Seagate ST960812A UNLOCK ATA PASSWORD

[snow79]

ITA:
Ok raga sto iniziando a capirci qualche cosa... penso
come gia sapete le password sono scritte nel Firmware, ma ogni modello e marca di disco, scrive le password in zone differenti,
se si vuole scoprire dove è scritta la password senza usare programmi a pagamento come sediv bisogna comparare un firmware senza password con un firmware con la password e vedere in quale indirizzo è nascosta la password.
con sediv in versione gratuita è possibile salvarsi il firmware, utilizzando la sezione read/write.
ora sarebbe bello scoprire se la password è contenuta tra la sezione sa-b e la sezione sa-e (sa border Begin - sa border end)

ENG:
Ok I'm starting to understand something ... I think: P
as already know the passwords are written in the firmware, but every model and brand of disc, write the password in different areas,
if you want to find out where the password is written without using paid programs as sediv need to compare a firmware password without a firmware password and see what address is hidden password.
sediv with free version you can save the firmware, using the section read / write.
now it would be nice to see if the password is contained between the section and the section sa-sa-b and (sa border Begin - sa border end)

[SAjunky]

Do you have terminal output from this drive?

[v3rcingetorige]

I have a serial interface for this device, tested..

Bye!

[v3rcingetorige]

up! up! up!

[olivia]

Should I use my language as well..???..... It seems like you need specific italian-designed solution for this ??

[v3rcingetorige]

Hdd files aren't important.
I want only unlock it to reuse on another PC, i'm looking for a terminal command(s) to erase and unlock the HDD.
I can find similar hdd to 25 euro (30$) used, ship it to Portugal or another country and pay isn't a good idea...

I think that i put it in trash ...

[DRforensic]

Did you try UNLOCK command using a DOS version of MHDD?

[v3rcingetorige]

Is not easy finding this (thd) information, any help?

Bye!

[v3rcingetorige]

Usualy i don't link "Pappa pronta" (Spoon feeding) but i don't have faund the thd..
The only question is if the vendor track for a Momentus 5400.6 is 6 (MOMENTUS --- 6).
I try ASAP.

For now THANX!

Bye.

[v3rcingetorige]

I see that some commands don't work and i STOP immediately...
% command don't work
? return different info.

With this FW is possible unlock the drive?


bye!

[v3rcingetorige]

This is FW info (with: Online ^A: Rev 0012.0000, Flash, DisplayFirmwareRev, Ctrl + A):

F3 T>
Package Version: WY05D7.SDM1.DA99L2.0002SDM1, Package P/N: ---------, Package Bu
ilder ID: 84,
Package Build Date: 06/10/2009, Package Build Time: 20:01:52, Package CFW Versio
n: WY05.SDM1.00173423.8400,
Package SFW1 Version: 7DBC, Package SFW2 Version: ----, Package SFW3 Version: --
--, Package SFW4 Version: ----
Controller FW Rev: 00990001, CustomerRel: 0002, Changelist: 00173423, ProdType:
WY05.SDM1, Date: 06/10/2009, Time: 200152, UserId: 00080603
Servo FW Rev: 7DC4
RAP FW Implementation Key: 0E, Format Rev: 3D03, Contents Rev: 26 1C 04 05


If someone can help me..

Bye!

P.S.: this is the Ata Command list from HDD:

