All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 33 posts ]  Go to page Previous  1, 2
Author Message
 Post subject: Re: Toshiba (lenovo) MK5061GSY ATA password unlock
PostPosted: June 12th, 2019, 16:55 
Offline

Joined: January 7th, 2012, 11:48
Posts: 31
Location: netherlands
do i need some special software or hardware to unlock it?
i unlocked some disk with ZU and Seagate with Zoc script.
i have external programmer to read the rom( I think i already read the rom a few years ago)
Any secrets or tricks will be apreciated :D


Top
 Profile  
 
 Post subject: Re: Toshiba (lenovo) MK5061GSY ATA password unlock
PostPosted: June 12th, 2019, 17:13 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 10828
Location: Portugal
You need special vendor specific commands if you don't want to pay for SeDiv or similar product .... Apart from that let's see if our friend @BGman can assist ...

I think he does know a way to gain access to SA/VSCs even if SUPER ON is blocked ....

:mrgreen: :mrgreen: :mrgreen:

He just have to post the commands and you just have to send them to the drive using any free ata terminal like for example HRT demo or even by TTL (ata over TTL, etc) ...

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: Toshiba (lenovo) MK5061GSY ATA password unlock
PostPosted: June 13th, 2019, 3:34 
Offline

Joined: September 30th, 2005, 7:33
Posts: 662
Doomer wrote:
AFAIR (was 5 years ago) SON is locked on those

I don't think so. I have repaired a lot of Lenovo drives - no one locked.
Anyway. When one door is closed, another one is left open...


Top
 Profile  
 
 Post subject: Re: Toshiba (lenovo) MK5061GSY ATA password unlock
PostPosted: June 13th, 2019, 3:57 
Offline

Joined: September 30th, 2005, 7:33
Posts: 662
Spildit wrote:
BGman wrote:
I could as well as you could, too. But I don't want to mess up with your business.


I don't have any problem with that !!!

Just post the sollution here if you want to !!!

:mrgreen: :mrgreen: :mrgreen:

This is not only yours business!!!
When somebody ask you to unlock his drive what do you do? Mail him VSC's or ask him to send you the drive?


Top
 Profile  
 
 Post subject: Re: Toshiba (lenovo) MK5061GSY ATA password unlock
PostPosted: June 13th, 2019, 14:04 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 10828
Location: Portugal
BGman wrote:
Spildit wrote:
BGman wrote:
I could as well as you could, too. But I don't want to mess up with your business.


I don't have any problem with that !!!

Just post the sollution here if you want to !!!

:mrgreen: :mrgreen: :mrgreen:

This is not only yours business!!!
When somebody ask you to unlock his drive what do you do? Mail him VSC's or ask him to send you the drive?


Send a link to my eBay unlock service ?

:mrgreen: :mrgreen: :mrgreen:

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: Toshiba (lenovo) MK5061GSY ATA password unlock
PostPosted: June 13th, 2019, 14:05 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 10828
Location: Portugal
BGman wrote:
Doomer wrote:
AFAIR (was 5 years ago) SON is locked on those

I don't think so. I have repaired a lot of Lenovo drives - no one locked.
Anyway. When one door is closed, another one is left open...


This will be even easier then !

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: Toshiba (lenovo) MK5061GSY ATA password unlock
PostPosted: June 17th, 2019, 15:11 
Offline

Joined: January 7th, 2012, 11:48
Posts: 31
Location: netherlands
Ok,
i got some news, i have found the bios dump of the lenovo where this hdd is from.
The password from the laptop is on this dump (see picture) 2 same lines with encrypted password, i'm 99% sure this password is also the hdd password.
can i use this with victoria?


Attachments:
T530 Bios Password.png
T530 Bios Password.png [ 61.88 KiB | Viewed 1661 times ]
Top
 Profile  
 
 Post subject: Re: Toshiba (lenovo) MK5061GSY ATA password unlock
PostPosted: June 17th, 2019, 18:02 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 11612
Location: Australia
zenelli wrote:
Ok,
i got some news, i have found the bios dump of the lenovo where this hdd is from.
The password from the laptop is on this dump (see picture) 2 same lines with encrypted password, i'm 99% sure this password is also the hdd password.
can i use this with victoria?

