Intel ME File System Explorer

This repository contains Python 2.7 scripts for parsing MFS/MFSB partition and extracting contained files.

Usage

parseMFS.py <MFS_Partition_File_Name.bin>

Extracted files would be stored in MFS_Partition_File_Name.bin.zip file

Limitations

Tested with MFS partitions obtained from ME 11.x firmware images

Related URLs:

Intel ME: Flash File System Explained

Intel ME: The Way of the Static Analysis

Intel DCI Secrets

How to Hack a Turned-Off Computer or Running Unsigned Code in Intel Management Engine

Intel ME 11.x Firmware Images Unpacker

Author

Dmitry Sklyarov (@_Dmit)

Research Team

Mark Ermolov (@_markel___)

Maxim Goryachy (@h0t_max)

Dmitry Sklyarov (@_Dmit)

License

This software is provided under a custom License. See the accompanying LICENSE file for more information.