F3 T>/C

F3 C>Q

Online CR: Rev 0011.0000, Flash, Abort
Online ESC: Rev 0011.0000, Flash, AbortLoopOrBatchFile
Online ' ': Rev 0001.0000, Flash, PauseOutput
Online '.': Rev 0011.0000, Flash, DisplayActiveStatus
Online '?': Rev 0011.0000, Flash, DisplayDiagBufferInfo
Online '!': Rev 0011.0000, Flash, DisplayRdChannelRegs
Online '$': Rev 0012.0000, Flash, DisplayRwStatsByZone
Online '`': Rev 0012.0000, Flash, DisplayRwStats
Online '<': Rev 0011.0000, Flash, DecRwScopeSync
Online '>': Rev 0011.0000, Flash, IncRwScopeSync
Online '{': Rev 0011.0000, Flash, ToggleEibTracing
Online '~': Rev 0011.0000, Flash, DisplayInterfaceCmdState
Online ^A: Rev 0012.0000, Flash, DisplayFirmwareRev
Online ^B: Rev 0012.0000, Flash, GetThermistorTemperature
Online ^C: Rev 0011.0000, Flash, FirmwareReset
Online ^D: Rev 0011.0000, Flash, ToggleRwTracing
Online ^E: Rev 0011.0000, Flash, DisplayInterfaceConfig
Online ^F: Rev 0011.0000, Flash, DisplayInterfaceRdCacheInfo
Online ^I: Rev 0011.0000, Flash, DisplayControllerRegs
Online ^K: Rev 0011.0000, Flash, DisplayDstStatus
Online ^L: Rev 0013.0000, Flash, DisplaySignOnMsg
Online ^N: Rev 0011.0000, Flash, ToggleRwTracing
Online ^P: Rev 0011.0000, Flash, ToggleDiagIdleMode
Online ^Q: Rev 0011.0000, Flash, ResumeInterfaceTask
Online ^R: Rev 0011.0000, Flash, EnableAsciiOnlineSerialPortMode
Online ^S: Rev 0011.0000, Flash, PauseInterfaceTask
Online ^T: Rev 0011.0000, Flash, EnableEslipSerialPortMode
Online ^U: Rev 0011.0000, Flash, DisplayCongen
Online ^V: Rev 0011.0000, Flash, ToggleInterfaceCmdEcho
Online ^W: Rev 0011.0000, Flash, RwStatsEnableAndInit
Online ^X: Rev 0011.0000, Flash, DisplayInterfaceAndRwCmdHistory
Online ^Y: Rev 0011.0000, Flash, DisplayDstStatus
Online ^Z: Rev 0011.0000, Flash, EnableAsciiDiagSerialPortMode
Online ^\: Rev 0011.0000, Flash, ToggleDebugDisplayEnable
All Levels CR: Rev 0011.0000, Flash, Abort
All Levels '/': Rev 0001.0000, Flash, ChangeDiagLevel, /[Level]
All Levels '+': Rev 0011.0001, Flash, PeekMemoryByte, +[AddrHi],[AddrLo],[Opts
]
All Levels '-': Rev 0011.0001, Flash, PeekMemoryWord, -[AddrHi],[AddrLo],[Opts
]
All Levels '=': Rev 0011.0001, Flash, PokeMemoryByte, =[AddrHi],[AddrLo],[Data
],[Opts]
All Levels '@': Rev 0001.0000, Overlay, BatchFileLabel, @[LabelNum]
All Levels '|': Rev 0001.0000, Overlay, BatchFileTerminator, |
All Levels '*': Rev 0011.0000, Overlay, SpecialBatchFileFunction, *[FuncId],[Fun
cParm0],[FuncParm1]
All Levels 'A': Rev 0011.0000, Overlay, SetTestSpace, A[OptsOrParmSelect],[ParmV
alue],[AddrType],[HdForCylLimit]
All Levels 'L': Rev 0001.0002, Overlay, EnableLooping, L[Opts],[CountOrStopOnErr
Code]
Level 1 'S': Rev 0011.0001, Flash, EditProcessorMemoryByte, S[AddrHi],[AddrLo]
,[MemValue],[NumBytes],[Opts]
Level 1 'U': Rev 0011.0001, Flash, EditBufferMemoryByte, U[AddrHi],[AddrLo],[M
emValue],[NumBytes]
Level 1 'e': Rev 0011.0000, Flash, SpinDownAndResetDrive, e[MsecDelay],[Opts]
Level 1 'm': Rev 0011.0001, Flash, EditProcessorMemoryWord, m[AddrHi],[AddrLo]
,[MemValue],[NumBytes],[Opts]
Level 1 'B': Rev 0011.0000, Overlay, BufferDisplay, B[DisplayBlk],[RefBlk],[NumB
lks],[Opts],[SymBits]
Level 1 'D': Rev 0011.0001, Overlay, DisplayMemoryBlock, D[AddrHi],[AddrLo],[Com
pVal],[NumBytes],[Opts],[SizeInBytes]
Level 1 'G': Rev 0011.0000, Overlay, GenericRwRequest, G[Parm0],[Parm1],[Parm2],
...[Parm9]
Level 1 'N': Rev 0011.0001, Overlay, SmartControl, N[SubCmd],[SubCmdParm0],[SubC
mdParm1]
Level 1 'c': Rev 0011.0000, Overlay, BufferCompare, c[SrcBlk],[RefBlk],[NumBlks]
,[ContOnErr]
Level 2 'U': Rev 0011.0000, Flash, SpinUpDrive, U[HoldState],[Hd],[Cyl]
Level 2 'Z': Rev 0011.0000, Flash, SpinDownDrive, Z
Level 2 'B': Rev 0011.0000, Overlay, BufferDisplay, B[DisplayBlk],[RefBlk],[NumB
lks],[Opts],[SymBits]
Level 2 'C': Rev 0011.0000, Overlay, BufferCopy, C[SrcBlk],[DestBlk],[NumBlks]
Level 2 'E': Rev 0011.0000, Overlay, DisplayEditLog, E[LogNum],[ErrCodeOrSpecial
FuncKey],[SpecialFunc]
Level 2 'F': Rev 0011.0000, Overlay, ModTrkDfctLst, F[PSctr/LBA],[Action]
Level 2 'H': Rev 0011.0000, Overlay, SelectHd, H[Hd],[SkType],[Options]
Level 2 'I': Rev 0011.0002, Overlay, DisplayModifyAdaptiveParm, I,[GroupId]
Level 2 'K': Rev 0011.0000, Overlay, SetTrackingOffset, K[OffsetValue],[PersOrTe
mpOpt],[UnitsOpt],[ChanReload]
Level 2 'M': Rev 0011.0000, Overlay, SetDiagIdleMode, M[ModeSelect],[ModeMask],[
ResetToPowerOn]
Level 2 'N': Rev 0001.0000, Overlay, SetDirectWrite, N[EnableDirWrtModeOpt]
Level 2 'O': Rev 0011.0000, Overlay, SeekFromCylToCyl, O[StartPhyCyl0],[StartPhy
Cyl1],[NumSkPairs],[NumSeconds],[Hd]
Level 2 'P': Rev 0011.0000, Overlay, BufferSetPattern, P[PatternSelOrPatternLow]
,[PatternHi],[PatternBits],[Opts],[BlkNum],[NumBlks]
Level 2 'Q': Rev 0011.0000, Overlay, WrRdRdChs, Q[Sec],[NumSecs],,[PhyOpt],[Opts
]
Level 2 'R': Rev 0011.0000, Overlay, RdChs, R[Sec],[NumSecs],,[PhyOpt],[Opts]
Level 2 'S': Rev 0011.0000, Overlay, SkToLogCyl, S[Cyl],[Hd],[Offset],[OffsetUni
tsOpt],[SkType],[Options]
Level 2 'T': Rev 0011.0000, Overlay, MeasureThroughput, T[Opts],[MinSkew],[MaxSk
ew],[SkewStep]
Level 2 'V': Rev 0011.0000, Overlay, RdVerifyChs, V[Sec],[NumSecs],[CompareBlk],
[Opts]
Level 2 'W': Rev 0011.0000, Overlay, WrChs, W[Sec],[NumSecs],,[PhyOpt],[Opts]
Level 2 'X': Rev 0011.0000, Overlay, DisplayTrkSectorInfo, X[LogCyl],[Hd],[SysAr
eaOpt],[Opts],[RowsPerPage]
Level 2 'Y': Rev 0011.0000, Overlay, SetDerpRetries, Y[Mode],[MaxRdRetries],[Max
