emba

The latest highlights of a few nice and hot summer weeks:

• Migration from binwalk to the more maintained fork of binwalk-ng
• New public demo report available here
• Updated base image with latest kernel fixes from here by @HoxhaEndri
• Enhance csv logging by @ahmedboufares
• More test modules generated with AI support
• AI configuration enhancements by @oiahoon
• We had the pleasure showing EMBA and EMBArk in an Arsenal session and a lab at Black Hat in Vegas. Check the video from EMBArk by @BenediktMKuehne here
• Fresh Forensics by Douglas Habian started some nice live streams around firmware analysis, emulation and EMBA - check it out here

Beside your ongoing support with feedback, testing, working on issues and spreading EMBA you can now also support EMBA as a sponsor.

Check it out here and start being an essential part of the future of EMBA. Breaking News: Check also our new shop for EMBA merch here.

It is always a pleasure to welcome new contributors to EMBA. This time we welcome:

• @oiahoon made their first contribution in https://github.com/e-m-b-a/emba/pull/2069

Besides all our newcomers we also want to thank all our regular contributors!

We had never before so many bug reports, contributors and helping hands! Big kudos to all of you!

How can you reach us and stay up to date? Just take one of these channels (or all):

• Bluesky
• Mastodon
• Github discussions
• Github issues
• LinkedIn
• X

Now, start your fresh Kali Linux (put enough CPU power and RAM into it) and install EMBA:

└─$ git clone https://github.com/e-m-b-a/emba.git
└─$ cd emba 
└─$ sudo ./installer.sh -d

This will install all pre-requisites, including the docker base image and the CVE database, which will need some bandwith, harddrive space and time.

Afterwards, you are ready to analyse your first firmware with EMBA:

└─$ sudo ./emba -l ~/log -f ~/firmware -p ./scan-profiles/quick-scan.emba

For updating your outdated EMBA installation, please check the update section in our wiki.

What's Changed

• Fix link for EMBA v2.0.3 in README by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/2056
• s08 openwrt threading by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/2062
• Linux kernel version database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/2072
• GCC version database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/2071
• CISA known exploited database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/2075
• Metasploit database update by @github-actions[bot] in https://git

All of you probably know this kind of legacy servers where you are not able to connect anymore:

As your modern OpenSSL version does not ship the needed code anymore you can't do it!

But .... The legacy does not hit EMBA anymore. We connect and find vulns :) (see https://github.com/e-m-b-a/emba/pull/2023)

Another highlight is the upcoming Hacker Summer Camp in Las Vegas. You can join @BenediktMKuehne for a Black Hat Arsenal session on the Firmware analysis platform EMBArk and @m-1-k-3 on an Arsenal Lab session on EMBA. Check it out and say Hi :)

Beside all of this we did some further updates and bugfixes in a lot of different areas:

• Thanks to @ahmedboufares we have more csv log output of our modules
• Thanks to @cn0xroot we have a more stable user-mode emulation module
• We have also started to implement unit tests (based on bats) here https://github.com/e-m-b-a/emba/pull/2044
• A big cleanup round was also started to further improve code quality for the future here https://github.com/e-m-b-a/emba/pull/2046
• Lots of bugfixes, cleanups and improvements across different modules.
• Continued database updates (CISA KEV, Metasploit, Snyk, kernel/GCC/version DBs, etc.) to keep detection fresh.

Beside your ongoing support with feedback, testing, working on issues and spreading EMBA you can now also support EMBA as a sponsor.

Check it out here and start being an essential part of the future of EMBA. Breaking News: Check also our new shop for EMBA merch here.

It is always a pleasure to welcome new contributors to EMBA. This time we welcome:

• @ahmedboufares made their first contribution in https://github.com/e-m-b-a/emba/pull/2001
• @cn0xroot made their first contribution in https://github.com/e-m-b-a/emba/pull/2036

Besides all our newcomers we also want to thank all our regular contributors!

We had never before so many bug reports, contributors and helping hands! Big kudos to all of you!

How can you reach us and stay up to date? Just take one of these channels (or all):

• Bluesky
• Mastodon
• Github discussions
• Github issues
• LinkedIn
• X

Now, start your fresh Kali Linux (put enough CPU power and RAM into it) and install EMBA:

└─$ git clone https://github.com/e-m-b-a/emba.git
└─$ cd emba 
└─$ sudo ./installer.sh -d

This will install all pre-requisites, including the docker base image and the CVE database, which will need some bandwith, harddrive space and time.

