• caglararli@hotmail.com
  • 05386281520

Dump All Images Possible On a Laptop Motherboard

Çağlar Arlı      -    21 Views

Dump All Images Possible On a Laptop Motherboard

In relation to another question I wanted to ask, supposing I pulled the drives from a laptop, and the GPU/CPU/TPM/RAM are soldered on the mother board (along with lots of other random chips). What software ("images") persists on the mother board (firmware, ROM's, UEFI, BIOS, stuff on random IC's, etc.), and, how much of it can be accessed at different levels?:

Level 0: "Images" that can be extracted using the laptop itself (when booted) using general tools or inexpensive specialty software. Also common pieces of hardware may be nessiary such as USB drives, it may also be nessisary to flash an OS to a USB drive, such as luv-yocto or a fork thereof.

Level 1: Some hardware necessary, but nothing a casual tinkerer may have laying around, eg. Raspberry Pi, Micro-controller Programmer, a resistor, a flash drive, multi-meter, etc. Nothing should need to be de-soldered from the board, and nothing prohibitively expensive

Level 2: Removing the restrictions on level 1 may require the use of a JTAG (expensive hardware or more "hard core" hardware) or desoldering components off the mother board

Level 3+: You have institutional resources.

The point would be to audit these "images" and check them, similar to how SecureBoot might

After a little research I found some possible software that might help:

  1. Integrity Measurement Architecture
  2. luv-yocto or a fork
  3. TrouSerS
  4. chipsec

Though I don't know if any of these will do what I want to do to the extent I would like too or not