Insomni-Hack-2022

Exploit for CVE-2021-0157 & CVE-2021-0158.

• Slides from our Insomi'Hack2022 talk Insomnihack_Presentation.pdf
• Detailed discription of the exploitation ROP chain ROP.md
• Python code for exploitation, based on Chipsec latitude_chipsec_secureboot.py.

Exploitation tools and techniques

• Micropython environment for EFI shell.
  • Example script for MicroPython peachpy under EFI shell peachpy_test.py.
  • Example script for MicroPython UEFI protocol usage capabilities.py
• Patched version of EFI shell without 5 seconds delay bootx64.efi

Executing brick on the EFI module

Secure Boot bypass demo

Talk video

Related projects

https://github.com/Sentinel-One/brick