emba
An open-source firmware security analyzer for embedded Linux devices, performing extraction, static/dynamic analysis, SBOM generation, and vulnerability reporting.
What is emba?
EMBA is an open-source firmware security analyzer specifically designed for embedded Linux devices. It automates the security assessment process by extracting firmware, performing static and dynamic analysis, generating SBOMs, and producing detailed vulnerability reports. It helps identify weaknesses like insecure binaries, outdated software, and hard-coded credentials in firmware images.
Penetration testers, product security teams, embedded developers, and responsible product managers working with IoT or embedded device firmware who need to assess security risks.
EMBA provides a fully automated, end-to-end firmware analysis pipeline in a single command-line tool, combining extraction, static/dynamic analysis, SBOM generation, and web reporting—all open-source and self-hostable, unlike fragmented or commercial alternatives.
Overview
EMBA - The firmware security analyzer
Use Cases
Best For
- Performing security assessments on embedded Linux firmware
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
