Is this system's hardware configuration locked down the way the platform vendor intended?

runs its configuration checks against the live chipset registers and BIOS settings and reports pass/fail per protection mechanism, with coverage keyed to the specific platform generation detected

What does the firmware on this machine actually contain right now?

acquires firmware images, EFI modules, and related artifacts from the live system or a saved image for offline inspection, decompressing formats like Tiano, LZMA, Brotli, ZLIB, and GZIP as needed

Is this CPU a debug/sample part that shouldn't be trusted as production silicon?

checks control and debug-enable registers for sample-part indicators and reports the finding as informational rather than a pass/fail verdict

Has memory remapping or SGX been configured correctly on this chip?

reads the relevant model-specific and configuration registers and compares them against the expected values for that platform, flagging mismatches by register name

CHIPSEC release history — The Cyber Toolchain

2.0.9 Sep 24, 2026 · issue 085

CHIPSEC 2.0.9 improves UEFI firmware decode with new section decoders and adds an ACPI NVS fallback for SBREG_BAR discovery.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ GET THIS VERSION

$ git clone --branch 2.0.9 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 2.0.9

Adds an ACPI NVS fallback for SBREG_BAR discovery, broadening platform coverage when the primary P2SB unhide path is unavailable.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds missing UEFI section-type decoders per the PI and UEFI specifications, including correct handling of EFI_SECTION_DISPOSABLE (type 0x03) and fixed DEPEX opcode decoding to PI 1.9.
Improves uefi decode output by replacing the set_log_file() redirect pattern with direct file I/O for .lst artifacts, eliminating log-file conflicts where NVRAM output clobbered the .UEFI.lst handler.
Adds offset and GUID context to UEFI parse warning messages so users can trace which firmware module triggered each warning.

Adds an ACPI NVS fallback for SBREG_BAR discovery, broadening platform coverage when the primary P2SB unhide path is unavailable.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

3 more in Everything

docs update Aug 30, 2026 · issue 059

CHIPSEC adds an XML-based HOB definition parser for decoding GUID extension HOB payloads in platform configuration.

└──▷ USE IT

Define a known GUID extension HOB structure so CHIPSEC can decode its payload fields during platform analysis.

HOB.hob0.xml

<hob>
  <structure name="PEI_PCD_DATABASE" guid="EA296D92-0B69-423C-8C28-33B4E0A91268">
    <field name="Signature" type="guid" desc="PcdDataBaseGuid" />
    <field name="BuildVersion" type="uint32" />
    <field name="Pad" type="bytes" size="6" />
  </structure>
</hob>

Reference HOB definitions from the platform configuration file so CHIPSEC loads them alongside other platform definitions.

xml

<hob>
  <definition name="HOB" config="HOB.hob0.xml" />
</hob>

Adds a HOB definition parser (chipsec.cfg.parsers.hob_parser) that reads GUID extension HOB structure layouts from XML files, making HOB payload contents inspectable as named registers in the platform hierarchy.
Platform configuration files can now pull in HOB definitions via a <hob> block with a <definition name=... config=.../> element pointing to an XML file (e.g., HOB.hob0.xml).
HOB XML files declare <structure> elements keyed by GUID and <field> elements per C-struct member, supporting types guid, uint32, and bytes (with explicit size for padding), in packed (no implicit alignment) layout order.
Parsed HOB definitions are stored by GUID in Cfg.HOB_DEFINITIONS and published into the platform hierarchy as VID.<definition name>.<structure name> registers with fields mapped from byte offsets to bit positions.

4 details in Everything

docs update Aug 30, 2026 · issue 059

CHIPSEC adds HOB (Hand-Off Block) parsing support and a new scan_image UEFI tool module.

└──▷ USE IT

List UEFI Hand-Off Blocks (HOBs) from the running system.

shell

chipsec_util uefi hoblist

Adds chipsec.utilcmd.hob_cmd — a new utility command for interacting with HOB (Hand-Off Block) data from the command line.
Adds chipsec.hal.common.hob, chipsec.cfg.parsers.hob_parser, chipsec.cfg.parsers.ip.hob, and chipsec.cfg.parsers.registers.hob — a new HAL and config-parser layer enabling structured parsing of UEFI Hand-Off Blocks for platform configuration and register inspection.
Adds chipsec.modules.tools.uefi.scan_image — a new UEFI analysis module for scanning firmware images.

3 details in Everything

docs update Aug 30, 2026 · issue 059

Adds chipsec.hal.common.hob HAL layer for programmatic HOB access.
Adds chipsec.cfg.parsers.hob_parser to parse HOB data from platform configuration.
Adds chipsec.cfg.parsers.ip.hob and chipsec.cfg.parsers.registers.hob to extend HOB parsing to IP and register configuration surfaces.

2.0.8 Aug 27, 2026 · issue 058

CHIPSEC 2.0.8 adds HOB features, MSR scope checks, is_enabled filtering for controls, and exclusive fixed-address config support.

└──▷ GET THIS VERSION

$ git clone --branch 2.0.8 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 2.0.8

Adds is_enabled field to controls, enabling filter_enabled filtering in object lists of controls.
Adds HOB (Hand-Off Block) parsing and inspection features.
Adds MSR scope correctness checks to catch misconfigured MSR definitions.
Configuration helper now supports exclusive fixed addresses for platform register definitions.
Configuration files nested below cfg/<vendor>/ are now correctly installed during package setup.

+3 more show less

Linux kernel driver is now loaded via modprobe before searching for the driver file, improving portability of installed builds.
Manual is now installed to a path relative to the install prefix rather than a hardcoded location.
Enhanced logger messaging provides additional detail to aid debugging efforts.

8 details in Everything

2.0.7 Jul 30, 2026 · issue 031

CHIPSEC 2.0.7 adds HOB listing/dumping, Q35/QEMU platform support, and PCH detection in banner output.

└──▷ GET THIS VERSION

$ git clone --branch 2.0.7 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 2.0.7

Adds uefi subcommands to list and dump Hand-Off Blocks (HOBs) from UEFI firmware.
Adds Q35 platform support for QEMU-based testing environments.
Displays detected PCH (Platform Controller Hub) information in the CHIPSEC banner at runtime.

