Releases · e-m-b-a/emba

05 Mar 10:04

m-1-k-3

1.4.0-ICS-testing-edt

c98898e

Latest

As we do a lot of ICS/OT testing in our daily business, we thought this release should reflect our usual EMBA usage scenario. Welcome to another huge EMBA release with a lot new features: EMBA v1.4.0 - ICS testing Editition

This time we have collected the following highlights for you:

less bugs -> more code -> more bugs? -> report all our bugs here
Extended binary analysis via semgrep (see module s16)
New static perl analysis via zarn (see module s27)
Toolchain identification (see wiki)
Improved update checking (see wiki)
New scan interface (with integrated status bar) automatically enabled in most scan-profiles
Improved multiple backend workflows
Massive speedup of multiple EMBA modules (see #1006 / #996)
Updated docker base image (see wiki)
You can get in contact with us on the following social networks: X / Mastodon / NEW: Bluesky
We can meet in real life at BlackHat Asia this year (see Arsenal schedule)
Special thanks to our awesome community for releasing multiple new articles around EMBA - see our dedicated section in the wiki

Now, start your fresh Kali Linux (put enough CPU power and RAM into it) and install EMBA:

└─$ git clone https://github.com/e-m-b-a/emba.git
└─$ cd emba 
└─$ sudo ./installer.sh -d

This will install all pre-requisites, including the docker base image and the cve database, which will need some bandwith, harddrive space and time.

Afterwards, you are ready to analyse your first firmware with EMBA:

└─$ sudo ./emba -l ~/log -f ~/firmware -p ./scan-profiles/quick-scan.emba

Beside your ongoing support with feedback, testing, working on issues and spreading EMBA you can now also support EMBA as a sponsor.

Check it out here and start being an essential part of the future of EMBA

It is always a pleasure to welcome new contributors to EMBA. This time we can welcome:

@413x8 made their first contribution in #931
@mj138 made their first contribution in #939
@jblu42 made their first contribution in #987
@floyd-fuh made their first contribution in #1030

Welcome to the EMBA firmware analysis environment and thank you for your valuable contribution.

What's Changed

Internet check not blocking by @m-1-k-3 in #722
Fix docker build workflow by @m-1-k-3 in #723
disable disk space monitor by @m-1-k-3 in #724
print fix, http crawler by @m-1-k-3 in #732
Code cleanup by @m-1-k-3 in #733
Fix updater by @m-1-k-3 in #749
Unblob v23.8.11 by @m-1-k-3 in #750
PEM file with multiple certificates by @HoxhaEndri in #736
Update README.md by @m-1-k-3 in #757
add file-command to default deps by @BenediktMKuehne in #763
Update semgrep workflow by @m-1-k-3 in #764
Debian repos - https only for Kali by @m-1-k-3 in #766
Curl online check by @m-1-k-3 in #774
Improve PW cracking module s107 by @m-1-k-3 in #773
Check container nr disable for dev mode by @m-1-k-3 in #776
Set variable by @m-1-k-3 in #777
Installer updates by @m-1-k-3 in #779
fix gpt path by @m-1-k-3 in #789
Improve web page crawler by @m-1-k-3 in #795
little fix by @m-1-k-3 in #796
disable the trickest exploit db by @m-1-k-3 in #797
Debian installer support by @m-1-k-3 in #798
grep -v -> tail by @m-1-k-3 in #812
Proxy support by @m-1-k-3 in #811
Firmware diffing preparation by @m-1-k-3 in #804
nikto setup, compose cleanup by @m-1-k-3 in #814
System emulation fs mount improvements by @m-1-k-3 in #815
L10 Fix SC2250 shellcheck by @HoxhaEndri in #822
Installer debian package file format by @m-1-k-3 in #826
Cleanup of PS crawler by @m-1-k-3 in #833
Check for arachni user and shellcheck braces by @HoxhaEndri in #834
Try cve db update multiple times during installation by @m-1-k-3 in #837
Firmware diffing modules by @m-1-k-3 in #838
fix #839 by @m-1-k-3 in #844
Semgrep checks and shellcheck braces checks by @HoxhaEndri in #835
check for space at the end of a line by @HoxhaEndri in #845
Update installer, dep-check by @m-1-k-3 in #846
strict mode grep error by @HoxhaEndri in #848
BMC firmware extractor by @m-1-k-3 in #853
braces check for all scripts inside "helpers" folder and "installer" folder by @HoxhaEndri in #854
kernel-hardening-checker fix by @m-1-k-3 in #855
Version 1.3.1 by @m-1-k-3 in #856
Version identifiers, Arch check in installer, diff updates by @m-1-k-3 in #860
check braces for modules scripts by @HoxhaEndri in #861
braces checked for all script files by @HoxhaEndri in #865
shellcheck braces check in check_project and in workflow by @HoxhaEndri in #866
Improve diff mode by @m-1-k-3 in #867
Fix grep -R by @m-1-k-3 in #869
CPU check for SSSE3 by @m-1-k-3 in #870
Diff threading + improved reporting by @m-1-k-3 in #871
#873 fix by @m-1-k-3 in #874
zlib string from dell bios firmware by @HoxhaEndri in #872
Create first_interaction.yml by @m-1-k-3 in #877
UEFI analysis improvements by @m-1-k-3 in #876
fwhunt check entire firmware first by @HoxhaEndri in #881
new version strings and comment for fwhunt by @HoxhaEndri in #882
integrate cveXplore settings by @BenediktMKuehne in #884
Install CveXplore v0.3.16++ by @m-1-k-3 in #892
Full system emulation dependency s24 by @m-1-k-3 in #896
Cvexplore integration by @BenediktMKuehne in #887
switch pip install for cvexplore to git repo by @BenediktMKuehne in #899
Docker-compose cleanup by @m-1-k-3 in #891
Issue 889 by @m-1-k-3 in #902
L10, S05 fixes by @m-1-k-3 in #903
L23 VNC checker modules by @m-1-k-3 in #904
update first interaction by @m-1-k-3 in #906
Update check again - #908 by @m-1-k-3 in #909
Make Routersploit work again by @m-1-k-3 in #910
Stick to version and check it from requests and urllib3 by @m-1-k-3 in #911
Improve dep checker by @m-1-k-3 in #912
Replacement of current cve query mechanism by @m-1-k-3 in #913
Fix workflows, improve CVE identification by @m-1-k-3 in https://github.com/e-m-b-a/emba...

