Open Source Platform Security Assessment Framework
Joined April 2014
- Tweets 513
- Following 18
- Followers 2,378
- Likes 300
3 Photos and videos
CHIPSEC retweeted
22 Sep 2021
Want to make your own persistent rootkit?
Just sign your native windows binary with one of Hacking Team's revoked code signing certificates and you are all set!
eclypsium.com/2021/09/20/eve…
Certificate: bit.ly/3CBTfLE
4
72
211
CHIPSEC retweeted
30 Jul 2021
New release from @CHIPSEC. Check it out here: github.com/chipsec/chipsec/r…
9
18
CHIPSEC retweeted
26 Jun 2021
Yep, @CHIPSEC has TPM interface too: chipsec_util.py tpm help
No ROCA test yet?
#TPM15minsOfFame
2
5
CHIPSEC retweeted
26 Jun 2021
Added new module to dump and parse the Windows SMM Mitigations Table.
26 Jun 2021
New release from @CHIPSEC ! Check it out: github.com/chipsec/chipsec/r…
19
51
CHIPSEC retweeted
26 Jun 2021
New release from @CHIPSEC ! Check it out: github.com/chipsec/chipsec/r…
7
18
CHIPSEC retweeted
24 Feb 2021
@CHIPSEC now exposes the common.smm_code_chk module that verifies MSR_SMM_FEATURE_CONTROL is configured properly to mitigate SMM callout vulnerabilities.
19 Dec 2018
I find it super interesting that practical testing showed SMM_CODE_CHK_EN to be readable outside SMM, contrary to @intel docs! Way more useful if someone can check whether it's on, if you ask me. :-)
1
1
6
CHIPSEC retweeted
23 Feb 2021
Now, cross your fingers and pass this address as an additional argument to the CHIPSEC command. If all goes well, CHIPSEC should now be able to scan the boot script for any potential call-out vulnerabilities.
Disclaimer: I only tried this on my own computer. Use at your own risk!
2
5
Great point. Can also think of improving s3bootscript module to dump NVRAM directly (rather than read from runtime) and look up the AcpiGlobalVariable in NVRAM
23 Feb 2021
If you ever encountered a machine where @CHIPSEC fails to obtain and parse the S3 boot script, chances are the 'AcpiGlobalVariable' (which should contain the pointer to the boot script) simply doesn't have the 'Runtime' attribute, and therefore it can't be enumerated from the OS.
3
CHIPSEC retweeted
7 May 2021
New release from @CHIPSEC. Check it out here:
github.com/chipsec/chipsec/r…
2
7
CHIPSEC retweeted
5 Apr 2021
New release from @CHIPSEC. Check it out here: github.com/chipsec/chipsec/r…
3
3
CHIPSEC retweeted
28 Jan 2021
New release from @CHIPSEC. Check it out here: github.com/chipsec/chipsec/r…
4
8
CHIPSEC retweeted
25 Dec 2020
. @eclypsium and @CHIPSEC badges 🎉
I give you the cyberpunk #badgelife Christmas tree of my dreams 🎄☠️ Happy Holidays, everyone!!!
1
8
I give you the cyberpunk #badgelife Christmas tree of my dreams 🎄☠️ Happy Holidays, everyone!!!
17
64
307
CHIPSEC retweeted
3 Dec 2020
TrickBot Now Offers ‘TrickBoot' @VK_Intel @IntelAdvanced and @Eclypsium have discovered a new module in the TrickBot toolset aimed at detecting UEFI / BIOS firmware vulnerabilities, enabling #malware to persist, brick, and profit. #TrickBoot
bit.ly/33DO1Qd
1
30
35
CHIPSEC retweeted
20 Nov 2020
New release from @CHIPSEC. Check it out here: github.com/chipsec/chipsec/r…
8
11
CHIPSEC retweeted
29 Oct 2020
@CHIPSEC 1.5.6 has been released! Check it out: github.com/chipsec/chipsec/r…
5
7
CHIPSEC retweeted
19 Oct 2020
Use @CHIPSEC to play with UEFI variables. Lots of cool stuff there.
OS sees a lot fewer variables that there is stored in NVRAM
10
31
CHIPSEC retweeted
10 Aug 2020
Easy to unpack any SPI dump with @CHIPSEC :
chipsec_util decode spi.bin
5 Aug 2020
The first part of @liba2k and mine research on UEFI just went online. This time it's merely a refresher on how to dump SPI flash memory, but the next posts in the series will be more innovative and discuss techniques to reverse, debug and fuzz UEFI drivers
labs.sentinelone.com/moving-…
2
10
CHIPSEC retweeted
5 Aug 2020
The first part of @liba2k and mine research on UEFI just went online. This time it's merely a refresher on how to dump SPI flash memory, but the next posts in the series will be more innovative and discuss techniques to reverse, debug and fuzz UEFI drivers
labs.sentinelone.com/moving-…
3
33
77
CHIPSEC retweeted
29 Jul 2020
Eclypsium researchers discovered #BootHoleVulnerability in the GRUB2 bootloader that can be used to gain arbitrary code execution on majority of Linux and Windows based systems, even when they are not using GRUB and Secure Boot is enabled. bit.ly/3g9AYuk
9
136
193