3 details in Everything

2.0.6 Jul 1, 2026 · issue 014

CHIPSEC 2.0.6 restores the uefi types command and adds platform autodetection to uefi tables.

└──▷ GET THIS VERSION

$ git clone --branch 2.0.6 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 2.0.6

└──▷ TRY IT

Enumerate UEFI variable types on the running system — platform is now detected automatically, no manual specification needed.

$ chipsec_util uefi tables

List supported UEFI types on the current platform without manually identifying it first.

$ chipsec_util uefi types

Adds platform autodetection to chipsec_util uefi tables, removing the need to specify the platform manually.
Adds a decode dictionary to ExitCode in cfg_checker.py, making exit code interpretation programmatic.
Expands platform DID matching to HostCtrl DIDs for ADL, ARL, MTL, RPL, and TGLU platforms.

3 details in Everything

2.0.5 Jun 16, 2026 · release notes

CHIPSEC 2.0.5 adds Intel 440FX (QEMU) support, Meteor Lake DIDs, and expanded cfg_checker validation.

└──▷ GET THIS VERSION

$ git clone --branch 2.0.5 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 2.0.5

Adds platform configuration for Intel 440FX (QEMU), enabling CHIPSEC analysis in QEMU-based virtual environments.
Adds Meteor Lake (MTL) Device IDs from the datasheet, expanding hardware coverage for MTL platforms.
Adds BAR register/field validity and subcomponent type checks to cfg_checker, strengthening configuration validation.
Splits tcobar and smbus_base into their own configuration files, improving modularity of platform configs.

4 details in Everything

2.0.5 Jun 16, 2026 · issue 014

CHIPSEC 2.0.5 adds Intel 440FX (QEMU) config, Meteor Lake DIDs, and expanded cfg_checker validation.

└──▷ GET THIS VERSION

$ git clone --branch 2.0.5 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 2.0.5

Adds platform configuration for Intel 440FX (QEMU), enabling CHIPSEC analysis against QEMU-emulated environments.
Adds Meteor Lake (MTL) Device IDs from the datasheet, extending hardware coverage for 14th Gen Intel Core platforms.
Adds BAR register/field validity and subcomponent type checks to cfg_checker, improving configuration correctness validation.
Splits tcobar and smbus_base into their own dedicated configuration files for cleaner platform config organization.

4 details in Everything

2.0.4 May 29, 2026 · release notes

CHIPSEC 2.0.4 adds execution timestamps to logs and ISO-format datetime in auto-log filenames.

└──▷ GET THIS VERSION

$ git clone --branch 2.0.4 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 2.0.4

Captures time of execution in CHIPSEC logging output.
Uses ISO 8601 format for datetime in auto-generated log filenames.

2 details in Everything

2.0.3 May 1, 2026 · release notes

CHIPSEC 2.0.3 adds Arrow Lake-H platform support, BDF instance targeting for MMIO, and a register cross-reference error-detection function.

└──▷ GET THIS VERSION

$ git clone --branch 2.0.3 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 2.0.3

Adds Arrow Lake-H (ARL-H) platform support to CHIPSEC's hardware configuration.
Enables the MMIO HAL and command to accept a BDF (Bus:Device.Function) instance, allowing targeted MMIO operations on specific PCI endpoints.
Adds a function to cross-reference registers and surface configuration errors.

3 details in Everything

2.0.2 Mar 31, 2026 · release notes

CHIPSEC 2.0.2 adds Lunar Lake platform config, firmware data retrieval, and UEFI Shell support for chipsec2.

└──▷ GET THIS VERSION

$ git clone --branch 2.0.2 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 2.0.2

Adds initial configuration support for Intel Lunar Lake (LNL) platforms, enabling hardware security analysis on the new architecture.
Adds firmware data retrieval capability for extracting firmware information during platform analysis.
Updates chipsec2 to run in the UEFI Shell environment, expanding pre-OS assessment options.
Updates ASM support for the return thunk introduced in Linux kernel 6.19, maintaining compatibility with modern kernels.

4 details in Everything

1.13.20 Jan 30, 2026 · release notes

CHIPSEC 1.13.20 adds Brotli (de)compression support for firmware analysis.

└──▷ GET THIS VERSION

$ git clone --branch 1.13.20 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.13.20

Supports Brotli compression and decompression for firmware image parsing.

1 detail in Everything

1.13.18 Nov 21, 2025 · release notes

CHIPSEC 1.13.18 adds a new SGX warning condition and an XML attribute-type validator script.

└──▷ GET THIS VERSION

$ git clone --branch 1.13.18 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.13.18

Adds an additional warning condition to the sgx_check module for broader SGX misconfiguration coverage.
Adds xml_validator script to verify attribute types in CHIPSEC XML configuration files.

2 details in Everything

1.13.17 Oct 30, 2025 · release notes

CHIPSEC 1.13.17 adds confirmation input during dependency installation

└──▷ GET THIS VERSION

$ git clone --branch 1.13.17 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.13.17

1.13.16 Sep 5, 2025 · release notes

CHIPSEC 1.13.16 lets access_uefispec accept both hex and base-10 formatted attribute inputs.

└──▷ GET THIS VERSION

$ git clone --branch 1.13.16 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.13.16

1.13.15 Aug 1, 2025 · release notes

CHIPSEC 1.13.15 adds TPM2 support, CML PCH strap lock testing, and more configurable UEFI variable modification checks.

└──▷ GET THIS VERSION

$ git clone --branch 1.13.15 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.13.15

Adds TPM2 support for firmware security analysis.
Adds strap lock test support for Comet Lake (CML) PCH platforms.
Makes the UEFI variable modification test more configurable.
Extends reg.is_defined to check BAR when evaluating MMIO/IOBAR registers.

4 details in Everything

1.13.13 May 29, 2025 · release notes

CHIPSEC 1.13.13 revamps HAL compression with new ZLIB and GZIP support and improved LZMA handling.