Contributors

m-1-k-3, floyd-fuh, and 5 other contributors

Assets 2

0 Join discussion

12 Dec 13:07

m-1-k-3

1.3.2-EMBArk_is_here

04a97e1

EMBA v1.3.2 - EMBArk is out

The last EMBA release is not too long ago but in the mean time there was so much going on ... The most important thing is ...

The first official EMBArk release is out now!

Everything started as an idea in the beginning of 2021. The idea was to build an enterprise ready open source firmware analysis environment on top of EMBA. This environment should allow every product security team as well as every penetration tester and security researcher to use professional firmware analysis to improve the security of IoT/OT/ICS ... (you name it) devices as easy as possible. This idea was mixed up to an AMOS research project, where a team of students built a first PoC of EMBArk. You can find the original project here. From there on continuous work, improvement and testing was running more or less under the radar. Until today ... EMBArk is stable and ready for more! Kudos to @BenediktMKuehne for pushing it to the next level.

Say hi to our centralized firmware security analysis environment EMBArk! Check it out here, use it, give us feedback or improve it and start being part of this open source environment.

On EMBA side we have some "bumpy" weeks in the neck:

As the NIST API is currently changing and we had some serious issues with our cve-search integration we decided to rewrite it by ourself. This process took us some time to get the CVE identification feature fully working again. Thanks for all your testing and feedback during this process. With the new integration EMBA is faster, more stable and the installation is not that error prone anymore.
UEFI analysis integration was massively improved - see here
A lot of code cleanup was done by @HoxhaEndri
A new update check functionality by @HoxhaEndri
Improved firmware diffing environment - see here
Updated and new reporting templates by @413x8
Your great feedback is now collected in our wiki
Further public online resources are available and collected here
New support possibilities via patreon or buymeacoffee

Thank you for all your feedback and your testing since version 1.3.1!

It is always a pleasure to welcome new contributors to EMBA. This time we can welcome two of them:

Welcome to the EMBA environment and thank you for your valuable contribution.

We are looking for (release) sponsors here

What's Changed

Version identifiers, Arch check in installer, diff updates by @m-1-k-3 in #860
Snyk database update by @github-actions in #864
CISA known exploited database update by @github-actions in #863
Metasploit database update by @github-actions in #862
check braces for modules scripts by @HoxhaEndri in #861
braces checked for all script files by @HoxhaEndri in #865
shellcheck braces check in check_project and in workflow by @HoxhaEndri in #866
Improve diff mode by @m-1-k-3 in #867
Fix grep -R by @m-1-k-3 in #869
CPU check for SSSE3 by @m-1-k-3 in #870
Diff threading + improved reporting by @m-1-k-3 in #871
#873 fix by @m-1-k-3 in #874
zlib string from dell bios firmware by @HoxhaEndri in #872
Create first_interaction.yml by @m-1-k-3 in #877
Metasploit database update by @github-actions in #878
CISA known exploited database update by @github-actions in #879
Snyk database update by @github-actions in #880
UEFI analysis improvements by @m-1-k-3 in #876
fwhunt check entire firmware first by @HoxhaEndri in #881
new version strings and comment for fwhunt by @HoxhaEndri in #882
integrate cveXplore settings by @BenediktMKuehne in #884
Install CveXplore v0.3.16++ by @m-1-k-3 in #892
Snyk database update by @github-actions in #894
Packetstorm database update by @github-actions in #895
CISA known exploited database update by @github-actions in #893
Full system emulation dependency s24 by @m-1-k-3 in #896
Cvexplore integration by @BenediktMKuehne in #887
switch pip install for cvexplore to git repo by @BenediktMKuehne in #899
Docker-compose cleanup by @m-1-k-3 in #891
Issue 889 by @m-1-k-3 in #902
Update FUNDING.yml by @m-1-k-3 in #905
L10, S05 fixes by @m-1-k-3 in #903
L23 VNC checker modules by @m-1-k-3 in #904
update first interaction by @m-1-k-3 in #906
Update FUNDING.yml by @m-1-k-3 in #907
Update check again - #908 by @m-1-k-3 in #909
Make Routersploit work again by @m-1-k-3 in #910
Stick to version and check it from requests and urllib3 by @m-1-k-3 in #911
Improve dep checker by @m-1-k-3 in #912
CISA known exploited database update by @github-actions in #915
Packetstorm database update by @github-actions in #917
Snyk database update by @github-actions in #916
Replacement of current cve query mechanism by @m-1-k-3 in #913
Fix workflows, improve CVE identification by @m-1-k-3 in #919
rootfs check in uefi extractor by @m-1-k-3 in #921
fix install workflow by @m-1-k-3 in #922
check for versions (emba, git and docker) by @HoxhaEndri in #918
Update FUNDING.yml by @m-1-k-3 in #924
Update FUNDING.yml by @m-1-k-3 in #925
Update FUNDING.yml by @m-1-k-3 in #926
Update FUNDING.yml by @m-1-k-3 in #927
S26 module fix by @m-1-k-3 in #928
remove update scripts by @m-1-k-3 in #923
Packetstorm database update by @github-actions in #935
CISA known exploited database update by @github-actions in #933
Snyk database update by @github-actions in #934
Metasploit database update by @github-actions in #932
Pre templates by @413x8 in #931
Multiple fixes by @m-1-k-3 in #930
Contributors update by @m-1-k-3 in #937
update default profile for EMBArk by @m-1-k-3 in #938
Fix parsing of version number from binary version string by @mj138 in #939
Update Contributors, version by @m-1-k-3 in #940
Fix parsing of binary name from binary version string by @mj138 in #942
little cleanup by @m-1-k-3 in #944
Docker build updates for Kali 2023.4 by @m-1-k-3 in #945
Metasploit database update by @github-actions in #948
CISA known exploited database update by @github-actions in #949
Snyk database update by @github-actions in #950
Packetstorm database update by @github-actions in #951
Include 0xdea semgrep rules and haruspex ghidra script, improve cwe-search integration by @m-1-k-3 in #946
s14 r2 startup command update by @m-1-k-3 in #952
r2 bin cache by @m-1-k-3 in #953
fix for #954 by @m-1-k-3 in #955
Enable workflow dispatch by @m-1-k-3 in #956

