Recently added tools:
- lazygit - Terminal UI for Git
- pnpm - Fast, disk-efficient package manager
- ONNX Runtime - ML inference engine
- VHS - Record terminal demos
- yq - Process YAML, JSON, XML, ...
- binwalk - Firmware analysis tool
- prek - Fast Git hook manager
- trippy - Network diagnostics
- lazygit - Terminal UI for Git
- pnpm - Fast, disk-efficient package manager
- ONNX Runtime - ML inference engine
- VHS - Record terminal demos
- yq - Process YAML, JSON, XML, ...
- binwalk - Firmware analysis tool
- prek - Fast Git hook manager
- trippy - Network diagnostics
October 26, 2026 at 8:54 AM
Recently added tools:
- lazygit - Terminal UI for Git
- pnpm - Fast, disk-efficient package manager
- ONNX Runtime - ML inference engine
- VHS - Record terminal demos
- yq - Process YAML, JSON, XML, ...
- binwalk - Firmware analysis tool
- prek - Fast Git hook manager
- trippy - Network diagnostics
- lazygit - Terminal UI for Git
- pnpm - Fast, disk-efficient package manager
- ONNX Runtime - ML inference engine
- VHS - Record terminal demos
- yq - Process YAML, JSON, XML, ...
- binwalk - Firmware analysis tool
- prek - Fast Git hook manager
- trippy - Network diagnostics
A router's whole OS fits in one file. We opened an official OpenWrt image with binwalk, unblob, checksec, Ghidra, cwe_checker, QEMU and EMBA. Analysis only, nothing flashed.
https://app.stationx.net/r/bs-router-s-whole-article
https://app.stationx.net/r/bs-router-s-whole-article
October 27, 2026 at 5:03 PM
A router's whole OS fits in one file. We opened an official OpenWrt image with binwalk, unblob, checksec, Ghidra, cwe_checker, QEMU and EMBA. Analysis only, nothing flashed.
https://app.stationx.net/r/bs-router-s-whole-article
https://app.stationx.net/r/bs-router-s-whole-article
3: el firmware
Només si el pots aconseguir (els d’operador rarament es descarreguen). Extreu-lo amb binwalk o unblob i passa-hi les regles YARA del repositori:
yara -w -r broadcom_wps_monitor.yar carpeta
Ull: pot donar falsos positius en binaris pegats.
Només si el pots aconseguir (els d’operador rarament es descarreguen). Extreu-lo amb binwalk o unblob i passa-hi les regles YARA del repositori:
yara -w -r broadcom_wps_monitor.yar carpeta
Ull: pot donar falsos positius en binaris pegats.
October 18, 2026 at 10:14 AM
3: el firmware
Només si el pots aconseguir (els d’operador rarament es descarreguen). Extreu-lo amb binwalk o unblob i passa-hi les regles YARA del repositori:
yara -w -r broadcom_wps_monitor.yar carpeta
Ull: pot donar falsos positius en binaris pegats.
Només si el pots aconseguir (els d’operador rarament es descarreguen). Extreu-lo amb binwalk o unblob i passa-hi les regles YARA del repositori:
yara -w -r broadcom_wps_monitor.yar carpeta
Ull: pot donar falsos positius en binaris pegats.
REA (Reverse Engineer Anything): a MCP server for your Coding Agents to reverse native Binaries (using Ghidra or IDA), Android apps, firmwares with binwalk, JavaScript and Electron apps, .NET assemblies, WASM artifact #LLM #ReverseEngineering github.com/morluto/rea
GitHub - morluto/rea: Reverse engineer anything with agents, from app behavior down to native binaries.
Reverse engineer anything with agents, from app behavior down to native binaries. - morluto/rea
github.com
October 13, 2026 at 7:10 PM
REA (Reverse Engineer Anything): a MCP server for your Coding Agents to reverse native Binaries (using Ghidra or IDA), Android apps, firmwares with binwalk, JavaScript and Electron apps, .NET assemblies, WASM artifact #LLM #ReverseEngineering github.com/morluto/rea
3/6
authoscope-0.8.1-x86_64-10cf.txz: Rebuilt.
Recompiled with "cargo auditable".
bat-0.26.1-x86_64-5cf.txz: Rebuilt.
