Attacking Windows 7 Via Boot

WITH GREAT RESEARCH COMES GREAT RESPONSIBILITY

The central connector (labelled BASH J23) provides access to the Windows CE debug messages console. Pin 2 is UART RX and pin 4 is UART TX pin. By connecting with a UART adapter to these pins during the MFP boot process, it is possible to get access to the EFI Shell by sending Esc and Ctrl+F keycodes, as can be seen in the following log:

  Windows, Boot