New Contributors

@413x8 made their first contribution in h...

Contributors

m-1-k-3, mj138, and 3 other contributors

Assets 2

0 Join discussion

01 Nov 14:06

m-1-k-3

1.3.1-diff-all-the-firmwares

42ed908

EMBA v1.3.1 - Diff it

What happened since the last EMBA release?

There was the absolute great #Hackersummercamp with our talks at BSidesLV, ICS Village (DEF CON) and Black Hat (Arsenal). The recording of the BSides talk is already available here. Beside this, Nate did a really great talk at BruCON – see here.

Beside a lot of code cleanup, bug fixing and some little improvements the new firmware diffing mode is one of the highlights in version 1.3.1.
In 1 day bug hunting, exploit development and the identification of silent patching it is quite common to identify the differences between two firmware releases.
To use this new feature (as usual in a very early alpha state) it is now possible to define a second firmware with the -o parameter. EMBA starts with some basic analysis of both firmware images, extracts both images and finds the differences between these firmware images:

If the file is some ASCII file a nice diff is shown:

If the file is a binary file we use radare2 for further analysis:

For further details check our Wiki

Happy bug hunting :)

What's Changed

Internet check not blocking by @m-1-k-3 in #722
Fix docker build workflow by @m-1-k-3 in #723
disable disk space monitor by @m-1-k-3 in #724
print fix, http crawler by @m-1-k-3 in #732
Code cleanup by @m-1-k-3 in #733
Fix updater by @m-1-k-3 in #749
Unblob v23.8.11 by @m-1-k-3 in #750
PEM file with multiple certificates by @HoxhaEndri in #736
Update README.md by @m-1-k-3 in #757
add file-command to default deps by @BenediktMKuehne in #763
Update semgrep workflow by @m-1-k-3 in #764
Debian repos - https only for Kali by @m-1-k-3 in #766
Curl online check by @m-1-k-3 in #774
Improve PW cracking module s107 by @m-1-k-3 in #773
Check container nr disable for dev mode by @m-1-k-3 in #776
Set variable by @m-1-k-3 in #777
Installer updates by @m-1-k-3 in #779
fix gpt path by @m-1-k-3 in #789
Improve web page crawler by @m-1-k-3 in #795
little fix by @m-1-k-3 in #796
disable the trickest exploit db by @m-1-k-3 in #797
Debian installer support by @m-1-k-3 in #798
grep -v -> tail by @m-1-k-3 in #812
Proxy support by @m-1-k-3 in #811
Firmware diffing preparation by @m-1-k-3 in #804
nikto setup, compose cleanup by @m-1-k-3 in #814
System emulation fs mount improvements by @m-1-k-3 in #815
L10 Fix SC2250 shellcheck by @HoxhaEndri in #822
Installer debian package file format by @m-1-k-3 in #826
Cleanup of PS crawler by @m-1-k-3 in #833
Check for arachni user and shellcheck braces by @HoxhaEndri in #834
Try cve db update multiple times during installation by @m-1-k-3 in #837
Firmware diffing modules by @m-1-k-3 in #838
fix #839 by @m-1-k-3 in #844
Semgrep checks and shellcheck braces checks by @HoxhaEndri in #835
check for space at the end of a line by @HoxhaEndri in #845
Update installer, dep-check by @m-1-k-3 in #846
strict mode grep error by @HoxhaEndri in #848
Packetstorm database update by @github-actions in #852
Snyk database update by @github-actions in #851
CISA known exploited database update by @github-actions in #850
Metasploit database update by @github-actions in #849
BMC firmware extractor by @m-1-k-3 in #853
braces check for all scripts inside "helpers" folder and "installer" folder by @HoxhaEndri in #854
kernel-hardening-checker fix by @m-1-k-3 in #855
Version 1.3.1 by @m-1-k-3 in #856

Full Changelog: 1.3.0-AI-for-EMBA...1.3.1-diff-all-the-firmwares

Contributors

m-1-k-3, HoxhaEndri, and BenediktMKuehne

Assets 2

0 Join discussion

25 Jul 09:49

m-1-k-3

1.3.0-AI-for-EMBA

8bcb671

EMBA v1.3.0 - AI-Assisted Firmware Analysis

Q: Can we use AI for firmware analysis?
A: Sure, let's do it! EMBA now supports AI-assisted firmware analysis.

