Eclypsium announces beta

September 8, 2018September 8, 2018 ~ hucktech ~ Leave a comment

We are proud to announce the availability of Eclypsium Beta!https://t.co/0wtXRPfNQi pic.twitter.com/v73mu3OCJT

— Eclypsium (@eclypsium) September 5, 2018

https://blog.eclypsium.com/2018/09/05/eclypsium-beta-now-available/

Eclypsium research on SuperMicro BMC/Redfish vulnerability

September 8, 2018 ~ hucktech ~ Leave a comment

https://blog.eclypsium.com/2018/09/06/insecure-firmware-updates-in-server-management-systems/

We published a new research about vulnerability in Supermicro BMCs (from X8 to X11 gen) which can be compromised from software to take full control (implant BMC or System Firmware) or even brick a system: https://t.co/axZnhSRrm5 with @jessemichael & @HackingThings pic.twitter.com/SKJAvRLI96

— Alex Bazhaniuk (@ABazhaniuk) September 6, 2018

https://twitter.com/campuscodi/status/1037688091350368256

New blog by Eclypsium research team:

Insecure #Firmware Updates in Server Management Systems: Supermicro #BMC Case Studyhttps://t.co/uoLyH39qKx pic.twitter.com/7kRjlGMtbo

— Eclypsium (@eclypsium) September 6, 2018

BMC is a critical subsystem on each server responsible for remote server management including recovering the host if it’s corrupted.

What if the BMC firmware itself can be infected?

Read @eclypsium‘s new research: https://t.co/ZuyJ9ScmUZ

— Yuriy Bulygin (@c7zero) September 6, 2018

Ulf on Total Meltdown at SEC-T

September 4, 2018 ~ hucktech ~ Leave a comment

If you aren’t in Sweden, it appears there may be live streaming of the presentation! There are multiple other firmware presentations as well!

https://www.sec-t.org/talks/

https://www.sec-t.org/schedule/

I'll be talking about TOTAL MELTDOWN on September 14th at 9 CET in the morning! Live streams will be available! https://t.co/X8bpBUhld6

— Ulf Frisk (@UlfFrisk) September 3, 2018

The Schedule for 2018 SEC-T 0x0Beyond, including Community Night is Live!https://t.co/vPGMFAYLlH

— SEC-T (@SEC_T_org) September 3, 2018

Hypervisor From Scratch – Part 2: Entering VMX Operation

September 4, 2018September 4, 2018 ~ hucktech ~ Leave a comment

Re: https://firmwaresecurity.com/2018/08/22/hypervisor-from-scratch-part-1-basic-concepts-configure-testing-environment/

The second part of this tutorial series has been publsihed.

https://rayanfam.com/topics/hypervisor-from-scratch-part-2/

I just published the second part of the tutorial “Hypervisor From Scratch”.

This part mainly focuses on Windows Driver Kit (WDK) and entering to VMX Operation.https://t.co/6UyAHl5qJ5 #Hypervisor #Tutorial

— Sinaei (@Intel80x86) September 3, 2018

UEFI Firmware Parser updated

September 4, 2018 ~ hucktech ~ Leave a comment

Teddy Reed has updated his UEFI Firmware Parser project. The first update this year!

https://github.com/theopolis/uefi-firmware-parser

BIOSUtilities: Various BIOS Utilities for Modding/Research

September 1, 2018 ~ hucktech ~ Leave a comment

I created a repo with various BIOS utilities I've written for modding/research: Dell HDR Module Extractor, Apple EFI Sucatalog Link Grabber, Apple EFI File Renamer, Apple EFI IM4P Splitter and Award BIOS Module Extractor. More info on the readme. https://t.co/8CSPFyyoBG pic.twitter.com/IjOmDc7qmj

— Plato Mavropoulos (@platomaniac) August 31, 2018

https://github.com/platomav/BIOSUtilities

*Multiple* tools!

Howard Oakley on Booting the Mac

September 1, 2018September 1, 2018 ~ hucktech ~ Leave a comment

Howard Oakley has yet another new blog post on how Apple EFI works:

Booting the Mac: Will my Mac boot from this disk? A visual guide https://t.co/tIp9Q2wnLh pic.twitter.com/AcjBWy6Z6J

— Howard Oakley, Eclectic Light Co (@howardnoakley) September 1, 2018

Booting the Mac: Will my Mac boot from this disk? A visual guide

There have been multiple recent blog posts on Apple EFI from this author! Eg:

Booting the Mac: bless, and what makes a volume bootable

Booting the Mac: Visual Summary

What’s stored in Mac NVRAM?

Booting the Mac: the kernel and extensions

Booting the Mac: loading boot.efi and Secure Boot

ProxyLoaderPkg: UEFI loader protocol proxy

September 1, 2018 ~ hucktech ~ Leave a comment

This UEFI application calls an entry point provided by a proxy loader protocol installed on the image handle.

https://github.com/ipxe/ProxyLoaderPkg

Ph0wn: a Capture The Flag (CTF) dedicated to smart devices

August 30, 2018 ~ hucktech ~ Leave a comment

France in December!

For reminder, ph0wn is a smart devices CTF. https://t.co/rp9hZWEhVN. Located in Sophia Antipolis (France). https://t.co/VUfAn8Kf6D

— Axelle Ap. @cryptax @mastodon.social (@cryptax) August 27, 2018

https://ph0wn.org/

Kees Cook: Making C Less Dangerous [for the Linux kernel]

August 30, 2018 ~ hucktech ~ Leave a comment

Here are my slides from "Making C Less Dangerous [for the Linux kernel]" https://t.co/ePvz7B4Xzw

— Kees Cook (@kees_cook) August 27, 2018

Click to access danger.pdf

Facebook releases Bowler, Python refactoring tool

August 30, 2018 ~ hucktech ~ Leave a comment

We recently released Bowler – a tool for refactoring Python code safely and efficiently.

