EMBA v1.4.0 - ICS testing Edt. #1075

m-1-k-3 announced in Announcements

m-1-k-3
Mar 5, 2024
Maintainer

As we do a lot of ICS/OT testing in our daily business, we thought this release should reflect our usual EMBA usage scenario. Welcome to another huge EMBA release with a lot new features: EMBA v1.4.0 - ICS testing Editition

This time we have collected the following highlights for you:

less bugs -> more code -> more bugs? -> report all our bugs here
Extended binary analysis via semgrep (see module s16)
New static perl analysis via zarn (see module s27)
Toolchain identification (see wiki)
Improved update checking (see wiki)
New scan interface (with integrated status bar) automatically enabled in most scan-profiles
Improved multiple backend workflows
Massive speedup of multiple EMBA modules (see Speedup s09 #1006 / GPT improvements #996)
Updated docker base image (see wiki)
You can get in contact with us on the following social networks: X / Mastodon / NEW: Bluesky
We can meet in real life at BlackHat Asia this year (see Arsenal schedule)
Special thanks to our awesome community for releasing multiple new articles around EMBA - see our dedicated section in the wiki

Now, start your fresh Kali Linux (put enough CPU power and RAM into it) and install EMBA:

└─$ git clone https://github.com/e-m-b-a/emba.git
└─$ cd emba 
└─$ sudo ./installer.sh -d

This will install all pre-requisites, including the docker base image and the cve database, which will need some bandwith, harddrive space and time.

Afterwards, you are ready to analyse your first firmware with EMBA:

└─$ sudo ./emba -l ~/log -f ~/firmware -p ./scan-profiles/quick-scan.emba

Beside your ongoing support with feedback, testing, working on issues and spreading EMBA you can now also support EMBA as a sponsor.

Check it out here and start being an essential part of the future of EMBA

It is always a pleasure to welcome new contributors to EMBA. This time we can welcome:

@413x8 made their first contribution in Pre templates #931
@mj138 made their first contribution in Fix parsing of version number from binary version string #939
@jblu42 made their first contribution in Add a few component identifications #987
@floyd-fuh made their first contribution in Better error message that allows knowing which issue caused the error #1030

Welcome to the EMBA firmware analysis environment and thank you for your valuable contribution.

