Secure Boot bypass in Howyar UEFI Reloader

Repository is a research and educational proof-of-concept for CVE-2024-7344, a UEFI Secure Boot bypass caused by improper PE image loading via a custom loader. It is not a network exploit or post-exploitation framework; instead it demonstrates a boot-time trust-boundary failure in which a signed UEFI application manually maps and executes an unsigned PE/COFF image from cloak.dat without using standard LoadImage/StartImage verification paths. Structure: the repo contains EDK II package metadata (.dec, .dsc), two UEFI applications in C, and Markdown documentation. Component01_VulnerableBinary/UefiApplication_Emulate_Custom_PE_Loader.c is the main exploit-relevant code: it locates an existing cloak.dat, then calls a local routine to load and execute the PE payload. This is the core capability that reproduces the vulnerable logic pattern. Component02_Vulnerability/UefiApplication_Explain_Exploitation.c is not an exploit; it is an explanatory/demo application that prints vulnerability metadata and exploitation flow. The README files document prerequisites, affected products, exploitation steps, and mitigation/detection guidance. Main exploit capability: local/boot-level execution of arbitrary unsigned UEFI code by abusing a trusted but vulnerable loader. The attacker must already have privileged access to write to the EFI System Partition and place both the vulnerable loader and crafted cloak.dat. Successful use yields pre-OS code execution, enabling bootkits, persistence, boot-chain tampering, and runtime/boot services access. Because the repo provides a recreated vulnerable loader rather than a turnkey offensive implant, maturity is best classified as POC.