From f233e65ed5159d1ef14ea2c922bb4acbc876a654 Mon Sep 17 00:00:00 2001 From: Toni Uhlig Date: Fri, 25 Oct 2024 12:20:55 +0200 Subject: Changed protocol GUID, backdoor variable name and cookie value * fixed EfiDSEFix Mingw Makefile * removed `EFIAPI` from some imports Signed-off-by: Toni Uhlig --- Include/Protocol/EfiGuard.h | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'Include/Protocol/EfiGuard.h') diff --git a/Include/Protocol/EfiGuard.h b/Include/Protocol/EfiGuard.h index b5c3d1e..2b1e19a 100644 --- a/Include/Protocol/EfiGuard.h +++ b/Include/Protocol/EfiGuard.h @@ -12,7 +12,7 @@ extern "C" { // #define EFI_EFIGUARD_DRIVER_PROTOCOL_GUID \ { \ - 0x51e4785b, 0xb1e4, 0x4fda, { 0xaf, 0x5f, 0x94, 0x2e, 0xc0, 0x15, 0xf1, 0x7 } \ + 0xa2b65550, 0x8675, 0x48ac, { 0xbd, 0xe6, 0x02, 0xa5, 0x3b, 0xc2, 0x02, 0x3c } \ } // @@ -58,12 +58,12 @@ typedef enum _EFIGUARD_DSE_BYPASS_TYPE { // (1) one of the Byte through Qword fields (depending on size) will contain the value at KernelAddress, or // (2) the memcpy performed will be in the opposite direction, i.e. from KernelAddress to UserBuffer. // -#define EFIGUARD_BACKDOOR_VARIABLE_NAME L"roodkcaBdrauGifE" // "EfiGuardBackdoor" // TODO: randomize? +#define EFIGUARD_BACKDOOR_VARIABLE_NAME L"GLM" // "MLG" // TODO: randomize? #define EFIGUARD_BACKDOOR_VARIABLE_GUID &gEfiGlobalVariableGuid #define EFIGUARD_BACKDOOR_VARIABLE_ATTRIBUTES (EFI_VARIABLE_NON_VOLATILE | EFI_VARIABLE_BOOTSERVICE_ACCESS | EFI_VARIABLE_RUNTIME_ACCESS) #define EFIGUARD_BACKDOOR_VARIABLE_DATASIZE sizeof(EFIGUARD_BACKDOOR_DATA) -#define EFIGUARD_BACKDOOR_COOKIE_VALUE (0xDEADC0DE) +#define EFIGUARD_BACKDOOR_COOKIE_VALUE (0xBEEFBEEF) typedef struct _EFIGUARD_BACKDOOR_DATA { -- cgit v1.2.3