Performs static security analysis of UEFI and BIOS firmware dumps to detect malware and audit system integrity.
The Chipsec skill integrates Intel's Platform Security Assessment Framework directly into your workflow for deep inspection of UEFI/BIOS firmware images. It allows security researchers and developers to perform offline analysis of firmware dumps without requiring hardware access or kernel drivers. The skill automates the detection of sophisticated UEFI rootkits like LoJax and MosaicRegressor, generates cryptographic inventories of EFI modules, extracts NVRAM variables, and decodes firmware structures to identify vulnerabilities like ThinkPwn and FirmwareBleed, making it an essential tool for IoT pentesting and hardware incident response.
主な機能
01Compares firmware images against known-good baselines for change detection
02Generates detailed EFI module inventories with SHA256 cryptographic hashes
03Decodes firmware volumes and extracts NVRAM variables and EFI files
04494 GitHub stars
05Parses SPI flash descriptors to analyze region permissions and master access
06Identifies known UEFI rootkits and implants (LoJax, MosaicRegressor, HackingTeam)
ユースケース
01Verifying the integrity and authenticity of BIOS updates before deployment
02Auditing IoT device firmware for pre-installed vulnerabilities or malicious implants
03Performing forensic analysis on suspected compromised systems to detect stealthy boot-level persistence