WrtRetries],[OtcTLevel],[Options]
Level 2 'c': Rev 0011.0000, Overlay, BufferCompare, c[SrcBlk],[RefBlk],[NumBlks]
,[ContOnErr]
Level 2 'h': Rev 0011.0000, Overlay, XlatePhySec, h[Sec],[NumSecs]
Level 2 'i': Rev 0011.0000, Overlay, DisplayDefectsOnCurrentTrk, i
Level 2 'j': Rev 0011.0000, Overlay, RdWedge, j[WedgeAddr],[NumWedges],[NumSkipe
dWedges],[TranSize],[Opts],[RegAddr0],...,[RegAddr13]
Level 2 'l': Rev 0011.0000, Overlay, XlateLogSec, l[Sec],[NumSecs]
Level 2 'o': Rev 0001.0000, Overlay, CorruptLba, o[Lba],[NumBlocks],[NumBytes],[
ByteOffset],[Flags]
Level 2 'r': Rev 0011.0000, Overlay, RdLongOrSystemChs, r[LongSec],[LongSecsOrSy
sSec],[SysSecs],[LongPhySecOpt],[LongOpts],[SysOpts]
Level 2 's': Rev 0011.0000, Overlay, SkToPhyCyl, s[Cyl],[Hd],[ValidKey],[Offset]
,[OffsetUnitsOpt],[SkType],[Options]
Level 2 't': Rev 0011.0000, Overlay, XlateWedge, t[Wdg],[NumWdgs]
Level 2 'u': Rev 0011.0000, Overlay, EnableDisableChannelPreampRegDisplay, u[Ena
bleDisableOpt]
Level 2 'v': Rev 0011.0000, Overlay, ConvertTrackPercentageToOffsetCount, v[Perc
entage]
Level 2 'w': Rev 0011.0000, Overlay, WrLongOrSystemChs, w[LongSec],[LongSecsOrSy
sSec],[SysSecs],[LongPhySecOpt],,[SysOpts]
Level 2 'x': Rev 0012.0001, Overlay, DisplayZoneInfo, x[Partition],[Hd],[Zone],[
DisplayWedgeOpSyms]
Level 2 'y': Rev 0011.0000, Overlay, SetDerpRetryState, y[Type],[PathState],[Ret
ryStateCnt],[LoopCnt1],[LoopCnt2]
Level 2 'z': Rev 0011.0000, Overlay, WrWedge, z[WedgeAddr],[NumWedges],[NumSkipe
dWedges],[TranSize],[Opt],[RegAddr0],...,[RegAddr13]
Level 2 '7': Rev 0011.0000, Overlay, WrVerifyChs, 7[Sec],[NumSecs],[WrBufBlk],[O
pts]
Level 3 'U': Rev 0011.0000, Flash, SpinUpDrive, U[HoldState],[Hd],[Cyl]
Level 3 'V': Rev 0011.0000, Flash, RwPowerAsicReg, V[RegAddr],[RegValue],[WrOp
t]
Level 3 'Z': Rev 0011.0000, Flash, SpinDownDrive, Z
Level 3 'D': Rev 0011.0000, Overlay, MeasureSkAccessTime, D[SkLength],[SkType],[
NumSks]
Level 3 'E': Rev 0011.0000, Overlay, DisplayEditLog, E[LogNum],[ErrCodeOrSpecial
FuncKey],[SpecialFunc]
Level 3 'H': Rev 0011.0000, Overlay, SelectHd, H[Hd],[SkType],[Options]
Level 3 'O': Rev 0011.0000, Overlay, SeekFromCylToCyl, O[StartPhyCyl0],[StartPhy
Cyl1],[NumSkPairs],[NumSeconds],[Hd]
Level 3 'Q': Rev 0011.0000, Overlay, WrRdWrRdChs, Q[Sec],[NumSecs],[Opts]
Level 3 'R': Rev 0011.0000, Overlay, ReadCurrentServoDestination, R
Level 3 'S': Rev 0011.0000, Overlay, SkToLogCyl, S[Cyl],[Hd],[Offset],[OffsetUni
tsOpt],[SkType],[Options]
Level 3 'b': Rev 0001.0000, Overlay, LoadUnloadHeads, b[Cmd],[Velocity],[Dwell],
[Lock]
Level 3 'f': Rev 0012.0000, Overlay, RealTimeServoTrace, f[SubCmd],[SubCmdParm0]
,[SubCmdParm1]
Level 3 'p': Rev 0011.0000, Overlay, XlatePhySec, p[Sec],[NumSecs]
Level 3 'q': Rev 0011.0000, Overlay, XlateLogSec, q[Sec],[NumSecs]
Level 3 's': Rev 0011.0000, Overlay, SkToPhyCyl, s[Cyl],[Hd],[ValidKey],[Offset]
,[OffsetUnitsOpt],[SkType],[Options]
Level 4 'B': Rev 0011.0000, Overlay, EnableDisableRvff, B[NewRvffControlMode]
Level 4 'D': Rev 0011.0000, Overlay, MeasureSkAccessTime, D[SkLength],[SkType],[
NumSks]
Level 4 'E': Rev 0011.0000, Overlay, DisplayEditLog, E[LogNum],[ErrCodeOrSpecial
FuncKey],[SpecialFunc]
Level 4 'H': Rev 0011.0000, Overlay, SelectHd, H[Hd],[SkType],[Options]
Level 4 'K': Rev 0011.0000, Overlay, SetTrackingOffset, K[OffsetValue],[PersOrTe
mpOpt],[UnitsOpt],[ChanReload]
Level 4 'O': Rev 0011.0000, Overlay, DisplayMicroJogForLogChs, O[LogCyl],[Hd],[O
pts],[SysAreaOpt]
Level 4 'S': Rev 0011.0000, Overlay, SkToLogCyl, S[Cyl],[Hd],[Offset],[OffsetUni
tsOpt],[SkType],[Options]
Level 4 'U': Rev 0011.0000, Overlay, ServoBatchTest, U[SubCmd],[SubCmdParm0],[Su
bCmdParm1],[SubCmdParm2]
Level 4 'c': Rev 0001.0000, Overlay, FindMinOrMaxCylinders c[Head],[Mode],[Range
Multiplier],[RetryCountLimit],[FilterTimeConstant]
Level 4 'e': Rev 0011.0000, Overlay, EnableDisablePesOutput, e[PesLeftShiftCnt],
[DisablePesOut]
Level 4 'k': Rev 0001.0000, Overlay, GetVgaData, k[OpType],[StartHt],[EndHt],[Ht
Inc]
Level 4 'l': Rev 0011.0000, Overlay, ScanTrackForServoDefectsAndZap, l[RdPositio
nOpt]
Level 4 'q': Rev 0001.0000, Overlay, DisplayServoEventLog, q
Level 4 's': Rev 0001.0000, Overlay, DisplayServoSectorErrorCount, s
Level 4 't': Rev 0011.0000, Overlay, DisplayModifyZapTable, t[EntryNum],[EntryVa
lue]
Level 4 'u': Rev 0011.0000, Overlay, SetSkSpeed, u[Opts],[SkSpeed]
Level 4 'v': Rev 0011.0000, Overlay, ButterflySeekTest, v[StartPhyCyl0],[StartPh
yCyl1],[NumSkPairs],[NumSeconds],[Hd]
Level 5 'S': Rev 0011.0000, Flash, EnterServoMatlabShell, S
Level 5 'B': Rev 0011.0000, Overlay, Servo Bode Plot, B[BodeType],[InjAmp],[Fmin
],[Fmax],[NumFreq],[NumSamples],[EnableTracing]
Level 5 'C': Rev 0011.0000, Overlay, GenericServoCmd, C[CmdNum],[Parm1],...[Parm
7]
Level 5 'D': Rev 0011.0000, Overlay, ReadUnlockDdrBuffer, B[OperateCode]
Level 5 'E': Rev 0001.0000, Overlay, MeasureDiscEccentricity
Level 5 'F': Rev 0011.0000, Overlay, DriveFreeFallProtection, F[OpCode],[SimDur]
,[SimSensorOutputs]
Level 5 'G': Rev 0011.0000, Overlay, SelectServoController, G[Head],[Controller]
,[InputShift]
Level 5 'R': Rev 0011.0000, Overlay, RdServoRamAtAddr, R[Addr],[NumBytes]
Level 5 'U': Rev 0011.0000, Overlay, EnableDisableServoUpdates, U[VcmDacUpdateOp
t],[AToDUdateOpt]
Level 5 'W': Rev 0011.0000, Overlay, WrServoRamAtAddr, W[Addr],[NumBytes],[Data]

Level 5 'Z': Rev 0011.0000, Overlay, RdZapFromDiscToTable, Z
Level 5 'd': Rev 0011.0000, Overlay, DisableEnableServoZap, d[ZapControlMode]
Level 5 'i': Rev 0011.0000, Overlay, RdServoSymbolTableAtIndex, i[Index]
Level 5 'r': Rev 0011.0000, Overlay, RdServoRamAtIndex, r[Index],[NumBytes],[Byt
eOffset]
Level 5 'w': Rev 0011.0000, Overlay, WrServoRamAtIndex, w[Index],[NumBytes],[Dat
a],[ByteOffset]
Level 6 'B': Rev 0011.0000, Overlay, RunBatchFile, B[BatchFileNum],[DisplayOpt]
Level 6 'D': Rev 0011.0000, Overlay, DisplayBatchFile, D[BatchFileNum]
Level 6 'E': Rev 0011.0000, Overlay, EnterBatchFile, E[BatchFileNum]
Level 7 'Z': Rev 0011.0000, Flash, SpinDownDrive, Z
Level 7 's': Rev 0011.0000, Flash, WrPeripheralReg, s[OpType],[RegAddr],[RegVa
lue],[RegMask],[RegPagAddr]
Level 7 't': Rev 0011.0000, Flash, RdPeripheralReg, t[OpType],[RegAddr],[NumRe
gs],[RegMask],[RegPagAddr]
Level 7 'B': Rev 0011.0000, Overlay, BufferDisplay, B[DisplayBlk],[RefBlk],[NumB
lks],[Opts],[SymBits]
Level 7 'C': Rev 0011.0000, Overlay, BufferCopy, C[SrcBlk],[DestBlk],[NumBlks]
Level 7 'D': Rev 0012.0000, Overlay, DisplayTemperature, D,[DevSelect]
Level 7 'E': Rev 0011.0000, Overlay, DisplayEditLog, E[LogNum],[ErrCodeOrSpecial
FuncKey],[SpecialFunc]
Level 7 'H': Rev 0011.0000, Overlay, SelectHd, H[Hd],[SkType],[Options]
Level 7 'I': Rev 0011.0002, Overlay, DisplayModifyAdaptiveParm, I,[GroupId]
Level 7 'K': Rev 0011.0000, Overlay, SetTrackFormat, K[UserAreaTrkFormatType],[S
ysAreaTrkFormatType]
Level 7 'P': Rev 0011.0000, Overlay, BufferSetPattern, P[PatternSelOrPatternLow]
,[PatternHi],[PatternBits],[Opts],[BlkNum],[NumBlks]
Level 7 'Q': Rev 0011.0000, Overlay, WrRdRdChs, Q[Sec],[NumSecs],,[PhyOpt],[Opts
]
Level 7 'R': Rev 0011.0000, Overlay, RdChs, R[Sec],[NumSecs],,[PhyOpt],[Opts]
Level 7 'S': Rev 0011.0000, Overlay, SkToLogCyl, S[Cyl],[Hd],[Offset],[OffsetUni
tsOpt],[SkType],[Options]
Level 7 'U': Rev 0011.0000, Overlay, ChannelTemperatureAdj, U[TweakTemperature],
[Partition],[Hd],[Zone],[Opts]
Level 7 'W': Rev 0011.0000, Overlay, WrChs, W[Sec],[NumSecs],,[PhyOpt],[Opts]
Level 7 'X': Rev 0011.0000, Overlay, DisplayPreampHdResistance, X
Level 7 'Y': Rev 0011.0000, Overlay, SetDerpRetries, Y[Mode],[MaxRdRetries],[Max
WrtRetries],[OtcTLevel],[Options]
Level 7 'b': Rev 0011.0000, Overlay, EraseTrk, b[AdjacentTrkCnt],[EraseCntPerTrk
],[AcEraseOpt]
Level 7 'c': Rev 0011.0000, Overlay, OffTrackCapability, c[Sec],[NumSecs],[SecIn
crement],[Offset]
Level 7 'h': Rev 0011.0001, Overlay, MarkMediaFlaw, h[PhyCyl],[Hd],[PhySec],[Und
isturbedRadius],[EraseBandTrks],[PtrLen],[WgSpec],[Od/Id]
Level 7 'i': Rev 0011.0000, Overlay, GenericRwRequest, i[Parm0],[Parm1],[Parm2],
...[Parm9]
Level 7 'm': Rev 0011.0000, Overlay, DOS, m[Flags],[StartLba],[EndLba],[MinCount
]
Level 7 'r': Rev 0011.0000, Overlay, RdNonVolatileAdaptiveParms, r[Opts]
Level 7 'u': Rev 0011.0000, Overlay, EnableDisableWrFault, u[Op]
Level 7 'x': Rev 0012.0001, Overlay, DisplayZoneInfo, x[Partition],[Hd],[Zone],[
DisplayWedgeOpSyms]
Level 7 'y': Rev 0011.0000, Overlay, SetDerpRetryState, y[Type],[PathState],[Ret
ryStateCnt],[LoopCnt1],[LoopCnt2]
Level 8 'U': Rev 0011.0000, Flash, SpinUpDrive, U[HoldState],[Hd],[Cyl]
Level 8 'Z': Rev 0011.0000, Flash, SpinDownDrive, Z
Level 8 'C': Rev 0011.0000, Overlay, ServoDiagSubCmds, C[SubCmd],[Parm0],[Parm1]
,[Parm2]
Level 8 'R': Rev 0011.0000, Overlay, ReadCurrentServoDestination, R
Level 8 'S': Rev 0011.0000, Overlay, SkToLogCyl, S[Cyl],[Hd],[Offset],[OffsetUni
tsOpt],[SkType],[Options]
Level 8 'd': Rev 0001.0000, Overlay, HeadSmashTest, d[HeadDirection],[Accelerati
onDuration],[DecelerationDuration],[AccelerationCurrent],[DecelerationCurrent]
Level A 'C': Rev 0011.0000, Overlay, XlatePba, C[PbaHi],[PbaLow],[NumPbas]
Level A 'D': Rev 0011.0000, Overlay, XlateSfi, D[PhyCyl],[Hd],[Sfi],[NumSfis]
Level A 'E': Rev 0011.0000, Overlay, DisplayEditLog, E[LogNum],[ErrCodeOrSpecial
FuncKey],[SpecialFunc]
Level A 'F': Rev 0011.0000, Overlay, XlateLba, F[LbaHi],[LbaLo],[SysAreaOpt],[Nu
mLbas]
Level A 'M': Rev 0011.0000, Overlay, SetControllerTestPort, M[Port],[Value]
Level A 'Q': Rev 0011.0000, Overlay, WrRdRdLba, Q[Lba],[NumLbas],[Opts]
Level A 'R': Rev 0011.0000, Overlay, RdLba, R[Lba],[NumLbas],,[Opts]
Level A 'S': Rev 0011.0000, Overlay, SkToLba, S[LbaHi],[LbaLo],[Offset],[OffsetU
nitsOpt],[SkType],[Options]
Level A 'W': Rev 0011.0000, Overlay, WrLba, W[Lba],[NumLbas],,[Opts]
Level A 'Y': Rev 0011.0000, Overlay, SetDerpRetries, Y[Mode],[MaxRdRetries],[Max
WrtRetries],[OtcTLevel],[Options]
Level A 'c': Rev 0011.0000, Overlay, XlateLllChs, c[Cyl],[Hd],[Sec],[SysAreaOpt]
,[NumSecs]
Level A 'd': Rev 0011.0000, Overlay, XlatePlpChs, d[Cyl],[Hd],[Sec],[NumSecs]
Level A 'e': Rev 0011.0000, Overlay, XlateNominalCyl, e[Cyl],[Hd],[Sec],[SysArea
Opt]
Level A 'f': Rev 0011.0000, Overlay, XlatePlpChw, f[Cyl],[Hd],[Wdg],[NumWdgs]
Level A 'l': Rev 0011.0000, Flash, DisplayTrkInfo, l[LogCyl],[Hd],[SysAreaOpt]
