{
  "added_at": "2026-11-02",
  "additional_evidence_urls": [
    "https://github.com/linuxboot/fiano/blob/162b021e54496b89b2f9028f88234b2caec70a0c/go.mod",
    "https://github.com/linuxboot/fiano/blob/162b021e54496b89b2f9028f88234b2caec70a0c/LICENSE",
    "https://github.com/linuxboot/fiano/blob/162b021e54496b89b2f9028f88234b2caec70a0c/.circleci/config.yml",
    "https://github.com/linuxboot/fiano/blob/162b021e54496b89b2f9028f88234b2caec70a0c/integration/utk_test.go",
    "https://github.com/linuxboot/fiano/blob/162b021e54496b89b2f9028f88234b2caec70a0c/integration/roms/OVMF.md",
    "https://github.com/linuxboot/fiano/blob/162b021e54496b89b2f9028f88234b2caec70a0c/cmds/fspinfo/README.md",
    "https://github.com/linuxboot/fiano/blob/162b021e54496b89b2f9028f88234b2caec70a0c/cmds/fspinfo/test_blobs/README.md",
    "https://github.com/linuxboot/fiano/blob/162b021e54496b89b2f9028f88234b2caec70a0c/data/PurleySiliconBinPkg/MeFirmware/IgnitionFirmware/License.txt",
    "https://github.com/linuxboot/fiano/blob/162b021e54496b89b2f9028f88234b2caec70a0c/pkg/intel/metadata/README.md",
    "https://github.com/linuxboot/fiano/tree/162b021e54496b89b2f9028f88234b2caec70a0c/cmds",
    "https://github.com/linuxboot/fiano/commit/cf677b458e86128635e911b2a8124c70bc7a2d0f"
  ],
  "category": "firmware",
  "description_en": "LinuxBoot's Go tools and libraries for parsing and modifying UEFI firmware images. Its utk command shows an image's firmware volumes and files as a table or JSON, finds, dumps, inserts, removes or replaces files, and extracts an image into a directory that can be reassembled, with a DXE cleaner for deleting unneeded DXE drivers. Further commands cover flash maps (fmap), coreboot CBFS, Intel FIT tables, FSP headers, microcode and LZMA data, and its Go packages also parse Intel ME regions, Boot Guard and CBnT manifests and AMD firmware structures.",
  "description_zh": "LinuxBoot 项目用 Go 编写的 UEFI 固件镜像解析与修改工具及库。其 utk 命令可用表格或 JSON 展示镜像中的固件卷和文件，查找、转储、插入、删除或替换文件，并把镜像解包到可重新组装的目录中，还提供用于删除多余 DXE 驱动的 DXE 清理功能。其他命令涵盖闪存布局（fmap）、coreboot CBFS、Intel FIT 表、FSP 头部、微码和 LZMA 数据；其 Go 包还能解析 Intel ME 区域、Boot Guard 与 CBnT 清单以及 AMD 固件结构。",
  "entry_url": "https://awesomerea.org/resources/fiano/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/fiano/",
  "evidence_url": "https://github.com/linuxboot/fiano/blob/162b021e54496b89b2f9028f88234b2caec70a0c/README.md",
  "group": "tools",
  "id": "fiano",
  "json_url": "https://awesomerea.org/resources/fiano/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/fiano/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/fiano/index.md",
  "name": "fiano",
  "name_zh": "fiano UEFI 固件解析与修改工具集",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "No GitHub releases; the newest tags, v7.0.2 and v6.0.1, both point to commits from 2021-12-01, while main keeps receiving fixes, documentation and dependency updates, the reviewed commit being from 2026-05-14. The README installs utk and fmap with go install at @latest and still says Go 1.13 is required, whereas go.mod declares Go 1.21 and CircleCI uses Go 1.22.",
    "Pure-Go command-line tools; go install places the executables in the go/bin folder of the user's home directory. Input is a firmware image the analyst already has, such as a full flash ROM, and fspinfo supports only FSP 2.0 files. CI checks formatting, runs ineffassign and the unit and race tests, and the Go tests include an extract, reassemble and extract round trip and a JSON regression check on a bundled OVMF image.",
    "BSD-3-Clause, copyright LinuxBoot. Test fixtures include an OVMF.rom built from EDK2's open-source vUDK2018 tag, coreboot ROMs, compression samples and manifest samples, plus two Intel binaries kept under Intel's own redistribution terms with their license files: the Apollo Lake FSP blob Fsp.fd under the FSP License, and the Purley ME Ignition firmware MeRegion.bin for Cascade Lake servers, whose binary-only license forbids reverse engineering that image.",
    "Modification commands rewrite firmware images; the README does not discuss flashing or recovery."
  ],
  "requirements_zh": [
    "没有 GitHub 发布版本；最新的标签 v7.0.2 和 v6.0.1 都指向 2021-12-01 的提交，而 main 分支仍在持续加入修复、文档和依赖更新，所审阅的提交日期为 2026-05-14。README 用 go install 以 @latest 安装 utk 和 fmap，并仍称需要 Go 1.13，而 go.mod 声明 Go 1.21，CircleCI 使用 Go 1.22。",
    "均为纯 Go 命令行工具；go install 会把可执行文件放到用户主目录下的 go/bin 文件夹。输入为分析者已有的固件镜像，例如完整的闪存 ROM；fspinfo 只支持 FSP 2.0 文件。CI 检查代码格式、运行 ineffassign 以及单元测试和竞态测试；Go 测试还包括对自带 OVMF 镜像执行的解包、重新组装、再解包往返测试和 JSON 回归检查。",
    "采用 BSD-3-Clause 许可，版权归 LinuxBoot。测试样本包括由 EDK2 开源标签 vUDK2018 构建的 OVMF.rom、coreboot ROM、压缩样本和清单样本，以及两个按 Intel 自身再分发条款保留并附许可文件的 Intel 二进制：适用 FSP License 的 Apollo Lake FSP 文件 Fsp.fd，以及面向 Cascade Lake 服务器的 Purley ME Ignition 固件 MeRegion.bin，后者的仅限二进制许可禁止对该镜像进行逆向工程。",
    "修改类命令会改写固件镜像；README 未涉及刷写或恢复。"
  ],
  "targets": [
    "firmware"
  ],
  "url": "https://github.com/linuxboot/fiano",
  "verification": "source-reviewed",
  "verified_at": "2026-10-20"
}