Windows UEFI bootkit that loads a generic driver manual mapper without using a UEFI runtime driver.
-
Setup a FAT32 formatted flashdrive with the following filesystem structure:
\EFI\Boot\bootx64.efi
wherebootx64.efi
is the compiled bootkit. -
Boot from the flashdrive.
This build prevents basic memory based detections and dispenses on mapping the drivers header.
This fork is inteded to be used without the "mapper". The targeted driver directly gets mapped at boot time.