Exploiting AMI Aptio firmware on example of Intel NUC
Tags
attack-pattern: Data Model Models Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Firmware - T1592.003 Hardware - T1592.001 Python - T1059.006 Software - T1592.002 Trap - T1546.005 Tool - T1588.002 Vulnerabilities - T1588.006 Hypervisor - T1062 Rootkit - T1014 Trap - T1154 Rootkit
Show in Graph
Common Information
Type Value
UUID e47a68c4-023e-41df-9f79-0b10e0a56543
Fingerprint 8617df3345209280
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 22, 2016, midnight
Added to db Jan. 18, 2023, 7:33 p.m.
Last updated Nov. 5, 2024, 10:47 a.m.
Headline My aimful life
Title Exploiting AMI Aptio firmware on example of Intel NUC
Detected Hints/Tags/Attributes 105/1/17
Source URLs
Redirection Url
Details Source http://blog.cr4.sh/2016/10/exploiting-ami-aptio-firmware.html
URL Provider
Details Provider Source level domain
Details cr4.sh blog.cr4.sh
Attributes
Details Type #Events CTI Value
Details Domain 1 
smmbackdoor.py
Details Domain 12 
self.data
Details Domain 1 
aptiocalypsis.py
Details Domain 1 
aptiocalypsys.py
Details File 7 
chipsec_main.py
Details File 2 
bios_wp.py
Details File 1 
flash_image_nuc.bin
Details File 1 
smmbackdoor.py
Details File 1 
smram_dump_8b400000_8b7fffff.bin
Details File 16 
self.dat
Details File 2 
efi_smm_sw_dispatch2_protocol.reg
Details File 2 
smram_parse.py
Details File 1 
tseg_nuc.bin
Details File 4 
self.cs
Details File 4 
chipset.cs
Details File 1 
aptiocalypsis.py
Details File 1 
aptiocalypsys.py