Ua ʻike nā mea noiʻi mai Binarly i kahi ʻano o nā nāwaliwali i ka code parsing kiʻi i hoʻohana ʻia ma UEFI firmware mai nā mea hana like ʻole. Hiki i nā mea nāwaliwali ke hoʻokō i ka hoʻokō code i ka wā boot ma ke kau ʻana i kahi kiʻi i hoʻolālā kūikawā ʻia ma ka ʻāpana ESP (EFI System Partition) a i ʻole ma kahi ʻāpana o ka firmware update ʻaʻole i kau inoa ʻia. Hiki ke hoʻohana ʻia ke ʻano hoʻouka kaua no ke kāʻei ʻana i ka UEFI Secure Boot i hōʻoia ʻia i ka mīkini pahu pahu a me nā ʻōnaehana pale lako e like me Intel Boot Guard, AMD Hardware-Validated Boot a me ARM TrustZone Secure Boot.
Hoʻokumu ʻia ka pilikia ma muli o ka ʻae ʻana o ka firmware iā ʻoe e hōʻike i nā logo i kuhikuhi ʻia e ka mea hoʻohana a hoʻohana i nā hale waihona puke parsing kiʻi no kēia, i hana ʻia ma ka pae firmware me ka ʻole o ka hoʻonohonoho ʻana i nā pono. Hoʻomaopopo ʻia ʻo ka firmware hou i loaʻa i nā code no ka parsing BMP, GIF, JPEG, PCX a me TGA formats, kahi i loaʻa ai nā nāwaliwali e alakaʻi ai i ka buffer overflow ke koho ʻana i ka ʻikepili hewa.
Ua ʻike ʻia nā mea ʻino i ka firmware i hoʻolako ʻia e nā mea lako lako like ʻole (Intel, Acer, Lenovo) a me nā mea hana firmware (AMI, Insyde, Phoenix). No ka mea aia ka code pilikia i loko o nā ʻāpana kuhikuhi i hāʻawi ʻia e nā mea kūʻai kūʻai firmware kūʻokoʻa a hoʻohana ʻia ma ke ʻano he kumu no nā mea hana ʻenehana like ʻole e kūkulu i kā lākou firmware, ʻaʻole nā mea kūʻai aku i nā mea kūʻai aku a pili i ka kaiaola holoʻokoʻa.
ʻO nā kikoʻī e pili ana i nā nāwaliwali i ʻike ʻia e hoʻohiki ʻia e hōʻike ʻia ma ka lā 6 Dekemaba ma ka ʻaha kūkā ʻo Black Hat Europe 2023. ʻO ka hōʻike ma ka hālāwai kūkā e hōʻike pū ana i kahi hoʻohana e hiki ai iā ʻoe ke hoʻokō i kāu code me nā kuleana firmware ma nā ʻōnaehana me ka x86 a me ka hoʻolālā ARM. I ka wā mua, ua ʻike ʻia nā nāwaliwali i ka wā o ka loiloi ʻana o Lenovo firmware i kūkulu ʻia ma luna o nā kahua mai Insyde, AMI a me Phoenix, akā ua ʻōlelo ʻia ʻo firmware mai Intel a me Acer he mea hiki ke pilikia.
Source: opennet.ru