What's Changed

Internet check not blocking by @m-1-k-3 in Internet check not blocking #722
Fix docker build workflow by @m-1-k-3 in Fix docker build workflow #723
disable disk space monitor by @m-1-k-3 in disable disk space monitor #724
print fix, http crawler by @m-1-k-3 in print fix, http crawler #732
Code cleanup by @m-1-k-3 in Code cleanup #733
Fix updater by @m-1-k-3 in Fix updater #749
Unblob v23.8.11 by @m-1-k-3 in Unblob v23.8.11 #750
PEM file with multiple certificates by @HoxhaEndri in PEM file with multiple certificates #736
Update README.md by @m-1-k-3 in Update README.md #757
add file-command to default deps by @BenediktMKuehne in add file-command to default deps #763
Update semgrep workflow by @m-1-k-3 in Update semgrep workflow #764
Debian repos - https only for Kali by @m-1-k-3 in Debian repos - https only for Kali #766
Curl online check by @m-1-k-3 in Curl online check #774
Improve PW cracking module s107 by @m-1-k-3 in Improve PW cracking module s107 #773
Check container nr disable for dev mode by @m-1-k-3 in Check container nr disable for dev mode #776
Set variable by @m-1-k-3 in Set variable #777
Installer updates by @m-1-k-3 in Installer updates #779
fix gpt path by @m-1-k-3 in fix gpt path #789
Improve web page crawler by @m-1-k-3 in Improve web page crawler #795
little fix by @m-1-k-3 in little fix #796
disable the trickest exploit db by @m-1-k-3 in disable the trickest exploit db #797
Debian installer support by @m-1-k-3 in Debian installer support #798
grep -v -> tail by @m-1-k-3 in grep -v -> tail #812
Proxy support by @m-1-k-3 in Proxy support #811
Firmware diffing preparation by @m-1-k-3 in Firmware diffing preparation #804
nikto setup, compose cleanup by @m-1-k-3 in nikto setup, compose cleanup #814
System emulation fs mount improvements by @m-1-k-3 in System emulation fs mount improvements #815
L10 Fix SC2250 shellcheck by @HoxhaEndri in L10 Fix SC2250 shellcheck #822
Installer debian package file format by @m-1-k-3 in Installer debian package file format #826
Cleanup of PS crawler by @m-1-k-3 in Cleanup of PS crawler #833
Check for arachni user and shellcheck braces by @HoxhaEndri in Check for arachni user and shellcheck braces #834
Try cve db update multiple times during installation by @m-1-k-3 in Try cve db update multiple times during installation #837
Firmware diffing modules by @m-1-k-3 in Firmware diffing modules #838
fix Files not found in report #839 by @m-1-k-3 in fix #839 #844
Semgrep checks and shellcheck braces checks by @HoxhaEndri in Semgrep checks and shellcheck braces checks #835
check for space at the end of a line by @HoxhaEndri in check for space at the end of a line #845
Update installer, dep-check by @m-1-k-3 in Update installer, dep-check #846
strict mode grep error by @HoxhaEndri in strict mode grep error #848
BMC firmware extractor by @m-1-k-3 in BMC firmware extractor #853
braces check for all scripts inside "helpers" folder and "installer" folder by @HoxhaEndri in braces check for all scripts inside "helpers" folder and "installer" folder #854
kernel-hardening-checker fix by @m-1-k-3 in kernel-hardening-checker fix #855
Version 1.3.1 by @m-1-k-3 in Version 1.3.1 #856
Version identifiers, Arch check in installer, diff updates by @m-1-k-3 in Version identifiers, Arch check in installer, diff updates #860
check braces for modules scripts by @HoxhaEndri in check braces for modules scripts #861
braces checked for all script files by @HoxhaEndri in braces checked for all script files #865
shellcheck braces check in check_project and in workflow by @HoxhaEndri in shellcheck braces check in check_project and in workflow #866
Improve diff mode by @m-1-k-3 in Improve diff mode #867
Fix grep -R by @m-1-k-3 in Fix grep -R #869
CPU check for SSSE3 by @m-1-k-3 in CPU check for SSSE3 #870
Diff threading + improved reporting by @m-1-k-3 in Diff threading + improved reporting #871
typo cause regression: missing s25 output #873 fix by @m-1-k-3 in #873 fix #874
zlib string from dell bios firmware by @HoxhaEndri in zlib string from dell bios firmware #872
Create first_interaction.yml by @m-1-k-3 in Create first_interaction.yml #877
UEFI analysis improvements by @m-1-k-3 in UEFI analysis improvements #876
fwhunt check entire firmware first by @HoxhaEndri in fwhunt check entire firmware first #881
new version strings and comment for fwhunt by @HoxhaEndri in new version strings and comment for fwhunt #882
integrate cveXplore settings by @BenediktMKuehne in integrate cveXplore settings #884
Install CveXplore v0.3.16++ by @m-1-k-3 in Install CveXplore v0.3.16++ #892
Full system emulation dependency s24 by @m-1-k-3 in Full system emulation dependency s24 #896
Cvexplore integration by @BenediktMKuehne in Cvexplore integration #887
switch pip install for cvexplore to git repo by @BenediktMKuehne in switch pip install for cvexplore to git repo #899
Docker-compose cleanup by @m-1-k-3 in Docker-compose cleanup #891
Issue 889 by @m-1-k-3 in Issue 889 #902
L10, S05 fixes by @m-1-k-3 in L10, S05 fixes #903
L23 VNC checker modules by @m-1-k-3 in L23 VNC checker modules #904
update first interaction by @m-1-k-3 in update first interaction #906
Update check again - KeyError: epss #908 by @m-1-k-3 in Update check again - #908 #909
Make Routersploit work again by @m-1-k-3 in Make Routersploit work again #910
Stick to version and check it from requests and urllib3 by @m-1-k-3 in Stick to version and check it from requests and urllib3 #911
Improve dep checker by @m-1-k-3 in Improve dep checker #912
Replacement of current cve query mechanism by @m-1-k-3 in Replacement of current cve query mechanism #913
Fix workflows, improve CVE identification by @m-1-k-3 in Fix workflows, improve CVE identification #919
rootfs check in uefi extractor by @m-1-k-3 in rootfs check in uefi extractor #921
