A tech enthusiast who uses Claude Code, HP 15-dw1036ne on laptop 55 hidden BIOS settings and four additional menus managed to open it. User named Reddit_2049, F.68 BIOS version By examining it with Code, Ghidra and various firmware tools, Claude found options that HP did not offer in normal menus. Moreover, the method Doesn’t break RSA-2048 encryptioninstead it changes how the BIOS handles the signature verification result. Thus, the study shows with a concrete example how Claude Code can take on the task of firmware analysis and reverse engineering.
When HP 15-dw1036ne detects modified firmware “BIOS Corruption Detected” It gives a warning and does not start the operating system. When the user could not find a BIOS unlock method that worked for his model, he directly transferred his own BIOS dump to Claude Code. Then, Claude Code examined the BIOS drivers via Ghidra and distinguished between the tools in the UEFITool family and the firmware components. Besides that Unicorn Enginehelped run and test the verification function independently of the actual computer. If the process goes wrong, the user must reprogram the BIOS chip. a physical BIOS programmer such as CH341A He also listed it among the necessary equipment.
In the first analysis phase, Claude Code, HP and Compal compressed DXE firmware partition with RSA-2048 signature found it to be protected. Here, the AI did not decipher the RSA key and did not produce a valid new cryptographic signature. Instead, Claude Code determined at what point the firmware checks the result returned by the verification function. The user has then reached the point where a code change can be applied to accept the failed verification result. Therefore, instead of breaking the RSA-2048 algorithm, the process interferes with the software flow after the signature check.
In the second stage, Claude Code, SetupUtility It identified the settings stored in the firmware by scanning the user interface definitions in it. Analysis total 55 separate BIOS options revealed and showed that 27 of them were completely hidden. The remaining 28 options, although included in the firmware, contained controls that prevented normal user access. Then analysis, FormBrowser.efi It revealed that the code inside removed four separate BIOS tabs from the menu. After the user applies the changes Advanced, Power, Debug and Boot Accessed the tabs from the BIOS screen.
Claude Code shortens the long research process in BIOS analysis
The firmware community has long been Ghidra, UEFITool and hardware programmers It carries out similar examinations on the BIOS with tools such as. However, when there is no ready-made guide for a particular laptop, it may take a long time for the researcher to find the correct functions one by one. In this example, Claude Code evaluated the code, firmware components and test results together, making it easier for the researcher to access the relevant sections. Thus, the user worked directly on the firmware he received from his own device, instead of using a ready-made BIOS modification package. According to information provided by TechRadar, the approach can significantly speed up certain parts of the expert work that can take hours for a single device.
In the following part of the study, the user A Python script that applies the necessary changes to the stock BIOS dump also prepared. However, this script does not automatically produce secure results on every computer with the same model name HP 15-dw1036ne. A minor change in motherboard revision, BIOS version or firmware content can cause the script to intervene at the wrong address. The physical BIOS programmer is critical because such an error can prevent the computer from turning on. Additionally, the method tested To HP 15-dw1036ne and F.68 firmware version based on specific changes. The user’s physical access to the BIOS chip is also among the basic requirements of the process.
Another aspect of the work is right to repair and electronic waste intersects with discussions. BIOS options restricted by the manufacturer or firmware problems left over from the previous user can make it difficult to reuse some old devices. AI-powered firmware analysis can reduce the time it takes to find error points and hidden options in undocumented models. However, a change that makes the signature verification result always successful also eliminates the security control at the firmware level. Such a BIOS may not reject modified or malicious firmware files during the normal verification process. Therefore, the modification used in the study removes the protection offered by signature control while providing access to BIOS options.
Claude Code with this work HP BIOS locks did not offer a universal tool that removes it with a single command. The user again requires physical access to the BIOS chip, appropriate programming hardware, and technical knowledge of the firmware. Additionally, a different BIOS version or motherboard revision may prevent the same changes from being applied directly. In contrast, the case study shows how Claude Code can be used with existing tools such as Ghidra and UEFITool in the reverse engineering process. The study published by Reddit_2049, 55 hidden settings, four BIOS tabs and signature verification check Detailing the changes made to the HP 15-dw1036ne.
Join Channel