A good writeup and worth it for the links alone. Does a good job of mentioning e... | Hacker News

Hacker Timesnew | past | comments | ask | show | jobs | submit

		concernedctzn on Feb 6, 2015 \| parent \| context \| favorite \| on: Exploiting UEFI boot script table vulnerability A good writeup and worth it for the links alone. Does a good job of mentioning existing tools and previous talks on the topic. The chipsec tool looks pretty useful for evaluating your setup: https://github.com/chipsec/chipsec Also the UEFI parser https://github.com/theopolis/uefi-firmware-parser looks to be really useful if you want to dig deeper.

tryp on Feb 6, 2015 [–]

By mundane coincidence, I discovered uefi-firmware-parser yesterday. Along with a radare2 session, it made it much easier to find a null-pointer dereference in an Intel FSP binary blob.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact