All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 134 posts ]  Go to page 1, 2, 3, 4, 5 ... 7  Next
Author Message
 Post subject: WD80EFZX-68UW8N0 support ?
PostPosted: July 25th, 2018, 18:24 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9985
Location: Portugal
Hi !!!

I do need to unlock one WD80EFZX-68UW8N0 drive. ATA password.

PC-3000 doesn't support that drive at all.

Does anyone here knows the "Super On" to gain module access on those modern drives ?

If the "arch" is the same of the older ARM based models i think i will have no problem in unlocking the drive if i can find the super on to gain module access.

Ram access / NVRam access shouldn't be a problem as well, again, assuming the arch is the same as the older models ...

Can someone here work at firmware level with those "newer" drives not suppoorted by PC-3000 ?

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: WD80EFZX-68UW8N0 support ?
PostPosted: July 26th, 2018, 9:31 
Offline
User avatar

Joined: September 29th, 2005, 12:02
Posts: 3237
Location: Chicago
it's Hitachi and it has different architecture.

_________________
https://www.linkedin.com/in/artemrubtsov/


Top
 Profile  
 
 Post subject: Re: WD80EFZX-68UW8N0 support ?
PostPosted: July 26th, 2018, 16:43 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9985
Location: Portugal
Doomer wrote:
it's Hitachi and it has different architecture.


Interesting. I do know that it's Hitachi...

Problem is to gain access to SA ....

Any idea ? Does anyonme know how to do it ?

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: WD80EFZX-68UW8N0 support ?
PostPosted: July 26th, 2018, 16:52 
Offline
User avatar

Joined: September 29th, 2005, 12:02
Posts: 3237
Location: Chicago
Spildit wrote:

Problem is to gain access to SA ....
Does anyonme know how to do it ?

Yes, I do
Never tried it with a password on though

_________________
https://www.linkedin.com/in/artemrubtsov/


Top
 Profile  
 
 Post subject: Re: WD80EFZX-68UW8N0 support ?
PostPosted: July 26th, 2018, 17:47 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9985
Location: Portugal
Does it use the same commands to read NVRam / memory access that all the other ARM based HGST use ?

And is the VSC to read module the same only changing the "super on" like on other ARM based drives ?

If i do have the super on can i read module directory with the same command used on other HGST arm based drives ?

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: WD80EFZX-68UW8N0 support ?
PostPosted: July 27th, 2018, 10:17 
Offline
User avatar

Joined: September 29th, 2005, 12:02
Posts: 3237
Location: Chicago
Spildit wrote:
Does it use the same commands to read NVRam / memory access that all the other ARM based HGST use ?

no
Spildit wrote:
And is the VSC to read module the same only changing the "super on" like on other ARM based drives ?

no
Spildit wrote:
If i do have the super on can i read module directory with the same command used on other HGST arm based drives ?

no

it's a different drive, what you basically asking is "can I use WD commands to read a Samsung drive", no you can't.

_________________
https://www.linkedin.com/in/artemrubtsov/


Top
 Profile  
 
 Post subject: Re: WD80EFZX-68UW8N0 support ?
PostPosted: July 27th, 2018, 15:46 
Offline

Joined: September 30th, 2005, 7:33
Posts: 618
@Doomer
Coold you upload the ROM image of such a drive?


Top
 Profile  
 
 Post subject: Re: WD80EFZX-68UW8N0 support ?
PostPosted: July 27th, 2018, 15:51 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9985
Location: Portugal
BGman wrote:
@Doomer
Coold you upload the ROM image of such a drive?


Yes !!!

Also please do upload modules, NVRam, etc ...

I would love to see if the modules are more or less the same as the ones on HGST (IBM native).

Thanks.

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: WD80EFZX-68UW8N0 support ?
PostPosted: July 27th, 2018, 15:54 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9985
Location: Portugal
Doomer wrote:
Spildit wrote:
Does it use the same commands to read NVRam / memory access that all the other ARM based HGST use ?

no
Spildit wrote:
And is the VSC to read module the same only changing the "super on" like on other ARM based drives ?

no
Spildit wrote:
If i do have the super on can i read module directory with the same command used on other HGST arm based drives ?

no

it's a different drive, what you basically asking is "can I use WD commands to read a Samsung drive", no you can't.


ARM based are different from arch M24 and even so the modules are more or less the same and the way to check "road map" and retrieve the modules is more or less the same as well on both archs ... What i was asking is if the "system" to gain access to SA is absolutly different or if it's "close"....

WD use "key" VSCs sent on buffer. Both Arch M24 and ARM on Hitachi use ATA VSC even if newer ARM use LBA 48.

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: WD80EFZX-68UW8N0 support ?
PostPosted: July 27th, 2018, 16:09 
Offline
User avatar

Joined: September 29th, 2005, 12:02
Posts: 3237
Location: Chicago
Spildit wrote:
What i was asking is if the "system" to gain access to SA is absolutly different or if it's "close"....

I don't know how else to answer this
it is a different architecture, different vendor commands, different SA and different hardware.
This drive has nothing to do with M24 or so-called "ARM" architecture.

_________________
https://www.linkedin.com/in/artemrubtsov/


Top
 Profile  
 
 Post subject: Re: WD80EFZX-68UW8N0 support ?
PostPosted: July 27th, 2018, 16:13 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9985
Location: Portugal
Doomer wrote:
Spildit wrote:
What i was asking is if the "system" to gain access to SA is absolutly different or if it's "close"....

