EMBA v1.3.2 - EMBArk is out

[m-1-k-3]

The last EMBA release is not too long ago but in the mean time there was so much going on ... The most important thing is ...

The first official EMBArk release is out now!

Everything started as an idea in the beginning of 2021. The idea was to build an enterprise ready open source firmware analysis environment on top of EMBA. This environment should allow every product security team as well as every penetration tester and security researcher to use professional firmware analysis to improve the security of IoT/OT/ICS ... (you name it) devices as easy as possible. This idea was mixed up to an AMOS research project, where a team of students built a first PoC of EMBArk. You can find the original project here. From there on continuous work, improvement and testing was running more or less under the radar. Until today ... EMBArk is stable and ready for more! Kudos to @BenediktMKuehne for pushing it to the next level.

---

Say hi to our centralized firmware security analysis environment EMBArk! Check it out here, use it, give us feedback or improve it and start being part of this open source environment.

---

On EMBA side we have some "bumpy" weeks in the neck:

• As the NIST API is currently changing and we had some serious issues with our cve-search integration we decided to rewrite it by ourself. This process took us some time to get the CVE identification feature fully working again. Thanks for all your testing and feedback during this process. With the new integration EMBA is faster, more stable and the installation is not that error prone anymore.
• UEFI analysis integration was massively improved - see here
• A lot of code cleanup was done by @HoxhaEndri
• A new update check functionality by @HoxhaEndri
• Improved firmware diffing environment - see here
• Updated and new reporting templates by @413x8
• Your great feedback is now collected in our wiki
• Further public online resources are available and collected here
• New support possibilities via patreon or buymeacoffee

Thank you for all your feedback and your testing since version 1.3.1!

It is always a pleasure to welcome new contributors to EMBA. This time we can welcome two of them:

• @413x8
• @mj138

Welcome to the EMBA environment and thank you for your valuable contribution.

