All times are UTC - 5 hours [ DST ]


Forum rules


Please do not post questions about data recovery cases here (use this forum instead). This forum is for topics on finding new ways to recover data. Accessing firmware, writing programs, reading bits off the platter, recovering data from dust...



Post new topic Reply to topic  [ 6 posts ] 
Author Message
 Post subject: Accessing the firmware on flash devices
PostPosted: November 13th, 2018, 11:21 
Offline

Joined: August 2nd, 2018, 9:21
Posts: 7
Location: sdasdad
Hi, Please reply with information you have regarding accessing flash devices firmware.
Has anybody here was able to access the firmware of a flash device?

Thanks.


Top
 Profile  
 
 Post subject: Re: Accessing the firmware on flash devices
PostPosted: November 13th, 2018, 15:48 
Offline

Joined: May 9th, 2017, 11:33
Posts: 21
Location: Romania
https://hackmag.com/security/rubber-ducky/


Top
 Profile  
 
 Post subject: Re: Accessing the firmware on flash devices
PostPosted: November 13th, 2018, 21:53 
Offline
User avatar

Joined: December 4th, 2012, 1:35
Posts: 3177
Location: Adelaide, Australia
lookup "badusb". there was some research done a few years ago where you could actually run small programs on the flash drives' CPU. A specific version of Phison controllers. you could do some simple things like dump sections of memory IIRC.

It was hosted on GitHub I think and "Phison" was in the name. If you cant find I should be able to get more details.

There was a Blackhat and/or Defcon talk along with whitepaper.

cool as hell, wish I had more time to play around with stuff like that


Top
 Profile  
 
 Post subject: Re: Accessing the firmware on flash devices
PostPosted: November 13th, 2018, 22:02 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 11024
Location: Australia
HaQue wrote:
lookup "badusb". there was some research done a few years ago where you could actually run small programs on the flash drives' CPU. A specific version of Phison controllers. you could do some simple things like dump sections of memory IIRC.

It was hosted on GitHub I think and "Phison" was in the name. If you cant find I should be able to get more details.

The info is at MasterT's link.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Accessing the firmware on flash devices
PostPosted: November 15th, 2018, 8:26 
Offline
User avatar

Joined: December 4th, 2012, 1:35
Posts: 3177
Location: Adelaide, Australia
Thanks Franc, so it is. The info I was taking about is referenced as such

Quote:
However, soon after, two other researchers (Adam Caudill and Brandon Wilson) presented to the whole world at Derbycon conference an operable PoC tailored to Phison 2251-03 microcontroller The code is available at GitHub.


https://github.com/brandonlw/Psychson

Actually I have seen this as well... I went to save it and seems files already exist. My file hoarding is overtaking my memory...

I didn't visit the link as I associate USB Rubber Ducky with Hak5's product, and this isn't an actual USB flash drive.
https://shop.hak5.org/products/usb-rubber-ducky-deluxe


Top
 Profile  
 
 Post subject: Re: Accessing the firmware on flash devices
PostPosted: November 15th, 2018, 18:19 
Offline

Joined: August 13th, 2016, 17:10
Posts: 80
Location: Vienna, Austria
This new paper has a good overview of the several possible ways to get access to the firmware of flash devices:
https://www.ru.nl/publish/pages/909275/ ... aper_1.pdf

I also wrote about how I got access to firmware:
http://www2.futureware.at/~philipp/ssd/ ... Manual.pdf


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 6 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group