{"id":13839563,"url":"https://github.com/bartblaze/Disable-Intel-AMT","last_synced_at":"2025-07-11T06:31:04.999Z","repository":{"id":169674923,"uuid":"90316365","full_name":"bartblaze/Disable-Intel-AMT","owner":"bartblaze","description":"Tool to disable Intel AMT on Windows","archived":false,"fork":false,"pushed_at":"2017-05-18T19:26:26.000Z","size":26542,"stargazers_count":141,"open_issues_count":0,"forks_count":29,"subscribers_count":19,"default_branch":"master","last_synced_at":"2024-08-05T17:23:53.228Z","etag":null,"topics":["cve-2017-5689","intel-amt","intel-sa-00075"],"latest_commit_sha":null,"homepage":null,"language":"Batchfile","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/bartblaze.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null}},"created_at":"2017-05-04T22:49:20.000Z","updated_at":"2024-08-04T07:04:50.000Z","dependencies_parsed_at":"2023-06-09T09:45:18.280Z","dependency_job_id":null,"html_url":"https://github.com/bartblaze/Disable-Intel-AMT","commit_stats":null,"previous_names":["bartblaze/disable-intel-amt"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bartblaze%2FDisable-Intel-AMT","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bartblaze%2FDisable-Intel-AMT/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bartblaze%2FDisable-Intel-AMT/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bartblaze%2FDisable-Intel-AMT/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bartblaze","download_url":"https://codeload.github.com/bartblaze/Disable-Intel-AMT/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225699949,"owners_count":17510431,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cve-2017-5689","intel-amt","intel-sa-00075"],"created_at":"2024-08-04T17:00:30.184Z","updated_at":"2024-11-21T08:31:20.027Z","avatar_url":"https://github.com/bartblaze.png","language":"Batchfile","funding_links":[],"categories":["Batchfile","Batchfile (16)"],"sub_categories":[],"readme":"# Disable Intel AMT\nTool to disable Intel AMT on Windows. Runs on both x86 and x64 **Windows** operating systems. \nDownload:\n\n[DisableAMT.exe](DisableAMT.exe)\n\n[DisableAMT.zip](DisableAMT.zip)\n\n## What?\nOn 02 May 2017, Embedi [discovered](https://www.embedi.com/news/mythbusters-cve-2017-5689) \"*an escalation of privilege vulnerability in Intel® Active Management Technology (AMT), Intel® Standard Manageability (ISM), and Intel® Small Business Technology versions firmware versions 6.x, 7.x, 8.x 9.x, 10.x, 11.0, 11.5, and 11.6 that can allow an unprivileged attacker to gain control of the manageability features provided by these products*\".\n\nEmedi has also released a technical paper about their discovery:\n[Silent Bob is Silent](https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf) (PDF)\n\nRead also: [Intel Active Management Technology, Intel Small Business Technology, and Intel Standard Manageability Escalation of Privilege](https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075\u0026languageid=en-fr)\n\nAssigned CVE: [CVE-2017-5689](https://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2017-5689)\n\n## Wait, what?\nYour machine may be vulnerable to hackers.\n\n## How do I know if I'm affected?\nIf you see any of these stickers or badges on your laptop, notebook or desktop, you are likely affected by this:\n\n![Intel badges](http://i.imgur.com/Evq3CUo.png \"Intel badges\")\n\nAdditionally, Intel AMT does run on non-vPro based processors in some cases with reduced functionality, called [Standard Manageability](https://software.intel.com/en-us/blogs/2009/03/27/what-is-standard-manageability). The tool presented here does not differentiate between processor types. This means it can also disable AMT on your machine, regardless of processor.