chipsec VS reolink-fw

Here is the thread about ARM https://github.com/chipsec/chipsec/issues/461

using Chipsec utility. It requires installing Python 3, runs on any OS. Commands must be executed in elevated terminal / command prompt (or with sudo if using on non-Windows).

[CHIPSEC GitHub] https://github.com/chipsec/chipsec

Paul Asadoorian https://twitter.com/securityweekly https://eclypsium.com/2022/07/26/firmware-security-realizations-part-1-secure-boot-and-dbx/ https://github.com/mjg59/mei-amt-check https://github.com/chipsec/chipsec.git https://github.com/intel/INTEL-SA-00075-Linux-Detection-And-Mitigation-Tools https://github.com/ptresearch/mmdetect https://github.com/corna/me_cleaner/

https://github.com/chipsec/chipsec

It's not out of band and therefore vulnerable to massively clever malware, but it's still useful.

As an aside, if you want to sorta see how vunlerable your UEFI is, you can run Chipsec to find out. It has a specific test for all the write-enable bits and stuff.

If you are like me and don't have the option, you need to modify the option through EFI shell. Download UEFI Tool, IFR extractor, RU.efi, and UEFI Shell, and your bios.bin/biosfd . On HP laptops, you can obtain it through the third option "Copy" . You can find the platform ID in the bios.

If you really want to identify them and are willing to type more commands, you can look here. This is a tool I developed to get info on Reolink firmwares, and it's what powers the archive.