Again, we rise the bar in the field of Open-Source firmware security analysis. After establishing user-mode emulation or system emulation this time we moved to AI-assisted firmware analysis. More details about our AI integration are available in our Wiki

#Hackersummercamp ahead!
We got the amazing opportunity to show EMBA at the BSides conference in Las Vegas. The schedule is available here.

Additionally, you will find us with a live EMBA demo at Black Hat Arsenal

See you all in Vegas

Beside your ongoing support with feedback, testing, working on issues and spreading EMBA you can now also support EMBA as a sponsor.

Check it out here and start being an essential part of the future of EMBA

What's Changed

Exit of add_partition in L10 by @m-1-k-3 in #430
log dir on dep check by @m-1-k-3 in #428
Nikto dep fix by @m-1-k-3 in #429
cwe-checker install latest master by @m-1-k-3 in #431
Further trickest blacklist entries by @m-1-k-3 in #432
Freetzng-fix by @BenediktMKuehne in #433
update sub-shell pwd fix by @BenediktMKuehne in #435
Add Packetstorm and Snyk PoC sources by @m-1-k-3 in #434
Full install fixes by @m-1-k-3 in #436
s115 - empty log handling by @m-1-k-3 in #438
Minimal cve-search installation / Dependency issues by @m-1-k-3 in #442
blacklist update by @m-1-k-3 in #441
Introducing module_wait helper function by @m-1-k-3 in #439
Fix dependencies by @m-1-k-3 in #445
Code cleanup - comments by @m-1-k-3 in #446
Copyright updates 2023 by @m-1-k-3 in #447
Kernel downloader and vulnerability verifier by @m-1-k-3 in #451
cron job fix by @m-1-k-3 in #453
L10 improvements, more services by @m-1-k-3 in #454
Kernel config analysis by @m-1-k-3 in #455
Update the known exploit behaviour by @m-1-k-3 in #458
example disable profile by @m-1-k-3 in #457
Refactoring by @m-1-k-3 in #462
exploit databases updated by @m-1-k-3 in #466
S12 - checksec implementation fix by @m-1-k-3 in #463
Improve stop of system emulation by @m-1-k-3 in #465
Hexagon support by @m-1-k-3 in #467
Lighttpd analysis module by @m-1-k-3 in #469
s08 safe_echo fix by @m-1-k-3 in #470
p35 - true to not fail, s26 - check for files by @m-1-k-3 in #471
JTR crack multiple hash types by @m-1-k-3 in #473
deprecated -l option by @m-1-k-3 in #476
s36 fixes, renamed p61 by @m-1-k-3 in #477
System emulator improvements by @m-1-k-3 in #478
Respect module blacklist in waiting state / Installer fix by @m-1-k-3 in #479
Exploit database update, debug mode, command line tests by @m-1-k-3 in #481
Add wordlist mechanism to s109 by @m-1-k-3 in #482
csv export of p59, p60 and p70 by @m-1-k-3 in #483
disk space monitor, rpm package analysis by @m-1-k-3 in #485
Improve output of help command by @m-1-k-3 in #492
Setup further workflows by @m-1-k-3 in #490
Remove timezone setting by @m-1-k-3 in #494
Refactor, PID log, Github actions, APKHunt by @m-1-k-3 in #495
Packetstorm database update by @github-actions in #498
Snyk database update by @github-actions in #497
Metasploit database update by @github-actions in #496
Improve restart EMBA analysis feature by @m-1-k-3 in #499
Fix install with pip v23+ by @m-1-k-3 in #500
Another PIPv23 fix by @m-1-k-3 in #501
return if empty by @m-1-k-3 in #502
Input validation by @m-1-k-3 in #505
Check for update setting by @m-1-k-3 in #504
Routersploit update workflow by @m-1-k-3 in #503
Dependency checker, workflow by @m-1-k-3 in #506
Metasploit database update by @github-actions in #509
Snyk database update by @github-actions in #510
CISA known exploited database update by @github-actions in #512
Packetstorm database update by @github-actions in #514
System emulation improvements, workflow by @m-1-k-3 in #515
CVE state message printing by @m-1-k-3 in #518
Packetstorm database update by @github-actions in #528
Snyk database update by @github-actions in #527
CISA known exploited database update by @github-actions in #525
Routersploit database update by @github-actions in #524
Metasploit database update by @github-actions in #523
Trickest PoC database update by @github-actions in #526
Input adjustment by @m-1-k-3 in #529
version validation by @m-1-k-3 in #530
PATH variable bug by @m-1-k-3 in #531
EMBA v1.2.2 - Blue Hat edt. by @m-1-k-3 in #532
Sponsoring issues by @m-1-k-3 in #534
Metasploit database update by @github-actions in #536
Snyk database update by @github-actions in #539
CISA known exploited database update by @github-actions in #537
Packetstorm database update by @github-actions in #540
L25 improvements / multiple little fixes by @m-1-k-3 in #535
L10 module improvements by @m-1-k-3 in #543
Metasploit database update by @github-actions in #545
Snyk database update by @github-actions in #547
Packetstorm database update by @github-actions in #548
New version strings (Flex and NBTscan) by @HoxhaEndri in #549
L10 improvement round x by @m-1-k-3 in #550
links in templates by @m-1-k-3 in #555
Freetz extraction module deprecated by @m-1-k-3 in #554
fix for #551 by @m-1-k-3 in #553
Testing workflows by @BenediktMKuehne in #541
Packetstorm database update by @github-actions in #563
Snyk database update by @github-actions in #562
CISA known exploited database update by @github-actions in #560
Metasploit database update by @github-actions in #559
Improve web crawler (L25) by @m-1-k-3 in #557
Updated installer.sh for "ubuntu debian" /etc/os-release and new version string by @HoxhaEndri in #552
SNMP module improvements by @m-1-k-3 in #565
Remove warning apt-key is deprecated by @HoxhaEndri in #564
update entropy output by @BenediktMKuehne in #566...

