1. Run binwalk firmware.bin to identify embedded filesystems
2. Run binwalk -e firmware.bin to extract them
3. Use ls and cat to explore the extracted filesystem
4. Check squashfs-root/etc/ for interesting files
5. Run strings firmware.bin | grep flag as an alternative shortcut