tldr/pages/common/binwalk.md

binwalk

Firmware Analysis Tool. More information: https://github.com/ReFirmLabs/binwalk.

• Scan a binary file:

binwalk {{path/to/binary}}

• Extract files from a binary, specifying the output directory:

binwalk {{[-e|--extract]}} {{[-C|--directory]}} {{output_directory}} {{path/to/binary}}

• Recursively extract files from a binary limiting the recursion depth to 2:

binwalk {{[-e|--extract]}} {{[-M|--matryoshka]}} {{[-d|--depth]}} {{2}} {{path/to/binary}}

• Extract files from a binary with the specified file signature:

binwalk {{[-D|--dd]}} '{{png image:png}}' {{path/to/binary}}

• Analyze the entropy of a binary, saving the plot with the same name as the binary and .png extension appended:

binwalk {{[-E|--entropy]}} {{[-J|--save]}} {{path/to/binary}}

• Combine entropy, signature and opcodes analysis in a single command:

binwalk {{[-E|--entropy]}} {{[-B|--signature]}} {{[-A|--opcodes]}} {{path/to/binary}}