mithril

Analyzes firmware and IoT software to surface embedded secrets, generate an SBOM, detect known CVEs and licenses, and assess boot security posture. Runs offline after an initial CVE database fetch and recovers components from package managers, ELF headers and kernel banners, with human-readable or JSON output.