{ "added_at": "2026-10-30", "additional_evidence_urls": [ "https://github.com/chipsec/chipsec/blob/c11756375417cc859e25a98e0788849ebd6eb8cc/chipsec/WARNING.txt", "https://github.com/chipsec/chipsec/blob/c11756375417cc859e25a98e0788849ebd6eb8cc/docs/sphinx/installation/InstallLinux.rst", "https://github.com/chipsec/chipsec/blob/c11756375417cc859e25a98e0788849ebd6eb8cc/docs/sphinx/installation/InstallWindows.rst", "https://github.com/chipsec/chipsec/blob/c11756375417cc859e25a98e0788849ebd6eb8cc/docs/sphinx/installation/USBwithUEFIShell.rst", "https://github.com/chipsec/chipsec/blob/c11756375417cc859e25a98e0788849ebd6eb8cc/docs/sphinx/usage/Running-Chipsec.rst", "https://github.com/chipsec/chipsec/blob/c11756375417cc859e25a98e0788849ebd6eb8cc/docs/sphinx/usage/Interpreting-Results.rst", "https://github.com/chipsec/chipsec/blob/c11756375417cc859e25a98e0788849ebd6eb8cc/chipsec/utilcmd/decode_cmd.py", "https://github.com/chipsec/chipsec/blob/c11756375417cc859e25a98e0788849ebd6eb8cc/chipsec/utilcmd/uefi_cmd.py", "https://github.com/chipsec/chipsec/blob/c11756375417cc859e25a98e0788849ebd6eb8cc/chipsec/modules/common/bios_wp.py", "https://github.com/chipsec/chipsec/blob/c11756375417cc859e25a98e0788849ebd6eb8cc/live_image/README.md", "https://github.com/chipsec/chipsec/blob/c11756375417cc859e25a98e0788849ebd6eb8cc/.github/workflows/tests.yml", "https://github.com/chipsec/chipsec/blob/c11756375417cc859e25a98e0788849ebd6eb8cc/LICENSE", "https://github.com/chipsec/chipsec/releases/tag/2.0.9" ], "category": "firmware", "description_en": "Platform security assessment framework, with Intel Corporation copyright notices, for analyzing PC hardware configuration, BIOS/UEFI system firmware and platform components from Windows, Linux or the UEFI shell. chipsec_main runs check modules that report whether expected protections are in place, such as BIOS and SPI flash write protection and locks, SMM and SMRR protection, memory-map locks and Secure Boot variables, as PASSED, FAILED, WARNING or informational results with JSON, XML and Markdown output. chipsec_util gives command-line and Python access to low-level interfaces and firmware data, including dumping the SPI flash to an image, decoding flash images into firmware volumes, files and NVRAM variables, and listing UEFI variables and tables.", "description_zh": "平台安全评估框架（源码带有 Intel Corporation 版权声明），可在 Windows、Linux 或 UEFI Shell 中分析 PC 硬件配置、BIOS/UEFI 系统固件及平台组件。chipsec_main 运行检查模块，报告预期的保护措施是否到位，例如 BIOS 与 SPI 闪存的写保护和锁定、SMM 与 SMRR 保护、内存映射锁定及安全启动变量，结果分为 PASSED、FAILED、WARNING 和信息类，并可输出 JSON、XML 和 Markdown。chipsec_util 通过命令行和 Python 访问底层接口和固件数据，包括将 SPI 闪存转储为镜像、把闪存镜像解析为固件卷、文件和 NVRAM 变量，以及列出 UEFI 变量和表。", "entry_url": "https://awesomerea.org/resources/chipsec/", "entry_url_zh": "https://awesomerea.org/zh/resources/chipsec/", "evidence_url": "https://github.com/chipsec/chipsec/blob/c11756375417cc859e25a98e0788849ebd6eb8cc/README.md", "group": "tools", "id": "chipsec", "json_url": "https://awesomerea.org/resources/chipsec/record.json", "kind": "tool", "markdown_url": "https://awesomerea.org/resources/chipsec/index.md", "markdown_url_zh": "https://awesomerea.org/zh/resources/chipsec/index.md", "name": "CHIPSEC", "name_zh": "CHIPSEC 平台安全评估框架", "record_type": "resource", "relationship": "foundation", "requirements": [ "Release at review: 2.0.9, published 2026-09-24 with a source zip; the reviewed chipsec2 commit is five configuration and bug-fix commits ahead. The installation guide says the PyPI package is outdated. The README sends older Intel platforms (clients before 12th-generation Core, servers before 3rd-generation Xeon Scalable) to the chipsec1 branch, and almost all bundled platform configurations are Intel ones.", "Runs as Administrator/root and loads a kernel driver that is distributed as source and built locally. Linux needs Python 3.8+, kernel headers, gcc and nasm; Windows 8 to 11 and Server 2012 to 2025 need Visual Studio with the WDK, and loading the self-built driver requires disabling driver signature enforcement or enabling test signing. The UEFI shell route boots a USB drive with the repository's prebuilt UEFI Python 3.6.8 package and requires Secure Boot to be off; a mkosi recipe builds a live Linux image. The --no-driver option works only for some commands and modules.", "chipsec/WARNING.txt says to use it only on test systems, never production machines: the driver gives user mode access to physical memory and other hardware resources, and incorrect hardware access can hang or crash the OS. Some utility commands write or erase SPI flash or change UEFI variables and can leave a system unbootable. A WARNING result requires manual analysis, and the results guide is marked as a draft.", "Flash images and platform data come from the machine under test or the user's own dumps; the repository bundles no vendor firmware images. CI builds the Linux driver across distributions and runs unit tests on recorded platform data plus a QEMU UEFI-shell test. GPL-2.0." ], "requirements_zh": [ "审阅时的版本为 2.0.9，于 2026-09-24 发布，附源码压缩包；所审阅的 chipsec2 分支提交领先五个配置与缺陷修复提交。安装指南称 PyPI 上的软件包已过时。README 建议较旧的 Intel 平台（12 代酷睿之前的客户端、第三代至强可扩展处理器之前的服务器）使用 chipsec1 分支，内置平台配置几乎全部针对 Intel。", "需以管理员／root 身份运行，并加载以源码形式发布、需在本地编译的内核驱动。Linux 需要 Python 3.8+、内核头文件、gcc 和 nasm；Windows 8 至 11 及 Server 2012 至 2025 需要 Visual Studio 和 WDK，加载自行编译的驱动需关闭驱动签名强制或启用测试签名。UEFI Shell 方式需用仓库内预编译的 UEFI Python 3.6.8 包制作 USB 启动盘，并关闭安全启动；另有 mkosi 配置可构建 Linux Live 启动镜像。--no-driver 选项只适用于部分命令和模块。", "chipsec/WARNING.txt 要求只在测试系统上使用，切勿用于生产机器：驱动会让用户态访问物理内存等硬件资源，错误的硬件访问可能导致操作系统挂起或崩溃。部分实用命令会写入或擦除 SPI 闪存、修改 UEFI 变量，可能使系统无法启动。WARNING 结果需要人工分析，结果说明文档也标注为草稿。", "闪存镜像和平台数据来自被测机器或使用者自己的转储；仓库未附带任何厂商固件镜像。CI 会在多个发行版上编译 Linux 驱动，并基于录制的平台数据运行单元测试，另有 QEMU UEFI Shell 测试。采用 GPL-2.0 许可。" ], "targets": [ "firmware" ], "url": "https://github.com/chipsec/chipsec", "verification": "source-reviewed", "verified_at": "2026-10-19" }