Hello ... If anyone knows what software,and how to extract it,SMM from UEFI,I want to experiment,on a Thinkpad_T460s with MAX25L12873F,Please tell me if you know.
Please Help me...
Thanks.
Please Help me...
Thanks.
-
-
Re: Remove_SMM... UEFI.
i am interested in what you find with that model.
go to https://www.coreboot.org
look in the wiki - they link to lots of tools for extracting and modifying content. -
Re: Remove_SMM... UEFI.
System Management Mode basics
SMM is a special execution mode of IA-32 architecture that was introduced with i386, chapter 34 of Intel 64 and IA-32 Architectures Software Developer's Manual is the main information source about it's design and usage:
SMM is a special-purpose operating mode provided for handling system-wide functions like power management, system hardware control, or proprietary OEM-designed code. It is intended for use only by system firmware, not by applications software or general-purpose systems software. The main benefit of SMM is that it offers a distinct and easily isolated processor environment that operates transparently to the operating system or executive and software applications.
Some time ago SMM was used by BIOS developers mostly for power management and legacy devices emulation, for example, PS/2 support (port 60h/64h) for USB keyboard and mouse. Nowadays it's also widely used for firmware and platform security purposes.
Why SMM is interesting for hackers?
In UEFI specification SMM plays very important role for implementing of platform security mechanisms that protects firmware image stored inside flash chip on motherboard from unauthorised modifications by malicious software.
SMM is excellent place to hide OS independent and invisible malware. This execution mode has extreme power over all of the other software that runs on CPU, even OS kernel or VT-x hypervisor.
http://blog.cr4.sh/2015/07/building-...-for-uefi.html
SMM executable code and data lives inside SMRAM and when SMRAM is locked — it can't be accessed by code of operating system or user mode software. System firmware (legacy BIOS or UEFI) copies SMM code into SMRAM and locks it during platform initialization.
Processor is switching to SMM only trough System Management Interrupt (SMI), it saving current execution context into SMRAM and start executing SMI handler that can exit from SMM and resume execution from saved context using RSM instruction.Comment
-
Re: Remove_SMM... UEFI.
look harder, there are links to stuff like me-cleanerComment
-
Re: Remove_SMM... UEFI.
what do you aim to acomplish? password removal or something else?
do you have expirience in reverse engineering or have you ever coded code that can be injected in bios to be executed?
im very interested in project... done some minor bios modding before, unlocking menus and stuff...
but i have very limited knowledge :-/Im Back... sort of...
Comment
-
Re: Remove_SMM... UEFI.
there is no patch - the tool is to clean the data from extracted modules.
you extract them with uefi-tool - clean them, then put them back in.Comment
-
Re: Remove_SMM... UEFI.
MEC1633l needs to be programmed with clean firmware by SVOD or RT802H
on allservice.ro thay developed a module (DXE Driver) that is inserted on org bios, it reads some data and displays code that after you send to them and pay thay make you a key to unlock pemanently
https://www.allservice.ro/forum/viewtopic.php?t=3044
maybe something can be done by loading dump in IDA PRO and disabling checks but i dont have time for that (nor do i have laptop to test it on)Im Back... sort of...Comment
-
Re: Remove_SMM... UEFI.
I want to ask you :what is it Ozmosis ?
How to make Ozmosis ROM via UEFITool ?
thanks.Comment
-
Re: Remove_SMM... UEFI.
Does anyone can upload the DXE Driver here so I can have a look and try to make it work for any Lenovo please.Last edited by raileanu; 12-15-2018, 05:12 AM.Comment
-
Re: Remove_SMM... UEFI.
Hello. Did you manage to get a link for downloading the dxe driver or any already patched bios?Comment
-
Re: Remove_SMM... UEFI.
thank youComment
-
Re: Remove_SMM... UEFI.
There are two methods in hacking the DXE module, but please note this is untested.- Modify the key check so it accepts any code.
If you're willing to try the modified version use the file attached, and again it is untested. - Using a key generator.
From the image above, the key for machine id 2492411559 should be 7316483. Anyone with other machine id can reply here to test the key generator. Please note, the key generator also still untested.
Comment
- Modify the key check so it accepts any code.
-
Re: Remove_SMM... UEFI.
Hi
This key generator share. Testing
hardware id: 3425684
key: 8625856
hardware id:7668394
key:6224236
hardware id:9777692
key:7729864
hardware id:2217972
key:3089784
hardware id:2292158
Key:1264964
hardware id:832201
Key:0224961
hardware id:8096698
Key:3216204
HW ID: 125318167
Key: 292467Comment
-
Re: Remove_SMM... UEFI.
hi
I am asking for the generator to be available so that I can test itComment
-
Hey everyone!
I need help with my Lenovo Chromebook 100e Gen 3.
Here are the details:- Motherboard: LA-L131P
- MFG Date: 2022/01/07
- MTM: 82J80001BR
- MO: MPNXB2103001
- Factory ID: LI123
I bought a new Winbond 25Q128FVSG chip.
The chip currently on the board is the same model but with different ending letters.
I can’t use the CH341 clip on the chip that’s on the board because it’s too low-profile and doesn’t make proper contact.
The Chromebook is Google account locked, and I’ve already tried everything.
I understand that I need to replace or... -
Hi, i have an ASUS PRIME Z590M-PLUS board, which had an shorted Z590 chipset. I have succesfully exchanged the chipset to a factory new one, however there is a serious problem with the Intel Management Engine (later on: ME) not beeing activated after the chipset device replacement.
For lower chipset families (on ASUS boards) it worked to program the oldest bios version into the SPI rom, and the bios had activated the Management Engine itself by default - there was a message on the screen prior booting - "BIOS is updating Management Engine ..... . Do not shut down to prevent... -
Its a bit of a long tale but i swapped the original hd for a 2tb ssd,i want about 6 bootable partitions,it needs the uefi enabling in the bios,I am ok with that,the issue is i cant convert the drive to gpt when it has data on it,the issue is windows wont install to a gpt drive,there is a utility from hp to install the efi partition on the drive but it runs on windows,its a chicken and egg thing,can anyone explaine how hp did this?,I am pulling my hair out;it seems i need to run the hp uefi tool to make the uefi option work in the bios, but it needs windows to run this that wont install on a gpt...07-15-2024, 10:15 AM -
Hey guys,
Bought myself Surface Pro 4 tablet today on a local craigslist-type website.
I've seen that UEFI was password protected and of course the seller forgot the password, but decided to buy it anyway.
Really needed such a tablet to use with RomRaider to do some logging/tuning on my car.
It has secure boot turned off and boots from USB, so I've formatted SSD and have done clean win10 install.
Works fine, but wanted to ask, are there any real security risks associated with UEFI settings on Surface (remote access etc.)?
From what I've... -
Hi guys.
I am very new to this business and i have some questions. Maybe someone can help me further.
I have a 2015 Intel NUC NUC6i3SYH and for some internet and office the computer works perfectly. Lately it has been bugging me a bit on and off. Then I saw there is a UEFI update from Intel and I thought if I put it on, the problems might be gone, but unfortunately the update didn't go through. The screen stayed black and after waiting for a while nothing happened, I had to pull the plug at some point. Of course, the NUC then failed to boot!
...
Comment