41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a08c62-f4fa-71da-94af-497e96ea6bdd

corCTF 2023 smm-diary: Ropping in Ring -2

willsroot.io · published 3 August 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at willsroot.io Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 17
Words captured: 2,675

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.binarly.io/

binarly.io

https://github.com/zhuyifei1999

github.com

https://toh.necst.it/uiuctf/pwn/system/x86/rop/UIUCTF-2022-SMM-Cowsay/

toh.necst.it

https://opensecuritytraining.info/IntroBIOS_files/Day1_07_Advanced%20x86%20-%20BIOS%20and%20SMM%20Internals%20-%20SMM.pdf

opensecuritytraining.info

https://nixhacker.com/digging-into-smm/

nixhacker.com

https://github.com/chipsec/chipsec/blob/main/chipsec/hal/interrupts.py

github.com

https://github.com/tianocore/edk2/blob/master/MdePkg/Library/SmmMemLib/SmmMemLib.c

github.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglABleDVP67cFZ4uDoE6C7DUJ8PNZhAS6HjvAAYGzFGKwlNJyjfLjIxN2Qg-FmBXtHS_92C_w3Yu3lVVbOZAgpd76Cdz2Ap2HS47Zpo-ApX-NUoGwPUuOLY44CqQ3_nlBJpAoKwWAaExKROQWlQ-EEBuvHkVNRblg6AJvG2U8Z9cW3t7WVnsiA0OTVLiYm/s975/pwned.png

blogger.googleusercontent.com

https://www.welivesecurity.com/2022/04/19/when-secure-isnt-secure-uefi-vulnerabilities-lenovo-consumer-laptops/

welivesecurity.com

https://dreamlayers.blogspot.com/2012/10/dumping-smram.html

dreamlayers.blogspot.com

http://blog.cr4.sh/2015/07/building-reliable-smm-backdoor-for-uefi.html

blog.cr4.sh

https://bostonglobalforum.org/cyber/overall/exploiting-smm-callout-vulnerabilities-in-lenovo-firmware/

bostonglobalforum.org

https://www.synacktiv.com/en/publications/through-the-smm-class-and-a-vulnerability-found-there

synacktiv.com

https://hardwear.io/netherlands-2021/presentation/automated-vulnerability-hunting-in-SMM.pdf

hardwear.io

https://research.nccgroup.com/2023/03/15/a-race-to-report-a-toctou-analysis-of-a-bug-collision-in-intel-smm/

research.nccgroup.com

https://research.nccgroup.com/2023/04/11/stepping-insyde-system-management-mode/

research.nccgroup.com

https://dannyodler.medium.com/attacking-the-golden-ring-on-amd-mini-pc-b7bfb217b437

dannyodler.medium.com