corna/me_cleaner
Me Cleaner
me_cleaner es un conjunto de herramientas especializadas para analizar descriptores flash, eliminar blobs de firmware y configurar apagados a nivel de hardware para motores de gestión y ejecución. Proporciona utilidades para analizar volcados de memoria BIOS, extraer regiones de firmware específicas y eliminar módulos binarios no esenciales para reducir la superficie de interacción del sistema.
El proyecto se dirige específicamente a la limpieza de imágenes de firmware de Intel Management Engine y Trusted Execution Engine. Esto implica eliminar blobs binarios y modificar bits de configuración para forzar a estos subsistemas a apagarse automáticamente después del proceso de inicialización del hardware.
El conjunto de herramientas cubre capacidades de modificación de firmware como eliminar bloques comprimidos de particiones de fábrica, eliminar particiones no fundamentales y recalcular tablas de particiones para mantener la integridad de la imagen.
Features
- Intel ME Deblobbing - Removes binary blobs from Intel Management Engine firmware to limit its ability to interact with the system.
- Firmware Configuration Utilities - Provides a utility to modify configuration bits that force the Trusted Execution Engine to shut down after hardware initialization.
- Firmware Size Optimization - Reduces the memory footprint of firmware by excluding unnecessary features and non-fundamental partitions.
- Firmware Deblobbing Utilities - Strips non-essential binary modules from firmware to reduce the attack surface and system interaction.
- Flash Descriptor Parsers - Analyzes the hardware layout to locate and extract specific firmware regions from a full BIOS dump.
- Hardware-Based Firmware Disabling - Sets specific configuration bits that instruct the firmware to shut down automatically after the hardware initialization process.
- Intel ME Hardware Disabling - Sets configuration bits in the firmware to force the management engine to shut down after hardware initialization.
- Firmware Module Stripping - Provides the ability to strip non-essential binary modules from firmware to restrict subsystem interactions.
- Intel Management Engine Restriction - Removes binary blobs from firmware images to limit the Intel Management Engine's ability to interact with the system.
- Intel ME Firmware Cleaning Tools - Removes binary blobs and disables functionality within Intel Management Engine and TXE firmware images.
- Intel TXE Firmware Cleaning - Strips non-essential modules and compressed blocks from Intel Trusted Execution Engine images to reduce their footprint.
- Hardware Configuration Bit Setting - Sets specific hardware flags to force the firmware to shut down after the initial boot process.
- BIOS Flash Descriptor Parsing - Analyzes flash descriptors to extract specific firmware regions from full BIOS memory dumps.
- Firmware Partition Table Recalculation - Updates internal offsets and sizes after removing firmware partitions to maintain image integrity.
- Firmware Image Editors - Modifies the internal contents and structure of binary firmware images by stripping binary blobs.
- Firmware Module Deletion - Deletes specific binary modules and compressed blocks from the factory partition to strip unwanted functionality.
- BIOS Dump Region Extraction - Identifies and extracts relevant firmware sections from a full BIOS dump by analyzing the Flash Descriptor.
- Firmware Region Extraction - Identifies and pulls specific firmware sections from a full BIOS dump using the Flash Descriptor.
- Firmware Partition Cleaning - Removes non-fundamental partitions and updates the partition table to decrease image size.
- Compressed Binary Section Stripping - Identifies and strips compressed binary sections from factory partitions to remove unwanted functionality.
