EMBA Files

The highlight of this release is the all new s130 module for generating a nice and interactive dependency map:

Beside this beauty we did some further updates and bugfixes in a lot of different areas:

• Lots of bugfixes and cleanups across modules and installers.
• Continued database updates (CISA KEV, Metasploit, Snyk, kernel/GCC/version DBs, etc.) to keep detection fresh.
• More robustness in installer / docker workflows and internal checks.

---

Beside your ongoing support with feedback, testing, working on issues and spreading EMBA you can now also support EMBA as a sponsor.

Check it out here and start being an essential part of the future of EMBA. Breaking News: Check also our new shop for EMBA merch here.

---

It is always a pleasure to welcome new contributors to EMBA. This time we welcome:

• @migus-rs made their first contribution in https://github.com/e-m-b-a/emba/pull/1924
• @Spenc3rB made their first contribution in https://github.com/e-m-b-a/emba/pull/1944

Besides all our newcomers we also want to thank the other, regular contributors!

We had never before so many bug reports, contributors and helping hands! Big kudos to all of you!

---

How can you reach us and stay up to date? Just take one of these channels (or all):

• Bluesky
• Mastodon
• Github discussions
• Github issues
• LinkedIn
• X

---

Now, start your fresh Kali Linux (put enough CPU power and RAM into it) and install EMBA:

└─$ git clone https://github.com/e-m-b-a/emba.git
└─$ cd emba 
└─$ sudo ./installer.sh -d

This will install all pre-requisites, including the docker base image and the CVE database, which will need some bandwith, harddrive space and time.

Afterwards, you are ready to analyse your first firmware with EMBA:

└─$ sudo ./emba -l ~/log -f ~/firmware -p ./scan-profiles/quick-scan.emba

For updating your outdated EMBA installation, please check the update section in our wiki.

What's Changed

• CISA known exploited database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1833
• Linux kernel version database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1834
• Metasploit database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1835
• Snyk database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1836
• Snyk database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1839
• CISA known exploited database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1838
• Metasploit database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1842
• Linux kernel version database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1841
• CISA known exploited database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1840
• Snyk database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1843
• Snyk database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1858
• Metasploit database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1857
• Linux kernel version database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1856
• CISA known exploited database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1855
• Metasploit database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1862
• Linux kernel version database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1861
• CISA known exploited database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1860
• bump base image to v2.0.0a by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1866
• cve_cnt_fix_f50 by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1865
• fix [#1846] by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1864
• Snyk database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1871
• Metasploit database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1870
• Linux kernel version database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1869
• CISA known exploited database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1868
• [#1863] - f17 workaround by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1867
• opengrep / json fix by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1873
• Metasploit database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1876
• CISA known exploited database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1874
• Linux kernel version database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1875
• bump base image by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1878
• update codeql to v4 by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1879
• Improve online checking by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1880
• Metasploit database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1884
• Linux kernel version database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1883
• CISA known exploited database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1882
• Snyk database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1877
• Snyk database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1888
• Metasploit database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1887
• Linux kernel version database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1886
• CISA known exploited database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1885
• Snyk database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1893
• Metasploit database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1892
• Linux kernel version database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1891
• CISA known exploited database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1890
• small cleanups by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1889
• Snyk database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1898
• Metasploit database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1897
• Linux kernel version database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1896
• CISA known exploited database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1895
• CISA known exploited database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1900
• Linux kernel version database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1901
• Metasploit database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1902
• Snyk database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1903
• Metasploit database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1908
• Linux kernel version database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1907
• CISA known exploited database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1906
• Fix docker build, enhance print_output, update projects.md by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1904
• Snyk database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1913
• Metasploit database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1912
• Linux kernel version database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1911
• CISA known exploited database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1910
• Small bug fixes by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1914
• Fix trivy workflow by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1915
• Interactive firmware dependency map by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1917
• Snyk database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1922
• Metasploit database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1921
• Linux kernel version database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1920
• CISA known exploited database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1919
• Add latest news section to README by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1923
• Shfmt format by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1918
• Update Spreadshop link in workflow file by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1926
• fix duplicate check by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1928
• fix: allow specifying multiple installer arguments by @migus-rs in https://github.com/e-m-b-a/emba/pull/1924
• little fixes by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1929
• S24 vmlinux-to-elf adjustments by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1930
• CISA known exploited database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1933
• Linux kernel version database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1934
• Metasploit database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1935
• Snyk database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1936
• Pin workflows by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1937
• workflow updates by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1938
• CISA known exploited database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1940
• Linux kernel version database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1941
• Metasploit database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1942
• Snyk database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1943
• ensure we log the details - s24 by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1939
• fix: ext filesystem mounting script logic by @Spenc3rB in https://github.com/e-m-b-a/emba/pull/1944
• Improve log files handling for big fs trees and binwalk output by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1945
• Snyk database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1950
• Metasploit database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1949
• Linux kernel version database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1948
• CISA known exploited database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1947
• S130 speedup/fix by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1946
• Trivy check by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1952
• refactoring s13-15, fix s24/s26 by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1951
• Snyk database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1957
• bump base image by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1953
• Change permissions to allow write access for contents by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1958
• Linux kernel version database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1959
• workflow permissions by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1960
• Metasploit database update by @github-actions[bot] in https://github.com/e-m-b-a/emba/pull/1961
• default GHIDRA_DECOMPILE_RUNTIME by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1962
• cleanup by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1963
• bump v2.0.1 by @m-1-k-3 in https://github.com/e-m-b-a/emba/pull/1964

New Contributors

• @migus-rs made their first contribution in https://github.com/e-m-b-a/emba/pull/1924
• @Spenc3rB made their first contribution in https://github.com/e-m-b-a/emba/pull/1944

Full Changelog: https://github.com/e-m-b-a/emba/compare/v2.0.0-A-brave-new-world...v2.0.1-interactor