efiXplorer – IDA plugin for UEFI firmware analysis and reverse engineering automation
Supported versions of Hex-Rays products: everytime we focus on last versions of IDA and Decompiler because we try to use most recent features from new SDK releases. That means we tested only on recent versions of Hex-Rays products and do not guarantee stable work on previous generations.
Why not IDApython: all code developed in C++ because it’s a more stable and performant way to support a complex plugin and get full power of most recent SDK’s features.
Supported Platforms: Windows, Linux and OSX.
efiXplorer core features
Features Summary Table
Feature name | 32-bit | 64-bit |
---|---|---|
Boot Services | + | + |
Runtime Services | + | + |
SMM services | – | + |
PEI Services | + | – |
Protocols | + | + |
GUIDS | + | + |
Applying types for local variables | + | + |
Vulnerabilities scanner | + | + |
Report in JSON format | + | + |
Loader | – | + |
Dependency graph | – | + |
Identify available Boot Services automatically
Annotate Boot Services calls in assembly code automatically:
Identify available Runtime Services automatically
Annotate Runtime Services calls in assembly code automatically:
Identify available SMM services automatically
Annotate SMM Services calls in assembly code automatically:
Identify available PEI services automatically
Annotate PEI Services calls in assembly code automatically:
Identify available EFI Protocols automatically
Build the list of EFI Protocols firmware consumes and installs:
Identify known EFI GUIDs
Build the list of identified EFI GUIDs (including protocol names for known GUIDS):
Applying Types For Protocols Interfaces
This feature works only in conjunction with a HexRays decompiler. If you don’t have a HexRays decompiler, build efiXplorer
without hexrays_sdk
.
efiXplorer
scans drivers for the following types of vulnerabilities:
GetVariable
usage (in PEI, DXE and SMM drivers)At the end of the analysis, a chooser is displayed with the suspected vulnerabilities.
After analysis efiXplorer
saves the report in JSON format.
If you’re learning Bash scripting, one of the most useful features you’ll come across is…
If you are new to Bash scripting or Linux shell scripting, one of the most…
How Does a Firewall Work Step by Step? What Is a Firewall and How Does…
ROADTools is a powerful framework designed for exploring and interacting with Microsoft Azure Active Directory…
Microsoft 365 Groups (also known as M365 Groups or Unified Groups) are at the heart…
SeamlessPass is a specialized tool designed to leverage on-premises Active Directory Kerberos tickets to obtain…