└──▷ GET THIS VERSION

$ git clone --branch 1.13.13 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.13.13

Adds ZLIB and GZIP compression support to the HAL compression layer.
Improves LZMA compression handling in the HAL compression layer.

2 details in Everything

1.13.12 May 1, 2025 · release notes

CHIPSEC 1.13.12 adds EFI compressed data validation and an env var for brute-force EFI module scanning.

└──▷ GET THIS VERSION

$ git clone --branch 1.13.12 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.13.12

Adds validation of EFI compressed data before attempting Tiano/UEFI decompression, preventing unsafe decompression of malformed firmware blobs.
Adds an environment variable to enable brute-force EFI module scanning at the HAL layer, unlocking deeper firmware analysis when standard enumeration falls short.
Automatically detects the running kernel version to locate the correct script for signing the CHIPSEC driver, simplifying secure-boot-enabled deployments.

3 details in Everything

1.13.11 Mar 26, 2025 · release notes

CHIPSEC 1.13.11 adds MC1 registers for Raptor Lake and an Arch Linux image.

└──▷ GET THIS VERSION

$ git clone --branch 1.13.11 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.13.11

Adds MC1 registers to the Raptor Lake (RPL) platform definition, expanding hardware register coverage for that CPU family.
Adds Arch Linux Docker image generation for CHIPSEC, with reduced image size.

2 details in Everything

1.13.10 Feb 26, 2025 · release notes

CHIPSEC 1.13.10 adds MC1 register check to remap, new module archiving status, metadata tags, and dynamic log filenames.

└──▷ GET THIS VERSION

$ git clone --branch 1.13.10 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.13.10

Adds MC1 register check to the remap module for broader memory remapping validation.
Adds archiving status tracking to the framework for test modules.
Adds metadata tags to modules and removes the MTAG prefix from module tags.
Changes default logger file name to include the entry name and timestamp (entry-yearMonDay-Time.log).
Adds Windows Server 2025 to officially supported versions.

+1 more show less

Changes sgx_check module result to information when CPU is a sample part, rather than a pass/fail verdict.

6 details in Everything

└──▷ BREAKING ON UPGRADE

!The MTAG prefix is removed from module tags; scripts or tooling that filter or match tags using the MTAG prefix will no longer find matches.
!The default logger file name format has changed to entry-yearMonDay-Time.log; any automation that relies on the previous default log file name pattern will need to be updated.

1.13.9 Jan 29, 2025 · release notes

CHIPSEC 1.13.9 adds PCH C621A platform support and improves replay helper error reporting.

└──▷ GET THIS VERSION

$ git clone --branch 1.13.9 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.13.9

Adds PCH C621A to the pch_c260 config file, enabling hardware security analysis on that platform.
Adds informative error messages when required data is missing during replay helper sessions.

2 details in Everything

1.13.8 Dec 11, 2024 · release notes

CHIPSEC 1.13.8 adds SamplePart detection, statistical SMI enumeration, PCH 700-series support, and a live USB build system.

└──▷ GET THIS VERSION

$ git clone --branch 1.13.8 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.13.8

Adds SamplePart control check to the debugenabled module to detect engineering/sample silicon.
Adds CPU sample-part detection to the sgx_check module.
Introduces statistical SMI enumeration using standard deviation for more reliable SMI discovery.
Adds live USB automatic build support via mkosi.
Adds PCH 700-series Device IDs (DIDs) to the PCH 600-series config, extending platform coverage.

+1 more show less

Adds a utility to decode test names and IDs from test output.

6 details in Everything

└──▷ BREAKING ON UPGRADE

!Python minimum requirement raised from 3.7 to 3.8; setups running Python 3.7 will no longer work.

1.13.7 Oct 30, 2024 · release notes

CHIPSEC 1.13.7 adds AMD common modules, improves SMI detection accuracy, and expands EFI module detection.

└──▷ GET THIS VERSION

$ git clone --branch 1.13.7 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.13.7

Adds initial AMD common modules, extending platform coverage to AMD-based systems.
Improves SMI detection accuracy for more reliable System Management Interrupt analysis.
Improves detection of certain EFI modules previously missed during firmware analysis.

3 details in Everything

1.13.6 Sep 26, 2024 · release notes

CHIPSEC 1.13.6 adds GIL status reporting, module exclusion support, and configurable logger line termination.

└──▷ GET THIS VERSION

$ git clone --branch 1.13.6 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.13.6

└──▷ TRY IT

Skip a noisy or irrelevant module during a full platform scan without modifying config files.

$ chipsec_main.py --exclude chipsec.modules.common.bios_wp

Adds GIL (Global Interpreter Lock) status reporting to surface Python GIL state during runs.
Adds --exclude module support to options, allowing specific modules to be skipped during a scan.
Adds ability to change line termination of the logger output.

3 details in Everything

1.13.4 Jul 30, 2024 · release notes

CHIPSEC 1.13.4 adds Meteor Lake SPI support, SMI contention scanning, remap lock bit checks, and expanded Linux physical memory write size.

└──▷ GET THIS VERSION

$ git clone --branch 1.13.4 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.13.4

Adds Meteor Lake SPI support for firmware analysis on MTL platforms.
Adds SMI contention check to the smm_ptr module's scan mode.
Adds remap lock bit condition check to memory remapping security analysis.
Increases Linux maximum physical memory write size from 0xFFFF to 0xFFFFFFFF, enabling larger memory operations.
Adds NVRAM firmware volume padding check for deeper UEFI NVRAM validation.

+2 more show less

Adds error message when UEFI compression modules are missing, improving diagnosis of incomplete setups.
Enables ANSI color logging on Windows via the logger color command.

7 details in Everything

1.13.3 Jun 28, 2024 · release notes

CHIPSEC 1.13.3 adds get_max_memory_bit_size to the physical memory HAL and updates TE test download prompts

└──▷ GET THIS VERSION

$ git clone --branch 1.13.3 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.13.3

Adds get_max_memory_bit_size to the physical memory (physmem) HAL for querying maximum addressable memory bit sizes
Adds a TE (Tiano Edition) test download prompt to streamline module setup

2 details in Everything

1.13.2 May 29, 2024 · release notes

CHIPSEC 1.13.2 adds SMI enumeration to smm_ptr, Meteor Lake support, and new MBox utils.

