EMBA v1.3.0 - AI-Assisted Firmware Analysis

[m-1-k-3]

Q: Can we use AI for firmware analysis?
A: Sure, let's do it! EMBA now supports AI-assisted firmware analysis.

Again, we rise the bar in the field of Open-Source firmware security analysis. After establishing user-mode emulation or system emulation this time we moved to AI-assisted firmware analysis. More details about our AI integration are available in our Wiki

---

#Hackersummercamp ahead!
We got the amazing opportunity to show EMBA at the BSides conference in Las Vegas. The schedule is available here.

Additionally, you will find us with a live EMBA demo at Black Hat Arsenal

See you all in Vegas

---

Beside your ongoing support with feedback, testing, working on issues and spreading EMBA you can now also support EMBA as a sponsor.

Check it out here and start being an essential part of the future of EMBA

---

What's Changed

• Exit of add_partition in L10 by @m-1-k-3 in Exit of add_partition in L10 #430
• log dir on dep check by @m-1-k-3 in log dir on dep check #428
• Nikto dep fix by @m-1-k-3 in Nikto dep fix #429
• cwe-checker install latest master by @m-1-k-3 in cwe-checker install latest master #431
• Further trickest blacklist entries by @m-1-k-3 in Further trickest blacklist entries #432
• Freetzng-fix by @BenediktMKuehne in Freetzng-fix #433
• update sub-shell pwd fix by @BenediktMKuehne in update sub-shell pwd fix #435
• Add Packetstorm and Snyk PoC sources by @m-1-k-3 in Add Packetstorm and Snyk PoC sources #434
• Full install fixes by @m-1-k-3 in Full install fixes #436
• s115 - empty log handling by @m-1-k-3 in s115 - empty log handling #438
• Minimal cve-search installation / Dependency issues by @m-1-k-3 in Minimal cve-search installation / Dependency issues #442
• blacklist update by @m-1-k-3 in blacklist update #441
• Introducing module_wait helper function by @m-1-k-3 in Introducing module_wait helper function #439
• Fix dependencies by @m-1-k-3 in Fix dependencies #445
• Code cleanup - comments by @m-1-k-3 in Code cleanup - comments #446
• Copyright updates 2023 by @m-1-k-3 in Copyright updates 2023 #447
• Kernel downloader and vulnerability verifier by @m-1-k-3 in Kernel downloader and vulnerability verifier #451
• cron job fix by @m-1-k-3 in cron job fix #453
• L10 improvements, more services by @m-1-k-3 in L10 improvements, more services #454
• Kernel config analysis by @m-1-k-3 in Kernel config analysis #455
• Update the known exploit behaviour by @m-1-k-3 in Update the known exploit behaviour #458
• example disable profile by @m-1-k-3 in example disable profile #457
• Refactoring by @m-1-k-3 in Refactoring #462
• exploit databases updated by @m-1-k-3 in exploit databases updated #466
• S12 - checksec implementation fix by @m-1-k-3 in S12 - checksec implementation fix #463
• Improve stop of system emulation by @m-1-k-3 in Improve stop of system emulation #465
• Hexagon support by @m-1-k-3 in Hexagon support #467
• Lighttpd analysis module by @m-1-k-3 in Lighttpd analysis module #469
• s08 safe_echo fix by @m-1-k-3 in s08 safe_echo fix #470
• p35 - true to not fail, s26 - check for files by @m-1-k-3 in p35 - true to not fail, s26 - check for files #471
• JTR crack multiple hash types by @m-1-k-3 in JTR crack multiple hash types #473
• deprecated -l option by @m-1-k-3 in deprecated -l option #476
• s36 fixes, renamed p61 by @m-1-k-3 in s36 fixes, renamed p61 #477
• System emulator improvements by @m-1-k-3 in System emulator improvements #478
• Respect module blacklist in waiting state / Installer fix by @m-1-k-3 in Respect module blacklist in waiting state / Installer fix #479
• Exploit database update, debug mode, command line tests by @m-1-k-3 in Exploit database update, debug mode, command line tests #481
• Add wordlist mechanism to s109 by @m-1-k-3 in Add wordlist mechanism to s109 #482
• csv export of p59, p60 and p70 by @m-1-k-3 in csv export of p59, p60 and p70 #483
• disk space monitor, rpm package analysis by @m-1-k-3 in disk space monitor, rpm package analysis #485
• Improve output of help command by @m-1-k-3 in Improve output of help command #492
• Setup further workflows by @m-1-k-3 in Setup further workflows #490
• Remove timezone setting by @m-1-k-3 in Remove timezone setting #494
• Refactor, PID log, Github actions, APKHunt by @m-1-k-3 in Refactor, PID log, Github actions, APKHunt #495
• Packetstorm database update by @github-actions in Packetstorm database update #498
• Snyk database update by @github-actions in Snyk database update #497
• Metasploit database update by @github-actions in Metasploit database update #496
• Improve restart EMBA analysis feature by @m-1-k-3 in Improve restart EMBA analysis feature #499
• Fix install with pip v23+ by @m-1-k-3 in Fix install with pip v23+ #500
