Skip to content

pollhammer/sbc

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

15 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

ASCII Logo

Secure Boot Checker
v1.2 - Dashboard Edition

Advanced UEFI certificate auditing and mitigation console for Windows
by Manuel Pollhammer (2026)


🚀 What is SBC?

SBC is a terminal-based security diagnostics and remediation dashboard for Windows systems. It is designed to audit, validate, and enforce critical UEFI Secure Boot certificate migrations (Legacy 2011 vs. Modern 2023 Keys) and DBX revocation updates.

🌟 New in v1.2: Cyber Dashboard

  • 📊 Real-Time Auditing: Instant identification of global Secure Boot status and legacy restrictions.
  • 🛡️ Certificate Scanning: Deep analysis of the db and KEK firmware structures for expiring authorities.
  • ⚡ Hardware Enforcement: Force DBX revocation updates directly into NVRAM via native CIM/WMI triggers.
  • 🎨 ANSI Interface: High-contrast, boxed Unicode terminal design for pristine corporate scannability.

✨ Core Highlights

  • UNC Safe Pipeline: Maps temporary drives and auto-elevates UAC to run safely from network shares.
  • Direct Remediation: Cycle system updates or execute native Microsoft scripts from a single hub.
  • Zero Overhead: No heavy frameworks required—runs instantly and completely out of the box.

🛠️ Quick Start

Important

Encoding Requirement: The script file sbc.ps1 uses advanced Unicode/ANSI box characters. If you modify or save the script manually, it MUST be encoded as UTF-8 with BOM (Byte Order Mark). Saving it as standard UTF-8 or ANSI will break the parser and cause syntax errors (MissingExpressionAfterOperator).

  1. Clone or download the repository ensuring start.bat and sbc.ps1 remain in the same folder.
  2. Ensure File Encoding: Verify that sbc.ps1 is saved with UTF-8 with BOM encoding.
  3. Right-click start.bat and select "Run as Administrator" (required to access live UEFI registers).
  4. Use keys [1-6] for instant tools or navigating back to the main dashboard framework.

⚙️ Under the Hood

SBC utilizes a secure split-architecture to bypass command-line execution and environment limitations:

  • start.bat (Launcher): Network-safe launcher script (handles UNC paths and forces UAC Admin elevation).
  • sbc.ps1 (Engine): The main PowerShell core engine featuring the modern cyber dashboard menu. Requires UTF-8 with BOM encoding to render the UI properly.

📸 Screenshots

SMT Dashboard
Main Menu


Developed by Manuel Pollhammer | Release 2026

About

Secure Boot Checker - Advanced UEFI certificate auditing and mitigation console for Windows Secure Boot.

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Contributors