I don't think so.

ThinkPad BIOS Password Design for UEFI:
http://monitor.espec.ws/files/lewnovo_password_399.pdf

Quote:
Password Characters and Data

• Supported characters
– Alphabet (case insensitive)
– Number
– Space ‘ ‘

• Code set
– Scan code

• Maximum length
– 64 characters

• Data transformation
– Hash 64 scan codes by SHA-256 and take first 16 bytes


Quote:
Power On Password

• Storage
–Inside HDD
–Security feature is locked by SET FREEZELOCK command

• before exiting POST

• when the _GTF is evaluated by a storage driver at resuming from S3

• Salting
–Salted with the hashed Model number and the serial number before sending to HDDs

• Master HDP and User HDP are supported


Quote:
Supervisor Password

• Requested to input when:
– BIOS Setup is invoked
– Signature diskette is detected
– EFI Shell is invoked
– BIOS update is invoked while OS is running
– TPM state change is invoked while OS is running

• Storage
– EEPROM Block 6 (C2 Space)
10-1Fh: Primary SVP
20-2Fh: Backup SVP

• Salting
– Salted with the random number in the boot block before storing in the EEPROM


Quote:
Hard Drive Password

• Storage
– Inside HDD
– Security feature is locked by SET FREEZELOCK command

• before exiting POST

• when the _GTF is evaluated by a storage driver at resuming from S3

• Salting
– Salted with the hashed Model number and the serial number before sending to HDDs


PC Keyboard Scan Codes:
http://www.users.on.net/~fzabkar/MSKeyLog.TXT

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Toshiba (lenovo) MK5061GSY ATA password unlock
PostPosted: June 17th, 2019, 18:19 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 11612
Location: Australia
Sorry, that should have been ...

Quote:
Power On Password

• Requested to input at:
– Boot
– Waking up from Hibernate (POST)

• Storage
– CMOS

Lower 38-3Fh: First 8bytes of hashed passphrase (Offset 0-7h)
Upper 38-3Bh: Remaining 4bytes of hashed passphrase (Offset 8-Bh)
Upper 3Ch : Checksum of lower 38-3Fh and upper 38-3Bh

– Storage are locked

• before exiting POST if the signature diskette is not detected

• before jumping to OS waking vector

• Salting
– Salted with the random number in the boot block before storing in the CMOS

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Toshiba (lenovo) MK5061GSY ATA password unlock
PostPosted: June 17th, 2019, 18:29 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 10828
Location: Portugal
Lot easier to just use the VSC to regen "S" ...

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: Toshiba (lenovo) MK5061GSY ATA password unlock
PostPosted: June 17th, 2019, 18:41 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 11612
Location: Australia
zenelli wrote:
i have found the bios dump of the lenovo where this hdd is from.

If you have the original laptop, does this mean that the [unhashed] HDD password is known and that you are needing to circumvent the password because the laptop is dead? If so, have you tried the HDD in another Lenovo laptop?

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Toshiba (lenovo) MK5061GSY ATA password unlock
PostPosted: June 22nd, 2019, 17:59 
Offline

Joined: January 7th, 2012, 11:48
Posts: 31
Location: netherlands
fzabkar wrote:
zenelli wrote:
i have found the bios dump of the lenovo where this hdd is from.

If you have the original laptop, does this mean that the [unhashed] HDD password is known and that you are needing to circumvent the password because the laptop is dead? If so, have you tried the HDD in another Lenovo laptop?


No i dont have this laptop anymore, and no i dont know the password. i bought this laptop long time ago with bios and hdd password, the bios password i could read it with special software and removed it (See picture of dump)
the hdd password is the same i think with the bios password


Top
 Profile  
 
 Post subject: Re: Toshiba (lenovo) MK5061GSY ATA password unlock
PostPosted: June 23rd, 2019, 2:44 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 11612
Location: Australia
zenelli wrote:
the hdd password is the same i think with the bios password

After hashing, the results would be different.

"Salted with the random number in the boot block before storing in the CMOS"
"Salted with the random number in the boot block before storing in the EEPROM"
"Salted with the hashed Model number and the serial number before sending to HDDs"

_________________
A backup a day keeps DR away.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 33 posts ]  Go to page Previous  1, 2

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 7 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group