Contributors

m-1-k-3, HoxhaEndri, and BenediktMKuehne

Assets 2

1 Join discussion

11 May 13:53

m-1-k-3

1.2.3-RIP-binwalk

02fd6ab

EMBA v1.2.3 - R.I.P. Binwalk

Binwalk, it was a long and great time with you. Now, you are a bit old and rusty and we had some issues in the past. Looks like we need to change our relationship a little bit ...

The binwalk extractor is already unmaintained for a quite long time period. In this time, we jumped in with multiple extractor modules within EMBA to keep the great extraction up. In the last year we have looked quite interested at the development process of Unblob.
We already integrated Unblob as an evaluation module a while ago. Currently it is integrated as the second extraction framework beside binwalk to jump in if our main binwalk/EMBA approach failed.

Now, it is time to change the game and to make Unblob to our main extractor and use binwalk only in the rare case Unblob failed.

Another very cool highlight is the acceptance of EMBA in the embedded research environment. Nate released a great article around analysing IoT devices here

Beside your ongoing support with feedback, testing, working on issues and spreading EMBA you can now also become a sponsor.

Check it out here and start being an essential part of the future of EMBA

What's Changed

L25 improvements / multiple little fixes by @m-1-k-3 in #535
L10 module improvements by @m-1-k-3 in #543
New version strings (Flex and NBTscan) by @HoxhaEndri in #549
L10 improvement round x by @m-1-k-3 in #550
links in templates by @m-1-k-3 in #555
Freetz extraction module deprecated by @m-1-k-3 in #554
fix for #551 by @m-1-k-3 in #553
Testing workflows by @BenediktMKuehne in #541
Improve web crawler (L25) by @m-1-k-3 in #557
Updated installer.sh for "ubuntu debian" /etc/os-release and new version string by @HoxhaEndri in #552
SNMP module improvements by @m-1-k-3 in #565
Remove warning apt-key is deprecated by @HoxhaEndri in #564
update entropy output by @BenediktMKuehne in #566
Ignore files containing the following paths: /dev/ /proc/ /sys/ by @HoxhaEndri in #569
Fix arch detection in f50 by @m-1-k-3 in #567
Install fixes by @m-1-k-3 in #570
fix l10 error case by @m-1-k-3 in #571
Improved default profile handling / running modules script by @m-1-k-3 in #572
Fail fetch aspnetcore-targeting-pack when cleaning up by @m-1-k-3 in #579
Metasploit database update by @github-actions in #581
CISA known exploited database update by @github-actions in #582
Packetstorm database update by @github-actions in #585
Snyk database update by @github-actions in #584
Trickest PoC database update by @github-actions in #583
fix actions, fix l10 lnk fixer by @m-1-k-3 in #580
remove unneeded resource by @BenediktMKuehne in #586
Revert "remove unneeded resource" by @m-1-k-3 in #587
SBOM generation fix for non vuln components by @m-1-k-3 in #589
Avoiding /proc and /sys paths (-xdev) in symlink script and check for missing symlinks in s115 by @HoxhaEndri in #590
Packetstorm database update by @github-actions in #597
Snyk database update by @github-actions in #596
CISA known exploited database update by @github-actions in #594
Metasploit database update by @github-actions in #593
Lua script analysis support, UPnP live module, improvements by @m-1-k-3 in #591
R.I.P. binwalk by @m-1-k-3 in #598
ignore named pipe by @HoxhaEndri in #601
Packetstorm database update by @github-actions in #607
Snyk database update by @github-actions in #606
Metasploit database update by @github-actions in #604
apk extraction fix by @m-1-k-3 in #603
R2 decompiler integration by @m-1-k-3 in #608
url update for sasquatch deb by @m-1-k-3 in #609
update ubuntu libssl source by @BenediktMKuehne in #610
Small cleanup fixes by @m-1-k-3 in #611
Packetstorm database update by @github-actions in #616
Snyk database update by @github-actions in #615
CISA known exploited database update by @github-actions in #614
Metasploit database update by @github-actions in #613
Hnap detection support for system emulator by @m-1-k-3 in #612
Version 1.2.3 by @m-1-k-3 in #621

New Contributors

@HoxhaEndri made their first contribution in #549

Full Changelog: 1.2.2-bluehat...1.2.3-RIP-binwalk

Contributors

m-1-k-3, HoxhaEndri, and BenediktMKuehne

Assets 2

0 Join discussion

14 Mar 20:26

m-1-k-3

1.2.2-bluehat

01bbd50

EMBA v1.2.2 - Blue Hat edt.

EMBA was shown at Microsoft Blue Hat Conference by Nate. See here for a picture of Nate himself on the stage and here you can find his slides.

It is so awesome to see that EMBA gets more and more used from the research community.

Spread the word and secure the Internet of Things with EMBA!

As usual we have fixed a huge number of little bugs everywhere within EMBA. Beside these fixes we also introduced the following highlights:

New analysis module for better Lighttpd analysis (see #469)
New analysis module for Android apk analysis (see #495)
Multiple improvements of the JTR password cracking module (includes the possibility to use a word list) (see #473 and #482)
More modules supporting csv exports
Better disk space monitoring
Multiple improvements for the system emulator
Installer has now PIPv23 support (with this also the latest Kali builds are supported)
Improved restart mechanism
Further Unblob extractor integration
Multiple workflow improvements
regular PoC and Exploit updates

Beside your ongoing support with feedback, testing, working on issues and spreading EMBA you can now become a sponsor.