└──▷ GET THIS VERSION

$ git clone --branch 1.13.2 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.13.2

smm_ptr module now supports SMI enumeration mode for broader SMI coverage
Adds Meteor Lake platform support
New make_mask and set_bits utility functions in the mbox module

3 details in Everything

1.13.1 Apr 25, 2024 · release notes

CHIPSEC 1.13.1 adds default_helper to util_config and lock fields to xml schema.

└──▷ GET THIS VERSION

$ git clone --branch 1.13.1 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.13.1

util_config option section now supports a new default_helper key for specifying a helper executable.
XML configuration schema extended with lock-related fields, enabling lock state definitions in config files.

2 details in Everything

1.13.0 Mar 28, 2024 · release notes

Adds -csv log option to output results in CSV format.

└──▷ GET THIS VERSION

$ git clone --branch 1.13.0 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.13.0

└──▷ TRY IT

Export test results to a CSV file for offline analysis.

$ chipsec_util.py <subcommand> -csv <filename>

List all available modules in the local modules folder.

$ chipsec_util.py -lm

Add csv log option and fix value returned after running only one test
Enumerate modules in modules folder using '-lm'

2 details in Everything

1.12.8 Jan 25, 2024 · release notes

Adds CET module for chipset security telemetry and new verbose PCI device printing.

└──▷ GET THIS VERSION

$ git clone --branch 1.12.8 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.12.8

Add CET module: Enables Chipset Error Tracking (CET) support in CHIPSEC

1 detail in Everything

1.12.4 Oct 26, 2023 · release notes

CHIPSEC 1.12.4 adds return codes support to core modules and new test ID generation

└──▷ GET THIS VERSION

$ git clone --branch 1.12.4 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.12.4

Add return codes support to bios_kbrd_buffer, bios_smi, bios_ts modules extending the new error reporting capability

1 detail in Everything

1.12.3 Sep 29, 2023 · release notes

Adds return codes support to numerous fuzzing and VMM tools, enabling scripted error handling.

└──▷ GET THIS VERSION

$ git clone --branch 1.12.3 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.12.3

Adds return_codes support to the vmm.venom tool
Adds return_codes support to the wsmt tool
Adds return_codes support to the iofuzz, msr_fuzz, and pcie_fuzz tools
Adds return_codes support to the vbox and xen VMM folders in tools
Adds return_codes support to the cpuid_fuzz, ept_finder, and hypercallfuzz tools

+1 more show less

Adds return_codes support to the sinkhole, te, rogue_mmio_bar, and smm_ptr tools

6 details in Everything

1.12.1 Aug 30, 2023 · release notes

Adds PCIe extended capabilities functionality in CHIPSEC 1.12.1

└──▷ GET THIS VERSION

$ git clone --branch 1.12.1 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.12.1

1.12.0 Jul 28, 2023 · release notes

CHIPSEC 1.12.0 adds --skip_config CLI flag and log output outside LOGPATH

└──▷ GET THIS VERSION

$ git clone --branch 1.12.0 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.12.0

Enables logging to paths outside the default LOGPATH directory via updated config parsing

1 detail in Everything

└──▷ BREAKING ON UPGRADE

!Configuration files must now include an <info></info> block or loading will fail due to modified config loading behavior

1.11.1 Jun 28, 2023 · release notes

Adds -nl flag to disable autologging and support for 600 Series PCH device IDs

└──▷ GET THIS VERSION

$ git clone --branch 1.11.1 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.11.1

└──▷ TRY IT

Run chipsec without generating log files to keep the working directory clean

$ chipsec_util run <module> -nl

Ensure custom helper modules are located in the correct path for the new structure

$ cp my_helper.py chipsec/helper/myhelper/myhelper_helper.py

Adds -nl switch to disable automatic logging output
Adds Device IDs for Intel 600 Series PCH to config
Adds return codes mode option to main and util modules

3 details in Everything

└──▷ BREAKING ON UPGRADE

!The OSXHelper is removed; running chipsec on macOS requires using a version before 1.11.0.
!If you have custom helpers, they must be placed in chipsec/helper/<name>/<name>helper.py and named correctly.

1.11.0 May 31, 2023 · release notes

CHIPSEC 1.11.0 adds .run() CLI subcommand, efi_var_enhanced_auth_access check, LZMAF86 decompression, and Intel TXT register definitions

└──▷ GET THIS VERSION

$ git clone --branch 1.11.0 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.11.0

Adds .run() subcommand to chipsec_main.py and chipsec_util.py to execute modules via a unified interface
Adds flag and check for efi_var_enhanced_auth_access in the EFI variable subsystem
Adds support for the LZMAF86 compression format
Adds Intel TXT register definitions from the SEAM Loader for chipset analysis

4 details in Everything

└──▷ BREAKING ON UPGRADE

!The Python UEFI Shell executable is renamed from python368.efi to python.efi, breaking paths or scripts referencing the old name
!The CHIPSEC_LOADED_AS_EXE environment variable support is deprecated and may be removed in future releases
!The OSXHelper module and driver are removed; chipsec will no longer work on macOS unless downgraded to v1.10.x

1.10.4 Mar 30, 2023 · release notes

CHIPSEC 1.10.4 adds Elkhart Lake platform configuration support

└──▷ GET THIS VERSION

$ git clone --branch 1.10.4 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.10.4

1.10.3 Mar 1, 2023 · release notes

CHIPSEC 1.10.3 adds --skip_config flag and updates Raptor Lake configuration

└──▷ GET THIS VERSION

$ git clone --branch 1.10.3 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.10.3

Adds the --skip_config CLI argument to suppress the extended startup banner.
Expands hardware coverage by adding MCHBAR support to the Raptor Lake platform configuration.

