EMBA v1.5.0 - SBOMdorado #1351
m-1-k-3
announced in
Announcements
EMBA v1.5.0 - SBOMdorado
#1351
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
The main goal of EMBA was always to get an accurate real life overview of the threats of a firmware image. While a few years ago the target audience were only pentesters, in today’s EMBA world also software developers, product owners and product security teams are using her to achieve different goals.
Over the time EMBA is grown and today she is not only a firmware analyzer anymore. Nowadays, EMBA is used to test every little piece of unknown binary. While the main interest stays on analyzing Linux based firmware, we have seen that EMBA is also used for UEFI, Windows binaries, Linux binaries, different Scripts, Android APKs and a lot of other stuff. Beside the high fragmentation of the targets under test, we have seen a growing demand for SBOM generation. EMBA includes some kind of basic SBOM support for ages, but as most of our analyzed binaries do not rely on some kind of package managers, we have not seen the demand for supporting them on a broad base - until today.
We have now adjusted our approach to support a broad range of package managers, packet types and further sources for getting an accurate SBOM out of every testing candidate.
Beside our binary analysis mechanism as the only source of truth, EMBA is now able to extract further details from the following sources:
Further details can be found in our wiki
Additionally, we did something more:
docker-composetodocker composeBeside your ongoing support with feedback, testing, working on issues and spreading EMBA you can now also support EMBA as a sponsor.
A big kudos goes to to offchain-audit for his sponsoring and to n0x08 for his ongoing support.
Check it out here and start being an essential part of the future of EMBA
It is always a pleasure to welcome new contributors to EMBA. This time we can welcome:
Now, start your fresh Kali Linux (put enough CPU power and RAM into it) and install EMBA:
This will install all pre-requisites, including the docker base image and the cve database, which will need some bandwith, harddrive space and time.
Afterwards, you are ready to analyse your first firmware with EMBA:
What's Changed
New Contributors
Full Changelog: 1.4.0-ICS-testing-edt...v1.5.0-SBOMdorado
This discussion was created from the release EMBA v1.5.0 - SBOMdorado.
Beta Was this translation helpful? Give feedback.
All reactions