,[Opts],[RowsPerPage]
Level A 'y': Rev 0011.0000, Overlay, SetDerpRetryState, y[Type],[PathState],[Ret
ryStateCnt],[LoopCnt1],[LoopCnt2]
Level C 'Q': Rev 0001.0000, Overlay, DisplayAsciiCmdInfo, Q[CmdLevel],[Cmd]
Level C 'T': Rev 0011.0000, Overlay, GoopPlot, T[Hd],[StartTrk],[EndTrk],[ECCLvl
],[NoFrcSync],[SkipCnt]
Level E 'B': Rev 0011.0000, Overlay, WrWedge, B[WedgeAddr],[NumWedges],[NumSkipe
dWedges],[TranSize],[Opt],[RegAddr0],...,[RegAddr13]
Level E 'C': Rev 0011.0000, Overlay, RdWedge, C[WedgeAddr],[NumWedges],[NumSkipe
dWedges],[TranSize],[Opts],[RegAddr0],...,[RegAddr13]
Level E 'G': Rev 0001.0000, Overlay, HeadDegradation, G[OperationControlOptions]
,[MeasurementControlOptions]
Level E 'm': Rev 0011.0000, Overlay, FastMseserMeasurement, m[]
Level E 'o': Rev 0011.0000, Overlay, FineRwOffset, o[NumAvgs],[TrkStepSize],[Num
GuardTrks]
Level E 'w': Rev 0011.0001, Overlay, SlowWrChs, w[Sec],[NumSecs],[ConSec],[Skip]
,[UnitOfSkip]
Level F 'U': Rev 0011.0000, Flash, SpinUpDrive, U[HoldState],[Hd],[Cyl]
Level F 'Z': Rev 0011.0000, Flash, SpinDownDrive, Z
Level F 'b': Rev 0011.0000, Flash, SetBaudRate, b[BaudRate],[MsecDelay]
Level F 't': Rev 0011.0000, Flash, WrPeripheralReg, t[OpType],[RegAddr],[RegVa
lue],[RegMask],[RegPagAddr]
Level F 'B': Rev 0011.0000, Overlay, BufferDisplay, B[DisplayBlk],[RefBlk],[NumB
lks],[Opts],[SymBits]
Level F 'C': Rev 0011.0000, Overlay, BufferCopy, C[SrcBlk],[DestBlk],[NumBlks]
Level F 'D': Rev 0011.0001, Overlay, DisplayMemoryBlock, D[AddrHi],[AddrLo],[Com
pVal],[NumBytes],[Opts],[SizeInBytes]
Level F 'E': Rev 0001.0000, Overlay, SymbolErrorMap, E[trk],[hd],[srt sctr],[sct
r cnt],[action],[mx err]
Level F 'P': Rev 0011.0000, Overlay, BufferSetPattern, P[PatternSelOrPatternLow]
,[PatternHi],[PatternBits],[Opts],[BlkNum],[NumBlks]
Level F 'V': Rev 0011.0000, Overlay, BufferCompare, V[SrcBlk],[RefBlk],[NumBlks]
,[ContOnErr]
Level F 'Y': Rev 0011.0000, Overlay, SetDerpRetries, Y[Mode],[MaxRdRetries],[Max
WrtRetries],[OtcTLevel],[Options]
Level F 'r': Rev 0011.0000, Overlay, RdSystemChs, r[LogSec],[NumSecs],[Opts]
Level F 's': Rev 0011.0000, Overlay, SkToPhyCyl, s[Cyl],[Hd],[ValidKey],[Offset]
,[OffsetUnitsOpt],[SkType],[Options]
Level F 'y': Rev 0011.0000, Overlay, SetDerpRetryState, y[Type],[PathState],[Ret
ryStateCnt],[LoopCnt1],[LoopCnt2]
Level F 'z': Rev 0011.0000, Overlay, SataDebug, z[SubCmd],[Parm1],[Parm2],[Parm3
]
Level G 'B': Rev 0011.0000, Overlay, FillCorrectionBuffer, B[StartAddr],[EndAddr
],[Pattern],[Opts]
Level G 'C': Rev 0011.0000, Overlay, CopyCorrectionBuffer, C[SrcAddr],[DestAddr]
,[NumSyms]
Level G 'D': Rev 0011.0000, Overlay, DisplayCorrectionBuffer, D[StartAddr],[EndA
ddr],[CompareData]
Level G 'F': Rev 0011.0000, Overlay, FillSuperParityRam, F[StartAddr],[EndAddr],
[Pattern]
Level G 'G': Rev 0011.0000, Overlay, DisplaySuperParityRam, G[StartAddr],[EndAdd
r]
Level H 'B': Rev 0011.0000, Overlay, BufferDisplay, B[DisplayBlk],[RefBlk],[NumB
lks],[Opts],[SymBits]
Level H 'P': Rev 0011.0000, Overlay, BufferSetPattern, P[PatternSelOrPatternLow]
,[PatternHi],[PatternBits],[Opts],[BlkNum],[NumBlks]
Level H 'S': Rev 0011.0000, Overlay, SkToLogCyl, S[Cyl],[Hd],[Offset],[OffsetUni
tsOpt],[SkType],[Options]
Level H 'b': Rev 0012.0000, Overlay, ContactDetect, b[Flags],[Revs],[BaselineRev
s],[StartWedge],[A],[B],[C],[D],[E],[StartHt],[HtInc],
[FixedPESThresh],[FilterDelta],[RangeStart],[RangePts],[AdjThreshSigmaLimit],[Va
rContactThreshBackup]
Level H 'c': Rev 0001.0000, Overlay, CalClearanceCoefsAdjustment, c[Flags],[NumR
evsToAvg],[PctOfFreq],[PctOfTgtClr],
[LowerHIWPLimit],[UpperHIWPLimit],[CTFFR],[ATT2R],[VGA],[StartHtr],[EndHtr],[Htr
Incr]
Level L 'C': Rev 0011.0000, Overlay, CopyLogFile, C[SrcLog],[DestLog],[AppendOpt
]
Level L 'D': Rev 0011.0000, Overlay, DisplayLogFile, D[Log],[ErrCode]
Level L 'E': Rev 0011.0001, Overlay, EnableDisableLogging, E[ErrLoggingOpt],[Asc
iiLoggingOpt],[RwStatsLoggingOpt]
Level L 'I': Rev 0011.0000, Overlay, DisplayLogFileInfo, I[Log]
Level L 'c': Rev 0011.0000, Overlay, CreateLogFile, c[Log],[LogType],[BufferOrDi
skOpt],[NumBytes]
Level L 'd': Rev 0011.0000, Overlay, DeleteLogFile, d[Log]
Level L 'i': Rev 0011.0000, Overlay, InitLogFile, i[Log]
Level T 'B': Rev 0011.0000, Flash, SetBaudRate, B[BaudRate],[MsecDelay]
Level T 'm': Rev 0012.0024, Flash, FormatPartition, m[Partition],[FormatOpts],
[DefectListOpts],[MaxWrRetryCnt],[MaxRdRetryCnt],[MaxEccTLevel],[MaxCertifyTrkRe
writes],[ValidKey],[DataPattern],[2ndMaxWrRetryCnt],[2ndMaxRdRetryCnt][2ndMaxEcc
TLevel]
Level T 'E': Rev 0011.0000, Overlay, DisplayEditLog, E[LogNum],[ErrCodeOrSpecial
FuncKey],[SpecialFunc]
Level T 'F': Rev 0011.0000, Overlay, SetCongenParmCmdHelpMsg, F[ValueRef],[Data]
,[ResetEnable]
Level T 'J': Rev 0011.0000, Overlay, DisplayModifyCap, J[ParmValue],[ParmId],[Pa
rmArrayBytes],[ParmByteArrayOffset]
Level T 'O': Rev 0001.0000, Overlay, SelectDataOutputMode, O[Mode],[VerboseOpts]

