All of you probably know this kind of legacy servers where you are not able to connect anymore:
As your modern OpenSSL version does not ship the needed code anymore you can't do it!
But .... The legacy does not hit EMBA anymore. We connect and find vulns :) (see #2023)
Another highlight is the upcoming Hacker Summer Camp in Las Vegas. You can join @BenediktMKuehne for a Black Hat Arsenal session on the Firmware analysis platform EMBArk and @m-1-k-3 on an Arsenal Lab session on EMBA. Check it out and say Hi :)
Beside all of this we did some further updates and bugfixes in a lot of different areas:
- Thanks to @ahmedboufares we have more csv log output of our modules
- Thanks to @cn0xroot we have a more stable user-mode emulation module
- We have also started to implement unit tests (based on bats) here #2044
- A big cleanup round was also started to further improve code quality for the future here #2046
- Lots of bugfixes, cleanups and improvements across different modules.
- Continued database updates (CISA KEV, Metasploit, Snyk, kernel/GCC/version DBs, etc.) to keep detection fresh.
Beside your ongoing support with feedback, testing, working on issues and spreading EMBA you can now also support EMBA as a sponsor.
Check it out here and start being an essential part of the future of EMBA.
Breaking News: Check also our new shop for EMBA merch here.
It is always a pleasure to welcome new contributors to EMBA. This time we welcome:
- @ahmedboufares made their first contribution in #2001
- @cn0xroot made their first contribution in #2036
Besides all our newcomers we also want to thank all our regular contributors!
We had never before so many bug reports, contributors and helping hands! Big kudos to all of you!
How can you reach us and stay up to date? Just take one of these channels (or all):
Now, start your fresh Kali Linux (put enough CPU power and RAM into it) and install EMBA:
└─$ git clone https://github.com/e-m-b-a/emba.git
└─$ cd emba
└─$ sudo ./installer.sh -d
This will install all pre-requisites, including the docker base image and the CVE database, which will need some bandwith, harddrive space and time.
Afterwards, you are ready to analyse your first firmware with EMBA:
└─$ sudo ./emba -l ~/log -f ~/firmware -p ./scan-profiles/quick-scan.emba
For updating your outdated EMBA installation, please check the update section in our wiki.
What's Changed
- Update latest news section in README.md by @m-1-k-3 in #2007
- improve actions by @m-1-k-3 in #2013
- fix #2002 by @m-1-k-3 in #2014
- fix docker build by @m-1-k-3 in #2015
- do not full stop on unsupported ciphers by @m-1-k-3 in #2016
- Legacy ssl support / Improve runtime in multiple modules by @m-1-k-3 in #2023
- s16 bug fix and adding new csv files to some modules by @ahmedboufares in #2001
- fix SVG path by @m-1-k-3 in #2029
- Clarify /sys mount as read-only in usermode emulator by @cn0xroot in #2036
- F02 duplicate handling by @m-1-k-3 in #2037
- cpe issue #2035 by @m-1-k-3 in #2039
- Metasploit database update by @github-actions[bot] in #2042
- L25 output/log improvements by @m-1-k-3 in #2045
- Refactor echo pipelines by @m-1-k-3 in #2046
- add unit tests by @m-1-k-3 in #2044
- entropy file check by @m-1-k-3 in #2047
- bash syntax checker workflow by @m-1-k-3 in #2048
- CISA known exploited database update by @github-actions[bot] in #2049
- Linux kernel version database update by @github-actions[bot] in #2050
- Snyk database update by @github-actions[bot] in #2051
- Revise latest news section in README by @m-1-k-3 in #2053
- bump v2.0.3 by @m-1-k-3 in #2054
New Contributors
- @ahmedboufares made their first contribution in #2001
- @cn0xroot made their first contribution in #2036
Full Changelog: v2.0.2-big-2k...v2.0.3-legacy-time
