用于UEFI固件逆向工程的工具。
用法：
ida_plugin/uefi_analyser.py 脚本和 ida_plugin/uefi_analyser 目录复制到 IDA 插件目录config.json 文件
PE_DIR 是包含 UEFI 固件中所有可执行镜像的目录DUMP_DIR 是包含固件文件系统中所有组件的目录LOGS_DIR 是日志目录IDA_PATH 和 IDA64_PATH 是 IDA Pro 可执行文件的路径pip install -r requirements.txtpython uefi_retool.py 命令以显示帮助信息python uefi_retool.py
Usage: uefi_retool.py [OPTIONS] COMMAND [ARGS]...
Options:
--help Show this message and exit.
Commands:
get-images Get executable images from UEFI firmware.
get-info Analyze the entire UEFI firmware.
get-pp Get a list of proprietary protocols in the UEFI firmware.
python uefi_retool.py get-images --help
Usage: uefi_retool.py get-images [OPTIONS] FIRMWARE_PATH
Get executable images from UEFI firmware. Images are stored in "modules"
directory.
Options:
--help Show this message and exit.
示例：
python uefi_retool.py get-images test_fw/fw-tp-x1-carbon-5th.bin
python uefi_retool.py get-info --help
Usage: uefi_retool.py get-info [OPTIONS] FIRMWARE_PATH
Analyze the entire UEFI firmware. The analysis result is saved to .json
file.
Options:
-w, --workers INTEGER Number of workers (8 by default).
--help Show this message and exit.
示例：
python uefi_retool.py get-info -w 6 test_fw/fw-tp-x1-carbon-5th.bin
python uefi_retool.py get-pp --help
Usage: uefi_retool.py get-pp [OPTIONS] FIRMWARE_PATH
Get a list of proprietary protocols in the UEFI firmware. The result is
saved to .json file.
Options:
-w, --workers INTEGER Number of workers (8 by default).
--help Show this message and exit.
示例：
python uefi_retool.py get-pp -w 6 test_fw/fw-tp-x1-carbon-5th.bin
tools/update_edk2_guids.py 是一个从 edk2 项目更新协议 GUID 列表的脚本