Check it out here and start being an essential part of the future of EMBA

Additionally, I want to highlight our second project EMBArk which got some huge updates in the last time! Great work @BenediktMKuehne

What's Changed

Lighttpd analysis module by @m-1-k-3 in #469
s08 safe_echo fix by @m-1-k-3 in #470
p35 - true to not fail, s26 - check for files by @m-1-k-3 in #471
JTR crack multiple hash types by @m-1-k-3 in #473
deprecated -l option by @m-1-k-3 in #476
s36 fixes, renamed p61 by @m-1-k-3 in #477
System emulator improvements by @m-1-k-3 in #478
Respect module blacklist in waiting state / Installer fix by @m-1-k-3 in #479
Exploit database update, debug mode, command line tests by @m-1-k-3 in #481
Add wordlist mechanism to s109 by @m-1-k-3 in #482
csv export of p59, p60 and p70 by @m-1-k-3 in #483
disk space monitor, rpm package analysis by @m-1-k-3 in #485
Improve output of help command by @m-1-k-3 in #492
Setup further workflows by @m-1-k-3 in #490
Remove timezone setting by @m-1-k-3 in #494
Refactor, PID log, Github actions, APKHunt by @m-1-k-3 in #495
Packetstorm database update by @github-actions in #498
Snyk database update by @github-actions in #497
Metasploit database update by @github-actions in #496
Improve restart EMBA analysis feature by @m-1-k-3 in #499
Fix install with pip v23+ by @m-1-k-3 in #500
Another PIPv23 fix by @m-1-k-3 in #501
return if empty by @m-1-k-3 in #502
Input validation by @m-1-k-3 in #505
Check for update setting by @m-1-k-3 in #504
Routersploit update workflow by @m-1-k-3 in #503
Dependency checker, workflow by @m-1-k-3 in #506
Metasploit database update by @github-actions in #509
Snyk database update by @github-actions in #510
CISA known exploited database update by @github-actions in #512
Packetstorm database update by @github-actions in #514
System emulation improvements, workflow by @m-1-k-3 in #515
CVE state message printing by @m-1-k-3 in #518
Packetstorm database update by @github-actions in #528
Snyk database update by @github-actions in #527
CISA known exploited database update by @github-actions in #525
Routersploit database update by @github-actions in #524
Metasploit database update by @github-actions in #523
Trickest PoC database update by @github-actions in #526
Input adjustment by @m-1-k-3 in #529
version validation by @m-1-k-3 in #530
PATH variable bug by @m-1-k-3 in #531

New Contributors

@github-actions made their first contribution in #498

Full Changelog: 1.2.1...1.2.2-bluehat

Contributors

m-1-k-3 and BenediktMKuehne

Assets 2

0 Join discussion

02 Feb 07:02

m-1-k-3

1.2.1

2f37e4f

EMBA v1.2.1

Beside a huge number of bug fixes this release introduces multiple new features. You are invited to celebrate the new EMBA version with us.

Spread the word and secure the Internet of Things with EMBA!

As usual we have fixed a huge number of little bugs everywhere within EMBA. Beside these fixes we also introduced the following highlights:

Renamed emba.sh to emba
Packetstorm as PoC/Exploit source for matching the SBOM against (see #434)
Snyk as PoC/Exploit source for matching the SBOM against (see #434)
Kernel vulnerability verification via Symbols and kernel compilation (see #451 and https://arxiv.org/pdf/2209.05217.pdf)
Hexagon support (see #395 and #467)
Allow for kernel config tests only with the EMBA parameter -k
Multiple system-mode emulation improvements (improved emulation rate, improved service startups, better stop handling, ...)
Kali Linux 2022.4 is fully supported and the docker image is updated to the current Kali release

Beside your ongoing support with feedback, testing, working on issues and spreading EMBA you can now become a sponsor.

Check it out here and start being an essential part of the future of EMBA

What's Changed

Exit of add_partition in L10 by @m-1-k-3 in #430
log dir on dep check by @m-1-k-3 in #428
Nikto dep fix by @m-1-k-3 in #429
cwe-checker install latest master by @m-1-k-3 in #431
Further trickest blacklist entries by @m-1-k-3 in #432
Freetzng-fix by @BenediktMKuehne in #433
update sub-shell pwd fix by @BenediktMKuehne in #435
Add Packetstorm and Snyk PoC sources by @m-1-k-3 in #434
Full install fixes by @m-1-k-3 in #436
s115 - empty log handling by @m-1-k-3 in #438
Minimal cve-search installation / Dependency issues by @m-1-k-3 in #442
blacklist update by @m-1-k-3 in #441
Introducing module_wait helper function by @m-1-k-3 in #439
Fix dependencies by @m-1-k-3 in #445
Code cleanup - comments by @m-1-k-3 in #446
Kernel downloader and vulnerability verifier by @m-1-k-3 in #451
cron job fix by @m-1-k-3 in #453
L10 improvements, more services by @m-1-k-3 in #454
Kernel config analysis by @m-1-k-3 in #455
Update the known exploit behaviour by @m-1-k-3 in #458
example disable profile by @m-1-k-3 in #457
Refactoring by @m-1-k-3 in #462
exploit databases updated by @m-1-k-3 in #466
S12 - checksec implementation fix by @m-1-k-3 in #463
Improve stop of system emulation by @m-1-k-3 in #465
Hexagon support by @m-1-k-3 in #467

Full Changelog: 1.2.0-London-Calling...1.2.1

Contributors

m-1-k-3 and BenediktMKuehne

Assets 2

0 Join discussion

05 Dec 12:17

m-1-k-3

1.2.0-London-Calling

74fdf92

EMBA v1.2.0 - London Calling

Beside bug fixes this release introduces many new features. You are invited to celebrate the new EMBA version with us.

