zerolugithub / embedos

EmbedOS - Embedded security testing virtual machine

EmbedOS

EmbedOS - Embedded security testing operating system preloaded with firmware security testing tools. The virtual machine can be downloaded and imported as an OVF file into VirtualBox or VMWare.

Download Link

Google Drive

Credentials

Username: embedos Password: embeddedappsec

Tools (~/tools)

• FATv1
• FATv2
• Firmware Analysis Comparison Toolkit (FACT) : Not fully installed. More disk space required.
• fwanalyzer
• ByteSweep
• Firmwalker
• Checksec.sh
• Binwalk
• QEMU
• Firmadyne
• Firmware Modification Kit
• OpenOCD
• Flashrom
• minicom
• ubi_reader
• uboot write
• elfutils
• pax-utils
• prelink
• lddtree

plus more...

Some of the above tools will install additional dependencies not listed here such as radare2, cwe-checker, and others.

Vulnerable Firmware (~/firmware)

• Mirai affected firmware (DVR based)
• Damn Vulnerable Router Project
• IoTGoat

Methodology (~/Desktop/Firmware-Security-Testing-Methodology.pdf)

• Firmware Security Testing Methodology - See the following repository for further details https://github.com/scriptingxss/owasp-fstm/

Feedback

If you would like to contribute or provide feedback to improve this virtual machine, submit a pull request or get in touch over Twitter @scriptingxss.