User Documentation

User Documentation

Authentication

Before accessing EMBArk you need to register yourself with username and password: \

curl -XPOST 'http://0.0.0.0:80/signup' -d '{"email": "[email protected]", "password": "test", "confirm_password": "test"}' \

Afterwards you are able to use your credentials to login on the start page.

images/welcome_to_embark.png

Navigation

The navigation is done via the left sidebar, featuring logout at the bottom. The following sites are currently available:

• main dashboard aggregating the collected data
• upload/analyze page upload and start analysis process on firmware
• service dashboard current progress overview
• report dashboard listing detailed information about analysed firmware

Main Dashboard

Compressed and aggregated data for overview and performance done by EMBA. This includes (but not limited to):

• Common Vulnerabilities and Exposures - CVEs
• Binary Protections - NX, Canaries, RELRO, ...
• Architecture and OS Distribution
• Top strcpy binaries
• Server Load Graph

images/aggregated_dashboard_01.png images/aggregated_dashboard_02.png images/aggregated_dashboard_03.png

Uploading / Analyzing Dashboard

Uploading and deleting of firmware.

• Upload via drag and drop or via explicitly selecting the firmware from your local system
• Delete Firmware by selecting the firmware and accepting dialogs Starting and adapting the analysis on the right side.
• User can select from the previouse uploaded firmwares to start the detached emba analyze process
• Have a look at the expert flags, activated by slider to fit your means

images/firmware_upload_01.png images/firmware_upload_02.png

Service Dashboard

The analyze step is completely detached from other User interactions.
Nevertheless users can observe the current status of each EMBA firmware scan:

• Current progress
• Executing stage
• Current module being processed

images/scan_status.png

Report Dashboard

Summary of all firmwares ever analyzed by EMBA.
Search and sortable table to easily find the relevant reports. Actions on completed firmware analysis:

• Ability to open the Individual report overview for each analysis
• Ability to open the html report generated by the firmware scanning backend EMBA
• Ability to download report generated by the firmware scanning backend EMBA

images/report_overview.png

EMBArk Individual Report

The individual Report lists relevant details about the tested firmware, as well as some charts for visualization.

images/detail_report_01.png images/detail_report_02.png

EMBA HTML Report

EMBA generates a html report with all testing details. This report can either be downloaded or inspected in the browser from the Report Dashboard.