“This vulnerability has been received by the NVD and has not been analyzed.”
https://nvd.nist.gov/vuln/detail/CVE-2018-1000205
Month: June 2018
Two more BadUSB-related articles
RISC-V implementations filled with blobs
Intel, ARM, and especially POWER will be loving this moment:
All this said, note that the HiFive is no more open, today, than your average ARM SOC; and it is much less open than, e.g., Power. I realize there was a lot of hope in the early days that RISC-V implied “openness” but as we can see that is not so. There’s blobs in HiFive.
https://www.phoronix.com/scan.php?page=news_item&px=RISC-V-Not-All-Open-Yet
c2rust.com: C to Rust translator
Re: https://firmwaresecurity.com/2017/04/08/corrode-rust-to-c-translator/
There’s another C to Rust translator:
WiFi HID Injector – An USB Rubberducky / BadUSB On Steroids
Network kernel debugging of virtual Windows via KDNET
Setting Up Network Debugging of a Virtual Machine – KDNET
This topic describes how to configure a kernel debugging connection to a Hyper-V virtual machine (VM).[…]
International Journal of Proof-of-Concept or Get The F**k Out (PoC||GTFO) issue 0x18 released
shimdemo: UEFI PXE + shim transparent loader demo
This is a simple proof of concept illustrating the use of shim (with the transparent loader enhancements) to load iPXE, which in turn boots an operating system.
Two articles on how to update your platform firmware
Mac and Windows uses:
https://lifehacker.com/how-to-update-your-bios-to-protect-against-vulnerabilit-1826423812
Ubuntu Linux users:
NVIDIA Graphics Firmware Update Tool for DisplayPort Displays
This appears to be a new public tool, 1.0 release out this month.
I hope NVIDIA also makes a release for Linux, not just Windows.
To enable the latest DisplayPort 1.3 / 1.4 features, your graphics card may require a firmware update. Without the update, systems that are connected to a DisplayPort 1.3 / 1.4 monitor could experience blank screens on boot until the OS loads, or could experience a hang on boot. The NVIDIA Firmware Updater will detect whether the firmware update is needed, and if needed, will give the user the option to update it. […]
Two Peerlyst firmware security resources
Mr. Crowbar – framework to reverse binary file formats
Kindof reminds me of Scapy for binary file formats!
Mr. Crowbar is a Django-esque model framework that makes it super easy to work with proprietary binary formats while reverse engineering. File formats are described with Python classes that allow ORM-like free modification of structures and properties, which in turn can be validated and converted back to the binary equivalent at any time. The eventual goal is to provide a library for storing file format information that retains the readability of a text file, while providing instant read/write support for almost no cost.[…]
arm_now: QEMU-based tool to setup VMs for security research
RE-Canary: Detecting Reverse Engineering with Canary Tokens
hwloc – tool to discover hardware resources
The OpenMPI project has a tool called hwloc that helps identify hardware, useful beyond parallel/high-performance computing. It even generates ASCII artwork!
http://nitschinger.at/Discovering-Hardware-Topology-in-Rust/
The Hardware Locality (hwloc) software project aims at easing the process of discovering hardware resources in parallel architectures. It offers command-line tools and a C API for consulting these resources, their locality, attributes, and interconnection. hwloc primarily aims at helping high-performance computing (HPC) applications, but is also applicable to any project seeking to exploit code and/or data locality on modern computing platforms.
https://www.open-mpi.org/projects/hwloc/
https://github.com/open-mpi/hwloc
https://www.open-mpi.org/projects/hwloc/doc/v2.0.1/
Quarks In The Shell – Episode IV
[…]One may need dedicated tools, like a debugger for a firmware or a baseband, or a disassembler to be able to read the instructions properly.[…]
https://blog.quarkslab.com/quarks-in-the-shell-episode-iv.html
ApfsSupportPkg – Open source apfs.efi loader based on reverse-engineered Apple’s ApsfJumpStart driver
Apple has a new file system, APFS. This causes Hackintosh people lots of grief. There are lots of Apple APFS binaries online, and now there’s this:
https://github.com/acidanthera/ApfsSupportPkg
Implementation of AppleLoadImage protocol discoverd in ApfsJumpStart Apple driver. This protocol installs in CoreDxe Apple’s firmware. Gives ability to use native ApfsJumpStart driver from Apple firmware
Credits:
cugu for awesome research according APFS structure
CupertinoNet and Download-Fritz for Apple EFI reverse-engineering
vit9696 for codereview and support in the development
savvas
cPlusPkg: UEFI BIOS C++ package
https://github.com/open-workspace/uefi-bios
uefi-bios C++ package
CERT speculative execution wiki
Created by Will Dormann, last modified by Art Manion on 2018-06-19
Vincent to keynote Open Source Firmware Conference
Vincent has a new blog post out, with lots of photos of legacy (pre-UEFI) hardware, and various news items, such as:
[…]Following on the spirit of openness, I was honored to be invited to keynote the upcoming open source firmware summit https://osfc.io/. The landing page for my talk will be https://osfc.io/talks/keynote. This should follow the arc on reducing friction and providing transparency for host firmware development.[…]
http://vzimmer.blogspot.com/2018/06/system-firmware-past-present-future.html
Firmware Security 
You must be logged in to post a comment.