emba - EMBA - The firmware security analyzer

项目说明

<!--
EMBA - EMBEDDED LINUX ANALYZER

Copyright 2020-2023 Siemens AG
Copyright 2020-2025 Siemens Energy AG

EMBA comes with ABSOLUTELY NO WARRANTY. This is free software, and you are
welcome to redistribute it under the terms of the GNU General Public License.
See LICENSE file for usage of this software.

EMBA is licensed under GPLv3

Author(s): Michael Messner, Pascal Eckmann, Benedikt Kühne
-->

<p align="center">
<img src="./helpers/emba.svg" width="200"/>
</p>
<p align="center">
<a href=" src="
<a href=" src="
<a href=" src="
<a href=" src=" /></a>
<a href=" src="
<a href=" src="
<a href=" src="
<a href=" src="
<a href=" src="
<a href=" src="
<a href=" src="
</p>

EMBA

The security analyzer for firmware of embedded devices

*EMBA* is designed as the central firmware analysis and SBOM tool for penetration testers, product security teams, de and responsible product managers. It supports the complete security analysis process starting with *firmware extraction*, doing *static analysis* and *dynamic analysis* , building the SBOM and finally generating a web based report. *EMBA* automatically discovers possible weak spots and in firmware. Examples are insecure binaries, old and outdated software components, potentially scripts, or hard-coded passwords. *EMBA* is a command line tool with the possibility to generate an easy-to-use web report for further analysis.

*EMBA* assists the penetration testers, product security teams and de in the identification of weak spots and in the firmware image. *EMBA* provides as much information as possible about the firmware, that the tester can decide on focus areas and is responsible for and interpreting the results.

![Watch EMBA]( "Watch EMBA")

----------------------

Latest news

* *EMBA v2.0.4 - summer edition*
* *EMBA demo report a*
* *Happy 6th birthday EMBA*
* *Check the ko-fi support possibility for EMBA*
* *Black Hat Arsenal - EMBArk demo - USA 2026*
* *Black Hat Arsenal - EMBA lab - USA 2026*
* *Recording of TROOPERS25 talk "SBOMs the right way" a*
* *The EMBA book is a*
* *The new EMBA merch store is online - check your merch now*
* *EMBArk v0.3 - We are TROOPERS*
* *EMBA reached the next milestone. 3000 GitHub stars accomplished.*
* FLOSS Weekly Episode 802: EMBA – Layers Upon Layers Of Bash
* *EMBA article on Medium a*
* *BsidesL a*
* *Recording of Black Hat EU 2022 Arsenal session a*
* *EMBA is now part of the OWASP Firmware Security Testing Methodology*

----------------------

Links to the wiki for more detailed information

Home

Interactive EMBA demo report

Feature o

Installation

Usage

FAQ

Installation

Before running *EMBA* make sure, that you have installed all dependencies with the installation script and met the prerequisites

Quick start with default scan profile:

Quick start with default SBOM profile:

For further details on EMBA's SBOM capabilities check the wiki

Quick start with system-emulation scan profile:

For further details on EMBA's system-emulation engine check the wiki.

---
*EMBA* supports multiple testing and reporting options. For more details check the wiki.

Get in

The IoT is growing, the de is ongoing, and there are many new features that we want to add.
We welcome pull requests and issues on GitHub. Also check the CONTRIBUTING and CONTRIBUTORS documentation for further details on how to get part of the _EMBA_ community.

Team

The core EMBA Team

Contributors

***

Sponsor EMBA and EMBArk:

The _EMBA_ en is free and open source!

We put a lot of time and energy into these tools and related research to make this happen. It's now possible for you to contribute as a sponsor!

If you like _EMBA_ you have the chance to support future de by becoming a Sponsor

Thank You :heart: Become a Sponsor
You can also buy us some beer here :heart: Buy me a coffee

To show your love for EMBA with nice shirts or other merch you can check our Spreadshop

***
<p align="center"><b>EMBA - firmware security scanning at its best</b></p>

***

项目信息

开发语言：Shell

Star 数：3688

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕EMBA - The firmware security analyzer展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。