Can a website exploit kit theoretically contain a bootkit (it flashes your UEFI/BIOS)?

1 Answer 1


An exploit kit focuses on exploiting certain application (typically a browser). After that it generally downloads a second stage payload which adds the computer to a botnet/installs ransomware/steals your banking credentials/etcetera.

As part of the later stages, it will try to gain persistence and escalate even more if possible, May one of them be attempting to flash the BIOS/UEFI? Yes

Could it all be included in the exploit kit? Yes, although highly unlikely. That would be usuallyleft for a later binary, in the rare case it was done at all. Note that nowadays you have a group an exploit kit, which is sold to a different group, that infects computers and sells them to other groups with completely different goals... It's no longer the case that each group did everything on its own from exploitation to persistance and <whatever is their goal>

  • And what? The suspension is killing me! Commented Oct 22, 2019 at 18:28
  • Thanks for the heads up @SirMuffington. The end was in the source but not being rendered
    – Ángel
    Commented Oct 23, 2019 at 4:55

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .