9elements / converged-security-suite

Converged Security Suite for Intel & AMD platform security features
https://www.9esec.io
BSD 3-Clause "New" or "Revised" License
59 stars 15 forks source link

pkg/me: Add parser for the Intel ME Flash Partition Table #245

Closed PatrickRudolph closed 3 years ago

PatrickRudolph commented 3 years ago

The flash partition table $FPT describes the paritions found in the ME region. The new API allows basic detection, enumeration and modification support for those partitions.

To be used to patch the UEP partition with the KM hash.

Based on Igor Skochinsky talk "Rootkit in your laptop" and ME Analyzer written by Plato Mavropoulos.

Signed-off-by: Patrick Rudolph patrick.rudolph@9elements.com