Satoshi's note

I am excited to announce that I moved to  https://tandasat.github.io/blog/ for new blog posts. Stay turned for more posts there!

Or, bypassing hypervisor memory protection with this one weird trick! Takeaways  It is substantially harder to protect a hypervisor from tam...

This post introduces how one can start reverse engineering UEFI-based BIOS modules. Taking Absolute as an example, this post serves as a tut...

This post introduces how one can debug the entire system including system management mode (SMM) code with Windbg and  Direct Connect Interfa...

This post explains the concept of UEFI runtime drivers, how they interact with OS, and an experimental attempt to extract them. Here is a qu...