Show HN: Efildr – a reflective EFI loader for PE32 UEFI binaries
Category: security
Tags: uefi, efi, loader, encryption, compression, security
Score: 7.0/10 (Innovation: 7, Technical: 8, Documentation: 8, Utility: 5)
Efildr is a reflective EFI loader and packer that transforms standard UEFI PE32+ applications into self-contained, encrypted, fileless-executing EFI binaries. It combines custom RLE compression, an ARX stream cipher, and a pure C reflective loader stub to map and execute payloads entirely in memory, hiding original code from static and dynamic analysis. The tool is aimed at security researchers and red teamers for educational and authorized auditing purposes.
Target audience: security researchers, red teamers, UEFI developers
Repository: https://github.com/vk-candpython/efildr · Python · MIT · 4 stars
View on Hacker News