About

Binwalk is a tool for searching a given binary image for embedded files and executable code. Specifically, it is designed for identifying files and code embedded inside of firmware images. Binwalk uses the libmagic library, so it is compatible with magic signatures created for the Unix file utility.

Binwalk also includes a custom magic signature file which contains improved signatures for files that are commonly found in firmware images such as compressed/archived files, firmware headers, Linux kernels, bootloaders, filesystems, etc.

News

Version 0.4.2 includes significant speed improvements over previous versions, as well as the addition of some new search options (--grep and --raw-bytes).

Version 0.4.0 released. Added support for Linux block devices and building against libmagic rather than the included file utility code. Fixed minor bugs and updated/added signatures.

Version 0.3.9 released. Added build options to disable update features (thus disabling the zlib and libcurl requirements). Added long options. Fixed minor bugs and updated/added signatures.

Version 0.3.8 released. Added support for opcode scanning for identification of executable code. Bug fixes and new signatures added.

Version 0.3.7 released. Added Mac OSX support; code no longer relies on the libmagic library. Bug fixes and new file system signatures added.

Version 0.3.6 released. Added ability to specify multiple target files on the command line; added default filters (includes 'gzip' and 'lzma', excludes 'invalid' results); added ability to disable default filters; added improved LZMA signatures.

Version 0.3.5 released to address build bug and LZMA signature bug.

Version 0.3.4 released. Added -u option to update magic file definitions to the latest SVN check in; added -s option to disable 'smart' matching. Added signatures for several new file systems and firmware headers. Improved LZMA signatures.

Version 0.3.3 released. Now includes 'bincast' feature, which displays raw data as various data types (longs, shorts, dates, etc).

Version 0.3.2 released. Bug fixes in -i and -y options; bug fixes in build scripts; new magic signatures; improved gzip signature.

Version 0.3.1 just released. Bug fixes and new signatures.

Version 0.3.0 is out, with new features, new options, more signatures, and improved searching that helps prevent false positive matches.

Version 0.2.1 has been released! This release features minor bug fixes and man more default file signatures.

Version 0.2 has been released! This release features significant speed improvements - many orders of magnitude faster than previous versions - and updates to the binwalk magic file.