Silent UEFIinSecureBoot Disk

============================

Silent UEFIinSecureBoot Disk is a bootable image with GRUB2 bootloader designed to be used as a base for recovery USB flash drives.

Key feature: disk is fully functional with UEFI Secure Boot mode activated. It can launch any operating system or .efi file, even with untrusted, invalid or missing signature.

### Features:

* GRUB2 Bootloader
* 32-bit (ia32) / 64-bit (x86_64) UEFI (+ Secure Boot) support
* BIOS / UEFI CSM support
* Launch any operating system
* Launch any .efi executable from GRUB2
* Launch any .efi executable from another .efi application
* Load any UEFI drivers

### Description

Secure Boot is a feature of UEFI firmware which is designed to secure the boot process by preventing the loading of drivers or OS loaders that are not signed with an acceptable digital signature.

Most of modern computers come with Secure Boot enabled by default, which is a requirement for Windows 10 certification process. Although it could be disabled on all typical motherboards in UEFI setup menu, sometimes it's not easily possible e.g. due to UEFI setup password in a corporate laptop which the user don't know.

This disk, after being installed on a USB flash drive and booted from, effectively disables Secure Boot protection features and temporary allows to perform almost all actions with the PC as if Secure Boot is disabled. This could be useful for data recovery, OS re-installation, or just for booting from USB without thinking about additional steps.

The disk includes vulnerable Kaspersky UEFI bootloader found on Kaspersky Rescue Disk, and an exploit for this bootloader.

### Installation

Download image file, write it to USB flash using one of the following programs:

* Rosa ImageWriter (for Windows and Linux)
* Etcher (for Windows, Linux and macOS)

WARNING: all your USB flash data will be deleted.

The image contains single FAT32 500MiB partition. Use gparted or similar tool to resize it to get full USB drive space.


### FAQ

* Does this disk work in Secure Boot?
Yes, it does. It loads any unsigned or untrusted Linux kernel or .efi file or driver.

* Does this disk work on UEFI-based computers without Secure Boot, or with Secure Boot disabled?
Yes, it would work like a stock GRUB2.

* Does this disk work on older computers with BIOS?
Yes, it works just as any other GRUB2 bootloader.

* Can this disk be used to bypass Secure Boot in UEFI bootkit/virus?
Yes.

* Can I replace GRUB with another EFI bootloader (rEFInd, syslinux, systemd-boot)?
Yes, replace grubx64_real.efi/grubia32_real.efi with your files. The bootloader does not require to be signed and should also start any .efi files thanks for Security Policy installed by grubx64.efi/grubia32.efi (PreLoader), just as GRUB2 included in disk