2 details in Everything

1.10.1 Jan 25, 2023 · release notes

CHIPSEC 1.10.1 adds rpl config support and decouples main module from logger for cleaner execution.

└──▷ GET THIS VERSION

$ git clone --branch 1.10.1 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.10.1

Adds rpl config to enable support for Raptor Lake platforms
Decouples chipsec_main from the logger to allow independent control of main module behavior

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Service is deprecated and the configuration file for it is being removed.

1.10.0 Dec 19, 2022 · release notes

CHIPSEC 1.10.0 adds --module_exclude flag and signed FV parsing to its CLI.

└──▷ GET THIS VERSION

$ git clone --branch 1.10.0 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.10.0

Adds --module_exclude flag to chipsec_main to skip specified modules during execution
Adds ability to parse Firmware Volumes (FVs) contained within a signed Firmware Volume

2 details in Everything

└──▷ BREAKING ON UPGRADE

!CHIPSEC now exits immediately if detected running under Python 2

1.9.0 Oct 1, 2022 · release notes

Chipsec 1.9.0 adds fw bleed vulnerability scanning via scan_blocked, new QEMU UEFI VM script, and expanded logging API.

└──▷ GET THIS VERSION

$ git clone --branch 1.9.0 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.9.0

Add fw_bleed detection capability to the scan_blocked tool in chipsec/modules/tools/uefi/blockedlist.json
Add scripts.qemu_efi helper script to start a QEMU virtual machine with a UEFI shell
Add log_hal, log_verbose, and log_debug functions to the logger module for granular logging control
Add setlevel function in chipsec_main, chipsec_util, chipset, and logger to programmatically adjust log levels

4 details in Everything

└──▷ BREAKING ON UPGRADE

!The master branch has been renamed to main

1.8.8 Aug 27, 2022 · release notes

CHIPSEC 1.8.8 adds PCH configuration for 600 series and updates Windows driver support for VS2022.

└──▷ GET THIS VERSION

$ git clone --branch 1.8.8 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.8.8

Adds 8086/pch_6xxP and 8086/pch_6xxS to public configurations for 600 series PCH support
Adds VS2022 support for the Windows driver via updates in drivers/win7/driver.c

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Python2 is no longer supported and requires using Python3 instead.

1.8.6 Jun 22, 2022 · release notes

Adds configuration files for Intel PCH 7/8 series and CML DIDs

└──▷ GET THIS VERSION

$ git clone --branch 1.8.6 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.8.6

Adds 8086/pch_7x config file to support Intel 7 series Platform Controller Hub
Adds 8086/pch_8x config file to support Intel 8 series Platform Controller Hub
Adds CML DIDs from the 10th Gen Core Datasheet Vol 1 via the 8086/cml config file

3 details in Everything

└──▷ BREAKING ON UPGRADE

!Python2 support is removed; Chipsec 1.8.6 requires Python3.
!The default branch for source code changes from master to main.

1.8.4 Apr 27, 2022 · release notes

Adds AlderLake platform support via new 8086/adl config and updates SoC configs for main branch usage

└──▷ GET THIS VERSION

$ git clone --branch 1.8.4 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.8.4

└──▷ TRY IT

Update local repository clone to use the new default branch after migration.

$ git remote set-head origin main && git fetch origin main

Add config file for AlderLake platforms (8086/adl)
Update SoC based configs for ApolloLake, Avn, BayTrail, CherryTrail, and Denverton platforms (8086/apl, 8086/avn, 8086/byt, 8086/cht, 8086/dnv)

2 details in Everything

1.8.2 Mar 1, 2022 · release notes

CHIPSEC 1.8.2 adds chipsec_util txt to dump Intel TXT public registers and new SMM configuration bits.

└──▷ GET THIS VERSION

$ git clone --branch 1.8.2 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.8.2

└──▷ TRY IT

Dump the current state of Intel TXT public registers from the command line.

$ chipsec_util txt dump

Check the state of Intel TXT components.

$ chipsec_util txt state

Adds txt subcommand to chipsec_util with dump and state operations for Intel TXT public registers
Adds InSMM.STS bit definition and several registers in the fed30000 memory area under 8086/txt configuration

2 details in Everything

└──▷ BREAKING ON UPGRADE

!The master branch has been renamed to main

1.8.1 Feb 1, 2022 · release notes

CHIPSEC 1.8.1 adds UEFI GUID/size output, TcoCtlLock and Intel TXT register configs, and case-insensitive config search.

└──▷ GET THIS VERSION

$ git clone --branch 1.8.1 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.8.1

access_uefispec module now outputs Guid and Size
Added TcoCtlLock support for 8086/pch_495 configuration
Added registers for Intel TXT to 8086/common and 8086/txt configurations
Config files are found in case-insensitive mode

4 details in Everything

└──▷ BREAKING ON UPGRADE

!The master branch has been renamed to main

1.8.0 Dec 9, 2021 · release notes

CHIPSEC 1.8.0 adds named flags and capabilities for MMIO/PCI/SKU discovery and UEFI Python3 migration.

└──▷ GET THIS VERSION

$ git clone --branch 1.8.0 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.8.0

Adds --dump_unnamed_mmio to utilcmd.mmio_cmd to dump unnamed MMIO regions
Computes MMCFG size dynamically from MmioCfgBaseAddr in hal.mmio instead of hardcoding values
Detects PCH based on platform vendor ID using logic in the chipset module
Detects presence of SKU entries via new logic in the chipset module
Loads XML configuration only for the current vendor, optimizing setup in the chipset module

+4 more show less

Logs QWORD memory reads as qword in hal.physmem for accurate trace output
Adds support for AMD Renoir platform with new XML configs under 1022/renoir and descriptions in chipsec/cfg/chipsec_cfg.xsd
Extends PCI dump functionality with optimizations in hal.pci and utilcmd.pci_cmd
Migrates UEFI Shell environment to Python 3.6.8 via updated binaries in __install__/UEFI/

9 details in Everything

└──▷ BREAKING ON UPGRADE

!Python2 is no longer supported for CHIPSEC 1.8.0; users must use Python3.