\n\nYou may want to read:\n[How To Find Intel® vPro™ Technology Based PCs](https://communities.intel.com/docs/DOC-5693)\n\n\n## Usage\nSimple. Download and run DisableAMT.exe, and it will do the work for you. This is based on the instructions provided by the [INTEL-SA-00075 Mitigation Guide](https://downloadcenter.intel.com/download/26754/INTEL-SA-00075-Mitigation-Guide)\n\nWhen executing the tool, it will run quickly and when done, will present you with the following screen:\n![Intel AMT disabler](http://i.imgur.com/e4DMXEV.png \"Intel AMT disabler\")\n\nType **Y** or **N** if you would also like to automatically disable (by renaming) the actual LMS.exe (*Intel Local Management Service*) binary. When finished, a logfile will open up. **Reboot your machine at this point.**\n\nThere is also a short video guide avilable by MajorGeeks [here](https://www.youtube.com/watch?v=gyv5_n4HpMY). That's all! Simple!\n\n\n### Details about the tool\nThe tool is written in batch, and has the necessary components inside to unconfigure AMT. The batch file was compiled to an executable using the free version of [Quick Batch File Compiler](http://www.abyssmedia.com/quickbfc/), and subsequently packed with UPX to reduce filesize. Additionally, ACUConfig.exe and ACU.dll from [Intel's Setup and Configuration Software package](https://downloadcenter.intel.com/download/26505) is included. You may find all these files in the [sources](sources) folder.\n\nPlease find hashes below:\n\nFilename | MD5 | SHA1 | SHA256\n--- | --- | --- | ---\n*DisableAMT.exe* | fd1e986ba3376c161cdfaf5f5b1ae5fd | e81f58bf35f64067aa359bcbf1bbbe5305d6b13b | 837303761c87f3e8f3bfb3f5cb2eef16679a688df5781dc446300717f42a481f\n*DisableAMT.zip* | 7876752e29178a85beae1e5a0b636faa | 89a2a64066c127c4f8fbdbf7ad946b59beaf4009 | 796e63854aaf3630cdfff642dc7f18fa4a32097737da45b0a5b83fb0a15fd72a\n*ACUConfig.exe* | 4117b39f1e6b599f758d59f34dc7642c | 7595bc7a97e7ddab65f210775e465aa6a87df4fd | 475e242953ab8e667aa607a4a7966433f111f8adbb3f88d8b21052b4c38088f7\n*ACU.dll* | a98f9acb2059eff917b13aa7c1158150 | d869310f28fce485da0c099f7df349c82a005f30 | c569d9ce5024bb5b430bab696f2d276cfdc068018a84703b48e6d74a13dadfd7\n\n#### Does the tool make any hardware or firmware changes, or to the BIOS?\nNo.\n\n#### Is there an easier way to do this?\nProbably. Best way to mitigate, is to update your firmware. See for a list of vendors affected [here](https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075\u0026languageid=en-fr), or see below.\n\n#### List of vendors with firmware updates available:\nHP Inc. - http://www8.hp.com/us/en/intelmanageabilityissue.html\n\nHP Enterprise - http://h22208.www2.hpe.com/eginfolib/securityalerts/CVE-2017-5689-Intel/CVE-2017-5689.html\n\nLenovo - https://support.lenovo.com/us/en/product_security/LEN-14963\n\nFujitsu - http://support.ts.fujitsu.com/content/Intel_Firmware.asp\n\nDell Client - http://en.community.dell.com/techcenter/extras/m/white_papers/20443914\n\nDell EMC - http://en.community.dell.com/techcenter/extras/m/white_papers/20443937\n\nAcer - https://us.answers.acer.com/app/answers/detail/a_id/47162\n\nAsus - https://www.asus.com/News/uztEkib4zFMHCn5r\n\nPanasonic - http://pc-dl.panasonic.co.jp/itn/info/osinfo20170512.html\n\nIntel – [NUC](http://www.intel.com/content/www/us/en/support/boards-and-kits/000024179.html), [Compute Stick](http://www.intel.com/content/www/us/en/support/boards-and-kits/000024180.html) and [Desktop Boards](https://www.intel.com/content/www/us/en/support/boards-and-kits/000024181.html).\n\n##### Extra information:\nwikiHow on how to [update your computer's BIOS](http://www.wikihow.com/Update-Your-Computer%27s-BIOS)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbartblaze%2FDisable-Intel-AMT","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fbartblaze%2FDisable-Intel-AMT","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbartblaze%2FDisable-Intel-AMT/lists"}