BlackLotus

BlackLotus BlackLotus es un innovador bootkit UEFI diseñado específicamente para Windows. Incorpora una omisión integrada de Secure Boot y protección Ring0/Kernel para prevenir cualquier intento de eliminación. Este software tiene el propósito de funcionar como un cargador HTTP. Gracias a su...

CVE-2026-25250

🕷️ CVE-2026-25250: Improper Trusted Bootloader Chain Validation A Microsoft-signed third-party bootloader that loads a secondary EFI binary with no signature or integrity verification, collapsing the Secure Boot chain of trust from within. 📑 Table of Contents Research Context Official References...

CVE-2025-47827

CVE-2025-47827 Prueba de concepto e informe de vulnerabilidad para CVE-2025-47827. Contenido Descripción Divulgación Impacto Detección Mitigación Binarios Prueba de concepto Recursos Descripción En IGEL OS anterior a v11, Secure Boot puede ser eludido porque el módulo igel-flash-driver verifica...

Super-UEFIinSecureBoot-Disk

Super UEFIinSecureBoot Disk Super UEFIinSecureBoot Disk es una prueba de concepto no mantenida ni mejorada activamente imagen de arranque con el cargador de arranque GRUB2 diseñada para ser utilizada como base para unidades flash USB de recuperación. Característica clave: el disco es completament...

secureboot_objects

Secure Boot Objects This repository is used to hold the secure boot objects recommended by Microsoft. For documentation visit our Wiki! Versioning This repository follows semantic versioning .., which is a versioning scheme that conveys meaning about the underlying changes. Version Components Maj...

BitUnlocker

BitUnlocker Downgrade Attack A proof of concept for accessing BitLocker-encrypted disks in under 5 minutes on fully patched Windows 11 machines through a boot manager downgrade attack, leveraging the SDI vulnerability originally documented as CVE-2025-48804. The July 2025 patch fixes this in...

Astra Linux – Vulnerability in grub2

A flaw was discovered in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module that serves as a dependency without checking whether any other dependent modules are still loaded, leading to a “use-after-free” scenario. This could allow arbitrary code to be...

incus-os

Introducción IncusOS es una imagen de SO inmutable dedicada a ejecutar Incus. Está basado en Debian 13 y construido usando mkosi. IncusOS puede instalarse en sistemas modernos amd64 x8664 y arm64. Esto tiene como objetivo proporcionar una forma muy rápida, segura y fiable de ejecutar un servidor...

CVE-2020-14372

CVE-2020-14372: Bypassing not so Secure Boot with one "simple trick" Vulnerability details One day I typed "help" into GRUB2's console and saw some really "fun" commands: readbyte ADDR: Read 8-bit value from ADDR writebyte ADDR VAL: Write 8-bit value VAL to ADDR I immediately thought I found the...

CVE-2025-3052

🐞 CVE-2025-3052: IhisiParamBuffer Memory Corruption This repository centralizes research material related to CVE-2025-3052, a memory corruption vulnerability in a UEFI module signed with Microsoft's third-party certificate that allows an attacker to corrupt security-critical firmware structures,...

CVE-2025-4275

🐞 CVE-2025-4275: Hydroph0bia SecureFlash Certificate Shadowing This repository contains research material related to CVE-2025-4275, a Secure Boot bypass vulnerability affecting UEFI-compatible firmware based on Insyde H2O. It centralizes technical analysis of the vulnerability, the binaries...

CVE-2022-21894

baton drop CVE-2022-21894: Secure Boot Security Feature Bypass Vulnerability Windows Boot Applications allow the truncatememory setting to remove blocks of memory containing "persistent" ranges of serialised data from the memory map, leading to Secure Boot bypass. The truncatememory BCD element...

shim-review

Este repositorio es para la revisión de solicitudes de firma de shim. Para crear una solicitud de revisión: clona este repositorio preferiblemente haz un fork edita la plantilla a continuación agrega el shim.efi que se va a firmar agrega los registros de compilación agrega cualquier...

initroot

initroot: Motorola Bootloader Kernel Cmdline Injection Secure Boot & Device Locking Bypass CVE-2016-10277 By Roee Hay / Aleph Research, HCL Technologies First stage exploit: Tethered jailbreak This exploit gains an ephemeral unrestricted root access on the device. For example, on cedric some...

dubiousdisk

dubious disk - ¡el porygon-z que es súper efectivo contra Secure Boot! CVE-2022-30203, CVE-2023-21560, CVE-2023-28269, CVE-2023-28249 y más... El código excesivamente permisivo en el entorno de arranque de Windows permite sobrescribir memoria arbitraria y, por lo tanto, ejecutar código arbitrario...

shim

shim, un cargador de arranque UEFI de primera etapa shim es una aplicación EFI trivial que, al ejecutarse, intenta abrir y ejecutar otra aplicación. Inicialmente intentará hacerlo mediante las llamadas estándar de EFI LoadImage y StartImage. Si estas fallan porque Secure Boot está habilitado y el...

virt-firmware

Tools for ovmf / armvirt firmware volumes This is a small collection of tools for edk2 firmware images. They support decoding and printing the content of firmware volumes. Variable stores OVMFVARS.fd can be modified, for example to enroll secure boot certificates. virt-fw-dump Decodes and prints...

BootHoleFix

Boot Hole Fix This script will remediate the BootHole bug identified in CVE-2020-25632 and/or CVE-2021-20233. On July 29, 2020, Microsoft published security advisory 200011 that describes a new vulnerability that's related to Secure Boot. Devices that trust the Microsoft third-party Unified...

CVE-2022-34301

🕷️ CVE-2022-34301 - Eurosoft Boot Loader Vulnerability Eurosoft Pc-Check UEFI Diagnostics Shell - Bring Your Own Vulnerable UEFI Application BYOVUA - Secure Boot bypass via signed UEFI Shell and gSecurity2 corruption. 📑 Table of Contents Overview Background Bring Your Own Vulnerable UEFI...

CVE-2022-34302

🕷️ CVE-2022-34302 - New Horizon Datasys Boot Loader Vulnerability New Horizon Datasys Reboot Restore Boot Loader - Bring Your Own Vulnerable UEFI Application BYOVUA - Secure Boot bypass via signed bootloader with built-in custom PE/COFF loader that loads unsigned UEFI applications. 📑 Table of...