{"adoption": {"forks": 478, "observed_at": "2026-08-28T04:06:29.723335+00:00", "stars": 2240}, "canonical_url": "https://ross.abutalabs.com/products/blacklotus", "card": {"archived": false, "artifact_type": "library", "description": "BlackLotus UEFI Windows Bootkit", "domain": ["security", "reverse-engineering", "operating-systems"], "enriched": true, "function": ["security", "reverse-engineering", "penetration-testing"], "health_score": 20, "homepage": null, "language": "C", "license": null, "license_family": "other", "maturity": "maintenance", "member_repos": ["ldpreload/BlackLotus"], "name": "ldpreload/BlackLotus", "platform": ["windows", "cpp", "c"], "pushed_at": "2024-03-28T18:35:16+00:00", "repo": "ldpreload/BlackLotus", "stars": 2240, "tags": ["uefi-bootkit", "malware", "secure-boot-bypass", "rootkit", "research", "c2", "firmware"], "topics": [], "urls": [], "use_cases": ["study how UEFI bootkits achieve Secure Boot bypass", "research bootkit persistence techniques on Windows", "analyze malware C2 communication patterns", "build defensive detections against UEFI bootkits", "learn UEFI driver development with EDK2", "evaluate EDR bypass and anti-hooking techniques"], "what_it_is": "An open-source UEFI bootkit targeting Windows that implements a Secure Boot bypass, kernel-level persistence, and an HTTP-based C2 loader with a web management panel. It is a proof-of-concept/research implementation of the BlackLotus bootkit, written in C and x86 assembly with no third-party libraries.", "when_to_avoid": ["you need a legitimate bootloader or system utility", "you lack secure malware analysis infrastructure", "you want production-ready or supported software", "you cannot legally possess offensive tooling in your jurisdiction"], "when_to_choose": ["you are a security researcher studying bootkit internals", "you need a reference implementation for building bootkit detections", "you want to understand Secure Boot and BitLocker bypass mechanics"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/blacklotus", "repo": "ldpreload/BlackLotus", "role": "main", "score": 29}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:06:29.723335+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T02:44:08.023809+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "885858cfc72f4b962efb5c513e73fb226c25d33179df3c2b771e791f2c5c93b7", "fetched_at": "2026-08-28T04:06:29.723335+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ldpreload/BlackLotus"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:06:29.723335+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T02:44:08.023809+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "885858cfc72f4b962efb5c513e73fb226c25d33179df3c2b771e791f2c5c93b7", "fetched_at": "2026-08-28T04:06:29.723335+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ldpreload/BlackLotus"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T02:44:08.023809+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "885858cfc72f4b962efb5c513e73fb226c25d33179df3c2b771e791f2c5c93b7", "fetched_at": "2026-08-28T04:06:29.723335+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ldpreload/BlackLotus"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:06:29.723335+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:06:29.723335+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:06:29.723335+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T02:44:08.023809+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "885858cfc72f4b962efb5c513e73fb226c25d33179df3c2b771e791f2c5c93b7", "fetched_at": "2026-08-28T04:06:29.723335+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ldpreload/BlackLotus"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:06:29.723335+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:06:29.723335+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T02:44:08.023809+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "885858cfc72f4b962efb5c513e73fb226c25d33179df3c2b771e791f2c5c93b7", "fetched_at": "2026-08-28T04:06:29.723335+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ldpreload/BlackLotus"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:06:29.723335+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:06:29.723335+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:06:29.723335+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T02:44:08.023809+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "885858cfc72f4b962efb5c513e73fb226c25d33179df3c2b771e791f2c5c93b7", "fetched_at": "2026-08-28T04:06:29.723335+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ldpreload/BlackLotus"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:06:29.723335+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:06:29.723335+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T02:44:08.023809+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "885858cfc72f4b962efb5c513e73fb226c25d33179df3c2b771e791f2c5c93b7", "fetched_at": "2026-08-28T04:06:29.723335+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ldpreload/BlackLotus"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T02:44:08.023809+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "885858cfc72f4b962efb5c513e73fb226c25d33179df3c2b771e791f2c5c93b7", "fetched_at": "2026-08-28T04:06:29.723335+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ldpreload/BlackLotus"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T02:44:08.023809+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "885858cfc72f4b962efb5c513e73fb226c25d33179df3c2b771e791f2c5c93b7", "fetched_at": "2026-08-28T04:06:29.723335+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ldpreload/BlackLotus"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T02:44:08.023809+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "885858cfc72f4b962efb5c513e73fb226c25d33179df3c2b771e791f2c5c93b7", "fetched_at": "2026-08-28T04:06:29.723335+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ldpreload/BlackLotus"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 82, "rhythm": 35}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": ["no_releases", "no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 1148, "days_push": 888, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 29, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}