Agent skill · research science · aiskillstore
firmware-analyst
Expert firmware analyst specializing in embedded systems, IoT security, and hardware reverse engineering.
Why this skill is useful
Provides detailed workflows and commands for firmware analysis that the AI wouldn't reliably generate on its own.
What it needs
Requires binwalk, cramfsck, ghidra, jefferson, ubireader, unsquashfs installed locally. About 4k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Download from vendor wget http://vendor.com/firmware/update.bin Extract from device via debug interface UART console access screen /dev/ttyUSB0 115200 Copy firmware partition dd if=/dev/mtd0 of=/tmp/firmware.bin Extract via network protocols TFTP during boot HTTP/FTP from device web interface UART access - Serial console connection JTAG/SWD - Debug interface for memory access SPI flash dump - Direct chip reading NAND/NOR dump - Flash memory extraction Chip-off - Physical chip removal and reading Logic analyzer - Protocol capture and analysis bash Basic file identification file firmware.bin binwalk firmware.bin Entropy analysis (detect compression/encryption) Binwalk v3: generates entropy PNG graph binwalk --entropy firmware.bin binwalk -E firmware.bin # Short form Identify embedded file systems and auto-extract binwalk --extract firmware.bin binwalk -e firmware.bin # Short form String analysis strings -a firmware.bin grep -i "password\ key\ secret" bash Binwalk v3 recursive extraction (matryoshka mode) binwalk --extract --matryoshka firmware.bin binwalk -eM firmware.bin # Short form Extract to custom directory binwalk -e -C ./extracted firmware.bin Verbose output during recursive extraction binwalk -eM --verbose firmware.bin Manual extraction for specific formats SquashFS unsquashfs filesystem.squashfs JFFS2 jefferson filesystem.jffs2 -d output/ UBIFS ubireaderextractimages firmware.ubi YAFFS unyaffs filesystem.yaffs Cramfs cramfsck -x output/ filesystem.cramfs bash Explore extracted filesystem find . -name ".conf" -o -name ".cfg" find . -name "passwd" -o -name "shadow" find . -type f -executable Find hardcoded credentials grep -r "password" . grep -r "apikey" . grep -rn "BEGIN RSA PRIVATE KEY" . Analyze web interface find . …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/firmware-analyst