Switch to full style
In-depth technology research: finding new ways to recover data, accessing firmware, writing programs, reading bits off the platter, recovering data from dust.

Forum rules

Please do not post questions about data recovery cases here (use this forum instead). This forum is for topics on finding new ways to recover data. Accessing firmware, writing programs, reading bits off the platter, recovering data from dust...
Post a reply

Re: Marvell 88i6745n JTAG

May 7th, 2015, 11:06

Doomer wrote:
_dex_ wrote:"Tiny Console" is activated!
Connect resistor 4k7 to P1 test point (+3.3v) and E6 test point.

So you made "5" (or maybe it was 0x1C00A84E)
If you make it "3" you'll get X-Modem
Great work


I am looking at some similar stuff, but on SSD. I believe the great Dex isn't with us anymore, which is sad.
I wonder if anyone can tell me... how does one come to the conclusion that a 4k7 resistor would need to be across there?

Is it some kind of knowledge of other systems that this is the case?
a guess?
something points to it in the firmware disassembly?
access to a manual?
access to inside info or another hacker?

I can fully se someone figuring out the JTAG pads, but this seems like not something that is accidently happened apon.

Re: Marvell 88i6745n JTAG

May 7th, 2015, 17:31

Post clear image(s) of the SSD board.

Re: Marvell 88i6745n JTAG

May 7th, 2015, 18:35

Samsung MZ-7PD128M

MZ-7PD128M-1.jpg

MZ-7PD128M-2.jpg

Re: Marvell 88i6745n JTAG

May 7th, 2015, 21:19

I would like to keep the post a couple back where I quoted Doomer and _dex_, but I would rather keep this thread true to _dex_'s content and I will start another thread for each of the SSDs I am looking at.

I don't want _dex_ and Doomer's work to be buried in a long meandering off topic thread.

If a Moderator wants to delete the above post with 2 pictures(or not) is fine by me. I will only post here again if it is very on topic.

Re: Marvell 88i6745n JTAG

May 11th, 2015, 17:35

I'm certainly not the expert, but those seven plated wholes are pretty suspect.
Assuming just a two sided board it looks like at least six of them have traces.
Could be jTAG, and, or, serial there.

Meter them out. See if some have the typical 3.3 or 1.8v logic levels.

Re: Marvell 88i6745n JTAG

February 27th, 2016, 5:58

Hi , i want make friend with you ! my QQ:1186046994

Re: Marvell 88i6745n JTAG

February 27th, 2016, 14:00

freebird2992 wrote:Hi , i want make friend with you ! my QQ:1186046994

friend with who ?
if you mean the OP ?!
the OP don't have the ability to use QQ anymore :( (read page 4)

Re: Marvell 88i6745n JTAG

June 8th, 2019, 11:37

A better image to the Source Code of Marvell JTAG

R.I.P. dejan....

Its Hard to forget someone like you....
Attachments
701499_JTAG_pinout - forum.jpg

Re: Marvell 88i6745n JTAG

June 13th, 2019, 5:44

Sean, you asked me and i got the Tool Today.... :wink:

Really appreciate his recommendation
Attachments
DHL_.jpg

Re: Marvell 88i6745n JTAG

June 15th, 2019, 17:44

einstein9 wrote:Sean, you asked me and i got the Tool Today.... :wink:

Really appreciate his recommendation

https://www.jtag.com/ru/product/jtag-live-controller/ :wink: :wink: :wink:

Re: Marvell 88i6745n JTAG

June 16th, 2019, 6:13

195 Euros? to do JTAG? Holy Shit, would want some pretty good features

Re: Marvell 88i6745n JTAG

June 16th, 2019, 7:42

HaQue wrote:195 Euros? to do JTAG? Holy Shit, would want some pretty good features


Diff. screw drivers (brands) to do the same job :idea:

Re: Marvell 88i6745n JTAG

June 16th, 2019, 20:12

Kia's & Ferrari's... Gotchya! ;-)

Re: Marvell 88i6745n JTAG

June 17th, 2019, 3:35

If you're testing the waters, here is a JTAG identification tool (JTAGenum) for US$3, delivered.

JTAGulator vs. JTAGenum, Tools for Identifying JTAG Pins in IoT Devices:
https://www.praetorian.com/blog/jtagulator-vs-jtagenum-tools-for-identifying-jtag-pins-in-iot-devices?edition=2019

What are some other differences between the two options?

As far as hardware differences go the JTAGulator has built in level conversion and input protection. This is why I am releasing a shield for the Arduino which provides the exact same capabilities. The open hardware designs for the shield are available here:

https://github.com/dxa4481/inputProtectionShield
Post a reply