• Another PIPv23 fix by @m-1-k-3 in Another PIPv23 fix #501
• return if empty by @m-1-k-3 in return if empty #502
• Input validation by @m-1-k-3 in Input validation #505
• Check for update setting by @m-1-k-3 in Check for update setting #504
• Routersploit update workflow by @m-1-k-3 in Routersploit update workflow #503
• Dependency checker, workflow by @m-1-k-3 in Dependency checker, workflow #506
• Metasploit database update by @github-actions in Metasploit database update #509
• Snyk database update by @github-actions in Snyk database update #510
• CISA known exploited database update by @github-actions in CISA known exploited database update #512
• Packetstorm database update by @github-actions in Packetstorm database update #514
• System emulation improvements, workflow by @m-1-k-3 in System emulation improvements, workflow #515
• CVE state message printing by @m-1-k-3 in CVE state message printing #518
• Packetstorm database update by @github-actions in Packetstorm database update #528
• Snyk database update by @github-actions in Snyk database update #527
• CISA known exploited database update by @github-actions in CISA known exploited database update #525
• Routersploit database update by @github-actions in Routersploit database update #524
• Metasploit database update by @github-actions in Metasploit database update #523
• Trickest PoC database update by @github-actions in Trickest PoC database update #526
• Input adjustment by @m-1-k-3 in Input adjustment #529
• version validation by @m-1-k-3 in version validation #530
• PATH variable bug by @m-1-k-3 in PATH variable bug #531
• EMBA v1.2.2 - Blue Hat edt. by @m-1-k-3 in EMBA v1.2.2 - Blue Hat edt. #532
• Sponsoring issues by @m-1-k-3 in Sponsoring issues #534
• Metasploit database update by @github-actions in Metasploit database update #536
• Snyk database update by @github-actions in Snyk database update #539
• CISA known exploited database update by @github-actions in CISA known exploited database update #537
• Packetstorm database update by @github-actions in Packetstorm database update #540
• L25 improvements / multiple little fixes by @m-1-k-3 in L25 improvements / multiple little fixes #535
• L10 module improvements by @m-1-k-3 in L10 module improvements #543
• Metasploit database update by @github-actions in Metasploit database update #545
• Snyk database update by @github-actions in Snyk database update #547
• Packetstorm database update by @github-actions in Packetstorm database update #548
• New version strings (Flex and NBTscan) by @HoxhaEndri in New version strings (Flex and NBTscan) #549
• L10 improvement round x by @m-1-k-3 in L10 improvement round x #550
• links in templates by @m-1-k-3 in links in templates #555
• Freetz extraction module deprecated by @m-1-k-3 in Freetz extraction module deprecated #554
• fix for CVS export S12 #551 by @m-1-k-3 in fix for #551 #553
• Testing workflows by @BenediktMKuehne in Testing workflows #541
• Packetstorm database update by @github-actions in Packetstorm database update #563
• Snyk database update by @github-actions in Snyk database update #562
• CISA known exploited database update by @github-actions in CISA known exploited database update #560
• Metasploit database update by @github-actions in Metasploit database update #559
• Improve web crawler (L25) by @m-1-k-3 in Improve web crawler (L25) #557
• Updated installer.sh for "ubuntu debian" /etc/os-release and new version string by @HoxhaEndri in Updated installer.sh for "ubuntu debian" /etc/os-release and new version string #552
• SNMP module improvements by @m-1-k-3 in SNMP module improvements #565
• Remove warning apt-key is deprecated by @HoxhaEndri in Remove warning apt-key is deprecated #564
• update entropy output by @BenediktMKuehne in update entropy output #566
• Ignore files containing the following paths: /dev/ /proc/ /sys/ by @HoxhaEndri in Ignore files containing the following paths: */dev/* */proc/* */sys/* #569
• Fix arch detection in f50 by @m-1-k-3 in Fix arch detection in f50 #567
• Install fixes by @m-1-k-3 in Install fixes #570
• fix l10 error case by @m-1-k-3 in fix l10 error case #571
• CISA known exploited database update by @github-actions in CISA known exploited database update #573
• Snyk database update by @github-actions in Snyk database update #575
• Packetstorm database update by @github-actions in Packetstorm database update #576
• Trickest PoC database update by @github-actions in Trickest PoC database update #574
• Improved default profile handling / running modules script by @m-1-k-3 in Improved default profile handling / running modules script #572
• Fail fetch aspnetcore-targeting-pack when cleaning up by @m-1-k-3 in Fail fetch aspnetcore-targeting-pack when cleaning up #579
• Metasploit database update by @github-actions in Metasploit database update #581
