Hardware and Firmware Security Guidance
This repository provides comprehensive guidance for mitigating hardware and firmware security vulnerabilities through various remediation approaches. The resource covers multiple mitigation strategies including firmware patches, software patches, and configuration changes to address security weaknesses at the hardware level. It includes detailed information about publicized side-channel attacks such as Spectre and Meltdown, providing context and remediation guidance for these processor vulnerabilities. The repository addresses firmware and microcode vulnerabilities including LoJax and Ryzenfall, offering specific guidance for these types of low-level security threats. It provides recommendations for UEFI hardening to secure the boot process and system initialization phases. The guidance includes hardware upgrade recommendations when software-based mitigations are insufficient or unavailable. The resource serves as a reference for security professionals dealing with hardware-level security concerns and firmware-based attack vectors.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A cross-platform software library for interacting with iOS devices without jailbreaking.
Phish Report is inaccessible without JavaScript and cookies enabled.
Hashcat is a fast and advanced password recovery utility that supports various attack modes and hashing algorithms, and is open-source and community-driven.
Comprehensive manual for mobile app security testing and reverse engineering with technical processes for verifying controls.
A search engine for the Internet of Things (IoT) that discovers and monitors devices connected to the internet.
Steghide is a steganography program for hiding data in image and audio files.
A project providing a low-cost ICS testbed with affordable hardware, instructions, and attacker scenarios to facilitate learning in industrial security.
A tool for quantitative risk analysis of Android applications using machine learning techniques.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.