EMBA is a firmware security analyzer that performs static and dynamic analysis on embedded device firmware to identify vulnerabilities and security weaknesses.
EMBA addresses the challenge of comprehensively assessing firmware security by automating the discovery of common weak spots across the entire analysis lifecycle. The tool extracts firmware, performs static analysis to identify insecure binaries and outdated software components, conducts dynamic analysis through emulation, generates software bill of materials (SBOM) data, and produces web-based vulnerability reports. It detects issues such as hard-coded passwords, potentially vulnerable scripts, and known vulnerable dependencies, presenting findings through both command-line output and an interactive web interface for further investigation.
The tool is designed for penetration testers, product security teams, developers, and product managers who need to assess embedded Linux firmware. It suits organizations conducting security assessments of IoT and embedded devices where comprehensive vulnerability discovery is required. EMBA provides raw analysis data and leaves interpretation to the user, positioning itself as an information-gathering tool rather than a decision-making system. The project is available as a Docker image for simplified deployment.
The project maintains active code quality checks through automated static analysis workflows. Development activity shows consistent attention to code standards and security practices in the tool itself. The tool is built primarily in Bash, making it accessible for users familiar with shell scripting and enabling straightforward customization and extension.