Level T 'P': Rev 0011.0000, Overlay, DownloadGenericFile, P[FileBytes]
Level T 'R': Rev 0011.0000, Overlay, RdNonVolatileAdaptiveParms, R[Opts]
Level T 'T': Rev 0011.0000, Overlay, OddEvenEncroachmentTest, T[strt tk],[end tk
],[hd],[rtry thrshld][ECC thrshld
Level T 'V': Rev 0012.0000, Overlay, DisplayDefectLists, V[DefectListSelect],[Hd
],[StartCyl],[NumCyls],[DisplaySummaryOpt]
Level T 'i': Rev 0011.0001, Overlay, InitDefectList, i[DefectListSelect],[SaveLi
stOpt],[ValidKey]
Level T '[': Rev 0011.0000, Overlay, AsciiLogControl, [[LogFunction],[Log]
F3 C>

[Friedrich]

Read this threads, maybe will be useful for you, but your drive or data inside could get damaged, be carefull (i've no responsability on this:
seagate-st3500312cs-equiv-t20805.html#p157328

seagate-non-standard-ata-master-password-t12920.html?hilit=SEAGATE%20Non%20Standard%20ATA%20Master%20Password

http://yura.puslapiai.lt/files/seagate/720011_ES2.html

[v3rcingetorige]

Very, very useful!