Recompiled with "cargo auditable".
binwalk-3.1.0-x86_64-7cf.txz: Rebuilt.
Recompiled with "cargo auditable".
bpf-linker-0.11.1-x86_64-3cf.txz: Rebuilt.
authoscope-0.8.1-x86_64-10cf.txz: Rebuilt.
Recompiled with "cargo auditable".
bat-0.26.1-x86_64-5cf.txz: Rebuilt.
Recompiled with "cargo auditable".
binwalk-3.1.0-x86_64-7cf.txz: Rebuilt.
Recompiled with "cargo auditable".
bpf-linker-0.11.1-x86_64-3cf.txz: Rebuilt.
October 11, 2026 at 4:31 PM
3/6
authoscope-0.8.1-x86_64-10cf.txz: Rebuilt.
Recompiled with "cargo auditable".
bat-0.26.1-x86_64-5cf.txz: Rebuilt.
Recompiled with "cargo auditable".
binwalk-3.1.0-x86_64-7cf.txz: Rebuilt.
Recompiled with "cargo auditable".
bpf-linker-0.11.1-x86_64-3cf.txz: Rebuilt.
authoscope-0.8.1-x86_64-10cf.txz: Rebuilt.
Recompiled with "cargo auditable".
bat-0.26.1-x86_64-5cf.txz: Rebuilt.
Recompiled with "cargo auditable".
binwalk-3.1.0-x86_64-7cf.txz: Rebuilt.
Recompiled with "cargo auditable".
bpf-linker-0.11.1-x86_64-3cf.txz: Rebuilt.
How to extract firmware from routers and IoT devices for analysis and advanced security
#Firmware #IoT #Routers #CyberSecurity #ReverseEngineering #Binwalk #EmbeddedSystems #Networking #EthicalHacking #TechNews #GadgetFlux #Linux #OpenSource #InfoSec #CyberResearch #HardwareHacking
#Firmware #IoT #Routers #CyberSecurity #ReverseEngineering #Binwalk #EmbeddedSystems #Networking #EthicalHacking #TechNews #GadgetFlux #Linux #OpenSource #InfoSec #CyberResearch #HardwareHacking
Cum extragi firmware din routere și dispozitive IoT
Află cum extragi și analizezi firmware din routere și dispozitive IoT folosind SSH, UART, JTAG și Binwalk.
gadgetflux.eu
October 9, 2026 at 7:59 PM
How to extract firmware from routers and IoT devices for analysis and advanced security
#Firmware #IoT #Routers #CyberSecurity #ReverseEngineering #Binwalk #EmbeddedSystems #Networking #EthicalHacking #TechNews #GadgetFlux #Linux #OpenSource #InfoSec #CyberResearch #HardwareHacking
#Firmware #IoT #Routers #CyberSecurity #ReverseEngineering #Binwalk #EmbeddedSystems #Networking #EthicalHacking #TechNews #GadgetFlux #Linux #OpenSource #InfoSec #CyberResearch #HardwareHacking
this is basically the same principle that binwalk uses so it working on binary files shouldn't be that surprising
October 2, 2026 at 8:47 PM
this is basically the same principle that binwalk uses so it working on binary files shouldn't be that surprising
16/ Forensics now has YARA, Volatility 3, Sleuth Kit, TestDisk, Foremost, Scalpel, bulk_extractor, Binwalk, ExifTool, ddrescue, ssdeep, TLSH, ClamAV, Lynis and osquery.
Momiji can both break things and ask who broke them.
Momiji can both break things and ask who broke them.
October 1, 2026 at 4:37 PM
16/ Forensics now has YARA, Volatility 3, Sleuth Kit, TestDisk, Foremost, Scalpel, bulk_extractor, Binwalk, ExifTool, ddrescue, ssdeep, TLSH, ClamAV, Lynis and osquery.
Momiji can both break things and ask who broke them.
Momiji can both break things and ask who broke them.
