# attify/firmware-analysis-toolkit

Toolkit to emulate firmware and analyse it for security vulnerabilities

Repository: https://github.com/attify/firmware-analysis-toolkit
Canonical: https://ross.abutalabs.com/products/firmware-analysis-toolkit
Language: Python
License: MIT
License Family: permissive
Topics: binary-analysis, firmware, firmware-analysis, firmware-security, firmware-tools, iot, iot-security, iot-security-tools, reverse-engineering, security, vulnerability-scanner
Last push: 2024-09-16T17:58:06+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 3600, "days_push": 716, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1582, forks 283 (observed 2026-08-28T04:05:07.141451+00:00)

## What it is
Firmware Analysis Toolkit (FAT) is a Python-based automation wrapper around Firmadyne that emulates IoT and embedded device firmware images. It lets security researchers boot firmware in an emulated environment to analyze it for vulnerabilities without needing physical hardware.

## Use cases
- emulate router firmware images for security research
- analyze IoT device firmware for vulnerabilities without hardware
- boot embedded firmware in QEMU to access its web interface
- automate firmadyne-based firmware emulation
- reverse engineer firmware binaries from IoT devices
- set up an IoT firmware analysis lab environment

## When to choose
- you need to emulate and boot IoT/embedded firmware images quickly
- you want an automated, scriptable wrapper around Firmadyne
- you are doing offensive IoT security research or training
- you prefer a simpler setup that skips Firmadyne's PostgreSQL dependency

## When to avoid
- you need fine-grained control over the emulation pipeline (use Firmadyne directly)
- you need analysis of non-Linux-based firmware that Firmadyne cannot emulate
- you want a maintained tool without Python 2 dependencies
- you need production-grade or scalable firmware analysis infrastructure

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, vulnerability-scanning, reverse-engineering, simulation, developer-tools
- domain: iot, security, reverse-engineering, embedded-systems, penetration-testing
- platform: python, cli
- tags: firmware-analysis, firmware-emulation, firmadyne, iot-security, embedded-devices, binary-analysis, linux

## Member repositories
- attify/firmware-analysis-toolkit (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:07.141451+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:56:09.170200+00:00, confidence not recorded.
  - readme: https://github.com/attify/firmware-analysis-toolkit (fetched 2026-08-28T04:05:07.141451+00:00, sha ceef97181729)
- Data as of 2026-08-30T08:39:29.467469+00:00.