Binwalk Quick Reference
=======================

BASIC USAGE
  binwalk file                   Scan for embedded files
  binwalk -e file                Extract embedded files
  binwalk -Me file               Recursive extraction
  binwalk -D ".*" file           Extract all file types
  binwalk -E file                Entropy analysis
  binwalk -A file                Instruction scan
  binwalk -W file1 file2         Compare files (hexdiff)

EXTRACTION OPTIONS
  binwalk -e file                Extract to ./_file.extracted/
  binwalk -C /tmp/out -e file    Extract to custom directory
  binwalk --dd="png:png" file    Extract specific type

ENTROPY
  binwalk -E file                Show entropy graph
  binwalk -E -J file             Save entropy plot as PNG

FILTERING
  binwalk -y "jpeg" file         Only show JPEG signatures
  binwalk -x "jpeg" file         Exclude JPEG signatures
  binwalk -R "\x89PNG" file      Raw byte search

COMMON CTF PATTERNS
  # Firmware analysis
  binwalk -Me firmware.bin

  # Find hidden files in image
  binwalk -e image.png

  # Check for appended data
  binwalk suspicious_file

  # Extract filesystem from firmware
  binwalk -e -C ./extracted firmware.bin

RELATED TOOLS
  foremost file                  Carve files by header/footer
  foremost -t all -i file        Carve all known types
  foremost -o output/ -i file    Output directory