Translated:
...If you do not know what you are doing, then you better stop at the point where you lose confidence in your actions!
 
Now a little about the security system.
As might be expected the transition to a new architecture F3 Seagate changed the security system. Immediately there were rumors that it is nenulaužiama system that encrypts the user entered password. But considering the disk service zone, it appears that although the architecture was radically changed, but there was hardly touched to the ATA password.
Let's see what we got.
Unlike the previous generation hdd, this drive is not a "vendor tracks" in the strict sense, he formed a dynamic disk boot time, and before we know the password has been considered as a "vendor tracks" depending on household 5.6 or 7 seconds. 7200.11 drives have one very useful thing: the last 15 executed commands list (with full information what to do and where we recorded a disc or scanned) this list can be viewed by giving the command ^ X, which makes it easy for us to work, instead of having to enter a password known and then carefully examine the entire service area, we usually enter the password and see our drive this term labor history.
Harness to drive ata terminalo.Tam to bring a team in F1 and a buffer with a password (įvesim all units ASCII code 31 * 32 characters) at the same time the drive is connected to the "com" terminal and it is to him we handle giving ^ R switching to SATA and ^ Z will return to the command mode and then we will give the team ^ X: Let 's see what we came out:
ATA CMD 32 238 123 911 000 000 000 000 F1 0000 - at the same time the drive was busy following works:
123 912 32 239 18 02 002 421 000 000 1 00000080 XFR WR SYS LBA B: 0000493D to systemic lba No. 493d was recorded in some kind of information, knowing underbrush CSP (39c), we can easily calculate the that was recorded in the sector 10d 14h Trakai with the offset from the base cylinder, and he we PhyCyls 22BEF then remains only to add to our set-off and crawled from the cylinder 10d sectors 22BEF +14 = 22C03
F3 T> / 2
F3 2> x1
Head 0, PhyCyls 00022BEF - 00022D02, LogCyls 00000000-00000112
First Sec Sym Sym
Zn Cyl Track Wedge Track MHz
00 00022BEF 039C 06E3 00073E30 604,687
01 00022C79 039C 06E3 00073E30 604,687
F3 2> A0
F3 2> s00022c03, 00.22
F3 2> r, 10d, 1
?
Blks 001,769-001B09 (0003A1) BufAddr 002ED200-003613FF, DBA 062ED200, BytesPerBlk 200 Default Diag Rd Buf
F3 2> B1769, 1769
and here we see our master password, and we entered the user password.
0x0040 00 00 00 00 0C 54 01 00 00 00 53 65 61 47 61 74th . . . . T. . . . SeaGat
0x0050 65 2E 2E 2E 2E 2E 2E 2E 2E 2E 2E 2E 2E 2E 2E 2E e. . . . . . . . . . . . . . .
0x0060 2E 2E 2E 2E 2E 2E 2E 2E 2E 2E 31 31 31 31 31 31. . . . . . . . . .111111
0x0070 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 1111111111111111
0x0080 31 31 31 31 31 31 31 31 31 31FE FF 00 00 06 20 1111111111þÿ. . .
It is our ata password coordinates: cyl offset 14h, 10d sec. That's it.

[suhail hdd]

splidit what is the password of sevdiv file for extract win rar ????

[v3rcingetorige]

On my Seagate Momentus 5400.6 (st9250315as):


ASCII Diag mode

F3 T>/2

F3 2>x1

System Partition

LBAs 00000000 - 000883AF
PBAs 00000000 - 000AD5D3
HdSkew 002A, CylSkew 001C
ZonesPerHd 02

Head 0, PhyCyls 0001DF94 - 0001E167, LogCyls 00000000 - 0000019A

First Sec Sym Sym Data
Zn Cyl Track Wedge Track Rate
00 0001DF94 0315 0630 00062160 386.250
01 0001E07E 0315 0630 00062160 386.250

Head 1, PhyCyls 0001BAB0 - 0001BC5F, LogCyls 00000000 - 00000188

First Sec Sym Sym Data
Zn Cyl Track Wedge Track Rate
00 0001BAB0 0315 0630 00062160 386.250
01 0001BB88 0315 0630 00062160 386.250

F3 2>A0
Current Addr Mode
User LLL CHS Mode
Hd 0 Cyl 000000

All Addr Modes
User LBA Mode
LBAs 00000000 - 1D1C596F
System LBA Mode
LBAs 00000000 - 000883AF
User LLL CHS and User LLP CHW Modes
Hd 0 Cyls 000000 - 02697F
Hd 1 Cyls 000000 - 023A13
System LLL CHS and System LLP CHW Modes
Hd 0 Cyls 000000 - 00019A
Hd 1 Cyls 000000 - 000188
PLP CHS and PLP CHW Modes
Hd 0 Cyls 000000 - 027207
Hd 1 Cyls 000000 - 0241DF

