Cr4sh / UEFI_boot_script_expl
CHIPSEC module that exploits UEFI boot script table vulnerability
☆133Updated 9 years ago
Alternatives and similar repositories for UEFI_boot_script_expl:
Users that are interested in UEFI_boot_script_expl are comparing it to the libraries listed below
- ☆117Updated 4 years ago
- PEI stage backdoor for UEFI compatible firmware☆220Updated 3 years ago
- PC firmware exploitation tool and library☆251Updated 2 years ago
- Intel Management Engine firmware loader plugin for IDA☆90Updated 7 years ago
- Some scripts for IDA Pro to assist with reverse engineering EFI binaries☆297Updated 5 years ago
- My UEFI security talk on ZeroNights 2015☆57Updated 9 years ago
- Some scripts for IDA Pro to assist with reverse engineering EFI binaries☆74Updated 9 years ago
- Arbitrary SMM code execution exploit for industry-wide 0day vulnerability in AMI Aptio based firmwares☆66Updated 8 years ago
- Betraying the BIOS: Where the Guardians of the BIOS are Failing☆59Updated 7 years ago
- A TE executable format loader for IDA☆28Updated 9 years ago
- Crawl/download UEFI/BIOS updates from ISV/OEM distributors.☆73Updated 10 years ago
- Kernel Address Space Layout Randomization (KASLR) Recovery Software☆98Updated 8 years ago
- System Management RAM analysis tool☆76Updated 8 months ago
- An EFI image parser and dissector☆50Updated 12 years ago
- an open source toolkit for PCI bus exploration☆70Updated 8 years ago
- Firmware analysis gone wild.☆42Updated 10 years ago
- Tools for working with Intel ME☆212Updated 8 years ago
- capstone based disassembler for extracting to binnavi☆227Updated 8 years ago
- An IDA plugin to improve (U)EFI reversing☆151Updated 7 years ago
- Distributing the REconstruction of High-Level IR for Large Scale Malware Analysis☆66Updated 9 years ago
- Tools to help with Reverse Engineering UEFI-based firmware☆379Updated 9 years ago
- Conference slides and White-papers☆356Updated 5 years ago
- Xenpwn is a toolkit for memory access tracing using hardware-assisted virtualization☆144Updated 8 years ago
- PoC for breaking hypervisor ASLR using branch target buffer collisions☆166Updated 8 years ago
- ☆73Updated 7 years ago
- Huffman decompression for version 11.x Intel ME modules☆30Updated 7 years ago
- ☆109Updated 7 years ago
- A boot record parser that identifies known good signatures for MBR, VBR and IPL.☆98Updated 2 months ago
- Implementation of the SMM rootkit "The Watcher"☆125Updated 3 years ago
- Abstracts and expedites the process of backdooring stock firmware images for consumer/SOHO routers☆122Updated 11 years ago