PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Slowburn: Looking through AMD Platform Configuration Blobs infrastructure

swarm.ptsecurity.com | research | #hardware-security | #reverse-engineering | #firmware | #amd | #apcb | #spi-flash
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A deep dive into AMD Platform Configuration Blocks (APCB v1-v3) in motherboard SPI flash on an ASUS TUF Gaming A18, covering headers and structures via OpenSIL; started as a vulnerability write-up.
Published
Collected

Related coverage

research · eshard.com
MCUBoot Under (good) Pressure | Part 2: From the too-much to the achievable
Assessing the strength of MCUBoot against fault injection attacks thanks to simulation.
research · eshard.com
MCUBoot Under (good) Pressure | Part 1: Walk Around the Code
Software Security ### Power your investigations with esReverse ✨ Keep your data safe with private LLM. PLATFORM esReverse AI-powered Reverse Engineering TOOLS Time Travel Debugging Epoch SERVICES...
tool · github.com
gpu-unlock-ada: Linux Kernel Module Unlocking Tensor Core Limits on RTX 40-Series GPUs
Demonstrates how reverse-engineering GPU firmware handoff sequences and hardware registers can bypass artificial consumer hardware compute limits without flashing custom VBIOS, significantly accelerating local AI workloads.
research · swarm.ptsecurity.com
Injection for an athlete
Digging into a Garmin sports watch via its Android app, a researcher found exported content providers leaking the user's email and profile ID and device data; the hunt began with firmware extraction.
research · blog.quarkslab.com
Being Overlord on the Steam Deck with 1 Byte
Quarkslab presents two SMM bugs in AMD firmware drivers affecting the Steam Deck and other AMD devices, turning restrictive 1-byte primitives into code execution in System Management Mode.
research · github.com
php2shell: Pure HTTP Full-Chain RCE and ASLR Bypass on Stock PHP 8.4 Configurations
Overcomes historical constraints where PHP heap exploitation required display_errors=On, restricted memory limits, or target application vulnerabilities, demonstrating reliable pure-HTTP RCE and ASLR defeat against standard production ini configurations.
Back