Buffer Sector Offset 00000000

F3 2>s00022c03,00,22

F3 2>r,10d,1

F3 2>
Blks 000E1D-000E1D (000001), BufAddr 001C3A00-001C3BFF, DBA 061C3A00, BytesPerBl
k 200 Cmd Input Buf
Blks 000E1E-000E1E (000001), BufAddr 001C3C00-001C3DFF, DBA 061C3C00, BytesPerBl
k 200 Diag Batch File
Blks 000E1F-000E1F (000001), BufAddr 001C3E00-001C3FFF, DBA 061C3E00, BytesPerBl
k 200
Blks 000E20-000E20 (000001), BufAddr 001C4000-001C41FF, DBA 061C4000, BytesPerBl
k 200
Blks 000E21-000E21 (000001), BufAddr 001C4200-001C43FF, DBA 061C4200, BytesPerBl
k 200
Blks 000E22-000E22 (000001), BufAddr 001C4400-001C45FF, DBA 061C4400, BytesPerBl
k 200
Blks 000E23-000E23 (000001), BufAddr 001C4600-001C47FF, DBA 061C4600, BytesPerBl
k 200
Blks 000E24-000E37 (000014), BufAddr 001C4800-001C6FFF, DBA 061C4800, BytesPerBl
k 200 Online Cmd SDBP DFB
Blks 000E38-000E4B (000014), BufAddr 001C7000-001C97FF, DBA 061C7000, BytesPerBl
k 200 Diag Mode Cmd SDBP DFB
Blks 000E4C-000E5F (000014), BufAddr 001C9800-001CBFFF, DBA 061C9800, BytesPerBl
k 200 Symbol Error Map Log
Blks 000E60-000E73 (000014), BufAddr 001CC000-001CE7FF, DBA 061CC000, BytesPerBl
k 200 Test Service SDBP DSB
Blks 000E74-000ECD (00005A), BufAddr 001CE800-001D9BFF, DBA 061CE800, BytesPerBl
k 200
Blks 000ECE-000F27 (00005A), BufAddr 001D9C00-001E4FFF, DBA 061D9C00, BytesPerBl
k 200 Drive Geometry Info
Blks 000F28-000F81 (00005A), BufAddr 001E5000-001F03FF, DBA 061E5000, BytesPerBl
k 200
Blks 000F82-000FDB (00005A), BufAddr 001F0400-001FB7FF, DBA 061F0400, BytesPerBl
k 200
Blks 000FDC-001035 (00005A), BufAddr 001FB800-00206BFF, DBA 061FB800, BytesPerBl
k 200
Blks 001036-00108F (00005A), BufAddr 00206C00-00211FFF, DBA 06206C00, BytesPerBl
k 200
Blks 001090-0010E9 (00005A), BufAddr 00212000-0021D3FF, DBA 06212000, BytesPerBl
k 200
Blks 001856-001BF6 (0003A1), BufAddr 0030AC00-0037EDFF, DBA 0630AC00, BytesPerBl
k 200 Default Diag Rd Buf
Blks 001BF9-001F8A (000392), BufAddr 0037F200-003F328F, DBA 0637F200, BytesPerBl
k 208 Default Diag Wrt Buf
B1769,1769

Buffer Block 1769 compared to Buffer Block 1769 (200 Bytes/Block)
Addr 0 1 2 3 4 5 6 7 8 9 A B C D E F
002ED200 FF FF FD FF FD F7 FF DF FD FF DF EF FF DD FF EF
002ED210 ED FF FF FF FF FF FF FF EF FD FB FF FF FF FD FF
002ED220 FF FF FF FB FF FD FF FF FF FF FF FF FF EF FF FD
002ED230 EF FF FF FF FF FF F7 FF BF FF FF FF FF F7 FF FF
002ED240 FF FF FF FF FF FF FF FF DF FF FF FE FD FD FD FF
002ED250 DE DD EF FE FE FF FF FE F6 ED FF FF EE FF FF FF
002ED260 FF DF FF FF FF FD EF DF FC FC FD EF FC FF FF FF
002ED270 FF FF DF FF FF DF FF FF FF DD FF EF FF FB FD FF
002ED280 FD EF FF FE FF FF FD FF FD FD DD FF FB FF 7F FF
002ED290 FF FF FE FF FF FF DF FF DF FF FF FF DF FF FF FF
002ED2A0 FF FD DD DF FD EF FF FF FF FF FF F7 FF EF FF FE
002ED2B0 FB EF FF FF FF FD F5 FF FF FF FF DF FF FF FF FF
002ED2C0 FF FF EF FF FF FF FF FF EF FF EF FF FF FF FF FF
002ED2D0 FF FD FD FD FF FF FF FF FF FF FF FF FF ED FF FF
002ED2E0 DF FF FF DF EF FF DF FF FF EF FF FF FF FD FF DF
002ED2F0 FF F7 DF FF FF FF FF FF FF FF FF FF FE FF DE F7
002ED300 F7 FF FF FF FC 7F 7F FF F7 7F FF FF 7F FF FF FF
002ED310 FF BF FF FF FF FF FF FF B7 7F BF 7F FF FF FB FF
002ED320 FF FF FF FF F7 FF 7F FF FF BF FF FF FB FF FB FF
002ED330 FF FF FF FF FF FF FF FF FF FB FF FF FF FF FF F6
002ED340 BF FF F7 FF FF FF 7F FF FB FF BF FE FF FB FF FF
002ED350 BF FB F7 7B FF FF FF FF FF FF FF FF FF 7F 7F FF
002ED360 FF 7F FF FF FF 7F FF FF FF FF FF FF FF FF FD FF
002ED370 BF FF FF FF FB FF FF BF FF BF BD B7 F3 FF 7F FF
002ED380 FF FD F7 7F FF F7 FF FF FF FF FF FF FF FF FF FB
002ED390 FB FF BB F7 FB FF FF FB FF 77 BF 7F FF FF FB FF
002ED3A0 FF FF FF FF FF FB B7 FB FF FF F7 FF FF DF FF FF
002ED3B0 FF BF F7 FB F7 FF FF FB FF FF FF FF FF FF FF F7
002ED3C0 FE BD FF FF FF FF 3F FF FF FF FF FF FB BF FF FF
002ED3D0 77 FF FF FF FF FF F7 FF FF F7 FF BF FF 7F FF FB
002ED3E0 FF FF FF FF FF FF BB BF 7F FF FF BF FF FB FF FF
002ED3F0 7F FF FF FB FF FB FF FF FF 77 F7 FF F7 FF 7F FF
F3 2>

[v3rcingetorige]

This stepbystep work on 7200.11.. Ok..

Change pwd and search it on the drive.. But i can't change the password

If someone that have a unlock drive post the right start address...

Bye

[v3rcingetorige]

UP!
Any idea?

Bye!

[v3rcingetorige]

Up!!!!!!

[bos]

Sorry for waking this thread, but this line made me laugh hard:

Level 2 'Y': Rev 0011.0000, Overlay, SetDerpRetries,

What does that command do?


(Google "derp" if you want the context my mind was at)