https://github.com/zznop/efi-inspector

Binary Ninja plugin for inspecting UEFI firmware images
https://github.com/zznop/efi-inspector

Last synced: 2 months ago
JSON representation

Binary Ninja plugin for inspecting UEFI firmware images

• Host: GitHub
• URL: https://github.com/zznop/efi-inspector
• Owner: zznop
• License: mit
• Created: 2024-02-28T19:38:10.000Z (4 months ago)
• Default Branch: main
• Last Pushed: 2024-02-28T20:42:44.000Z (4 months ago)
• Last Synced: 2024-02-29T21:55:38.856Z (4 months ago)
• Language: Python
• Size: 2.22 MB
• Stars: 3
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Lists

• awesome-uefi-security - efi-inspector

README

        
# efi-inspector

Author: **Brandon Miller (zznop)**

_Binary Ninja plugin for inspecting UEFI firmware images_

## Description

EFI Inspector is a Binary Ninja plugin for inspecting UEFI firmware flash images. It is capable

of loading UEFI flash dumps and identifying flash regions, Firmware File System (FFS) volumes,

and FFS files. EFI Inspector facilitates multiple operations to include generating a markdown

report on the FFS layout, searching the file system for EFI files by GUID, and extracting EFI files

to disk.

**Load UEFI Flash Image**

![demo load](img/loader.png)

**Generate Markdown Report on Firmware File System Layout**

![demo report](img/ffs-layout.png)

**Extract a EFI File from Firmware File System**

![demo extract](img/extract-file.png)

**Search EFI Firmware File System for Blob by GUID**

![demo search](img/guid-search.png)

## Installation Instructions

### Darwin

no special instructions, package manager is recommended

### Windows

no special instructions, package manager is recommended

### Linux

no special instructions, package manager is recommended

## Minimum Version

This plugin requires the following minimum version of Binary Ninja:

* 4333

## License

This plugin is released under a MIT license.

## Metadata Version

2

## Related Projects

* [UEFITool](https://github.com/LongSoft/UEFITool)

* [uefi-firmware-parser](https://github.com/theopolis/uefi-firmware-parser)