Explore >> Select a destination
|
You are here 
|
blog.cr4.sh | ||
| | | | |
reverse.put.as
|
|
| | | | | My original goal when I started poking around Apple's EFI implementation was to find a way to reset a MacBook's firmware password. My preliminary research found references to a "magical" SCBO file that could be loaded onto a USB flash drive and booted to remove the password. The normal process workflow is to first contact Apple support. Since I don't have the original sales receipt of this specific Mac, I assume this option isn't possible, since anyone with a stolen Mac could get the password reset. Thin... | |
| | | | |
reverse.put.as
|
|
| | | | | Note: the original post was written in 2017 when there weren't many posts discussing direct attacks to firmware flash. It also took a while to get in touch with the ISP to give them a chance to fix some of the issues described (in particular the ACS access) and then it was left in draft mode until today. I just made a quick revision and fixed quite a few dead links. | |
| | | | |
reverse.put.as
|
|
| | | | | If you are a rootkits fan the latest Chaos Communication Congress (CCC) in 2014 brought us two excellent presentations, Thunderstrike by Trammell Hudson and Attacks on UEFI security, inspired by Darth Venami's misery and Speed Racer by Rafal Wojtczuk and Corey Kallenberg. The first one was related to the possibility to attack EFI from a Thunderbolt device, and the second had a very interesting vulnerability regarding the (U)EFI boot script table. | |
| | | | |
blog.atx.name
|
|
| | | atx - My personal blog | ||
