Binwalk v3.1.0

Complete re-write in Rust!

1. Significantly faster
2. Far fewer false positives
3. Support for many more file extractors

What's Changed

• Add Dockerfile by @banditopazzo in #683
• Add support for windows compilation by @ElonGaties in #689
• main loop refactor: remove redundant queue and no active waiting for results by @banditopazzo in #690
• Update Dockerfile build dependency install gcc by @kimasplund in #693
• Edit README.md to be neater and added .gitattributes by @ultimateshadsform in #696
• dependencies/readme.md: Fix typo by @braillescreen in #698
• add basic LUKS header support by @nmatt0 in #699
• Mem cleanup by @devttys0 in #700
• github workflows: first quality check by @banditopazzo in #701
• Lint fixes by @devttys0 in #705
• add github workflow lint check by @banditopazzo in #706
• Fixed docker issues by @devttys0 in #707
• Tplink fw rtos sig by @devttys0 in #709
• Added BIN firmware header signature by @devttys0 in #710
• Removed unwrap() from code examples by @devttys0 in #711
• Added support for Autel encoded firmware by @devttys0 in #712
• Ntfs support by @devttys0 in #720
• Apfs support by @devttys0 in #721
• Btrfs support by @devttys0 in #723
• extractors/common: support Chroot path on windows by @135e2 in #726
• Wince by @devttys0 in #727
• Full search by @devttys0 in #728

New Contributors

• @banditopazzo made their first contribution in #683
• @ElonGaties made their first contribution in #689
• @kimasplund made their first contribution in #693
• @ultimateshadsform made their first contribution in #696
• @braillescreen made their first contribution in #698
• @135e2 made their first contribution in #726

Full Changelog: v2.3.4...v3.1.0

Binwalk 2.3.4

Merged patch to fix PFS directory traversal / code execution bug. Credit: Quentin Kaiser.

Binwalk 2.3.3

1. Added checks to prevent directory traversal vulnerability when external extractors create symlinks on the filesystem.
2. Added --run-as command line option to allow users to control the privilege level external extractors are given as well as the power to run as root if they so choose.
3. Added documentation to the README that describes the changes above.

Binwalk 2.3.2

Minor bug fixes

Release 2.3.1

• Fixed issue where deps.sh could fail to install a dependency but the script would still succeed. Specifically sasquatch was not getting properly installed into the docker container.

Release v2.3.0

This is the first release with exclusive support for Python3.

Python 2.2.1

This will be the last release that officially supports Python 2.

Binwalk v2.2.0 Release

Updated version to 2.2.0

Binwalk v2.1.1 Release

The binwalk v2.1.1 release includes many improvements, including:

• Many bug fixes
• New/improved file signatures
• Disassembly scans (using the Capstone Engine)
• Improved raw Deflate compression detection and extraction
• Raw LZMA compression detection and extraction
• Improved false positive detection for common compressions (Zlib, LZMA)
• An IDA plugin for running binwalk inside of IDA
• Integration of better extraction utilities (e.g., sasquatch for SquashFS, jefferson for JFFS2)
• Removal of all C library dependencies, including libmagic - pure Python!
• Native Windows support!

Thanks to everyone who submitted bug reports and pull requests!

Version 2.0.1 Bug Fix Release

Fixes an install bug on OSX.