinuxpassive
pkg: bulk-extractor
bulk_extractor scans disk images/files for features (emails, credit cards, URLs, hashes) without parsing the filesystem.
Syntax
bulk_extractor -o {out} {image}
Example
bulk_extractor -o out disk.img
Extracts emails, URLs and other artefacts into feature files.
Advantages
- Fast feature extraction
- Filesystem-agnostic
Disadvantages
- Lots of output to triage
- No context
Tags
#triage#dfir
Official docs: bulk_extractor ↗
Related commands
Frequently asked questions
What is bulk_extractor used for?
bulk_extractor scans disk images/files for features (emails, credit cards, URLs, hashes) without parsing the filesystem.
What is an example bulk_extractor command?
A common example is: bulk_extractor -o out disk.img — Extracts emails, URLs and other artefacts into feature files.
Is bulk_extractor part of Kali Linux?
Yes. bulk_extractor ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install bulk-extractor.
What category of security tool is bulk_extractor?
bulk_extractor is a Forensics tool with a passive-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.