NullSec BinWalk

Firmware & Binary Analysis Tool

Firmware analysis tool written in Crystal for signature detection and extraction.

Build

crystal build binwalk.cr --release -o binwalk

Usage

./binwalk firmware.bin
./binwalk -v router.bin           # Verbose with entropy
./binwalk -j image.bin            # JSON output
./binwalk -e 0x1000 -s 0x5000 -o extracted.bin firmware.bin  # Extract

Signatures Detected

• Archives: gzip, bzip2, xz, zip, rar, 7z
• Filesystems: SquashFS, JFFS2, UBIFS, CramFS
• Executables: ELF, PE, Mach-O
• Firmware: U-Boot, DTB, MBR
• Crypto: PEM, DER certificates
• Strings: shells, passwords, secrets

Community

• Discord: discord.gg/killers
• GitHub: bad-antics