Bootstrapping Systems With Open Source Firmware
Explore open-source firmware for enhanced physical security and data protection. Learn about Heads, a custom firmware and OS configuration that combines hardware hardening with secure boot processes.
Bypassing Hardware-Based Trusted Boot Through x86 Downgrade
Exploiting microcode loader vulnerability to downgrade CPU microcode, enabling attacks on Intel security technologies like Boot Guard and TXT by loading older, vulnerable versions of Authenticated Code Modules.
TOCTOU Attacks Against Secure Boot and BootGuard
Explore TOCTOU attacks on Intel's BootGuard, learn about vulnerabilities in secure boot processes, and discover open-source tools for testing system security.
Eight Crazy Ways to Foil Hardware Attacks - For All Budgets
Explore cost-effective strategies to protect embedded devices from hardware attacks. Learn about common vulnerabilities, defense mechanisms, and design decisions for optimal security in IoT and industrial control systems.
HPE iLO5 Firmware Security - Go Home Cryptoprocessor, You're Drunk!
Explore vulnerabilities in HPE Gen10 servers' iLO5 management technology, focusing on the "silicon root of trust" and its implications for server security.
Remotely Attacking System Firmware
Explore remote attack vectors targeting system firmware, including networking and updates. Learn about exploiting UEFI vulnerabilities for installing persistent implants at scale.
ThunderStrike 2 - Sith Strike
Explore firmware vulnerabilities in Mac systems, demonstrating software-only attacks and showcasing the potential of Mac firmware malware. Learn about shared vulnerabilities and case studies.
Firmware.RE - Firmware Unpacking, Analysis and Vulnerability-Discovery as a Service
Large-scale analysis of firmware images reveals vulnerabilities across embedded systems, highlighting security challenges and the need for improved tools and techniques in firmware analysis.
Computrace Backdoor Revisited
Exposición de vulnerabilidades en software antirrobo Computrace, demostrando fallos de seguridad y posibles ataques. Incluye análisis del protocolo, comportamiento sospechoso y métodos de detección/desactivación.
Insecurity of Embedded Devices' Firmware - Fast and Furious at Large Scale
Explore embedded device firmware vulnerabilities and large-scale security challenges in this DefCamp 2015 presentation, offering insights for security specialists and developers.
Analysis of the Attack Surface of Windows 10 Virtualization-Based Security
Explore Windows 10's virtualization-based security, its implementation details, and potential vulnerabilities. Includes demonstrations of exploits against VBS and firmware, with a focus on platform complexity issues.
FirmWar - An Imminent Threat to the Foundation of Computing
Explore the overlooked risks of enterprise device firmware in IT supply chains, uncovering vulnerabilities and discussing their impact on computing security and industry practices.
How Hardware Boundaries Define Platform Security
Exploring how hardware component boundaries impact platform security, focusing on outsourced components, supply chain risks, and threat modeling gaps in modern hardware architectures.
Random Walk Through A Few Million Things
Explore IoT security challenges in enterprises, examining millions of devices to reveal vulnerabilities, default credentials, and outdated firmware. Gain insights into the current state of IoT security.
Checking BIOS Protections Offline With Just the Firmware Updates
Explore system firmware vulnerabilities and their impact on security. Learn about offline analysis of UEFI firmware updates to identify protection gaps and potential risks in modern systems.
How the BIOS Assures Its Handling of Inputs
Explore BIOS input handling, firmware interfaces, and analysis techniques for formal validation and vulnerability detection, including static, dynamic, and symbolic execution approaches.
Extreme Privilege Escalation on Windows 8 - UEFI Systems
Explore extreme privilege escalation techniques on Windows 8/UEFI systems, uncovering vulnerabilities in firmware interfaces and demonstrating exploitation methods for elevated system access.
Battery Firmware Hacking
Explore battery firmware vulnerabilities, Smart Battery System, and potential attacks. Learn about data flash signatures, boot modes, and firmware manipulation techniques for enhanced security awareness.
Firmware Security - Why It Matters and How You Can Have It
Explore firmware security's importance, vulnerabilities, and mitigation strategies. Learn about attack surfaces, System Management Mode, and ways to enhance protection in various computing environments.
Securing Firmware - Secure and Trusted Boot in OpenBMC
Explore secure and trusted boot in OpenBMC, covering hardware root of trust, TPMs, keys, and signing while preserving user freedom to replace firmware securely.
Recovery from Firmware Vulnerabilities in TPM - Securing Hardware Roots of Trust
Discover how new TPM specification APIs enable firmware vulnerability recovery and self-attestation capabilities, enhancing hardware security and trust restoration mechanisms.