Afterwards, you are ready to analyse your first firmware with EMBA:

└─$ sudo ./emba -l ~/log -f ~/fi

We have something to celebrate with you! We did it ... The big 2000 is in the books right now:

EMBA is now for 6 years in the wild and we are proud that we did a few things:

• Automated firmware security analysis (including SBOM and AI) is available for everyone
• Nearly 3500 github stars
• Nearly 100 shoutouts in papers, videos, articles, talks and so on - see here
• We tried a few things in this timeframe. So we ...
  • ... were on 13 security conferences - kick me
  • ... did a podcast - check it out here
  • ... wrote multiple articles - one for you
  • ... organised multiple cooperations with universities around EMBA and created EMBArk, the firmware analysis environment for teams with collaboration support and, and, and
• We bumped 24 (now 25) releases to the world - check it out here
• 2000 Github pull requests/issues/discussions - drink a beer, coffee or whatelse with us

Thank you for supporting, helping, coding, reporting, hacking, challenging, using EMBA.

The big news for this release is that we did a complete rework of all our AI integration and you do not need to pay for tokens anymore.

With our switch to LocalAI it is now possible to use AI integration with your local hardware and no more token fears anymore.

Check the following screenshots of the improved AI integration:

The AI module shows and links all the AI results and the original module results are easily rechable:

The original analysis module also links to the related AI results:

And, finalle the AI results with an overview of the source file, some improvements and a security overview with security rating:

For further details and a walkthrough the setup check the wiki

This beauty is not alone and we did some further updates and bugfixes in a lot of different areas:

• Thanks to @atharva80 we have a new extraction module P26
• Thanks to @Jumpforce we have improved documentation for multiple modules
• Lots of bugfixes, cleanups and improvements across different modules.
• Continued database updates (CISA KEV, Metasploit, Snyk, kernel/GCC/version DBs, etc.) to keep detection fresh.

Beside your ongoing support with feedback, testing, working on issues and spreading EMBA you can now also support EMBA as a sponsor.

Check it out here and start being an essential part of the future of EMBA. Breaking News: Check also our new shop for EMBA merch here.

It is always a pleasure to welcom

The highlight of this release is the all new s130 module for generating a nice and interactive dependency map:

For further details check the wiki

Beside this beauty we did some further updates and bugfixes in a lot of different areas:

• Lots of bugfixes and cleanups across modules and installers.
• Continued database updates (CISA KEV, Metasploit, Snyk, kernel/GCC/version DBs, etc.) to keep detection fresh.
• More robustness in installer / docker workflows and internal checks.

Beside your ongoing support with feedback, testing, working on issues and spreading EMBA you can now also support EMBA as a sponsor.

Check it out here and start being an essential part of the future of EMBA. Breaking News: Check also our new shop for EMBA merch here.

It is always a pleasure to welcome new contributors to EMBA. This time we welcome:

• @migus-rs made their first contribution in https://github.com/e-m-b-a/emba/pull/1924
• @Spenc3rB made their first contribution in https://github.com/e-m-b-a/emba/pull/1944

Besides all our newcomers we also want to thank the other, regular contributors!

We had never before so many bug reports, contributors and helping hands! Big kudos to all of you!

How can you reach us and stay up to date? Just take one of these channels (or all):

• Bluesky
• Mastodon
• Github discussions
• Github issues
• LinkedIn
• X

Now, start your fresh Kali Linux (put enough CPU power and RAM into it) and install EMBA:

└─$ git clone https://github.com/e-m-b-a/emba.git
└─$ cd emba 
└─$ sudo ./installer.sh -d

This will install all pre-requisites, including the docker base image and the CVE database, which will need some bandwith, harddrive space and time.

Afterwards, you are ready to analyse your first firmware with EMBA:

└─$ sudo ./emba -l ~/log -f ~/firmware -p ./scan-profiles/quick-scan.emba

For updating your outdated EMBA installation, please check the update section in our wiki.

What's Changed

• CISA known exploited database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1833
• Linux kernel version database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1834
• Metasploit database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1835
• Snyk database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1836
• Snyk database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1839
• CISA known exploited database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1838
• Metasploit database update by @github-actions[bot] in https