Kali Linux Tutorials
efiXplorer : IDA Plugin For UEFI Firmware Analysis And Reverse Engineering Automation

efiXplorer – IDA plugin for UEFI firmware analysis and reverse engineering automation

Supported versions of Hex-Rays products: everytime we focus on last versions of IDA and Decompiler because we try to use most recent features from new SDK releases. That means we tested only on recent versions of Hex-Rays products and do not guarantee stable work on previous generations.

Why not IDApython: all code developed in C++ because it’s a more stable and performant way to support a complex plugin and get full power of most recent SDK’s features.

Supported Platforms: Windows, Linux and OSX.

efiXplorer core features

Features Summary Table
Feature name32-bit64-bitBoot Services++Runtime Services++SMM services–+PEI Services+–Protocols++GUIDS++Applying types for local variables++Vulnerabilities scanner++Report in JSON format++Loader–+Dependency graph–+
Identify available Boot Services automatically

Annotate Boot Services calls in assembly code automatically:
https://1.bp.blogspot.com/-go-agnzFGjA/YV0gKjJz0TI/AAAAAAAALAs/eTkQYQHTpJ03gta6HYak1L0T_E-fm5SpgCLcBGAsYHQ/s1572/1.gif
Identify available Runtime Services automatically

Annotate Runtime Services calls in assembly code automatically:
https://1.bp.blogspot.com/-QTyE5G3JCFE/YV0gsSq4poI/AAAAAAAALA0/v1JnVCkyaJUtDovIOe44deDZiijJZ6ZZwCLcBGAsYHQ/s1572/2.gif
Identify available SMM services automatically

Annotate SMM Services calls in assembly code automatically:
https://1.bp.blogspot.com/-yHCaXosb9DY/YV0iBC5s6TI/AAAAAAAALA8/089G8ETkOVMu-GOqmshP_oY7g_Y8bixQQCLcBGAsYHQ/s1572/3.gif
Identify available PEI services automatically

Annotate PEI Services calls in assembly code automatically:
https://1.bp.blogspot.com/-gvAleAuiPBk/YV0lHOmddII/AAAAAAAALBc/ZyQfN-IudpAMQieLIXbE8vbxU0Hw_7yzgCLcBGAsYHQ/s1572/4.gif
Identify available EFI Protocols automatically

Build the list of EFI Protocols firmware consumes and installs:
https://1.bp.blogspot.com/-zRR4eJv5Lqg/YV2RIfP58zI/AAAAAAAALCM/pmeDMdyRu1Ut7o9Dr_IGDUVTJf3TbHSjQCLcBGAsYHQ/s1572/5.gif
Identify known EFI GUIDs

Build the list of identified EFI GUIDs (including protocol names for known GUIDS):
https://1.bp.blogspot.com/-M8JI3IsBy6M/YV2RwaOUhpI/AAAAAAAALCU/Y1thSao2xXMuiO7X6ouHNjzjTf0GZZFdgCLcBGAsYHQ/s1572/6.gif
Applying Types For Protocols Interfaces

This feature works only in conjunction with a HexRays decompiler. If you don’t have a HexRays decompiler, build efiXplorerwithout hexrays_sdk.

Vulnerabilities Scanner

efiXplorerscans drivers for the following types of vulnerabilities:

* SMM callouts
* OOB Write via wrong GetVariableusage (in PEI, DXE and SMM drivers)

At the end of the analysis, a chooser is displayed with the suspected vulnerabilities.

Report in JSON format

After analysis efiXplorersaves the report in JSON format.
Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Ring containing 2 hidden RFID chips

Included in the ring is a 13.56MHz Mifare 1k Magic gen2 chip and a 125kHz T5577 RFID chip.

Can be reprogrammed and used to replace electronic car keys, garage door openers, RFID key cards, etc.

https://dangerousthings.com/product/magic-ring/

submitted by /u/SpecialSeasons
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Where do i download sqlidumper

The title says it all.

submitted by /u/CookieKola
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Links?

Does anybody has a link for a anynomys chat room in dark web just for fun with a friend

submitted by /u/Kiano18
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
I find this video; fascinating.

https://external-preview.redd.it/RePlWMoBlVDmkzYt0q7JXbRt1SgL0ZWTa5vDpd52xGA.jpg?width=320&crop=smart&auto=webp&s=bfffda6d303ab5ea7739c18a0959839815f11f91 submitted by /u/truthseeker2007
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
I’m A Web Application Penetration Tester — Intern

https://cdn-images-1.medium.com/max/2600/1*ZNtzwcoalMkd3TIWbuxW3Q.png
Week 0/1 Overview

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The day that I broke the firewall.

https://cdn-images-1.medium.com/max/2160/0*ZnAPvARGktt0JuXx.jpeg
We all believe firewalls can bring a level of security if well configured and maintained. But are they? A story of an ethical hacker.

Continue reading on Tales from a Security Professional »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Criptografia x Hash

https://cdn-images-1.medium.com/max/770/0*FLEV2HbEO4HjiQxA.jpg
O que é criptografia e hash?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
SS7 Signalling

https://cdn-images-1.medium.com/max/1179/0*8WfxJEhv7coJGGz_.png
Global mobile use has been on a major upswing for quite some time. From toddlers who learn to operate a mobile phone before they can even…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bluetooth Hacking

Bluetooth hacking is a technique used to get information from another Bluetooth enabled device without any permissions from the host. This…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

IDOR + Account Takeover leads to PII leakage
https://shivamrai24.medium.com/idor-account-takeover-leads-to-pii-leakage-fe075a8f602a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi Fellow Hackers & Security Enthusiasts, Today I am going to write how due to IDOR and I was able to do Password Reset of any user and…Continue reading on Medium » (https://shivamrai24.medium.com/idor-account-takeover-leads-to-pii-leakage-fe075a8f602a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

PowerShx - Run Powershell Without Software Restrictions
http://www.kitploit.com/2021/10/powershx-run-powershell-without.html

___________________________
@hacking_Attack
@Hacking_Video