Docs: https://t.co/gH3CbFGy1k

GitHub: https://t.co/r5E3ybJB5D

PyCon Australia Presentation: https://t.co/TVRImMOjIw

— Meta Open Source (@MetaOpenSource) August 29, 2018

https://pybowler.io/

https://github.com/facebookincubator/bowler

ZeroNights CFP open

August 30, 2018 ~ hucktech ~ Leave a comment

#ZeroNights 2018 CFP is OPEN: Offensive and defensive research (15/30/45min). Submit your talk! https://t.co/nEiSzd8ptI pic.twitter.com/8jis3TMKXT

— ZeroNights (@ZeroNights) August 27, 2018

https://2018.zeronights.org/

Bought a ticket to #ZeroNights 2018, looking forward to meet @d_olex, @h0t_max, @evdokimovds, @solardiz and others there.

— Nikolaj Schlej (@NikolajSchlej) August 30, 2018

HITB-GSEC presentations online

August 30, 2018 ~ hucktech ~ Leave a comment

HITB-GSEC is happening, slides are uploaded in near real-time, day 1 presentations are up:

https://twitter.com/HITBGSEC/status/1034984965308440576

https://twitter.com/HITBGSEC/status/1035029344622653440

https://gsec.hitb.org/materials/sg2018/

Genode 18.08 released

August 30, 2018 ~ hucktech ~ Leave a comment

The latest release of the Genode OS has changes to microcode updates, as well as other firmware-related interface changes.

Genode 18.08 comes up with device drivers ported from Linux 4.16, microcode update mechanism for Intel CPUs, novel UI for the upcoming Sculpt VC edition making capability-based security graspable, SMP support in our custom kernel https://t.co/OjSn7hVkgf pic.twitter.com/pMLzU0jtHP

— Genode Labs (@GenodeLabs) August 30, 2018

https://genode.org/documentation/release-notes/18.08#New_Intel_Microcode_update_mechanism

https://genode.org/documentation/release-notes/18.08

DarkRISCV, an open source RISC-V core for FPGAs

August 30, 2018 ~ hucktech ~ Leave a comment

“The Rise of the Dark RISC-V?” by me for @HacksterIO. DarkRISCV, an open source RISC-V core for FPGAs. #RISCV #FPGA https://t.co/JVaheA7Mz9

— Alasdair Allan (@aallan) August 30, 2018

https://github.com/darklife/darkriscv

https://blog.hackster.io/the-rise-of-the-dark-risc-v-ddb49764f392

Booting the Mac: bless, and what makes a volume bootable

August 30, 2018 ~ hucktech ~ 1 Comment

Booting the Mac: bless, and what makes a volume bootable https://t.co/ACNYgbeeYk

— Howard Oakley, Eclectic Light Co (@howardnoakley) August 30, 2018

The last piece in the puzzle that is the booting of a Mac is understanding how any given volume is made bootable, and how it can be made the next startup volume.[…]

Booting the Mac: bless, and what makes a volume bootable

c-efi – UEFI Reference Specification Protocol Constants and Definitions

August 30, 2018 ~ hucktech ~ Leave a comment

The c-efi project provides the protocol constants and definitions of the UEFI Reference Specification as native C11 code. The scope of this project is limited to those protocol definitions. The protocols are not actually implemented. As such, this project serves as base for any UEFI application that needs to interact with UEFI, or implement (parts of) the UEFI specification. Additionally to providing a C library, this project also serves as documentation base for UEFI programming in C. It provides target-triples for UEFI, bootstrap helpers, and a bunch of documentation how to get started.

https://github.com/c-util/c-efi

Heardwear.io 2018 schedule posted

August 29, 2018 ~ hucktech ~ Leave a comment

Multiple sources of firmware security training!

Schedule for #hardwear_io 2018 is up! Check it out and choose your favorite Talks and Workshops to attend -> https://t.co/6oh2m0ZGIe #Hardware # Security #Cybersecurity

— hardwear.io (@hardwear_io) August 29, 2018

https://hardwear.io/schedule.php

AArch64-UEFI-LLVM-HelloWorld: uses GNU-EFI and CLang on ARM

August 29, 2018 ~ hucktech ~ Leave a comment

https://github.com/tnishinaga/aarch64-uefi-llvm_helloworld

UEFI HelloWorld application with clang + lld + gnu-efi(header only)

This is a nonstandard build environment for UEFI, using GNU-EFI with clang (not efi-clang) on ARM not Intel. Last time I looked, GNU-EFI was Intel-centric and GCC-centric, so this is impressive.

Tianocore UEFI hackathon

August 29, 2018 ~ hucktech ~ Leave a comment

We're happy to announce the first public TianoCore hack-a-thon as part of @osfc_io 2018, which will be focused on Signed UEFI Capsule Updates.

More Information: https://t.co/DQJmvZesco pic.twitter.com/qi6q47GffA

— tianocore (@tianocore) August 29, 2018

https://github.com/tianocore/tianocore.github.io/wiki/2018-EDK-II-Capsule-Hack-a-thon

“This is the first time Intel has staged a public TianoCore hack-a-thon event.”