1.7.2 Sep 29, 2021 · release notes

Adds lock_check_cmd utility to check platform HAL lock status

└──▷ GET THIS VERSION

$ git clone --branch 1.7.2 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.7.2

└──▷ USE IT

Check all available hardware lock statuses on a supported platform

shell

chipsec_util check all

Check the status of specific locks, such as BIOS write protect

shell

chipsec_util check lock <lockname1, lockname2>

1.7.0 Jul 29, 2021 · release notes

CHIPSEC 1.7.0 adds ICX platform support and TPM 1.2 configuration definitions

└──▷ GET THIS VERSION

$ git clone --branch 1.7.0 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.7.0

8086/icx config: Adds Intel Ice Lake (ICX) platform support to Chipsec
8086/tpm12 config: Adds configuration definition for TPM 1.2

2 details in Everything

1.6.4 Jun 26, 2021 · release notes

Adds common.wsmt module to check WSMT table presence and configuration.

└──▷ GET THIS VERSION

$ git clone --branch 1.6.4 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.6.4

1.6.0 Apr 1, 2021 · release notes

Chipsec 1.6.0 adds utilcmd.config_cmd, new SMC port option to interrupts_cmd, and CML/RKL configs

└──▷ GET THIS VERSION

$ git clone --branch 1.6.0 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.6.0

Adds a new -p / --smmc-port flag to the interrupts_cmd subcommand to specify the SMC port option
Adds textual representation of the status returned by send_smmc_SMI in utilcmd.interrupts_cmd and hal.uefi_common
Adds CML, RKL, pch4xx, pch4xxh, pch5xxh, and pch5xxlp configuration files under 8086/ for new CPU/chipset support

3 details in Everything

1.5.10 Feb 25, 2021 · release notes

Adds common.smm_code_chk module to verify SMM_Code_Chk_En configuration on Intel platforms

└──▷ GET THIS VERSION

$ git clone --branch 1.5.10 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.5.10

Introduces the common.smm_code_chk new module that checks if SMM_Code_Chk_En is configured properly

1 detail in Everything

1.5.9 Jan 27, 2021 · release notes

CHIPSEC 1.5.9 adds -vv very verbose flag to CLI tools and Python3 kallsyms support for Linux drivers.

└──▷ GET THIS VERSION

$ git clone --branch 1.5.9 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.5.9

Adds -vv command-line option to chipsec_main and chipsec_util for extremely verbose output
Updates utilcmd.mmcfg_cmd, utilcmd.msgbus_cmd, utilcmd.reg_cmd, utilcmd.spd_cmd, utilcmd.spidesc_cmd, and utilcmd.vmm_cmd CLIs to use argparse
Adds direct access to kernel symbols via /proc/kallsyms in the Linux driver drivers/linux/chipsec_km.c

3 details in Everything

└──▷ BREAKING ON UPGRADE

!Python2 support has been deprecated; Python3 is now required.

1.5.5 Sep 25, 2020 · release notes

CHIPSEC 1.5.5 adds skip_config and no_banner CLI flags to chipsec_main/utilcmd and a Windows Spectre V2 Retpoline check

└──▷ GET THIS VERSION

$ git clone --branch 1.5.5 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.5.5

Adds skip_config and no_banner command-line options to chipsec_main and chipsec_util to control configuration loading and console output
Adds common.cpu.spectre_v2 module check for the presence of the Retpoline mitigation on Windows platforms
Adds retpoline_supported() function to helper modules (helper.basehelper, helper.linux.linuxhelper, helper.oshelper, helper.osx.osxhelper, helper.rwe.rwehelper, helper.win.win32helper) to support the new Spectre V2 detection
Updates utilcmd.cmos_cmd, utilcmd.ec_cmd, and utilcmd.io_cmd to use argparse for argument parsing

4 details in Everything

1.5.4 Aug 31, 2020 · release notes

CHIPSEC 1.5.4 adds chipsec_util cpu topology subcommand to display CPU topology information.

└──▷ GET THIS VERSION

$ git clone --branch 1.5.4 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.5.4

└──▷ TRY IT

Inspect the current system's CPU topology using the new utility command.

$ chipsec_util cpu topology

Adds chipsec_util cpu topology command under the utilcmd.cpu_cmd module to expose CPU topology details.

1 detail in Everything

1.5.2 Jun 30, 2020 · release notes

CHIPSEC 1.5.2 adds PCH 4xx support and refactors config namespace.

└──▷ GET THIS VERSION

$ git clone --branch 1.5.2 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.5.2

Adds common.bios_kbrd_buffer module for BIOS keyboard buffer analysis
Adds common.bios_smi module with updated is_supported logic for SMI checks
Adds 8086/pch_4xx platform support in configurations
Adds hal.uefi_fv file to simplify Firmware Volume functionality

4 details in Everything

└──▷ BREAKING ON UPGRADE

!Moved debugenabled, memconfig, remap, smm_dma to common.debugenabled, common.memconfig, common.remap, common.smm_dma
!Python2 support has been deprecated as of June 2020; users must use Python3

1.5.1 May 29, 2020 · release notes

CHIPSEC 1.5.1 adds cpu.ia_untrusted module and updates rtclock with manual write support

└──▷ GET THIS VERSION

$ git clone --branch 1.5.1 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.5.1

└──▷ USE IT

Check all cores for the IA untrusted bit on supported platforms.

shell

chipsec_util main cpu ia_untrusted

Adds the cpu.ia_untrusted module to identify if the IA untrusted bit is set on all cores
Updates remap, smm_dma, and memconfig modules to handle CPUs with the IA untrusted register defined
Adds a modify switch to the rtclock module to allow manual writing to the RTC memory region
Adds 10nm platform support via the ia_untrusted module

4 details in Everything

1.5.0 May 1, 2020 · release notes

CHIPSEC 1.5.0 adds --md flag to chipsec_main for markdown output and supports CML-H PCH via new pch_4xxh config.