Spread the word and secure the Internet of Things with EMBA!

Since version 1.1.0 we introduced several new features and a lot of improved areas:

New architecture support for system-mode emulation (ARM64, MIPS64, x86)
New Metasploit integration into system-mode emulation
New Kernel config identification, extraction and testing
New extraction module for Qemu QCOW2 firmware
Improved Unblob integration
Improved UEFI extraction and analysis
Improved RTOS analysis
New module blacklisting feature
Zyxel extraction module
Improved rootfs detection

What's Changed in detail

Shadow file detection, mipsn32 in user mode emulation, fixes by @m-1-k-3 in #285
Fix notification system on Ubuntu installation by @m-1-k-3 in #286
FwHunt, CWE-Checker, Cyclone SBOM, Bug fixes, kernel-to-elf by @m-1-k-3 in #291
Improve cwe-checker integration by @m-1-k-3 in #292
v1.1.1 by @m-1-k-3 in #293
fix for installer.sh failing with non-english locale by @nuschpl in #296
Limit check to modules directory by @p4cx in #300
NIOS2 architecture, Unblob eval, restart scan, semgrep, ... by @m-1-k-3 in #306
Installer updates by @m-1-k-3 in #312
Grepit and semgrep improvements by @m-1-k-3 in #311
Sanitizing environment by @m-1-k-3 in #314
Cleanup: Tabs vs spaces by @m-1-k-3 in #323
Routersploit state fix by @m-1-k-3 in #322
CWE check output bug by @m-1-k-3 in #320
Replace chroot with jchroot by @m-1-k-3 in #313
Semgrep integration into S20 module by @m-1-k-3 in #321
Module blacklisting by @m-1-k-3 in #317
semgrep fixes for status bar by @m-1-k-3 in #315
Zyxel extract module by @m-1-k-3 in #316
zyxel cleanup for usg310 by @m-1-k-3 in #325
Respect docker group - no sudo by @m-1-k-3 in #324
Deep extractor improvements by @m-1-k-3 in #326
Beware of memory issues by @m-1-k-3 in #328
1.1.2 cleanup by @m-1-k-3 in #329
Version 1.1.2 by @m-1-k-3 in #333
Restart of directory based firmware not possible by @m-1-k-3 in #337
Remove grepit 0 results by @m-1-k-3 in #339
Little fixes (S06, S03, S109) by @m-1-k-3 in #340
cleanup, P03 removed by @m-1-k-3 in #344
fix php iniscan by @m-1-k-3 in #343
RTOS analysis improvements by @m-1-k-3 in #341
restore bindip instead of delete file by @BenediktMKuehne in #346
pip install for requests by @m-1-k-3 in #351
docker-compose version check by @m-1-k-3 in #347
shellcheck disable cleanup by @m-1-k-3 in #349
Kernel config search and check by @m-1-k-3 in #348
Dependency checker includes the container by @m-1-k-3 in #352
SECURITY.md by @m-1-k-3 in #354
Create semgrep.yml by @m-1-k-3 in #355
Create codacy.yml by @m-1-k-3 in #358
Metasploit system emulation integration by @m-1-k-3 in #357
Multiple style fixes by @m-1-k-3 in #359
Linting by @m-1-k-3 in #360
fix fail if already satisfied by @BenediktMKuehne in #361
Print function fix by @m-1-k-3 in #363
Kernel config extraction in S24 by @m-1-k-3 in #364
Cleanup round by @m-1-k-3 in #365
EMBA v1.1.3 by @m-1-k-3 in #366
exit code fix by @m-1-k-3 in #373
lzo - ubi extractor fix by @m-1-k-3 in #381
Prepare support for further architectures by @m-1-k-3 in #380
typo by @m-1-k-3 in #384
Check disk space for installation by @m-1-k-3 in #385
New Kernels for system emulation, qcow extractor by @m-1-k-3 in #396
installer - missed this by @m-1-k-3 in #397
Add rootfs detection by path of /bin/sh by @jlucius in #394
Qualcom DSP6 - basic support by @m-1-k-3 in #399
Installer fix by @m-1-k-3 in #401
nikto install fix by @m-1-k-3 in #398
Better UEFI extractor by @BenediktMKuehne in #374
Make installer.sh executeable again by @jlucius in #403
ARM64 support by @m-1-k-3 in #402
Check project updates by @m-1-k-3 in #406
Improve CSV export of s24 by @m-1-k-3 in #408
Trickest blacklist by @m-1-k-3 in #411
log color, init sort, web reporter by @m-1-k-3 in #412
Add CVE Trickest Blacklist by @jlucius in #413
User-mode emulator fixes by @m-1-k-3 in #414
Remove wget log during installation by @m-1-k-3 in #416
s115 jchroot bypass by @m-1-k-3 in #417
Sasquatch split binwalk vs unblob by @m-1-k-3 in #418
Unblob it in case binwalk fails by @m-1-k-3 in #421
Exit on sasquatch dependency error by @m-1-k-3 in #420
P61 tree output fix by @m-1-k-3 in #422
l10 vlan infos by @m-1-k-3 in #423
v1.2.0 by @m-1-k-3 in #424

New Contributors

@nuschpl made their first contribution in #296
@jlucius made their first contribution in #394

Full Changelog: 1.1.0-Las-Vegas-Edt...1.2.0-London-Calling

Contributors

m-1-k-3, nuschpl, and 3 other contributors

Assets 2

0 Join discussion

27 Oct 07:48

m-1-k-3

1.1.3-Metasploit-Edt

7477450

EMBA v1.1.3 - Metasploit Edt.

