ShadeBIOS

Shade BIOS README is present in each Pkg folder ModuleLoaderPkg: DXE module that loads & executes DXE modules from a USB stick ShadeBiosPkg: Main Shade BIOS package VarPrintPkg: Library that allows printing debug messages or statuses to the UEFI variables Author Kazuki Matsuo. © FFRI Security, In...

CVE-2021-21551

CVE-2021-21551 Exploit to SYSTEM for CVE-2021-21551 SpoolPrinter Privesc using SeImpersonatePrivileges was made thanks to @ForrestOrr https://github.com/forrest-orr/DoubleStar/tree/main/Payloads/Source/Stage3SpoolPotato I basically just tossed the exploit function in his code and altered it ever ...

GIGABYTE-H510M-K-V2-BIOS-SMM-Reverse-Engineering-CVE-2025-7026-7027-7028-7029-Research

GIGABYTE H510M K V2 BIOS SMM Reverse-Engineering & CVE-2025-7026/7027/7028/7029 Research Static reverse-engineering of a GIGABYTE H510M K V2 H510MKV2.F3 BIOS image: full UEFI firmware-volume extraction analysis of the PI-spec SMM Core memory allocator and a targeted hunt for the four SMM...

unicorn-bios

unicorn-bios Acerca de Emulador/depurador básico de BIOS para Unicorn Engine. Escrito para depurar la secuencia de arranque del Sistema Operativo XEOS. Uso: root@kitploit: Usage: unicorn-bios OPTIONS BOOTIMG Options: --help / -h: Displays help. --memory / -m: The amount of memory to allocate for...

unicorn-bios

unicorn-bios About Basic BIOS emulator/debugger for Unicorn Engine. Written to debug the XEOS Operating System boot sequence. Usage: root@kitploit: Usage: unicorn-bios OPTIONS BOOTIMG Options: --help / -h: Displays help. --memory / -m: The amount of memory to allocate for the virtual machine in...

SmmExploit

SmmExploit This is a report and an exploit of CVE-2021-26943, the kernel-to-SMM local privilege escalation vulnerability in ASUS UX360CA BIOS version 303. The issue was fixed in the version 304. Issue Description Summary UX360CA BIOS version 303 has 3 vulnerable modules that allow an attacker wit...

CVE-2025-4275

🐞 CVE-2025-4275: Hydroph0bia SecureFlash Certificate Shadowing This repository contains research material related to CVE-2025-4275, a Secure Boot bypass vulnerability affecting UEFI-compatible firmware based on Insyde H2O. It centralizes technical analysis of the vulnerability, the binaries...

CVE-2017-2751

Troverai i file .tex e .pdf per CVE-2017-2751, un'estrazione della password BIOS/EFI per laptop HP consumer...

BIOS-stuff-related-programming

BIOS-stuff-related-programming OBIETTIVO FINALE: ROOTKIT DEL BIOS E RSHELL UTILIZZANDO LO STACK DI RETE DEL BIOS...

CVE-2023-34853

CVE-2023-34853 Questo repository viene utilizzato per divulgare alcuni dettagli su CVE-2023-34853. La vulnerabilità appare nella scheda madre Supermicro X12DPG-QR 1.4b e sarà risolta nella versione 1.5. Nel file SmcSecureErase GUID: 2B7C2FD1-C1CF-AB1D-C3BB-D1D691FB131E all'interno del firmware...

LogoFail-PoC

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Exigimos o retorno seguro de todos os cidadãos que foram feitos reféns pelo grupo terrorista Hamas. Não descansaremos até que cada refém seja libertado e retorne em segurança para casa. Você pode ajudar a trazê-los de volta para...

CVE-2026-19398

“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash BSOD or BIOS corruption via a crafted software SMI SW SMI request with an oversized length value.Refer to the ' Security Update for...

EUVD-2026-66834

“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash BSOD or BIOS corruption via a crafted software SMI SW SMI request with an oversized length value.Refer to the ' Security Update for...

CVE-2026-19398

An out-of-bounds write in the SmiFlash SMM module of the ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash (BSOD) or BIOS corruption by sending a crafted software SMI (SW SMI) request with an oversized length value. The CVSS 4.0 score is 6.8 (Medium) , reflecting ...

CVE-2026-19398

“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash BSOD or BIOS corruption via a crafted software SMI SW SMI request with an oversized length value.Refer to the ' Security Update for...

Dell Client BIOS Arbitrary Write (DSA-2026-280)

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write. Note that Nessus has not tested for this issue but has instead relied only...

bread

🍞 BREAD BREAD BIOS Reverse Engineering & Advanced Debugger è un debugger x86 in modalità reale 'iniettabile' in grado di eseguire il debug di codice arbitrario in modalità reale su hardware reale da un altro PC tramite cavo seriale. Introduzione BREAD è nato da molti tentativi falliti di fare...

uefi-firmware-parser

UEFI Firmware Parser .. image:: https://travis-ci.org/theopolis/uefi-firmware-parser.svg?branch=master :target: https://travis-ci.org/theopolis/uefi-firmware-parser Il parser del firmware UEFI è un modulo semplice e un insieme di script per analizzare, estrarre e ricreare volumi di firmware UEFI...

chipsec

CHIPSEC: Framework di Valutazione della Sicurezza della Piattaforma CHIPSEC è un framework per analizzare la sicurezza delle piattaforme PC inclusi hardware, firmware di sistema BIOS/UEFI e componenti della piattaforma. Include una suite di test di sicurezza, strumenti per accedere a varie...

meltdown-spectre-bios-list

Elenco aggiornamenti BIOS/Firmware per Meltdown/Spectre Questa è una lista di tutti i prodotti e produttori che hanno applicato patch a BIOS/Firmware per affrontare le vulnerabilità Meltdown e Spectre Se hai informazioni migliori, invia pull request. Perché l'ho fatto? per avere un elenco...