EMBA v1.4.0 - ICS testing Edt.

[m-1-k-3]

As we do a lot of ICS/OT testing in our daily business, we thought this release should reflect our usual EMBA usage scenario. Welcome to another huge EMBA release with a lot new features: EMBA v1.4.0 - ICS testing Editition

This time we have collected the following highlights for you:

• less bugs -> more code -> more bugs? -> report all our bugs here
• Extended binary analysis via semgrep (see module s16)
• New static perl analysis via zarn (see module s27)
• Toolchain identification (see wiki)
• Improved update checking (see wiki)
• New scan interface (with integrated status bar) automatically enabled in most scan-profiles
• Improved multiple backend workflows
• Massive speedup of multiple EMBA modules (see Speedup s09 #1006 / GPT improvements #996)
• Updated docker base image (see wiki)
• You can get in contact with us on the following social networks: X / Mastodon / NEW: Bluesky
• We can meet in real life at BlackHat Asia this year (see Arsenal schedule)
• Special thanks to our awesome community for releasing multiple new articles around EMBA - see our dedicated section in the wiki

---

Now, start your fresh Kali Linux (put enough CPU power and RAM into it) and install EMBA:

└─$ git clone https://github.com/e-m-b-a/emba.git
└─$ cd emba 
└─$ sudo ./installer.sh -d

This will install all pre-requisites, including the docker base image and the cve database, which will need some bandwith, harddrive space and time.

Afterwards, you are ready to analyse your first firmware with EMBA:

└─$ sudo ./emba -l ~/log -f ~/firmware -p ./scan-profiles/quick-scan.emba

---

Beside your ongoing support with feedback, testing, working on issues and spreading EMBA you can now also support EMBA as a sponsor.

Check it out here and start being an essential part of the future of EMBA

---

It is always a pleasure to welcome new contributors to EMBA. This time we can welcome:

• @413x8 made their first contribution in Pre templates #931
• @mj138 made their first contribution in Fix parsing of version number from binary version string #939
• @jblu42 made their first contribution in Add a few component identifications #987
• @floyd-fuh made their first contribution in Better error message that allows knowing which issue caused the error #1030

Welcome to the EMBA firmware analysis environment and thank you for your valuable contribution.

---

What's Changed

• Internet check not blocking by @m-1-k-3 in Internet check not blocking #722
• Fix docker build workflow by @m-1-k-3 in Fix docker build workflow #723
• disable disk space monitor by @m-1-k-3 in disable disk space monitor #724
• print fix, http crawler by @m-1-k-3 in print fix, http crawler #732
• Code cleanup by @m-1-k-3 in Code cleanup #733
• Fix updater by @m-1-k-3 in Fix updater #749
• Unblob v23.8.11 by @m-1-k-3 in Unblob v23.8.11 #750
• PEM file with multiple certificates by @HoxhaEndri in PEM file with multiple certificates #736
• Update README.md by @m-1-k-3 in Update README.md #757
• add file-command to default deps by @BenediktMKuehne in add file-command to default deps #763
• Update semgrep workflow by @m-1-k-3 in Update semgrep workflow #764
• Debian repos - https only for Kali by @m-1-k-3 in Debian repos - https only for Kali #766
• Curl online check by @m-1-k-3 in Curl online check #774
• Improve PW cracking module s107 by @m-1-k-3 in Improve PW cracking module s107 #773
• Check container nr disable for dev mode by @m-1-k-3 in Check container nr disable for dev mode #776
• Set variable by @m-1-k-3 in Set variable #777
• Installer updates by @m-1-k-3 in Installer updates #779
• fix gpt path by @m-1-k-3 in fix gpt path #789
• Improve web page crawler by @m-1-k-3 in Improve web page crawler #795
• little fix by @m-1-k-3 in little fix #796
• disable the trickest exploit db by @m-1-k-3 in disable the trickest exploit db #797
• Debian installer support by @m-1-k-3 in Debian installer support #798
• grep -v -> tail by @m-1-k-3 in grep -v -> tail #812
• Proxy support by @m-1-k-3 in Proxy support #811
• Firmware diffing preparation by @m-1-k-3 in Firmware diffing preparation #804
• nikto setup, compose cleanup by @m-1-k-3 in nikto setup, compose cleanup #814
• System emulation fs mount improvements by @m-1-k-3 in System emulation fs mount improvements #815
• L10 Fix SC2250 shellcheck by @HoxhaEndri in L10 Fix SC2250 shellcheck #822
• Installer debian package file format by @m-1-k-3 in Installer debian package file format #826
• Cleanup of PS crawler by @m-1-k-3 in Cleanup of PS crawler #833
• Check for arachni user and shellcheck braces by @HoxhaEndri in Check for arachni user and shellcheck braces #834
• Try cve db update multiple times during installation by @m-1-k-3 in Try cve db update multiple times during installation #837
• Firmware diffing modules by @m-1-k-3 in Firmware diffing modules #838
• fix Files not found in report #839 by @m-1-k-3 in fix #839 #844
• Semgrep checks and shellcheck braces checks by @HoxhaEndri in Semgrep checks and shellcheck braces checks #835
• check for space at the end of a line by @HoxhaEndri in check for space at the end of a line #845
• Update installer, dep-check by @m-1-k-3 in Update installer, dep-check #846
• strict mode grep error by @HoxhaEndri in strict mode grep error #848
• BMC firmware extractor by @m-1-k-3 in BMC firmware extractor #853
• braces check for all scripts inside "helpers" folder and "installer" folder by @HoxhaEndri in braces check for all scripts inside "helpers" folder and "installer" folder #854
• kernel-hardening-checker fix by @m-1-k-3 in kernel-hardening-checker fix #855
• Version 1.3.1 by @m-1-k-3 in Version 1.3.1 #856
• Version identifiers, Arch check in installer, diff updates by @m-1-k-3 in Version identifiers, Arch check in installer, diff updates #860
• check braces for modules scripts by @HoxhaEndri in check braces for modules scripts #861
• braces checked for all script files by @HoxhaEndri in braces checked for all script files #865
• shellcheck braces check in check_project and in workflow by @HoxhaEndri in shellcheck braces check in check_project and in workflow #866
• Improve diff mode by @m-1-k-3 in Improve diff mode #867
• Fix grep -R by @m-1-k-3 in Fix grep -R #869
• CPU check for SSSE3 by @m-1-k-3 in CPU check for SSSE3 #870
• Diff threading + improved reporting by @m-1-k-3 in Diff threading + improved reporting #871
• typo cause regression: missing s25 output #873 fix by @m-1-k-3 in #873 fix #874
• zlib string from dell bios firmware by @HoxhaEndri in zlib string from dell bios firmware #872
• Create first_interaction.yml by @m-1-k-3 in Create first_interaction.yml #877
• UEFI analysis improvements by @m-1-k-3 in UEFI analysis improvements #876
• fwhunt check entire firmware first by @HoxhaEndri in fwhunt check entire firmware first #881
• new version strings and comment for fwhunt by @HoxhaEndri in new version strings and comment for fwhunt #882
• integrate cveXplore settings by @BenediktMKuehne in integrate cveXplore settings #884
• Install CveXplore v0.3.16++ by @m-1-k-3 in Install CveXplore v0.3.16++ #892
• Full system emulation dependency s24 by @m-1-k-3 in Full system emulation dependency s24 #896
• Cvexplore integration by @BenediktMKuehne in Cvexplore integration #887
• switch pip install for cvexplore to git repo by @BenediktMKuehne in switch pip install for cvexplore to git repo #899
• Docker-compose cleanup by @m-1-k-3 in Docker-compose cleanup #891
• Issue 889 by @m-1-k-3 in Issue 889 #902
• L10, S05 fixes by @m-1-k-3 in L10, S05 fixes #903
• L23 VNC checker modules by @m-1-k-3 in L23 VNC checker modules #904
• update first interaction by @m-1-k-3 in update first interaction #906
• Update check again - KeyError: epss #908 by @m-1-k-3 in Update check again - #908 #909
• Make Routersploit work again by @m-1-k-3 in Make Routersploit work again #910
• Stick to version and check it from requests and urllib3 by @m-1-k-3 in Stick to version and check it from requests and urllib3 #911
• Improve dep checker by @m-1-k-3 in Improve dep checker #912
• Replacement of current cve query mechanism by @m-1-k-3 in Replacement of current cve query mechanism #913
• Fix workflows, improve CVE identification by @m-1-k-3 in Fix workflows, improve CVE identification #919
• rootfs check in uefi extractor by @m-1-k-3 in rootfs check in uefi extractor #921