└──▷ GET THIS VERSION

$ git clone --branch 1.5.0 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.5.0

chipsec_main gains a new command-line option to export results in markdown format
New configuration file pch_4xxh enables support for Comet Lake-H PCH chipsets

2 details in Everything

1.4.9 Mar 27, 2020 · release notes

CHIPSEC 1.4.9 adds tools.vmm.ept_finder module and compressed kernel module support

└──▷ GET THIS VERSION

$ git clone --branch 1.4.9 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.4.9

Adds tools.vmm.ept_finder module to locate Extended Page Tables (EPT)
Adds support for compressed kernel modules in the Linux helper (helper.linux.linuxhelper)

2 details in Everything

1.4.8 Mar 3, 2020 · release notes

CHIPSEC 1.4.8 adds tools.uefi.reputation module for EFI module reputation checks via VirusTotal API

└──▷ GET THIS VERSION

$ git clone --branch 1.4.8 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.4.8

Adds tools.secureboot.shell module including Shell.efi
Adds new PCH configurations: pch_3xx, pch_3xxlp, and pch_3xxop

2 details in Everything

1.4.6 Jan 24, 2020 · release notes

CHIPSEC 1.4.6 adds --helper CLI flag and SFDP/UEFI SPIBar config support.

└──▷ GET THIS VERSION

$ git clone --branch 1.4.6 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.4.6

Adds --helper variable to the chipsec_util CLI to allow explicit helper selection
Adds SFDP definition configuration in common.py
Adds Registers on SPIBar configuration in common.xml

3 details in Everything

1.4.5 Dec 20, 2019 · release notes

CHIPSEC 1.4.5 adds smmc-based SMI support via interrupts_cmd and helper.interrupts

└──▷ GET THIS VERSION

$ git clone --branch 1.4.5 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.4.5

interrupts_cmd module gains support for smmc based SMI handling

1 detail in Everything

1.4.4 Nov 21, 2019 · release notes

CHIPSEC 1.4.4 adds hal.smbios module with raw/decoded output and PCH platform configs

└──▷ GET THIS VERSION

$ git clone --branch 1.4.4 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.4.4

└──▷ USE IT

Extract raw and decoded SMBIOS structures from the hardware using the new command-line tool.

shell

chipsec_util smbios

Configure CHIPSEC to load a specific PCH configuration by setting the attribute in your XML setup file.

xml

<chipsec setup="true" req_pch="True"> ... </chipsec>

Adds hal.smbios module to print entry points, raw structures, or decoded structures via the new utilcmd.smbios_cmd subcommand
Extends common.spi_access to use Flash Descriptor Observability registers for OR-ing settings from the flash descriptor into FRAP register fields
Adds support for cml, pch_4xxlp, pch_495, and glk platforms in new updated configuration profiles
Enables loading PCH configuration files by adding req_pch="True" to XML configuration attributes

4 details in Everything

└──▷ BREAKING ON UPGRADE

!The remap module no longer runs on Atom processors because its is_supported check was modified.

1.4.3 Oct 22, 2019 · release notes

Adds common.cpu.cpu_info module for general CPU data; improves chipset ID support and UEFI detection

└──▷ GET THIS VERSION

$ git clone --branch 1.4.3 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.4.3

1.4.1 Sep 5, 2019 · release notes

CHIPSEC 1.4.1 adds per-thread register checking, custom helper loading, and Python 3 compliance across core modules.

└──▷ GET THIS VERSION

$ git clone --branch 1.4.1 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.4.1

modules.common.ia32cfg now enables per thread checking of settings for more granular hardware state analysis
Adds ability to load custom_helpers via the module system for extensible analysis workflows
Register configuration files can now reference memory type directly within register definitions
Full Python 3 compliance added to tools.secureboot.te, modules.common.spd_wd, modules.tools.uefi.uefivar_fuzz, hal.acpi, and fuzzing.primitives

4 details in Everything

1.4.0 Aug 20, 2019 · release notes

CHIPSEC 1.4.0 adds python3 support and c6xx platform coverage

└──▷ GET THIS VERSION

$ git clone --branch 1.4.0 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.4.0

python3 is now supported alongside python2.7
c6xx platforms are now supported

2 details in Everything

1.3.8 Jul 23, 2019 · release notes

CHIPSEC 1.3.8 adds SMM register replay, SPD write-disable checks, fuzzing primitives, and device-name config support

└──▷ GET THIS VERSION

$ git clone --branch 1.3.8 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.3.8

Add Clone and Replay ability - register values can be saved to and replayed from json file
common.spd_wd - new module to check SPD Write Disable bit
Added Fuzzing primitives file from Sulley fuzz testing framework
Dynamic bus support added
Add ability to define devices by name within configuration files

5 details in Everything

1.3.7 Mar 7, 2019 · release notes

CHIPSEC 1.3.7 enables modules on macOS and allows passing arguments to all modules via CLI

└──▷ GET THIS VERSION

$ git clone --branch 1.3.7 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout 1.3.7

Enables common.bios_smi, common.ia32cfg, common.smrr, and smm_dma modules on macOS
Allows command line arguments to be passed to all modules
Switches command line argument parsing module for chipsec_main and chipsec_util

3 details in Everything

v1.3.6 Nov 20, 2018 · release notes

CHIPSEC v1.3.6 adds me_mfg_mode and sgx_check modules, LoJax detection, JEDEC ID command, and new platform support.