---

We are looking for (release) sponsors here

---

What's Changed

• Version identifiers, Arch check in installer, diff updates by @m-1-k-3 in Version identifiers, Arch check in installer, diff updates #860
• Snyk database update by @github-actions in Snyk database update #864
• CISA known exploited database update by @github-actions in CISA known exploited database update #863
• Metasploit database update by @github-actions in Metasploit database update #862
• check braces for modules scripts by @HoxhaEndri in check braces for modules scripts #861
• braces checked for all script files by @HoxhaEndri in braces checked for all script files #865
• shellcheck braces check in check_project and in workflow by @HoxhaEndri in shellcheck braces check in check_project and in workflow #866
• Improve diff mode by @m-1-k-3 in Improve diff mode #867
• Fix grep -R by @m-1-k-3 in Fix grep -R #869
• CPU check for SSSE3 by @m-1-k-3 in CPU check for SSSE3 #870
• Diff threading + improved reporting by @m-1-k-3 in Diff threading + improved reporting #871
• typo cause regression: missing s25 output #873 fix by @m-1-k-3 in #873 fix #874
• zlib string from dell bios firmware by @HoxhaEndri in zlib string from dell bios firmware #872
• Create first_interaction.yml by @m-1-k-3 in Create first_interaction.yml #877
• Metasploit database update by @github-actions in Metasploit database update #878
• CISA known exploited database update by @github-actions in CISA known exploited database update #879
• Snyk database update by @github-actions in Snyk database update #880
• UEFI analysis improvements by @m-1-k-3 in UEFI analysis improvements #876
• fwhunt check entire firmware first by @HoxhaEndri in fwhunt check entire firmware first #881
• new version strings and comment for fwhunt by @HoxhaEndri in new version strings and comment for fwhunt #882
• integrate cveXplore settings by @BenediktMKuehne in integrate cveXplore settings #884
• Install CveXplore v0.3.16++ by @m-1-k-3 in Install CveXplore v0.3.16++ #892
• Snyk database update by @github-actions in Snyk database update #894
• Packetstorm database update by @github-actions in Packetstorm database update #895
• CISA known exploited database update by @github-actions in CISA known exploited database update #893
• Full system emulation dependency s24 by @m-1-k-3 in Full system emulation dependency s24 #896
• Cvexplore integration by @BenediktMKuehne in Cvexplore integration #887
• switch pip install for cvexplore to git repo by @BenediktMKuehne in switch pip install for cvexplore to git repo #899
• Docker-compose cleanup by @m-1-k-3 in Docker-compose cleanup #891
• Issue 889 by @m-1-k-3 in Issue 889 #902
• Update FUNDING.yml by @m-1-k-3 in Update FUNDING.yml #905
• L10, S05 fixes by @m-1-k-3 in L10, S05 fixes #903
• L23 VNC checker modules by @m-1-k-3 in L23 VNC checker modules #904
• update first interaction by @m-1-k-3 in update first interaction #906
• Update FUNDING.yml by @m-1-k-3 in Update FUNDING.yml #907
• Update check again - KeyError: epss #908 by @m-1-k-3 in Update check again - #908 #909
• Make Routersploit work again by @m-1-k-3 in Make Routersploit work again #910
• Stick to version and check it from requests and urllib3 by @m-1-k-3 in Stick to version and check it from requests and urllib3 #911
• Improve dep checker by @m-1-k-3 in Improve dep checker #912
• CISA known exploited database update by @github-actions in CISA known exploited database update #915
• Packetstorm database update by @github-actions in Packetstorm database update #917
• Snyk database update by @github-actions in Snyk database update #916
• Replacement of current cve query mechanism by @m-1-k-3 in Replacement of current cve query mechanism #913
• Fix workflows, improve CVE identification by @m-1-k-3 in Fix workflows, improve CVE identification #919
• rootfs check in uefi extractor by @m-1-k-3 in rootfs check in uefi extractor #921
• fix install workflow by @m-1-k-3 in fix install workflow #922
• check for versions (emba, git and docker) by @HoxhaEndri in check for versions (emba, git and docker) #918
• Update FUNDING.yml by @m-1-k-3 in Update FUNDING.yml #924
• Update FUNDING.yml by @m-1-k-3 in Update FUNDING.yml #925
• Update FUNDING.yml by @m-1-k-3 in Update FUNDING.yml #926
• Update FUNDING.yml by @m-1-k-3 in Update FUNDING.yml #927
• S26 module fix by @m-1-k-3 in S26 module fix #928
• remove update scripts by @m-1-k-3 in remove update scripts #923
• Packetstorm database update by @github-actions in Packetstorm database update #935
• CISA known exploited database update by @github-actions in CISA known exploited database update #933
• Snyk database update by @github-actions in Snyk database update #934
• Metasploit database update by @github-actions in Metasploit database update #932
• Pre templates by @413x8 in Pre templates #931
• Multiple fixes by @m-1-k-3 in Multiple fixes #930
• Contributors update by @m-1-k-3 in Contributors update #937
• update default profile for EMBArk by @m-1-k-3 in update default profile for EMBArk #938
• Fix parsing of version number from binary version string by @mj138 in Fix parsing of version number from binary version string #939
• Update Contributors, version by @m-1-k-3 in Update Contributors, version #940
• Fix parsing of binary name from binary version string by @mj138 in Fix parsing of binary name from binary version string #942
• little cleanup by @m-1-k-3 in little cleanup #944
• Docker build updates for Kali 2023.4 by @m-1-k-3 in Docker build updates for Kali 2023.4 #945
• Metasploit database update by @github-actions in Metasploit database update #948
• CISA known exploited database update by @github-actions in CISA known exploited database update #949
• Snyk database update by @github-actions in Snyk database update #950
• Packetstorm database update by @github-actions in Packetstorm database update #951
• Include 0xdea semgrep rules and haruspex ghidra script, improve cwe-search integration by @m-1-k-3 in Include 0xdea semgrep rules and haruspex ghidra script, improve cwe-search integration #946
• s14 r2 startup command update by @m-1-k-3 in s14 r2 startup command update #952
• r2 bin cache by @m-1-k-3 in r2 bin cache #953
• fix for Ghidra Dependency Help #954 by @m-1-k-3 in fix for #954 #955
• Enable workflow dispatch by @m-1-k-3 in Enable workflow dispatch #956

New Contributors

• @413x8 made their first contribution in Pre templates #931
• @mj138 made their first contribution in Fix parsing of version number from binary version string #939

Full Changelog: 1.3.1-diff-all-the-firmwares...1.3.2-EMBArk_is_here

---

This discussion was created from the release EMBA v1.3.2 - EMBArk is out.