BIOS Disassembly Ninjutsu Uncovered (Uncovered series) [Paperback]

Darmawan Salihun (Author)

Book Description

ISBN-10: 1931769605 | ISBN-13: 978-1931769600 | Publication Date: October 28, 2006

Explaining security vulnerabilities, possible exploitation scenarios, and prevention in a systematic manner, this guide to BIOS exploitation describes the reverse-engineering techniques used to gather information from BIOS and expansion ROMs. SMBIOS/DMI exploitation techniques—including BIOS rootkits and computer defense—and the exploitation of embedded x86 BIOS are also covered.

Editorial Reviews

About the Author

Darmawan Salihun has published papers on BIOS reverse engineering, BIOS code injection techniques, BIOS hacking, Plug and Play BIOS, and PCI protocol exploitation in the CodeBreakers Journal.

Product Details

• Paperback: 450 pages
• Publisher: A-List Publishing (October 28, 2006)
• Language: English
• ISBN-10: 1931769605
• ISBN-13: 978-1931769600
• Product Dimensions: 9.2 x 7.4 x 1.2 inches
• Shipping Weight: 1.9 pounds
• Average Customer Review: 4.5 out of 5 stars  See all reviews (2 customer reviews)
• Amazon Best Sellers Rank: #1,647,417 in Books (See Top 100 in Books)

Customer Reviews

Most Helpful Customer Reviews

21 of 21 people found the following review helpful:

5.0 out of 5 stars everything you need to tweak the bios in your computer, July 4, 2007

By 

David Feustel (Fort Wayne, IN USA) - See all my reviews

This review is from: BIOS Disassembly Ninjutsu Uncovered (Uncovered series) (Paperback)

I did some work with the PC-AT BIOS and
BIOS extension roms 25 years ago, so
when I found out about this book I
ordered it immediately. Having read 1/2
of it and having built some of the
software (chapter 7) on the cdrom, I
give this book 5 stars, but with a
caveat. This book and its cdrom are
heavily Microsoft Windows-centric.
Doing things with the files on the cdrom
using linux or *bsd instead of Microsoft
Windows, while not difficult, will be
accompanied by a certain amount of pain
as the doer massages file formatting to
make the files work with the gcc
toolchain. It's even worse in my case
since I am running 64-bit OpenBSD and I
can't run any 32-bit software (eg Fasm)
on the 64-bit version of OpenBSD.

The reader of this book not familiar
with x86 assembly code had better have a
dos x86 assembly tutorial handy. All the
BIOS code is written in 16-bit x86
assembly.

That said, this is a uniquely
informative book on PC BIOS-related
hardware and I recommend it highly to
those who want to learn all about the
workings of the BIOS, either AWARD or AMI.

3 of 4 people found the following review helpful:

4.0 out of 5 stars Excellent book on an important topic, September 16, 2010

By 

David M. Small "quantum programmer" (Denver, CO) - See all my reviews
(REAL NAME)   

This review is from: BIOS Disassembly Ninjutsu Uncovered (Uncovered series) (Paperback)

BIOS Disassembly Ninjutsu Uncovered is a very good book indeed. The author, Darmawan Mappatutu Salihun, has the rare talent of explaining very complex topics in plain language. He really can take the worst obscure datasheets and tell you what's going on. This type of book is an all-too-rare find.

This book first gives you the Big Picture about the BIOS in PC computers, because you need that to find out where the next chapters fit in. What does the memory map look like? How does the BIOS start up? Then the author zeroes in on subjects that I haven't seen much coverage on anywhere. I didn't know how PCI worked, but he showed me how it was configured by the BIOS. How does the BIOS start up? Well, it's stored compressed, and gets uncompressed into RAM, and run. (Jeeze, the BIOS is really big!) Power On Self Test? BIOS file structure? Award and AMI BIOS layout? All here.

If nothing else, the author has gathered the essentials of a whole bunch of datasheets into one book. BIOS chips. Motherboard specs. CPU specs. PCI specs. On and on and on... You can see why this book stays on my "instant access" shelf.

In the areas the data sheets just do not cover, it's obvious the author has applied both hardware and software probes to find out... what on earth! is going on. Titles like "Obscure Hardware Ports" make my day! How a BIOS uses the CPU cache for RAM before RAM has been initialized ... cool beans!

Of course, he shows how to read and write the BIOS, along with plenty of warnings and caution. You definitely don't want to blunder into that without all the specialized knowledge (and source code!) in this book.

Then we get into how to read/write a PCI plug-in card's ROM, in careful detail. The author points out that this can make a simple PC into a nice embedded system teaching tool.

He discusses the (awful) problem of malware writers plugging virus code into the BIOS ROM, and how the ROM might be defended from this attack. (This left me wondering if perhaps I should just bend up the write-enable pin on my BIOS ROM ...)

He also covers the future of BIOS ROMs, the Unified Extensible Firmware Interface (UEFI), which succeeds the EFI, and is a hard enough to pronounce acronym that it'll probably take hold (*sigh*: UEFI ..."you-eee-fyy" ? )

The writer moves along briskly, doesn't waste time, and every paragraph is there for a reason. This is a well written book.

As a programmer who has done a heck of a lot of hardware-level programming (and read some incredibly crummy datasheets!), I recommend this book highly.

-- thanks,
David Small
Yep, that Mac emulator guy.