└──▷ GET THIS VERSION

$ git clone --branch v1.3.6 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout v1.3.6

Added me_mfg_mode module for checking Management Engine manufacturing mode
Added sgx_check module and register definitions for SGX configuration validation
Added LoJax firmware rootkit detection capabilities
Added JEDEC ID command for reading memory device identification
Added ability to signal a module is not applicable via is_supported return value

+1 more show less

Added result delta functionality to highlight differences in results

6 details in Everything

└──▷ BREAKING ON UPGRADE

!Removed RWE (Read-Write-Execute) support due to issues accessing PCI resources

v1.3.6rc1 Prerelease Feb 27, 2018 · release notes

New chipsec_util vmem command for virtual memory access and PCH detection updates

└──▷ GET THIS VERSION

$ git clone --branch v1.3.6rc1 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout v1.3.6rc1

Added vmem subcommand to chipsec_util for accessing virtual memory addresses
Added PCH detection and loading of PCH specific configuration files, including 100 and 200 series
Added new INFORMATION module result types (NOT IMPLEMENTED, NOT APPLICABLE) to replace SKIPPED

3 details in Everything

└──▷ BREAKING ON UPGRADE

!Tests previously marked as SKIPPED are now recorded as NOT IMPLEMENTED in results

v1.3.4 Oct 23, 2017 · release notes

CHIPSEC v1.3.4 adds utilcmd subcommands for TPM Event Log inspection, TPM commands, and PCI command/control register analysis.

└──▷ GET THIS VERSION

$ git clone --branch v1.3.4 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout v1.3.4

Added utilcmd support for TPM Event Log inspection via the HAL
Added utilcmd support for executing TPM commands
Added utilcmd subcommand to inspect PCI command/control registers
Added ability to undefine a configuration entry in chipsec/config/chipsec.ini

4 details in Everything

v1.3.3 Sep 5, 2017 · release notes

v1.3.3 adds SPI access rights verification and string memory search capabilities

└──▷ GET THIS VERSION

$ git clone --branch v1.3.3 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout v1.3.3

Adds common.spi_access module to verify host processor access rights for different SPI regions
Adds ability to search a memory region for a string

2 details in Everything

v1.3.1 Jun 10, 2017 · release notes

v1.3.1 adds PFS support, MMIO MSGBUS access, and named register access in chipsec_util

└──▷ GET THIS VERSION

$ git clone --branch v1.3.1 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout v1.3.1

Adds PFS module support for platform firmware protection scenarios
Adds MMIO messaging bus (MSGBUS) support via new module
Enables named register access in chipsec_util CLI utility

3 details in Everything

└──▷ BREAKING ON UPGRADE

!Windows driver must be rebuilt because of internal changes in this version.

v1.3.0 Mar 29, 2017 · release notes

CHIPSEC v1.3.0 adds SMI count command, JSON export via CLI flag, and new UEFI whitelist/blacklist modules

└──▷ GET THIS VERSION

$ git clone --branch v1.3.0 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout v1.3.0

└──▷ TRY IT

Export scan results to a machine-readable file for downstream processing or integration with other cyber tooling.

$ chipsec_main -m tools.uefi.whitelist -a check /path/to/firmware.bin --json output.json

Monitor System Management Interrupt activity to detect potential SMI-based attacks or anomalies.

$ chipsec_util smi count

Adds --json command-line argument to export CHIPSEC results in JSON format
Adds SMI count command to the tool
Introduces tools.uefi.whitelist module to generate and check EFI executable lists against firmware images
Introduces tools.smm.rogue_mmio_bar experimental module for checking SMM firmware for MMIO BAR hijacking vulnerabilities
Introduces tools.uefi.uefivar_fuzz module for fuzzing the UEFI Variable interface via SPI flash NVRAM writes

5 details in Everything

v1.2.5 Nov 11, 2016 · release notes

CHIPSEC v1.2.5 adds Native OS API mode, VIRTIO/VMM hypercall interfaces, and limited macOS support

└──▷ GET THIS VERSION

$ git clone --branch v1.2.5 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout v1.2.5

Adds --mode native_os_api to enable the new Native OS API mode as an alternative to the CHIPSEC kernel module
Adds support for VIRTIO virtual devices for hardware probing on virtualized platforms
Adds VMM hypercall interfaces allowing direct hypercalls from Linux VMs without a kernel driver
Adds parsing capabilities for EFI firmware update capsules and RAW sections
Enables limited Alpha support for Mac OS X as a new operating system target

5 details in Everything

v1.2.4 Aug 13, 2016 · release notes

Adds VMM/Hypervisor fuzzing tools and new memory/config assessment modules

└──▷ GET THIS VERSION

$ git clone --branch v1.2.4 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout v1.2.4

Adds tools.vmm.hypercallfuzz generic hypercall fuzzer, tools.vmm.xen.hypercallfuzz, tools.vmm.xen.hypercallinfo, tools.vmm.hv.hypercallfuzz, tools.vmm.hv.vmbusfuzz, tools.vmm.hv.synth_dev, and tools.vmm.hv.synth_kbd for testing VMM low-level interfaces
Adds tools.cpu.sinkhole to check if CPU is affected by The SMM memory sinkhole vulnerability
Adds tools.uefi.blacklist to check UEFI firmware image for black-listed EFI binaries, using configuration in blacklist.json
Adds new modules memconfig, common.spi_fdopss, common.ia32cfg, and common.rtclock for assessing memory map, SPI flash descriptor security override pin-strap, CPU architectural feature configuration lock, and RTC memory location protection respectively
Enables automatic loading/unloading of the Linux kernel module by CHIPSEC

5 details in Everything

v1.1.0 May 29, 2014 · release notes

Adds --import flag for arbitrary module paths, custom platform definition, and new UEFI/Windows driver capabilities in v1.1.0

└──▷ GET THIS VERSION

$ git clone --branch v1.1.0 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:
$ git checkout v1.1.0

Adds -I / --import command-line options to load modules from an arbitrary path
Enables definition of custom platforms via new configuration mechanism
Adds IOCTL_ALLOC_PHYSMEM IOCTL in the Windows driver to allocate physical memory buffers

3 details in Everything

CHIPSEC

Summary

How CHIPSEC helps

Languages

Features

What CHIPSEC offers you

release 46 total

docs

release 16 total

example

release 7 total

docs

command line

release 8 total

example

release 8 total

example

release 7 total

example

release 8 total

release

release

release

example

release

example

release

release

release

command line

release

example

release

release

release

release

release

release

example

release

release

release

release

release

docs

release

release

release

release

release

example

release

release

release

release

release

release

release

release

docs

release

release

release

release

release

release

release

release

release

release

release

release

release

release

release

release

release

release

release

release