Got sent a suspicious file? Don't open it.\n\n7 tools that show what's inside without running it: file (magic bytes beat the extension), strings, binwalk, olevba, pdfid, and capa (capabilities mapped to MITRE ATT&CK).\n\nThen build the agent that chains the triage.\n\nhttps://app.stationx.net/book
September 25, 2026 at 12:01 PM
Got sent a suspicious file? Don't open it.\n\n7 tools that show what's inside without running it: file (magic bytes beat the extension), strings, binwalk, olevba, pdfid, and capa (capabilities mapped to MITRE ATT&CK).\n\nThen build the agent that chains the triage.\n\nhttps://app.stationx.net/book
After a hot summer we released another update of EMBA - v2.0.4. Check the summer edition with better logging, new base image, improved testing, improved AI config and much more here github.com/e-m-b-a/emba...
Release EMBA v2.0.4 - summer edition · e-m-b-a/emba
The latest highlights of a few nice and hot summer weeks: Migration from binwalk to the more maintained fork of binwalk-ng New public demo report available here Updated base image with latest kern...
github.com
September 21, 2026 at 3:00 PM
After a hot summer we released another update of EMBA - v2.0.4. Check the summer edition with better logging, new base image, improved testing, improved AI config and much more here github.com/e-m-b-a/emba...
For some reason, attempting to mount the XFS partition gives the error, "unknown fs type 'xfs'." I can see the XFS module is loaded, so I am at a dead end. Used `binwalk` to see if it can't get anything. It got mostly boring stuff...except this.
This caught me so off guard. Why is this on the HDD?
This caught me so off guard. Why is this on the HDD?
September 11, 2026 at 1:41 AM
For some reason, attempting to mount the XFS partition gives the error, "unknown fs type 'xfs'." I can see the XFS module is loaded, so I am at a dead end. Used `binwalk` to see if it can't get anything. It got mostly boring stuff...except this.
This caught me so off guard. Why is this on the HDD?
This caught me so off guard. Why is this on the HDD?
"AES S-Box" okay well thanks binwalk. i guess
September 5, 2026 at 11:31 PM
"AES S-Box" okay well thanks binwalk. i guess
Internal components, repairs and firmware emulation – Manta DVBT018 DVB-T2 tuner: A dead Manta DVBT018 DVB-T2/HEVC tuner becomes a Low-ESR capacitor repair and firmware-emulation project with an interactive MBoot console.
A swollen converter-output capacitor caused the failure; an SPI Flash dump,…
A swollen converter-output capacitor caused the failure; an SPI Flash dump,…
Internal components, repairs and firmware emulation – Manta DVBT018 DVB-T2 tuner
A dead Manta DVBT018 DVB-T2/HEVC tuner becomes a Low-ESR capacitor repair and firmware-emulation project with an interactive MBoot console.
A swollen converter-output capacitor caused the failure; an SPI Flash dump, binwalk, Ghidra, Capstone, and Unicorn exposed MStar K5AP firmware running eCos rather than Linux.
The bootloader loads and LZMA-decompresses a 6,328,740-byte application image, while the eCos boot log reports a 754000000 Hz CPU clock.
UART register emulation, SPI Flash reads, and timer updates produce a valid U-Boot 2011.06 boot log and a working k5ap# console with environment editing.
Emulation stalls during eCos driver initialization because the application uses MIPS16e instructions and Unicorn cannot reliably handle the ISA-mode transition.
Full article on the elektroda homepage.
www.elektroda.com
August 23, 2026 at 12:17 PM
Internal components, repairs and firmware emulation – Manta DVBT018 DVB-T2 tuner: A dead Manta DVBT018 DVB-T2/HEVC tuner becomes a Low-ESR capacitor repair and firmware-emulation project with an interactive MBoot console.
A swollen converter-output capacitor caused the failure; an SPI Flash dump,…
A swollen converter-output capacitor caused the failure; an SPI Flash dump,…
Unpack an archive, run binwalk, poke through git history, curl a URL, or inspect files that never even made it into Binary Ninja. Commands still require your approval by default. sidekick.binary.ninja/blog/sidekic...
