-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
A lot of you had the question of, how will YellowKey work with TPM+PIN.
It wasn't simple, it was an executable that you needed to run in WinRE that will perform all of the required work and output special transaction files. Those transaction files are then put those transaction files in the recovery partition.
Then you have to give the victim their machine back and wait for them to enter the PIN, once the PIN is entered, the machine will keep crashing using some magic you can do to the WinRE partition, once the machine enters WinRE, it will cause the transaction files to be recovered and overrite arbitrary files in the bitlocker protected volume with controllable content. I didn't release the PoC because I rely on bitlocker myself, bitlocker is great, the issue is it have to rely on retarded software to function which is a huge flaw.
-----BEGIN PGP SIGNATURE-----
iHUEARYKAB0WIQRJTvAf/AWVhAKEeb7FFoRCS0/SbAUCaiinLQAKCRDFFoRCS0/S
bHk3AQClJoP4SPtxIQIBClPaCWDB4p2qVEiONWFAYfu9WMLAnwD/dEP2XuKzPuKp
Iv3uk97oZi7wJbhzbdRGGhCAIdbT1AY=
=y3l7
-----END PGP SIGNATURE-----
No comments:
Post a Comment