Shady Hacking 1nstrument Makes Machine Enrollment Retreat

Website, source tree, and write-up for a ChromeOS enrollment jailbreak

Shimmer is an exploit found in the ChromeOS shim kernel that utilitzes modified RMA factory shims to gain code execution at recovery.

RMA shims are a factory tool allowing certain authorization functions to be is signed, but only the KERNEL partitions are checked for signatures by the firmware. We can edit the other partitions to our will, as long as the characters contained in those edits are equal to the amount of characters in the original.

• CoolElectronics#4683 - Pioneering this wild exploit
• Bideos#1850 - Testing & discovering how to disable root-fs verification
• Unciaur#1408 - Found the inital RMA shim
• TheMemeSniper#6065 - Testing
• Rafflesia#8396 - Hosting files
• Bypassi#7037 - Helped with the website
• r58Playz#3467 - Helped us set parts of the shim
• OlyB#9420 - Scraped additional shims
• Sharp_Jack#4374 - Created wax & compiled the first shims