EmbedOS v2020.2 releases: Embedded security testing virtual machine

EmbedOS

EmbedOS – Embedded security testing operating system preloaded with firmware security testing tools. The virtual machine can be downloaded and imported as an OVF file into VirtualBox or VMWare.

Tools (~/tools)

• Firmware Analysis Toolkit
• Firmware Analysis Comparison Toolkit (FACT) : Not fully installed. More disk space required.
• fwanalyzer
• ByteSweep
• Firmwalker
• Checksec.sh
• Binwalk
• QEMU
• Firmadyne
• Firmware Modification Kit
• OpenOCD
• Flashrom
• minicom
• ubi_reader
• uboot write
• elfutils
• pax-utils
• prelink
• lddtree

plus more…

Some of the above tools will install additional dependencies not listed here such as radare2, cwe-checker, and others.

Vulnerable Firmware (~/firmware)

• Mirai affected firmware (DVR based)
• Damn Vulnerable Router Project
• IoTGoat

Methodology (~/Desktop/Firmware-Security-Testing-Methodology.pdf)

• Firmware Security Testing Methodology – See the following repository for further details https://github.com/scriptingxss/owasp-fstm/

Changelog v2020.2

• Update: 10/2020 New theme, and updated tools.

Download

Credentials

Username: embedos Password: embeddedappsec

Copyright (C) 2020 scriptingxss