binwalk
Tool library for analyzing binary blobs and executable code
forensicsBlue Team
ToolforensicsblueLinuxKali LinuxPlatforms: Linux · Last verified September 6, 2026
Binwalk is a tool for searching a given binary image for embedded files and executable code. Specifically, it is designed for identifying files and code embedded inside of firmware images. Binwalk uses the libmagic library, so it is compatible with magic signatures created for the Unix file utility.
Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.
Getting started
See the official Kali tool page and upstream homepage linked above for installation and usage details.