Sidekick 26.1: A Proper Home for Sidekick - Sidekick
Sidekick 26.1 makes Sidekick a Binary Ninja view, folds seven sidebars into four, lets an agent run shell commands with your approval, and adds a Revert button to the transaction log.
sidekick.binary.ninja
August 19, 2026 at 2:15 PM
Unpack an archive, run binwalk, poke through git history, curl a URL, or inspect files that never even made it into Binary Ninja. Commands still require your approval by default. sidekick.binary.ninja/blog/sidekic...
yeah im just going to use binwalk for linux. whatever
August 18, 2026 at 2:06 AM
yeah im just going to use binwalk for linux. whatever
maybe i should just fully patch plotly out of binwalk and replace it with some other less ridiculous crate
August 18, 2026 at 1:52 AM
maybe i should just fully patch plotly out of binwalk and replace it with some other less ridiculous crate
yeah i see why no ones ported binwalk 3 yet. this stupid graph renderer crate is messing up the build
August 18, 2026 at 12:48 AM
yeah i see why no ones ported binwalk 3 yet. this stupid graph renderer crate is messing up the build
well i am porting binwalk 3 right now and having trouble with one of its crate dependencies. check the repository and i suppose it is all just claude now
August 18, 2026 at 12:37 AM
well i am porting binwalk 3 right now and having trouble with one of its crate dependencies. check the repository and i suppose it is all just claude now
huh. the version of binwalk freebsd packages is old
August 17, 2026 at 1:04 PM
huh. the version of binwalk freebsd packages is old
oh visualization with ghidra? never heard of that, can tell more?
binwalk -E should give you a start (simple entropy levels), and then, scanlime trick (should be googleable, tell me if it's not) should help heaps more
binwalk -E should give you a start (simple entropy levels), and then, scanlime trick (should be googleable, tell me if it's not) should help heaps more
January 10, 2025 at 7:06 AM
oh visualization with ghidra? never heard of that, can tell more?
binwalk -E should give you a start (simple entropy levels), and then, scanlime trick (should be googleable, tell me if it's not) should help heaps more
binwalk -E should give you a start (simple entropy levels), and then, scanlime trick (should be googleable, tell me if it's not) should help heaps more
I totally missed binwalk going rustlang
June 27, 2025 at 3:20 AM
I totally missed binwalk going rustlang
webbyp() { A=($(binwalk -R=RIFF -R=WEBP "$1"));[ $(( ${A[9]}-${A[4]} )) -eq 8 ] && dd if="$1" of=test.webp bs=1 skip=${A[4]} count=$((16#$(dd if="$1" bs=1 skip=${A[4]} count=12 2>/dev/null | xxd -e | awk '{print $3}')+8)) ; }
September 10, 2023 at 4:20 PM
webbyp() { A=($(binwalk -R=RIFF -R=WEBP "$1"));[ $(( ${A[9]}-${A[4]} )) -eq 8 ] && dd if="$1" of=test.webp bs=1 skip=${A[4]} count=$((16#$(dd if="$1" bs=1 skip=${A[4]} count=12 2>/dev/null | xxd -e | awk '{print $3}')+8)) ; }
It could very well be some type of encryption but the entropy of the .bin file doesn't seem to indicate so, at least not the entire thing. An encrypted sample would likely have a regular distribution of randomness throughout the file whereas this one shows spikes likely indicating compression.
November 12, 2024 at 12:27 AM
It could very well be some type of encryption but the entropy of the .bin file doesn't seem to indicate so, at least not the entire thing. An encrypted sample would likely have a regular distribution of randomness throughout the file whereas this one shows spikes likely indicating compression.
Ever wondered what secrets hide inside your smart devices? 🤔 Our new blog post dives deep into reverse engineering IoT firmware! Learn how to uncover security vulnerabilities with Ghidra & Binwalk. Level up your cybersecurity skills!
Reverse Engineering IoT Firmware: A Practical Approach
Learn how to reverse engineer IoT firmware to identify security vulnerabilities. Practical guide using Ghidra and Binwalk for embedded systems analysis.
bytesectorx.blogspot.com
July 20, 2025 at 10:10 AM
Ever wondered what secrets hide inside your smart devices? 🤔 Our new blog post dives deep into reverse engineering IoT firmware! Learn how to uncover security vulnerabilities with Ghidra & Binwalk. Level up your cybersecurity skills!
Og så lærte jeg samtidig binwalk at kende. Jeg ved ikke, hvorfor jeg ikke tidligere er stødt på værktøjet.
January 7, 2025 at 6:09 AM
Og så lærte jeg samtidig binwalk at kende. Jeg ved ikke, hvorfor jeg ikke tidligere er stødt på værktøjet.