Highlights:

We included the awesome Metasploit Framework into EMBA's system emulation engine! Check this PR for further details including a link to a testing firmware for your smooth start.

What's Changed

Restart of directory based firmware not possible by @m-1-k-3 in #337
Remove grepit 0 results by @m-1-k-3 in #339
Little fixes (S06, S03, S109) by @m-1-k-3 in #340
cleanup, P03 removed by @m-1-k-3 in #344
fix php iniscan by @m-1-k-3 in #343
RTOS analysis improvements by @m-1-k-3 in #341
restore bindip instead of delete file by @BenediktMKuehne in #346
pip install for requests by @m-1-k-3 in #351
docker-compose version check by @m-1-k-3 in #347
shellcheck disable cleanup by @m-1-k-3 in #349
Kernel config search and check by @m-1-k-3 in #348
Dependency checker includes the container by @m-1-k-3 in #352
SECURITY.md by @m-1-k-3 in #354
Create semgrep.yml by @m-1-k-3 in #355
Create codacy.yml by @m-1-k-3 in #358
Metasploit system emulation integration by @m-1-k-3 in #357
Multiple style fixes by @m-1-k-3 in #359
Linting by @m-1-k-3 in #360
fix fail if already satisfied by @BenediktMKuehne in #361
Print function fix by @m-1-k-3 in #363
Kernel config extraction in S24 by @m-1-k-3 in #364
Cleanup round by @m-1-k-3 in #365
EMBA v1.1.3 by @m-1-k-3 in #366

Full Changelog: 1.1.2-Knight-Rider-Edt...1.1.3-Metasploit-Edt

Contributors

m-1-k-3 and BenediktMKuehne

Assets 2

0 Join discussion

04 Oct 07:27

m-1-k-3

1.1.2-Knight-Rider-Edt

eb33fe4

EMBA v1.1.2 - Knight Rider Edt.

Highlights:

Bonnie: I have a new feature integrated into K.I.T.T.
Michael: Give me more details
K.I.T.T.: With my new friend EMBA I am able to find the weak spot in every firmware.

40 years later ... K.I.T.T. is definitive able to analyze firmware with EMBA

Beside bug fixes this release introduces many new features. Since version 1.1.1 we introduced several new features and multiple improved areas:

Thx to @nuschpl the Installer supports non-english systems (see #296)
NIOS2 architecture support (see #306)
Semgrep introduction into bash checking module S20 (see #321)
Module, CVE blacklisting (see #305 and #317)
Deep extractor improvements and module split (P59 and P60) (see #326)
Zyxel extractor as P22 (see #316 and DC30 Slides)
Respect docker user group (see #324)
Initial unblob integration as evaluation module P61 (see #306)

What's Changed in more detail

fix for installer.sh failing with non-english locale by @nuschpl in #296
Limit check to modules directory by @p4cx in #300
NIOS2 architecture, Unblob eval, restart scan, semgrep, ... by @m-1-k-3 in #306
Installer updates by @m-1-k-3 in #312
Grepit and semgrep improvements by @m-1-k-3 in #311
Sanitizing environment by @m-1-k-3 in #314
Cleanup: Tabs vs spaces by @m-1-k-3 in #323
Routersploit state fix by @m-1-k-3 in #322
CWE check output bug by @m-1-k-3 in #320
Replace chroot with jchroot by @m-1-k-3 in #313
Semgrep integration into S20 module by @m-1-k-3 in #321
Module blacklisting by @m-1-k-3 in #317
semgrep fixes for status bar by @m-1-k-3 in #315
Zyxel extract module by @m-1-k-3 in #316
zyxel cleanup for usg310 by @m-1-k-3 in #325
Respect docker group - no sudo by @m-1-k-3 in #324
Deep extractor improvements by @m-1-k-3 in #326
Beware of memory issues by @m-1-k-3 in #328
1.1.2 cleanup by @m-1-k-3 in #329
Version 1.1.2 by @m-1-k-3 in #333

New Contributors

@nuschpl made their first contribution in #296

Full Changelog: 1.1.1...1.1.2-Knight-Rider-Edt

Contributors

m-1-k-3, nuschpl, and p4cx

Assets 2

0 Join discussion

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

What's Changed

Contributors

What's Changed

New Contributors

Contributors

What's Changed

Contributors

What's Changed

Contributors

What's Changed

New Contributors

Contributors

What's Changed

New Contributors

Contributors

What's Changed

Contributors

What's Changed in detail

New Contributors

Contributors

Highlights:

What's Changed

Contributors

Highlights:

What's Changed in more detail

New Contributors

Contributors

Releases: e-m-b-a/emba

EMBA v1.4.0 - ICS testing Edt.

What's Changed

Contributors

EMBA v1.3.2 - EMBArk is out

What's Changed

New Contributors

Contributors

EMBA v1.3.1 - Diff it

What's Changed

Contributors

EMBA v1.3.0 - AI-Assisted Firmware Analysis

What's Changed

Contributors

EMBA v1.2.3 - R.I.P. Binwalk

What's Changed

New Contributors

Contributors

EMBA v1.2.2 - Blue Hat edt.

What's Changed

New Contributors

Contributors

EMBA v1.2.1

What's Changed

Contributors

EMBA v1.2.0 - London Calling

What's Changed in detail

New Contributors

Contributors

EMBA v1.1.3 - Metasploit Edt.

Highlights:

What's Changed

Contributors

EMBA v1.1.2 - Knight Rider Edt.

Highlights:

What's Changed in more detail

New Contributors

Contributors