Sh1mmer
https://github.com/MercuryWorkshop/Sh1mmer
Sh1mmer is an exploit capable of completely unenrolling enterprise-managed Chromebooks.
By MercuryWorkshop
Sh1mmer is an exploit capable of completely unenrolling enterprise-managed Chromebooks.
By MercuryWorkshop
What are the features?
Section titled “What are the features?”- Unenrollment for Kernvers 1 through 5
- Re-Enrollment
- A modified version of MrChromebox’s firmware utility script
- Set Kernver to 1
- Write Protection disable
Prebuilts
Section titled “Prebuilts”Prebuilts are located at https://dl.mrwork.shop/sh1mmer
Building
Section titled “Building”git clone https://github.com/MercuryWorkshop/sh1mmer.gitcd sh1mmer/waxRun the next command with a raw shim or nanoshim
sudo bash wax.sh -i /path/to/shim.binFlashing
Section titled “Flashing”Linux: (Replace /dev/sdX with your flash drive/sd card)
sudo dd if=/path/to/sh1mmer_shim.bin of=/dev/sdX bs=1M status=progressWindows: Download Rufus, select your USB, select your sh1mmer image
macOS: Download BalenaEtcher, select your USB, select your sh1mmer image
ChromeOS: Download Chromebook Recovery Utility, select “Use local image” in the settings menu of it, select your USB, select your sh1mmer image
Booting
Section titled “Booting”- Press [Esc+Ref+Pwr], then [Ctrl+D] to enter developer mode.
- Plug in your flash drive that you flashed Sh1mmer to.
- Press [Esc+Ref+Pwr] again and allow the shim to boot up.