• CISA known exploited database update by @github-actions in CISA known exploited database update #582
• Packetstorm database update by @github-actions in Packetstorm database update #585
• Snyk database update by @github-actions in Snyk database update #584
• Trickest PoC database update by @github-actions in Trickest PoC database update #583
• fix actions, fix l10 lnk fixer by @m-1-k-3 in fix actions, fix l10 lnk fixer #580
• remove unneeded resource by @BenediktMKuehne in remove unneeded resource #586
• Revert "remove unneeded resource" by @m-1-k-3 in Revert "remove unneeded resource" #587
• SBOM generation fix for non vuln components by @m-1-k-3 in SBOM generation fix for non vuln components #589
• Avoiding /proc and /sys paths (-xdev) in symlink script and check for missing symlinks in s115 by @HoxhaEndri in Avoiding /proc and /sys paths (-xdev) in symlink script and check for missing symlinks in s115 #590
• Packetstorm database update by @github-actions in Packetstorm database update #597
• Snyk database update by @github-actions in Snyk database update #596
• CISA known exploited database update by @github-actions in CISA known exploited database update #594
• Metasploit database update by @github-actions in Metasploit database update #593
• Lua script analysis support, UPnP live module, improvements by @m-1-k-3 in Lua script analysis support, UPnP live module, improvements #591
• R.I.P. binwalk by @m-1-k-3 in R.I.P. binwalk #598
• ignore named pipe by @HoxhaEndri in ignore named pipe #601
• Packetstorm database update by @github-actions in Packetstorm database update #607
• Snyk database update by @github-actions in Snyk database update #606
• Metasploit database update by @github-actions in Metasploit database update #604
• apk extraction fix by @m-1-k-3 in apk extraction fix #603
• R2 decompiler integration by @m-1-k-3 in R2 decompiler integration #608
• url update for sasquatch deb by @m-1-k-3 in url update for sasquatch deb #609
• update ubuntu libssl source by @BenediktMKuehne in update ubuntu libssl source #610
• Small cleanup fixes by @m-1-k-3 in Small cleanup fixes #611
• Packetstorm database update by @github-actions in Packetstorm database update #616
• Snyk database update by @github-actions in Snyk database update #615
• CISA known exploited database update by @github-actions in CISA known exploited database update #614
• Metasploit database update by @github-actions in Metasploit database update #613
• Hnap detection support for system emulator by @m-1-k-3 in Hnap detection support for system emulator #612
• Version 1.2.3 by @m-1-k-3 in Version 1.2.3 #621
• Packetstorm database update by @github-actions in Packetstorm database update #626
• Snyk database update by @github-actions in Snyk database update #625
• Metasploit database update by @github-actions in Metasploit database update #623
• CISA known exploited database update by @github-actions in CISA known exploited database update #624
• Multiple bug fixes by @m-1-k-3 in Multiple bug fixes #629
• Packetstorm database update by @github-actions in Packetstorm database update #633
• Snyk database update by @github-actions in Snyk database update #632
• Metasploit database update by @github-actions in Metasploit database update #630
• CISA known exploited database update by @github-actions in CISA known exploited database update #631
• Restart emulation improvements by @m-1-k-3 in Restart emulation improvements #634
• Fix all the things by @m-1-k-3 in Fix all the things #636
• Metasploit database update by @github-actions in Metasploit database update #639
• Snyk database update by @github-actions in Snyk database update #642
• Packetstorm database update by @github-actions in Packetstorm database update #643
• CISA known exploited database update by @github-actions in CISA known exploited database update #640
• Trickest PoC database update by @github-actions in Trickest PoC database update #641
• Routersploit/emulation cleanup/installer by @m-1-k-3 in Routersploit/emulation cleanup/installer #646
• CISA known exploited database update by @github-actions in CISA known exploited database update #649
• Metasploit database update by @github-actions in Metasploit database update #648
• Packetstorm database update by @github-actions in Packetstorm database update #652
• Trickest PoC database update by @github-actions in Trickest PoC database update #650
• Snyk database update by @github-actions in Snyk database update #651
• zombie handling by @m-1-k-3 in zombie handling #647
• JNAP detection by @m-1-k-3 in JNAP detection #654
• Metasploit database update by @github-actions in Metasploit database update #655
• CISA known exploited database update by @github-actions in CISA known exploited database update #656
