EMBA - v2.0.2 - Party the big 2k

[m-1-k-3]

We have something to celebrate with you! We did it ... The big 2000 is in the books right now:

EMBA is now for 6 years in the wild and we are proud that we did a few things:

• Automated firmware security analysis (including SBOM and AI) is available for everyone
• Nearly 3500 github stars
• Nearly 100 shoutouts in papers, videos, articles, talks and so on - see here
• We tried a few things in this timeframe. So we ...
  • ... were on 13 security conferences - kick me
  • ... did a podcast - check it out here
  • ... wrote multiple articles - one for you
  • ... organised multiple cooperations with universities around EMBA and created EMBArk, the firmware analysis environment for teams with collaboration support and, and, and
• We bumped 24 (now 25) releases to the world - check it out here
• 2000 Github pull requests/issues/discussions - drink a beer, coffee or whatelse with us

Thank you for supporting, helping, coding, reporting, hacking, challenging, using EMBA.

---

The big news for this release is that we did a complete rework of all our AI integration and you do not need to pay for tokens anymore.

With our switch to LocalAI it is now possible to use AI integration with your local hardware and no more token fears anymore.

Check the following screenshots of the improved AI integration:

The AI module shows and links all the AI results and the original module results are easily rechable:

The original analysis module also links to the related AI results:

And, finalle the AI results with an overview of the source file, some improvements and a security overview with security rating:

For further details and a walkthrough the setup check the wiki

This beauty is not alone and we did some further updates and bugfixes in a lot of different areas:

• Thanks to @atharva80 we have a new extraction module P26
• Thanks to @Jumpforce we have improved documentation for multiple modules
• Lots of bugfixes, cleanups and improvements across different modules.
• Continued database updates (CISA KEV, Metasploit, Snyk, kernel/GCC/version DBs, etc.) to keep detection fresh.

---

Beside your ongoing support with feedback, testing, working on issues and spreading EMBA you can now also support EMBA as a sponsor.

Check it out here and start being an essential part of the future of EMBA.
Breaking News: Check also our new shop for EMBA merch here.

---

It is always a pleasure to welcome new contributors to EMBA. This time we welcome:

• @Jumpforce made their first contribution in docs update: fixed second level headings; UTF-8 support #1980
• @atharva80 made their first contribution in Add P26 S-Record extractor module and srecord dependency #1982

Besides all our newcomers we also want to thank all our regular contributors!

We had never before so many bug reports, contributors and helping hands! Big kudos to all of you!

---

How can you reach us and stay up to date? Just take one of these channels (or all):

• Bluesky
• Mastodon
• Github discussions
• Github issues
• LinkedIn
• X

---

Now, start your fresh Kali Linux (put enough CPU power and RAM into it) and install EMBA:

└─$ git clone https://github.com/e-m-b-a/emba.git
└─$ cd emba 
└─$ sudo ./installer.sh -d

This will install all pre-requisites, including the docker base image and the CVE database, which will need some bandwith, harddrive space and time.

Afterwards, you are ready to analyse your first firmware with EMBA:

└─$ sudo ./emba -l ~/log -f ~/firmware -p ./scan-profiles/quick-scan.emba

For updating your outdated EMBA installation, please check the update section in our wiki.

What's Changed

• Snyk database update by @github-actions[bot] in Snyk database update #1971
• Metasploit database update by @github-actions[bot] in Metasploit database update #1970
• Linux kernel version database update by @github-actions[bot] in Linux kernel version database update #1969
• GCC version database update by @github-actions[bot] in GCC version database update #1968
• CISA known exploited database update by @github-actions[bot] in CISA known exploited database update #1967
• Add latest news section to README by @m-1-k-3 in Add latest news section to README #1972
• Improve web report/fix map generator by @m-1-k-3 in Improve web report/fix map generator #1973
• docs update: fixed second level headings; UTF-8 support by @Jumpforce in docs update: fixed second level headings; UTF-8 support #1980
• Adding pod documentation to F14 by @Jumpforce in Adding pod documentation to F14 #1981
• Add P26 S-Record extractor module and srecord dependency by @atharva80 in Add P26 S-Record extractor module and srecord dependency #1982
• Rework EMBA AI integration by @m-1-k-3 in Rework EMBA AI integration #1988
• Error log in web reporter by @m-1-k-3 in Error log in web reporter #1999
• bump v2.0.2 by @m-1-k-3 in bump v2.0.2 #2000

New Contributors

• @Jumpforce made their first contribution in docs update: fixed second level headings; UTF-8 support #1980
• @atharva80 made their first contribution in Add P26 S-Record extractor module and srecord dependency #1982

Full Changelog: v2.0.1-interactor...v2.0.2-big-2k

---

This discussion was created from the release EMBA - v2.0.2 - Party the big 2k.