binwalk/sh
What is binwalk?
binwalk is the de-facto tool for firmware analysis. It scans a binary for the signatures of hundreds of file types, tells you exactly what is embedded inside and where, and can extract it. binwalk/sh puts that engine behind a browser, no install, no command line.
What binwalk finds
Firmware images are containers: a bootloader, one or more compressed file systems, kernels, certificates and padding, all concatenated. binwalk recognizes each by its magic bytes, SquashFS, JFFS2, UBI, gzip, LZMA, XZ, U-Boot headers, ELF executables and many more, regardless of file extension.
Identification, entropy and extraction
A scan does three things: it maps every signature with its offset and confidence, it charts the file Shannon entropy so you can spot compressed or encrypted regions at a glance, and it can carve the embedded file systems out to disk.
On binwalk/sh, identification is free; revealing the full report, the complete signature map, the entropy curve and the extracted files, takes a one-time lifetime-access purchase that unlocks every future scan.
How to install binwalk
On Linux, binwalk ships with most distributions: on Debian or Ubuntu run apt install binwalk, and on Kali Linux it is already preinstalled. On macOS you can use Homebrew with brew install binwalk. binwalk v3 is written in Rust, so building the latest version from source means installing Rust and the extractor dependencies first.
There is no official Windows build, so on Windows the common routes are WSL, Docker or compiling it yourself. If you would rather skip all of that, binwalk/sh runs the exact same engine online, with nothing to install.
How to use binwalk
On the command line, binwalk FILE identifies the signatures inside a file, binwalk -e FILE extracts the known payloads, and binwalk -E FILE plots the entropy. In Kali Linux the workflow is the same, since the tool is already there.
On binwalk/sh you get those same three results, the signature map, the extraction and the entropy curve, from a single upload. That is handy on Windows or any machine where you cannot install the CLI.
Why run binwalk online
binwalk v3 and its extractors are powerful but fiddly to install. binwalk/sh keeps the binary and every extractor ready on the server, so you upload a file and get a clean, shareable report back in seconds.