• Trickest PoC database update by @github-actions in Trickest PoC database update #657
• Packetstorm database update by @github-actions in Packetstorm database update #659
• Snyk database update by @github-actions in Snyk database update #658
• use env variable CONTAINER to choose the docker container by @HoxhaEndri in use env variable CONTAINER to choose the docker container #644
• JNAP unauth check by @m-1-k-3 in JNAP unauth check #660
• Packetstorm database update by @github-actions in Packetstorm database update #665
• Snyk database update by @github-actions in Snyk database update #664
• CISA known exploited database update by @github-actions in CISA known exploited database update #662
• Metasploit database update by @github-actions in Metasploit database update #661
• trickest bl update by @m-1-k-3 in trickest bl update #667
• Update workflows by @m-1-k-3 in Update workflows #668
• Adjust workflows / CWE checker update to v0.7 by @m-1-k-3 in Adjust workflows / CWE checker update to v0.7 #669
• CISA known exploited database update by @github-actions in CISA known exploited database update #671
• Metasploit database update by @github-actions in Metasploit database update #670
• Packetstorm database update by @github-actions in Packetstorm database update #674
• Snyk database update by @github-actions in Snyk database update #673
• trickest blacklist update by @m-1-k-3 in trickest blacklist update #675
• Trickest PoC database update by @github-actions in Trickest PoC database update #672
• s22 tear down functionality by @m-1-k-3 in s22 tear down functionality #677
• workflow, readme by @m-1-k-3 in workflow, readme #678
• CISA known exploited database update by @github-actions in CISA known exploited database update #679
• Snyk database update by @github-actions in Snyk database update #681
• Packetstorm database update by @github-actions in Packetstorm database update #682
• Trickest PoC database update by @github-actions in Trickest PoC database update #680
• Little cleanups by @m-1-k-3 in Little cleanups #683
• Extended version string for proftpd by @HoxhaEndri in Extended version string for proftpd #684
• typo, csv cleanup by @m-1-k-3 in typo, csv cleanup #687
• trickest blacklist update by @m-1-k-3 in trickest blacklist update #688
• Metasploit database update by @github-actions in Metasploit database update #690
• CISA known exploited database update by @github-actions in CISA known exploited database update #691
• Snyk database update by @github-actions in Snyk database update #693
• Packetstorm database update by @github-actions in Packetstorm database update #694
• Trickest PoC database update by @github-actions in Trickest PoC database update #692
• Fix L15 report by @m-1-k-3 in Fix L15 report #695
• Improve web crawler by @m-1-k-3 in Improve web crawler #696
• Bug fixes by @m-1-k-3 in Bug fixes #698
• CISA known exploited database update by @github-actions in CISA known exploited database update #700
• Metasploit database update by @github-actions in Metasploit database update #699
• Packetstorm database update by @github-actions in Packetstorm database update #703
• Snyk database update by @github-actions in Snyk database update #702
• Trickest PoC database update by @github-actions in Trickest PoC database update #701
• make qnap check strict mode compatible by @m-1-k-3 in make qnap check strict mode compatible #704
• P60 - lost functions by @m-1-k-3 in P60 - lost functions #705
• Semgrep rule disable by @m-1-k-3 in Semgrep rule disable #706
• Move to pip env for python installation by @m-1-k-3 in Move to pip env for python installation #707
• Sh eval checks by @m-1-k-3 in Sh eval checks #710
• CISA known exploited database update by @github-actions in CISA known exploited database update #712
• Metasploit database update by @github-actions in Metasploit database update #711
• Snyk database update by @github-actions in Snyk database update #714
• Packetstorm database update by @github-actions in Packetstorm database update #715
• Trickest PoC database update by @github-actions in Trickest PoC database update #713
• EMBA ChatGPT integration by @BenediktMKuehne in EMBA ChatGPT integration #602
• load python environment in updater by @m-1-k-3 in load python environment in updater #718
• GPT rating improvements by @m-1-k-3 in GPT rating improvements #717
• Release 1.3.0 by @BenediktMKuehne in Release 1.3.0 #719

New Contributors

• @github-actions made their first contribution in Packetstorm database update #498
• @HoxhaEndri made their first contribution in New version strings (Flex and NBTscan) #549

Full Changelog: 1.2.0-London-Calling...1.3.0-AI-for-EMBA

---

This discussion was created from the release EMBA v1.3.0 - AI-Assisted Firmware Analysis.

[BenediktMKuehne]

That's a big one 🤩
Great work guys!