Exploit for CVE-2021-0157 & CVE-2021-0158.
- Slides from our Insomi'Hack2022 talk
Insomnihack_Presentation.pdf
- Detailed discription of the exploitation ROP chain ROP.md
- Python code for exploitation, based on Chipsec
latitude_chipsec_secureboot.py
.
Exploitation tools and techniques
- Micropython environment for EFI shell.
- Example script for MicroPython peachpy under EFI shell
peachpy_test.py
.
- Example script for MicroPython UEFI protocol usage
capabilities.py
- Patched version of EFI shell without 5 seconds delay
bootx64.efi
Executing brick on the EFI module
![Watch the video](https://camo.githubusercontent.com/46a473c6a85464c7a905d204c787766b5304e455a1215a950477ab93bb6be970/68747470733a2f2f696d672e796f75747562652e636f6d2f76692f554b6f45594773755158452f687164656661756c742e6a7067)
![Watch the video](https://camo.githubusercontent.com/7dc406bc0d8fa467f63369fbe0221e29fc28333ec02299c4424a92d4adc20829/68747470733a2f2f696d672e796f75747562652e636f6d2f76692f68484c4b766a545a6163452f687164656661756c742e6a7067)
![Watch the video](https://camo.githubusercontent.com/6d28c7f2b5007edc8052f40df83a616a500573d08bb30a85f91b770089e4e145/68747470733a2f2f696d672e796f75747562652e636f6d2f76692f67655f546e4c66547638492f687164656661756c742e6a7067)
https://github.com/Sentinel-One/brick