Binwalk
The Binwalk quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Map firmware with a signature scan, extract nested layers recursively, carve a byte range with dd, read entropy for compression vs encryption, filter to just the filesystem, and identify a raw blob's CPU architecture.