c7zero fda2e25180 Add detection of EFI binaries vulnerable to ThinkPwn to blacklist config (#89) ...

* Added detection of EFI binaries vulnerable to ThinkPwn to tools.uefi.blacklist module config

This commit extends blacklist.json black-list configuration file for
tools.uefi.blacklist module with detection of EFI binaries vulnerable to
vulnerability in SystemSmmRuntimeRt a.k.a. 'ThinkPwn' discovered by
Dmytro Oleksiuk (@d_olex). Reference:
http://blog.cr4.sh/2016/06/exploring-and-exploiting-lenovo.html

The attributes detected are
- GUID of vulnerable UEFI SmmRuntime protocol within contents of EFI
binaries
- 2 names (aka UI strings) 'SystemSmmRuntimeRt.efi' and 'SmmRuntime' and
2 GUIDs of vulnerable EFI binaries found in different systems

* Comments

2016-09-21 09:35:17 -07:00

..

bdw

Make line endings consistent. Issue #13 fix (#85)

2016-09-07 15:23:33 -07:00

byt

Make line endings consistent. Issue #13 fix (#85)

2016-09-07 15:23:33 -07:00

common

Make line endings consistent. Issue #13 fix (#85)

2016-09-07 15:23:33 -07:00

hsw

Make line endings consistent. Issue #13 fix (#85)

2016-09-07 15:23:33 -07:00

ivb

Make line endings consistent. Issue #13 fix (#85)

2016-09-07 15:23:33 -07:00

snb

Make line endings consistent. Issue #13 fix (#85)

2016-09-07 15:23:33 -07:00

tools

Add detection of EFI binaries vulnerable to ThinkPwn to blacklist config (#89)

2016-09-21 09:35:17 -07:00

__init__.py

Make line endings consistent. Issue #13 fix (#85)

2016-09-07 15:23:33 -07:00

memconfig.py

fixes and new modules (#62)

2016-08-12 16:48:02 -07:00

remap.py

Make line endings consistent. Issue #13 fix (#85)

2016-09-07 15:23:33 -07:00

smm_dma.py

Make line endings consistent. Issue #13 fix (#85)

2016-09-07 15:23:33 -07:00