All times are UTC - 5 hours [ DST ]


Forum rules


Please do not post questions about data recovery cases here (use this forum instead). This forum is for topics on finding new ways to recover data. Accessing firmware, writing programs, reading bits off the platter, recovering data from dust...



Post new topic Reply to topic  [ 10 posts ] 
Author Message
 Post subject: patch hdd firmware to read failed drive
PostPosted: May 25th, 2015, 21:01 
Offline

Joined: January 17th, 2014, 15:02
Posts: 25
Location: Cuyahoga Falls, Ohio
Anyone interested in collaborating on a project to decompile/patch a drives firmware to skip the factory initialization and boot with some reasonable defaults.

The patched fw could keep changing the adaptives to determine what will work for each head.

What I am trying to accomplish is reading the user area of a drive with the SA tracks are scratched off the platter.

I am even open to controlling the drive via JTAG (http://www.malwaretech.com/2015/04/hard ... art-1.html)


Top
 Profile  
 
 Post subject: Re: patch hdd firmware to read failed drive
PostPosted: May 26th, 2015, 13:05 
Offline
User avatar

Joined: April 3rd, 2011, 0:19
Posts: 2003
Location: Providence, RI
Yes, I don't think this is really a new idea. Just one that most people who investigated found would be nearly impossible. Even if WD were willing to share their source code, it'd still be a massive undertaking.

_________________
Data Medics - Hard Drive, SSD, and RAID Data Recovery Service Company


Top
 Profile  
 
 Post subject: Re: patch hdd firmware to read failed drive
PostPosted: May 26th, 2015, 17:53 
Offline

Joined: January 17th, 2014, 15:02
Posts: 25
Location: Cuyahoga Falls, Ohio
I agree that each manufacturer/family would be different.
It seems so simple to me.....

determine the head positioning and raw read routines in the firmware.
get the firmware to boot in a crippled state and dump the data sequentially that it can read.
afterward, build a virtual translator, or even scan the raw data as-is to get the users data.

I understand that this is over-simplifing a very complex task, but if raw track data
was available, there are a lot of very capable people that could reassemble the files.
Keep in mind that these are worst case scenarios that assume the translator is unavailable.

does anyone know of any firmware that has been decompiled ?


Top
 Profile  
 
 Post subject: Re: patch hdd firmware to read failed drive
PostPosted: May 26th, 2015, 19:07 
Offline
User avatar

Joined: May 5th, 2004, 20:06
Posts: 2782
Location: England
Nice, can't wait to see your efforts.

This may be a task for Spildit & Franc.

_________________
All went well until I plugged the drive in.


Top
 Profile  
 
 Post subject: Re: patch hdd firmware to read failed drive
PostPosted: May 26th, 2015, 20:24 
Offline
User avatar

Joined: December 4th, 2012, 1:35
Posts: 3844
Location: Adelaide, Australia
PAKComputers wrote:
does anyone know of any firmware that has been decompiled ?


search term:
Quote:
decompile hard disk firmware

https://spritesmods.com/?art=hddhack&page=4
http://www.s3.eurecom.fr/slides/bh13us_zaddach.slides.pdf

Steps same as any other firmware:

1. unpack/unzip/deobfuscate an update, download a firmware. look on hddguru files, for example
2. decompile, you will need to be familiar, or learn Arm/Thumb and have relevant tools

recompiling/patching will probably be quite a hurdle


Top
 Profile  
 
 Post subject: Re: patch hdd firmware to read failed drive
PostPosted: May 27th, 2015, 4:36 
Offline

Joined: February 8th, 2014, 8:08
Posts: 456
Location: Eastern Europe /recovering worldwide/
PAKComputers wrote:
Anyone interested in collaborating on a project to decompile/patch a drives firmware to skip the factory initialization and boot with some reasonable defaults.
To reverse engineer a hard drive down to the initialization level you'll need to be able to read it like a book first. That's prior to any interference in the process.

PAKComputers wrote:
The patched fw could keep changing the adaptives to determine what will work for each head.
Should you succeed, you'll be a pioneer in this area, I haven't heard anyone did this before.

PAKComputers wrote:
I am even open to controlling the drive via JTAG
JTAG doesn't care where it is, it doesn't depend on device type, it's just a tunnel to the processor mind.
JTAG isn't something to intervene in a hard drive operation, but to intervene in a CPU work. And CPU isn't equal to whole device.

Anyway, that's a good ambition. Should it born a specialist of such a high level, I'm for it.

_________________
• Remote RAID, NAS, SAN, VMware, DVR (CCTV), flash and tape recovery. Data recovery support.


Top
 Profile  
 
 Post subject: Re: patch hdd firmware to read failed drive
PostPosted: May 27th, 2015, 7:46 
Offline
User avatar

Joined: May 5th, 2004, 20:06
Posts: 2782
Location: England
@Spildit To gain knowledge you need to practice. Put some effort into it and you shall be rewarded. I don't see why you cannot try, you have a thirst to learn.

I always prefere to eat my own grown vegetables. :D


I agree with Dmitri.

_________________
All went well until I plugged the drive in.


Top
 Profile  
 
 Post subject: Re: patch hdd firmware to read failed drive
PostPosted: May 27th, 2015, 13:51 
Offline

Joined: May 6th, 2015, 6:31
Posts: 60
Location: Earth
Actually, I agree with Dmitri. Moreover, most drive operations runs in memory, anyway you have to know necessary vendor commands to work with memory. And whatever you do, usually it's impossible to prevent contact between a heads and damaged surfaces. Theoretically, it's possible to do by filling scratches by neutral sliding material and/or edit DFH parameter, but it's really a LOT of work, and I don't know about any strong successful methods.
I don't know about other vendors, but Seagate company made a special firmware, where is all background processes (SMART, pending, reallocation etc.) are switched off to help drive ignore problems with initialization. Of course, not for share...


Top
 Profile  
 
 Post subject: Re: patch hdd firmware to read failed drive
PostPosted: May 27th, 2015, 14:14 
Offline
User avatar

Joined: August 15th, 2006, 3:01
Posts: 3464
Location: CDRLabs @ Chandigarh [ India ]
Suitsof wrote:
Actually, I agree with Dmitri. Moreover, most drive operations runs in memory, anyway you have to know necessary vendor commands to work with memory. And whatever you do, usually it's impossible to prevent contact between a heads and damaged surfaces. Theoretically, it's possible to do by filling scratches by neutral sliding material and/or edit DFH parameter, but it's really a LOT of work, and I don't know about any strong successful methods.
I don't know about other vendors, but Seagate company made a special firmware, where is all background processes (SMART, pending, reallocation etc.) are switched off to help drive ignore problems with initialization. Of course, not for share...


Question ,
How Do You Know Seagate Has that ? .

_________________
Regards
Amarbir S Dhillon , Chandigarh Data Recovery Labs [India]
Logical,Semi Physical And Physical Data Recovery
Website-> http://www.chandigarhdatarecovery.com


Top
 Profile  
 
 Post subject: Re: patch hdd firmware to read failed drive
PostPosted: June 25th, 2015, 14:37 
Offline

Joined: October 3rd, 2005, 0:40
Posts: 4311
Location: Hungary
I am doing DFH, bias and gain tuning on the fly ... that's a good thing, especially with the new drives being picky about heads...

_________________
Adatmentés - Data recovery


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 10 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 17 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group