CVE-2022-21894 PoC — Secure Boot Security Feature Bypass Vulnerability

Source

https://github.com/bakedmuffinman/BlackLotusDetection

Associated Vulnerability

Title:Secure Boot Security Feature Bypass Vulnerability (CVE-2022-21894)
Description:Secure Boot Security Feature Bypass Vulnerability

Description

Created to help detect IOCs for CVE-2022-21894: The BlackLotus campaign

Readme

# BlackLotusDetection
Created to help detect IOCs for CVE-2022-21894: The BlackLotus campaign

https://www.microsoft.com/en-us/security/blog/2023/04/11/guidance-for-investigating-attacks-using-cve-2022-21894-the-blacklotus-campaign/


This creates an output txt file in the c:\temp folder.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!