On the recordRead 4 Oct 202613 facts
EMBA
Plans and prices
EMBA
Free
Free and open source firmware analysis environment
Read 4 Oct 2026 · github.com
On the record
- Architecture support
- EMBA is designed for x86-64 and the guide says it does not run on ARM architecture.github.com · read 4 Oct 2026
- Firmware checks
- Its modules check for issues including outdated software, vulnerable scripts, hard-coded passwords, weak binary functions, and weak file permissions.github.com · read 4 Oct 2026
- Integration
- The project site announces an integration with Dependency-Track.securefirmware.de · read 4 Oct 2026
- Intended users
- EMBA is designed for penetration testers, product security teams, developers, and responsible product managers.github.com · read 4 Oct 2026
- Linux support
- The installation guide says current Kali Linux is recommended and Ubuntu 22.04 or 24.04 should also work.github.com · read 4 Oct 2026
- Project maturity
- The FAQ describes EMBA as a research and testing platform that may include raw code and says it is not recommended for productive or unprotected environments.github.com · read 4 Oct 2026
- Purpose
- EMBA analyzes embedded-device firmware through extraction, static and dynamic analysis, SBOM generation, and web-based vulnerability reporting.github.com · read 4 Oct 2026
- Run environment
- The project recommends running EMBA in a virtual machine with current Kali Linux and using its default Docker mode.github.com · read 4 Oct 2026
- SBOM
- The F15 module generates a JSON SBOM from identified software inventory using CycloneDX.github.com · read 4 Oct 2026
- Security caution
- The maintainers warn that developer mode can execute malicious code and harm the host system.github.com · read 4 Oct 2026
- Support
- The FAQ directs users to open a GitHub issue with the question label for help.github.com · read 4 Oct 2026
- System requirements
- The installation guide lists 16 GB or more of RAM, at least 8 processor cores recommended, and 30–100 GB of free disk space.github.com · read 4 Oct 2026
- Vulnerability aggregation
- The F20 module aggregates detected version numbers and searches for known vulnerabilities and possible exploits.github.com · read 4 Oct 2026