fix install workflow by @m-1-k-3 in fix install workflow #922
check for versions (emba, git and docker) by @HoxhaEndri in check for versions (emba, git and docker) #918
S26 module fix by @m-1-k-3 in S26 module fix #928
remove update scripts by @m-1-k-3 in remove update scripts #923
Pre templates by @413x8 in Pre templates #931
Multiple fixes by @m-1-k-3 in Multiple fixes #930
Contributors update by @m-1-k-3 in Contributors update #937
update default profile for EMBArk by @m-1-k-3 in update default profile for EMBArk #938
Fix parsing of version number from binary version string by @mj138 in Fix parsing of version number from binary version string #939
Update Contributors, version by @m-1-k-3 in Update Contributors, version #940
Fix parsing of binary name from binary version string by @mj138 in Fix parsing of binary name from binary version string #942
little cleanup by @m-1-k-3 in little cleanup #944
Docker build updates for Kali 2023.4 by @m-1-k-3 in Docker build updates for Kali 2023.4 #945
Include 0xdea semgrep rules and haruspex ghidra script, improve cwe-search integration by @m-1-k-3 in Include 0xdea semgrep rules and haruspex ghidra script, improve cwe-search integration #946
s14 r2 startup command update by @m-1-k-3 in s14 r2 startup command update #952
r2 bin cache by @m-1-k-3 in r2 bin cache #953
fix for Ghidra Dependency Help #954 by @m-1-k-3 in fix for #954 #955
Enable workflow dispatch by @m-1-k-3 in Enable workflow dispatch #956
Version bump - v1.3.2 by @m-1-k-3 in Version bump - v1.3.2 #957
pip3 docker version warning by @BenediktMKuehne in pip3 docker version warning #959
true the docker by @m-1-k-3 in true the docker #960
remove disable shellcheck from installer folder scripts by @HoxhaEndri in remove disable shellcheck from installer folder scripts #941
Support docker compose v2 API by @m-1-k-3 in Support docker compose v2 API #961
fix version by @m-1-k-3 in fix version #962
copyright and exceptions linter functions by @BenediktMKuehne in copyright and exceptions linter functions #965
force utf8 for htmls by @BenediktMKuehne in force utf8 for htmls #964
Another big update PR by @m-1-k-3 in Another big update PR #979
Multi grep in version detection by @m-1-k-3 in Multi grep in version detection #981
Install dji firmware tools by @m-1-k-3 in Install dji firmware tools #988
massive cleanup by @m-1-k-3 in massive cleanup #989
multi_grep_fix by @m-1-k-3 in multi_grep_fix #995
Add a few component identifications by @jblu42 in Add a few component identifications #987
GPT improvements by @m-1-k-3 in GPT improvements #996
BusyBox applet verification module by @m-1-k-3 in BusyBox applet verification module #1003
Refactor variable usages by @m-1-k-3 in Refactor variable usages #997
Change component identification license to SPDXIDs by @jblu42 in Change component identification license to SPDXIDs #998
Speedup s09 by @m-1-k-3 in Speedup s09 #1006
Drone extraction module / Silent mode by @m-1-k-3 in Drone extraction module / Silent mode #993
Improve s24/s25 handling by @m-1-k-3 in Improve s24/s25 handling #1011
GCC toolchain identification by @m-1-k-3 in GCC toolchain identification #1017
Multiple little fixes / Enable silent mode in most profiles by @m-1-k-3 in Multiple little fixes / Enable silent mode in most profiles #1019
Quickfixes by @m-1-k-3 in Quickfixes #1020
remove netgear telnet module by @m-1-k-3 in remove netgear telnet module #1021
Enhanced binary analysis/0day detection by @m-1-k-3 in Enhanced binary analysis/0day detection #1022
Workflow - generate VERSION.txt by @m-1-k-3 in Workflow - generate VERSION.txt #1027
Update EMBA VERSION.txt by @github-actions in Update EMBA VERSION.txt #1028
Improved EMBA update checks by @m-1-k-3 in Improved EMBA update checks #1029
Better error message that allows knowing which issue caused the error by @floyd-fuh in Better error message that allows knowing which issue caused the error #1030
Improved version checks by @m-1-k-3 in Improved version checks #1031
little fixes by @m-1-k-3 in little fixes #1033
Update EMBA VERSION.txt by @github-actions in Update EMBA VERSION.txt #1032
l10 bug fixes by @m-1-k-3 in l10 bug fixes #1040
Remove printing of every single log file which could take a very long… by @floyd-fuh in Remove printing of every single log file which could take a very long… #1042
Multiple little fixes - make s15 work again by @m-1-k-3 in Multiple little fixes - make s15 work again #1045
Perl analysis with zarn by @m-1-k-3 in Perl analysis with zarn #1047
fix install workflow by @m-1-k-3 in fix install workflow #1052
identifying BMC AST2400 by @HoxhaEndri in identifying BMC AST2400 #1004
Docker image update check by @m-1-k-3 in Docker image update check #1053
fix version check by @m-1-k-3 in fix version check #1055
Help output cleanup by @m-1-k-3 in Help output cleanup #1056
Improve module_title log by @m-1-k-3 in Improve module_title log #1057
S15 - improve variable handling by @m-1-k-3 in S15 - improve variable handling #1059
Update kali issue template by @m-1-k-3 in Update kali issue template #1060
warning if unthreaded by @m-1-k-3 in warning if unthreaded #1068
help update by @m-1-k-3 in help update #1069
version fix by @m-1-k-3 in version fix #1071
bump version by @m-1-k-3 in bump version #1072

New Contributors

@413x8 made their first contribution in Pre templates #931
@mj138 made their first contribution in Fix parsing of version number from binary version string #939
@jblu42 made their first contribution in Add a few component identifications #987
@floyd-fuh made their first contribution in Better error message that allows knowing which issue caused the error #1030

Full Changelog: 1.3.0-AI-for-EMBA...1.4.0-ICS-testing-edt

This discussion was created from the release EMBA v1.4.0 - ICS testing Edt..

Replies: 0 comments

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment