DVUEFI - GitLite

KO | EN

gitlite — search

#javascript #hacktoberfest #react #llm #golang #deep-learning #docker #macos #java #windows #cli #awesome-list #security #mcp

DVUEFI

(★ 306)

Damn Vulnerable UEFI

파일 탐색기

최종 버전 다운로드 (.zip)

- - README.md
- - README.md
- - README.md
- - README.md
- - DVUEFILogo.png
- Dockerfile
- README.md
- bhusa24-arsenal-dvuefi.odp
- bhusa24-arsenal-dvuefi.pdf
- - Dockerfile
- - .appveyor.yml
  - .gitignore
  - .travis.yml
  - basetypes.h
  - descriptor.cpp
  - descriptor.h
  - ffs.cpp
  - ffs.h
  - ffsengine.cpp
  - ffsengine.h
  - gbe.h
  - guidlineedit.cpp
  - guidlineedit.h
  - insert_dxe.sh
  - LICENSE.md
  - me.h
  - messagelistitem.cpp
  - messagelistitem.h
  - peimage.cpp
  - peimage.h
  - README.rst
  - replace_logo.sh
  - searchdialog.cpp
  - searchdialog.h
  - searchdialog.ui
  - treeitem.cpp
  - treeitem.h
  - treemodel.cpp
  - treemodel.h
  - types.cpp
  - types.h
  - uefitool.cpp
  - uefitool.h
  - uefitool.icns
  - uefitool.ico
  - uefitool.pro
  - uefitool.rc
  - uefitool.ui
  - uefitool_main.cpp
  - unixbuild.sh
  - version.h
- .gitattributes
- guids.txt
- install_driver.sh
- launch_toolchain.sh
- README.md
- UEFITool
.gitmodules
LICENSE
README.md
vuln-edk2

# 설치 가이드

1. 코드 내려받기

git clone https://github.com/hacking-support/DVUEFI

깃허브에서 프로젝트 코드 전체를 내 컴퓨터로 내려받습니다.

cd DVUEFI

방금 내려받은 프로젝트 폴더 안으로 이동합니다.

2. Docker

쉬움 추천

사전 준비물

Git GitHub에서 프로젝트 코드를 내려받으려면 필요합니다.
Docker Desktop 컨테이너를 빌드하고 실행하려면 필요합니다. 설치 후 실행해서 백그라운드에 켜두세요.

docker build -f edk2-build-toolchain/Dockerfile -t dvuefi .

Dockerfile을 기반으로 실행 가능한 이미지를 빌드합니다.

docker run -p 8080:80 dvuefi

빌드된 이미지를 실제 컨테이너로 실행합니다.

✅ 터미널에 docker compose ps 를 입력해 컨테이너들이 Up 상태인지 확인하세요. README에 포트 번호가 적혀있다면 브라우저에서 http://localhost:포트번호 로 접속해보세요.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

<img src="docs/media/DVUEFILogo.png" width="125">

# Damn Vulnerable UEFI (DVUEFI)

An Exploitation Toolkit and Learning Platform for Unveiling and Fixing UEFI Firmware Vulnerabilities
Presented at [Black Hat USA 2024 Arsenal](https://www.blackhat.com/us-24/arsenal/schedule/index.html#damn-vulnerable-uefi-dvuefi-an-exploitation-toolkit-and-learning-platform-for-unveiling-and-fixing-uefi-firmware-vulnerabilities-39058)

![](https://raw.githubusercontent.com/hacking-support/DVUEFI/main/docs/img/dvuefi.png)

# Introduction
Inspired by projects such as Damn Vulnerable Web Application and OWASP's Damn Vulnerable Web Sockets, Damn Vulnerable UEFI (DVUEFI) is designed to help guide ethical hackers, security researchers, and firmware enthusiasts in getting started with UEFI firmware security, by facilitating the exploration of vulnerabilities by example.

The DVUEFI project is engineered to simulate real-world firmware attacks, offering an environment for practicing and refining exploitation techniques.

DVUEFI is accompanied by a robust, continuously evolving catalog of documented UEFI vulnerabilities.
Each entry is detailed with exploitation methods, potential impacts, and strategic mitigation recommendations, serving as both a learning tool and a reference for security practitioners.

## OS Support
DEVUEFI's exploitation environment is designed to be deployable on both Windows and Linux using either [QEMU](https://www.qemu.org/) for the first two stages and [VMWare Workstation Player](https://www.vmware.com/products/workstation-player/workstation-player-evaluation.html) for the final stage (the free version, VMWare Workstation Player, will suffice).

## Tools
We extend and combine different engines of [UEFITool](https://github.com/LongSoft/UEFITool) to help with automation for the third stage.
For more information on the tool, see [Tools](./tools/README.md).

# Getting Started
Clone this repository using

```console
git clone --recursive git@github.com:hacking-support/DVUEFI.git # ssh
```

or

```console
git clone --recursive https://github.com/hacking-support/DVUEFI.git # https
```

To start setting up your exploitation environment, head over to [Level 0: Setup](./docs/0-environment-setup/README.md)

# Acknowledgements
DVUEFI would not exist without the previous contributions of many members of the UEFI community.

* UEFI image analysis and modification: https://github.com/LongSoft/UEFITool
* Inspiration for Apps to make Vulnerable: https://github.com/fpmurphy/UEFI-Utilities-2019