r0 Crew (Channel)

Forwarded from r0 Crew

https://habrahabr.ru/company/dsec/blog/326556/ #intel #BootGuard

Доверенная загрузка Шрёдингера. Intel Boot Guard

Предлагаем вновь спуститься на низкий уровень и поговорить о безопасности прошивок x86-совместимых компьютерных платформ. В этот раз главным ингредиентом исследования является Intel Boot Guard (не...

98 views07:38

r0 Crew (Channel)

Forwarded from r0 Crew

Technical details of CVE-2017-5689 https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf #Intel #AMT

167 views07:38

r0 Crew (Channel)

https://medium.com/@matrosov/bypass-intel-boot-guard-cc05edfca3a9 #bios #intel #reverse
#dukeBarman

Medium

Who Watch BIOS Watchers?

Bypass specific AMI implementations of Intel Boot Guard

1.44K viewsBear0, 07:13

r0 Crew (Channel)

Forwarded from Записки админа

Ну что, Intel собрали в один список все (но это не точно) потенциальные проблемы безопасности в Intel ME, о которых сообщали различные исследователи. К списку подготовили обновление и утилиту для проверки, подвержена ли система уязвимостям.

Сам список доступен по ссылке:
https://goo.gl/BuLp6h

Информация об обновлениях:
https://goo.gl/GLijsg

Утилита для проверки наличия уязвимости (для Windows и Linux):
https://downloadcenter.intel.com/download/27150

Все ли бекдоры закрыли, завезли ли новые - история умалчивает.

#intel #security

Intel

Intel® Management Engine Critical Firmware Update (Intel-SA-00086)

Security Advisory (Intel-SA-00086), a critical firmware vulnerability in systems.

70 viewsdukeBarman, 19:29

r0 Crew (Channel)

https://twitter.com/matrosov/status/970108283888398337?s=21 #re #intel #dukeBarman

Twitter

Alex Matrosov

My @offensive_con slides released! Include all 010 templates for Intel ACM and Boot Guard (KM + IBBM). All these details been REconstructed from AMI FW. Discovered few Intel Boot Guard bypasses: 2 SW + 1 HW. Never underestimate RE in your Threat Model!! …

1.38K viewsBear0, 08:27

r0 Crew (Channel)

Introduction to the Intel Management Engine OS (series) https://pbx.sh/intelme-sw1/ #intel #reverse #me #dukeBarman

Peter Bosch’s website

Introduction to the Intel Management Engine OS (Part 1)

Examining the ME firmware version 11.0

2.23K views09:18

👍 5 ❤️ 3

r0 Crew (Channel)

R.I.P ROP: CET Internals in Windows 20H1

https://windows-internals.com/cet-on-windows/

#expdev #rop #windows #cet #intel #darw1n

2.51K views09:59

👍 5 ❤️ 0

r0 Crew (Channel)

https://twitter.com/h0t_max/status/1316028532972281856?s=20

#reverse #intel #microcode

Twitter

Maxim Goryachy

Today we're[+@_markel___ and @_Dmit]disclosing the technique allowing to modify #Intel #Microcode on the fly! For the first time you have the ability to intercept control flow at such a low level. We've developed the microcode patch that changes the processor…

4.71K views20:40

👍 10 ❤️ 3

r0 Crew (Channel)

https://twitter.com/h0t_max/status/1316028532972281856?s=20 #reverse #intel #microcode

https://twitter.com/h0t_max/status/1375871849079406597?s=09

#reverse #intel #microcode

Twitter

Maxim Goryachy

[1/4]People ask us (+@_Dmit and @_markel___) for details about undocumented crbus instructions. We recorded the demo showing that for access to crbus requires only execute arbitrary code with root/admin privilege. (details below)

4.07K views20:49

r0 Crew (Channel)

At the beginning of 2020, we discovered the Red Unlock technique that allows extracting Intel Atom Microcode. We were able to research the internal structure of the microcode and then x86 instruction implementation. Also, we recovered a format of microcode updates, algorithm and the encryption key used to protect the microcode

https://github.com/chip-red-pill/MicrocodeDecryptor

#tools #reverse #intel #interlnals #microcode #Aligner

🔥22❤5👍4😁1

17.9K viewsedited 23:12

About

Blog

Apps

Platform