I don't know how else to answer this
it is a different architecture, different vendor commands, different SA and different hardware.
This drive has nothing to do with M24 or so-called "ARM" architecture.


Ok, thanks.

Do you have some NVRam, ROM, Modules, etc ... that you can post so that we can check them out ?

It would be nice to have an idea about it !

Maybe we can figure out the commands to access the SA/platters by checking ROM ...

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: WD80EFZX-68UW8N0 support ?
PostPosted: July 27th, 2018, 16:40 
Offline
User avatar

Joined: September 29th, 2005, 12:02
Posts: 3237
Location: Chicago
Spildit wrote:
Do you have some NVRam, ROM, Modules, etc ... that you can post so that we can check them out ?

I do but I'm not going to post it here
There are some things I don't like to be exposed

_________________
https://www.linkedin.com/in/artemrubtsov/


Top
 Profile  
 
 Post subject: Re: WD80EFZX-68UW8N0 support ?
PostPosted: July 27th, 2018, 16:42 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9985
Location: Portugal
Doomer wrote:
Spildit wrote:
Do you have some NVRam, ROM, Modules, etc ... that you can post so that we can check them out ?

I do but I'm not going to post it here
There are some things I don't like to be exposed


Can you PM, mail, etc .... the files ?

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: WD80EFZX-68UW8N0 support ?
PostPosted: July 28th, 2018, 8:54 
Offline
User avatar

Joined: May 5th, 2004, 20:06
Posts: 2800
Location: England
Spildit, I would eat my hat if Doomer posted any files from the SA on those drives.

_________________
All went well until I plugged the drive in.


Top
 Profile  
 
 Post subject: Re: WD80EFZX-68UW8N0 support ?
PostPosted: July 28th, 2018, 9:03 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9985
Location: Portugal
guru wrote:
Spildit, I would eat my hat if Doomer posted any files from the SA on those drives.


I did get a ROM .... But i don't even know if it was obtained by VSC/SATA or read by external programmer.

At any rate this is quite different from traditional "ARM" arch ... No clue how to access SA and because this is not like traditional HGST ARM i can't find Super On on ROM as well ....

I do need to unlock one of those drives ...

I might have short points on PCB to make the drive go intro "safe mode" or kernel mode ... But i don't think it will help to remove password.

Also i think that on ROM there are mention to modules so ... Might be a start but it's not going to be easy mission....

One thing is to grab the commands that PC-3000, MRT, SeDiv, etc ... use and then send them by HRT terminal ... Another thing is to figure out the commands if none of the commercial tools (or any other available tool) to exist / support a specific drive ... In other words sniffing commands will not be possible so it's required to figure out the commands prior to all other firmware tools makers ...

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: WD80EFZX-68UW8N0 support ?
PostPosted: July 28th, 2018, 9:06 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9985
Location: Portugal
Even if i somehow manage to access to SA on platters i would still need to figure out the module that is used to store the ATA password + flag that the password is "ON" and i would need a copy of the module from one unlocked drive ...

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: WD80EFZX-68UW8N0 support ?
PostPosted: July 28th, 2018, 11:16 
Offline

Joined: September 30th, 2005, 7:33
Posts: 618
These drives support a new command set named SPC. One of these new commands allows reading of drive's memory . No need of SuperOn or VSC....or sniffing.


Top
 Profile  
 
 Post subject: Re: WD80EFZX-68UW8N0 support ?
PostPosted: July 28th, 2018, 11:39 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9985
Location: Portugal
BGman wrote:
These drives support a new command set named SPC. One of these new commands allows reading of drive's memory . No need of SuperOn or VSC....or sniffing.


Interesting .... And how to access the modules on the platters ?

Any idea on how to unlock the drive ?

Can you read/write to memory on those drives ? If so it might be possible to patch memory to change the password on RAM.

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: WD80EFZX-68UW8N0 support ?
PostPosted: July 28th, 2018, 11:45 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9985
Location: Portugal
So ... Are you saying that SPC is "standard" and allows to read/write the drive memory ?

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: WD80EFZX-68UW8N0 support ?
PostPosted: July 29th, 2018, 12:17 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9985
Location: Portugal
guru wrote:
Spildit, I would eat my hat if Doomer posted any files from the SA on those drives.


Ok ... I did manage to get a ROM file from Doomer .... Time to eat your hat ?

This is very cool. Drive is not like "older" ARM based drives at all.

It does have SA on platter and CPs on ROM.

There is a CODF section on ROM that indicates the drive family :

T515000
515
09/03/14 12:18:58
A4GNT514
ARIESHC8SATA
RELEASE
bldcrew
fjofficial1
Y:/ccb6p/R515/library/ARIESHC84KA4GNT515

On ROM there are a table of SA modules with a DIR and a FAT module. This would suggest that the SA file system has a FAT-like structure.

There is also a table for CP modules that are stored on ROM.

The first ROM resident CP is FSVG.

We will be targeting the security CPs .... So those would be CODF CP (ID = 82h), FCOD (security class appears to be Generic), FSEC (ID = 98H) and GNRC CPs.

Maybe we can still unlock this drive by ROM manipulation ...

A huge thanks to @fzabkar for taking the time to analyze this ROM and providing me the information that i did just post.

One step close to unlock this drive and to better understand the firmware arch of those newer drives.

Maybe this time we will beat ACE and figure out a way to access the SA on those prior to PC-3000 support !

:D :D :D

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 134 posts ]  Go to page 1, 2, 3, 4, 5 ... 7  Next

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Bing [Bot], digisupport, Exabot [Bot], Google [Bot] and 26 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group