• fix install workflow by @m-1-k-3 in fix install workflow #922
• check for versions (emba, git and docker) by @HoxhaEndri in check for versions (emba, git and docker) #918
• S26 module fix by @m-1-k-3 in S26 module fix #928
• remove update scripts by @m-1-k-3 in remove update scripts #923
• Pre templates by @413x8 in Pre templates #931
• Multiple fixes by @m-1-k-3 in Multiple fixes #930
• Contributors update by @m-1-k-3 in Contributors update #937
• update default profile for EMBArk by @m-1-k-3 in update default profile for EMBArk #938
• Fix parsing of version number from binary version string by @mj138 in Fix parsing of version number from binary version string #939
• Update Contributors, version by @m-1-k-3 in Update Contributors, version #940
• Fix parsing of binary name from binary version string by @mj138 in Fix parsing of binary name from binary version string #942
• little cleanup by @m-1-k-3 in little cleanup #944
• Docker build updates for Kali 2023.4 by @m-1-k-3 in Docker build updates for Kali 2023.4 #945
• Include 0xdea semgrep rules and haruspex ghidra script, improve cwe-search integration by @m-1-k-3 in Include 0xdea semgrep rules and haruspex ghidra script, improve cwe-search integration #946
• s14 r2 startup command update by @m-1-k-3 in s14 r2 startup command update #952
• r2 bin cache by @m-1-k-3 in r2 bin cache #953
• fix for Ghidra Dependency Help #954 by @m-1-k-3 in fix for #954 #955
• Enable workflow dispatch by @m-1-k-3 in Enable workflow dispatch #956
• Version bump - v1.3.2 by @m-1-k-3 in Version bump - v1.3.2 #957
• pip3 docker version warning by @BenediktMKuehne in pip3 docker version warning #959
• true the docker by @m-1-k-3 in true the docker #960
• remove disable shellcheck from installer folder scripts by @HoxhaEndri in remove disable shellcheck from installer folder scripts #941
• Support docker compose v2 API by @m-1-k-3 in Support docker compose v2 API #961
• fix version by @m-1-k-3 in fix version #962
• copyright and exceptions linter functions by @BenediktMKuehne in copyright and exceptions linter functions #965
• force utf8 for htmls by @BenediktMKuehne in force utf8 for htmls #964
• Another big update PR by @m-1-k-3 in Another big update PR #979
• Multi grep in version detection by @m-1-k-3 in Multi grep in version detection #981
• Install dji firmware tools by @m-1-k-3 in Install dji firmware tools #988
• massive cleanup by @m-1-k-3 in massive cleanup #989
• multi_grep_fix by @m-1-k-3 in multi_grep_fix #995
• Add a few component identifications by @jblu42 in Add a few component identifications #987
• GPT improvements by @m-1-k-3 in GPT improvements #996
• BusyBox applet verification module by @m-1-k-3 in BusyBox applet verification module #1003
• Refactor variable usages by @m-1-k-3 in Refactor variable usages #997
• Change component identification license to SPDXIDs by @jblu42 in Change component identification license to SPDXIDs #998
• Speedup s09 by @m-1-k-3 in Speedup s09 #1006
• Drone extraction module / Silent mode by @m-1-k-3 in Drone extraction module / Silent mode #993
• Improve s24/s25 handling by @m-1-k-3 in Improve s24/s25 handling #1011
• GCC toolchain identification by @m-1-k-3 in GCC toolchain identification #1017
• Multiple little fixes / Enable silent mode in most profiles by @m-1-k-3 in Multiple little fixes / Enable silent mode in most profiles #1019
• Quickfixes by @m-1-k-3 in Quickfixes #1020
• remove netgear telnet module by @m-1-k-3 in remove netgear telnet module #1021
• Enhanced binary analysis/0day detection by @m-1-k-3 in Enhanced binary analysis/0day detection #1022
• Workflow - generate VERSION.txt by @m-1-k-3 in Workflow - generate VERSION.txt #1027
• Update EMBA VERSION.txt by @github-actions in Update EMBA VERSION.txt #1028
• Improved EMBA update checks by @m-1-k-3 in Improved EMBA update checks #1029
• Better error message that allows knowing which issue caused the error by @floyd-fuh in Better error message that allows knowing which issue caused the error #1030
• Improved version checks by @m-1-k-3 in Improved version checks #1031
• little fixes by @m-1-k-3 in little fixes #1033
• Update EMBA VERSION.txt by @github-actions in Update EMBA VERSION.txt #1032
• l10 bug fixes by @m-1-k-3 in l10 bug fixes #1040
• Remove printing of every single log file which could take a very long… by @floyd-fuh in Remove printing of every single log file which could take a very long… #1042
• Multiple little fixes - make s15 work again by @m-1-k-3 in Multiple little fixes - make s15 work again #1045
• Perl analysis with zarn by @m-1-k-3 in Perl analysis with zarn #1047
• fix install workflow by @m-1-k-3 in fix install workflow #1052
• identifying BMC AST2400 by @HoxhaEndri in identifying BMC AST2400 #1004
• Docker image update check by @m-1-k-3 in Docker image update check #1053
• fix version check by @m-1-k-3 in fix version check #1055
• Help output cleanup by @m-1-k-3 in Help output cleanup #1056
• Improve module_title log by @m-1-k-3 in Improve module_title log #1057
• S15 - improve variable handling by @m-1-k-3 in S15 - improve variable handling #1059
• Update kali issue template by @m-1-k-3 in Update kali issue template #1060
• warning if unthreaded by @m-1-k-3 in warning if unthreaded #1068
• help update by @m-1-k-3 in help update #1069
• version fix by @m-1-k-3 in version fix #1071
• bump version by @m-1-k-3 in bump version #1072

New Contributors

• @413x8 made their first contribution in Pre templates #931
• @mj138 made their first contribution in Fix parsing of version number from binary version string #939
• @jblu42 made their first contribution in Add a few component identifications #987
• @floyd-fuh made their first contribution in Better error message that allows knowing which issue caused the error #1030

Full Changelog: 1.3.0-AI-for-EMBA...1.4.0-ICS-testing-edt

---

This discussion was created from the release EMBA v1.4.0 - ICS testing Edt..