Welcome to the dark corner of BIOS reverse engineering, code injection and various modification techniques only deemed by those immensely curious about BIOS

Wednesday, February 29, 2012

BIOS Disassembly Ninjutsu Uncovered (1st Edition) [Unedited] PDF released

Hi guys,

I have released the BIOS Disassembly Ninjutsu Uncovered (1st Edition) [Unedited] PDF in GitHub. You can clone it from this URL: https://github.com/pinczakko/BIOS-Disassembly-Ninjutsu-Uncovered.git or download the zip https://github.com/pinczakko/BIOS-Disassembly-Ninjutsu-Uncovered/archive/master.zip for free. Well, the (copy) rights have expired and I guess lot's of people look forward to it. I don't have enough bandwidth to host it. If somebody wants to host it, please do so but please notify me via email.

Anyway, mind you that this is the unedited version, not the shipping version. You might find it a little rough here and there, but the manuscript is complete. If you remember, the English version of the book is 450 pages, but the Russian version is more than 600 pages. I haven't had time to check what was missing in the English edition compared to the Russian edition.

There are two alternative places to download the book at present (but be advised to try downloading from GitHub first in order not to burden the other two sites):
Happy reading :-)

PS: I have created a new group over at linkedin, i.e. "BIOS/UEFI Vulnerability and Reverse Engineering" if you want to discuss a thing or two.


BIOS Disassembly Ninjutsu Uncovered Errata:
-------------------------------------------------------

1. The address aliasing mentioned in Chapter 4 section 4.1.1 page 4 (the paging messed-up in the PDF) should cover both E-segment and F-Segment (E_0000h-F_FFFFh), not just the last 64-KB segment. Somebody used a sort of CPU logic analyzer to confirm this fact.
2. Chapter 9 section 9.2: The Flash_n_burn utility mentioned there is now named flashrom and become a quite independent part of the Coreboot (previously LinuxBIOS) project. See: http://flashrom.org/Flashrom

Anyway, if you found another errata please post it below. Thanks.


Post a Comment

15 comments:

Seth Stahlman said...

Thank you for posting this; it went out of print before I could buy a copy of it, and I've been resigned to waiting for the second edition. Now I have something to whet my appetite while I wait. Cheers!

Darmawan Salihun said...

Hi Seth. You're welcome :-). Happy to hear it's useful.

Darmawan Salihun said...

Thanks for the compliment guys :-)

Anonymous said...

It's great to have the copy. I sold my original because of money problems and because I thought the 2nd edition would hit the market soon.

Anyway, it's better to have a good quality 2nd edition as to have a half-baked book.

Darmawan Salihun said...

yeah, I'm not in a rush to publish the second edition. The first edition put me on a 6-month marathon to finish everything. I learned a lot from it. That's why there are quite hard to understand "monster" chapters.

davidm671 said...

What a book! Inspiring me to learn assembly. Was wondering though do you know how you can tell how much option rom space is available for modification? Thanks

Anonymous said...

ada versi indon ka..

kirim ke email saya..bacokecil23@gmail.com

Darmawan Salihun said...

nope, ga ada versi Bahasa Indonesia. Hanya Bahasa Inggris + Rusia.

Unknown said...

saya mau minta alamat Faebook nya kk low ada,iyaa mau tau banyak tetntang bios..??:)please....

Darmawan Salihun said...

ga ada facebook.

Anonymous said...

Thank you so much. Have wonderful day.

Anonymous said...

Any idea when the 2nd edition will be released?

Darmawan Salihun said...

Well, the 2nd Edition research is still on going. I have no firm target yet. I tried to finish the research this year though.

Ian Farquhar said...

Maybe find a better site for it than 4shared, which is an absolute rat's nest of misleading advertisements and drive-by downloads? As much as bandwidth costs, supporting sites which support their costs by association with criminals trying to install malware on user's PC's is simply unethical.

Darmawan Salihun said...

@Ian: Done a while ago. Thanks for the suggestion.