EMBA

What EMBA is

EMBA is a free, open-source Linux environment for examining embedded-device firmware. It extracts firmware and combines static and dynamic analysis, then produces software inventories and web-based vulnerability reports. Checks look for outdated components, vulnerable scripts, hard-coded passwords, weak binary functions, and weak file permissions. The F15 module creates a JSON software bill of materials using CycloneDX, while F20 gathers detected versions and searches for known vulnerabilities and possible exploits. The project announces integration with Dependency-Track. EMBA is intended for penetration testers, product security teams, developers, and responsible product managers. Its guide recommends a virtual machine with current Kali Linux and default Docker mode; Ubuntu 22.04 or 24.04 should also work. Requirements include at least 16 GB RAM, eight or more processor cores recommended, and 30–100 GB free disk space. It is designed for x86-64 and does not run on ARM. Maintainers caution against productive or unprotected use.