EMBA v1.5.2 - SBOM - The next generation

[m-1-k-3]

We need to talk about serious SBOM tooling! The CRA will hit us all ... quite hard and very soon. Check the dates (from Wikipedia):

And check the SBOM requiremenents here:

To give it a bump there are also some penalties if you are not able to fulfill the CRA:

We have seen this coming a while ago and decided to move EMBA from the firmware analyzer to the SBOM tool (without loosing our main competence in firmware analysis). During the last months we have rewritten main parts of EMBA to ensure we can build SBOMs. The goal was not only to build some SBOM ... our goal was always to build SBOMs that provide more value, are reproducible and accurate. This also includes targets where no package manager is available but also systems with multiple package managers.

The following highlights happened somehow during the last weeks:

• cve-bin-tool integration for module f17 resulted in a rewrite of f20 (which was completely removed for this release)
• SBOM VEX support via module f17 (integrated into the main SBOM but also available seperated)
• Further sources for SBOM generation are supported - Check our wiki
• Improved S09 threading by @gluesmith2021
• Massive bug fixing - more and more bug reports from our fellow EMBA users are coming in
• More and more users are also helping in fixing stuff ... thank you for supporting EMBA
• Improved the system check on EMBA startup resulted in speeding up EMBA
• Improved our quality checking process of newly built EMBA base images
• Integrated auto generation of kernel and gcc data into our github pipeline (available in config directory)

---

Beside your ongoing support with feedback, testing, working on issues and spreading EMBA you can now also support EMBA as a sponsor.

Check it out here and start being an essential part of the future of EMBA

---

It is always a pleasure to welcome new contributors to EMBA. This time we welcome:

• @chconil made their first contribution in Fix missing kernel config analysis because of lKCONFIG_EXTRACTED/KCON… #1415

---

How can you reach us and stay up to date? Just take one of these channels:

• Bluesky
• Mastodon
• Github discussions
• Github issues
• LinkedIn
• X

---

Now, start your fresh Kali Linux (put enough CPU power and RAM into it) and install EMBA:

└─$ git clone https://github.com/e-m-b-a/emba.git
└─$ cd emba 
└─$ sudo ./installer.sh -d

This will install all pre-requisites, including the docker base image and the CVE database, which will need some bandwith, harddrive space and time.

Afterwards, you are ready to analyse your first firmware with EMBA:

└─$ sudo ./emba -l ~/log -f ~/firmware -p ./scan-profiles/quick-scan.emba

For updating your oudated EMBA installation, please check the update section in our wiki.

---

What's Changed

• Fix missing kernel config analysis because of lKCONFIG_EXTRACTED/KCON… by @chconil in Fix missing kernel config analysis because of lKCONFIG_EXTRACTED/KCON… #1415
• Version identifier bugs / New binwalk with improved decryptor by @m-1-k-3 in Version identifier bugs / New binwalk with improved decryptor #1416
• fix s118 threading output / p99 csv by @m-1-k-3 in fix s118 threading output / p99 csv #1423
• p65 rpm, fixes, cleanup by @m-1-k-3 in p65 rpm, fixes, cleanup #1428
• add ipk module, fix rpm db module by @m-1-k-3 in add ipk module, fix rpm db module #1429
• remove grep log by @m-1-k-3 in remove grep log #1437
• fix x86 run script by @m-1-k-3 in fix x86 run script #1435
• update copyright 2025 by @m-1-k-3 in update copyright 2025 #1438
• Initial json logger by @m-1-k-3 in Initial json logger #1444
• Little error handling updates by @m-1-k-3 in Little error handling updates #1443
• Update grype.yml by @BenediktMKuehne in Update grype.yml #1456
• Manual update GCC and kernel release configs by @m-1-k-3 in Manual update GCC and kernel release configs #1457
• Add gcc and linux workflow by @m-1-k-3 in Add gcc and linux workflow #1460
• Fix empty results from S09 because of "grep: Argument list too long" by @gluesmith2021 in Fix empty results from S09 because of "grep: Argument list too long" #1461
• CVE bin tool integration, VEX support -> F20 replacement by @m-1-k-3 in CVE bin tool integration, VEX support -> F20 replacement #1452
• S09 unique bins by @m-1-k-3 in S09 unique bins #1465
• Effective (and fast) S09 threading by @gluesmith2021 in Effective (and fast) S09 threading #1462
• SBOM: C/C++ Conan package management integration by @m-1-k-3 in SBOM: C/C++ Conan package management integration #1473
• disabled status-bar for embark by @BenediktMKuehne in disabled status-bar for embark #1459
• fix results from race condition in MD5 list generation by @gluesmith2021 in fix results from race condition in MD5 list generation #1471
• S115 Limit emulation output size (on top of existing time limit) #1476 by @m-1-k-3 in S115 #1476 #1477
• little fixes and cleanup by @m-1-k-3 in little fixes and cleanup #1483
• Foscam extraction (P20) fixes by @m-1-k-3 in Foscam extraction (P20) fixes #1484
• CVE update db by @m-1-k-3 in CVE update db #1486
• Metasploit database update by @github-actions in Metasploit database update #1488
• Snyk database update by @github-actions in Snyk database update #1491
• Quick version identifier update by @github-actions in Quick version identifier update #1490
• CISA known exploited database update by @github-actions in CISA known exploited database update #1489
• Linux kernel version database update by @github-actions in Linux kernel version database update #1487
• fixing bugs by @m-1-k-3 in fixing bugs #1492
• SBOM cpan/php/python module by @m-1-k-3 in SBOM cpan/php/python module #1493
• Installer fixes by @m-1-k-3 in Installer fixes #1495
• Remove dep checker for container by @m-1-k-3 in Remove dep checker for container #1494
• Ensure SBOM is valid by @m-1-k-3 in Ensure SBOM is valid #1498

New Contributors

• @chconil made their first contribution in Fix missing kernel config analysis because of lKCONFIG_EXTRACTED/KCON… #1415

Full Changelog: v1.5.1-rise-from-the-dead...v1.5.2-SBOM-next-generation

---

This discussion was created from the release EMBA v1.5.2 - SBOM - The next generation.

[BenediktMKuehne]