chipsec VS Universal-IFR-Extractor

Here is the thread about ARM https://github.com/chipsec/chipsec/issues/461

using Chipsec utility. It requires installing Python 3, runs on any OS. Commands must be executed in elevated terminal / command prompt (or with sudo if using on non-Windows).

[CHIPSEC GitHub] https://github.com/chipsec/chipsec

Paul Asadoorian https://twitter.com/securityweekly https://eclypsium.com/2022/07/26/firmware-security-realizations-part-1-secure-boot-and-dbx/ https://github.com/mjg59/mei-amt-check https://github.com/chipsec/chipsec.git https://github.com/intel/INTEL-SA-00075-Linux-Detection-And-Mitigation-Tools https://github.com/ptresearch/mmdetect https://github.com/corna/me_cleaner/

https://github.com/chipsec/chipsec

It's not out of band and therefore vulnerable to massively clever malware, but it's still useful.

As an aside, if you want to sorta see how vunlerable your UEFI is, you can run Chipsec to find out. It has a specific test for all the write-enable bits and stuff.

If you are like me and don't have the option, you need to modify the option through EFI shell. Download UEFI Tool, IFR extractor, RU.efi, and UEFI Shell, and your bios.bin/biosfd . On HP laptops, you can obtain it through the third option "Copy" . You can find the platform ID in the bios.

First we need to find where it stord. We need 2 tools: UEFITool, IRFExtractor. Find the download link in there github. Now open the UEFITool, File-Open Image File and locate your bios file(GZ301ZX.312 or sth, extract it from the file downloaded from the official ASUS support page). Next, Ctrl+f and find "IMON" in the text field.