Insomni-Hack-2022

Exploit for CVE-2021-0157 & CVE-2021-0158.

  • Slides from our Insomi’Hack2022 talk Insomnihack_Presentation.pdf
  • Detailed discription of the exploitation ROP chain ROP.md
  • Python code for exploitation, based on Chipsec latitude_chipsec_secureboot.py.

Exploitation tools and techniques

  • Micropython environment for EFI shell.
    • Example script for MicroPython peachpy under EFI shell peachpy_test.py.
    • Example script for MicroPython UEFI protocol usage capabilities.py
  • Patched version of EFI shell without 5 seconds delay bootx64.efi

Executing brick on the EFI module

Watch the video

Secure Boot bypass demo

Watch the video

Related projects

https://github.com/Sentinel-One/brick

GitHub

View Github