Unlocking ATA Password for Western Digital

Maelstrom wrote:fzabkar, have got error reading drq with this script in mhdd.. (after the string "checkdrq")

That could be because the command runs in PIO mode rather than DMA mode. I suspect that removing the "checkdrq" line or prefixing it with a ";" should fix the problem. I'll give it a try when I have time.

Sorry, I should have tested my code (there were typos).

I have now verified that the following works (cut-and-pasted from working script).

Code:: ; send ATA SECURITY DISABLE PASSWORD command to disable password reset waitnbsy regs = $00 $00 $00 $00 $00 $a0 $f6 waitnbsy checkdrq sectorsfrom = disablpw.bin

The user password was "TESTPWD".

disablpw.bin

Code:: Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 00000000 00 00 54 45 53 54 50 57 44 00 00 00 00 00 00 00 ..TESTPWD....... 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ 000001F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

PLEASE HELP!!!
I have this:

Code:: starts from 00000000 line and so on: 00 BA 00 19 01 00 00 00 00 00 01 60 02 12 00 22 00 0A 00 00 00 .º.........`..."..... 00 00 00 01 01 00 00 01 E0 01 0F 0F 01 02 02 0A 01 01 00 02 02 ........à............ 04 01 00 FF FF 05 00 00 01 00 00 00 00 00 40 0B 00 01 00 00 00 ...ÿÿ.........@...... 00 05 00 00 00 00 00 FF FF 00 00 00 00 12 0A 12 00 00 00 05 00 .......ÿÿ............ 00 00 00 00 1E 00 00 00 00 00 00 00 00 00 4D 00 24 00 07 00 12 ..............M.$.... 33 00 00 00 0E 00 00 00 00 00 01 00 00 00 00 00 00 07 00 01 02 3.................... 0D 00 01 03 00 03 01 00 01 00 00 00 00 00 00 00 01 57 44 43 20 .................WDC 57 44 32 35 30 30 41 41 4A 53 2D 37 35 56 57 41 30 20 20 20 00 WD2500AAJS-75VWA0 . 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 . 00 01 53 7C 42 7C 4C 41 50 46 4D 4B 48 37 43 5A 52 55 56 52 4B ..S|B|LAPFMKH7CZRUVRK 53 55 46 00 20 20 20 20 20 20 20 20 20 20 20 20 20 31 32 2D 31 SUF. 12-1 36 2D 32 30 30 37 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6-2007............... 00 00 00 00 00 00 00 00 01 01 00 00 00 00 00 00 00 00 00 00 00 ..................... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ..................... 00 57 44 43 57 44 43 57 44 43 57 44 43 57 44 43 57 44 43 57 44 .WDCWDCWDCWDCWDCWDCWD 43 57 44 43 57 44 43 57 44 43 57 00 08 C0 FE FF 00 01 36 00 00 CWDCWDCWDCW..Àþÿ..6.. F4 01 C4 09 14 20 32 00 00 00 0F 00 01 03 00 00 01 78 00 32 00 ô.Ä.. 2..........x.2. 20 00 55 FF 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .Uÿ................. 00 00 00 00 00 00 00 00 00 58 58 58 58 58 58 58 58 58 58 58 58 .........XXXXXXXXXXXX 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 XXXXXXXXXXXXXXXXXXXXX 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 01 01 01 01 01 00 XXXXXXXXXXXXXXX...... 00 00 00 00 00 00 00 00 01 00 05 10 27 00 00 88 13 00 00 00 00 ............'..ˆ..... E8 03 00 00 88 13 00 00 1E 00 00 00 05 00 01 00 00 00 00 00 00 è...ˆ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ..................... and the last line not fully filled 000001F8: 00 00 00 00 00 00 00 00 ........

from mhdd
what should I do next?
My rive if mint condition...

I use this link:
http://hugowan.blogspot.com/2012/05/unl ... sword.html

Master password
WDCWDCWDCWDCWDCWDCWDCWDCWDCWDCW

Loki

Last edited by loki on July 29th, 2014, 15:32, edited 1 time in total.

@koneksja, your drive has no password.

hi everyone, a few months ago I had success unlocking a WD hd, so today I am having trouble with dumping the bin for a Fujitsu hd that I have, does anyone know why I may be having trouble with mhdd sumping the bin for me?
thanks for any help that can be provided it is greatly appreciated.
hd is a FUJITSU MJA2160BH G2

Hi, I believe I have made some progress in getting the .bin from my FUJITSU hd, I have included the .bin that I was able to get from it, I suspect that the password is in there, would anyone be able to maybe verify this suspicion?

Attachments

: pic of the .bin

FUJITSU MJA2160BH G2_K95BT9926V25.zip: .bin is from victoria, I think it may contain the passwords; (426 Bytes) Downloaded 1002 times

That's an Identify Device information block. It has nothing to do with passwords. In any case this thread is about WD drives.

i just thought about that today I realized I posted it here...thanks, is there a thread that you know of about Fujitsu drives in reference to passwords?

Hello, this is the hex view of my 22.bin. I'm a bit clueless about where I can find my password though.

Hi all

After days and days of head scratching, reading and re-reading these last 42 pages, I am still no closer to working out this password.

I can see the mater password WDC.....WDC etc, but unable to see where 01 07 00 is and where the password starts. The Hard drive is from my wifes (now dead) Dell Inspiron 6400. Password was put on when she was at Uni and shes now forgotten it. Ive put it into a newer dell to retrieve the data, but asking for a password on start up.

Thanks in advance

Attachments

@ryanmini1275
In your case to be able to disable a password it would be easier to mount the drive in a pc not in another Dell laptop.
Look at the address starting 10e.....00 01 01 and you can see your drive is not showing as locked so maybe you have some other kind of drive protection?

01 01 = password disabled
01 07 = password enabled

I'm stuck with WD2500BEVT-35A23T0 from Samsung notebook NP-R530 locked with unknown user/master passwords. (User told, that never set any passwords in BIOS).
All 3 dump scripts gave error "No DRQ". Dump and dump48 after line 11 and dump2 after line 7. May be I need other sequences for this drive? Tried with other drive (Desktop WD75000AADS) - all scripts working fine. Also tried script from fzabkar posted 02.06.14 at page 41 on both drive. Same error "No DRQ" after line 12 on first drive and success on second. (There no passwords on that second drive, but zeroed user password and factory master password was grabbed succefully to files.) And now, one stupid thing. At first try with locked drive my cs.bin was 517 byte in length. :oops:

(I was shocked when hex-editor from Hiren's CD shifted contents against replacing). Anybody knows, could be this fatal for drive? How much sectors realy was written by sectorsfrom command? Need I to restore the original contents if that was overwritten and how? Now I looking on PC-garbage laying around me for similar drive to try to read that contents if any...
Any advices are welcome!

I got the 22.bin file from my PC but made sure the lock was still active on the Dell. Still says it holds a password in Victoria and MHDD.

Any thoughts?

please tell me where my password is.

“WDCWDCWDCWDCWDCWDCWDCWDCWDCWDCW” Not worked.

Attachments

sedric wrote:please tell me where my password is.

“WDCWDCWDCWDCWDCWDCWDCWDCWDCWDCW” Not worked.

look at 00000170 tabernus is your password

zenelli wrote:
sedric wrote:please tell me where my password is.

“WDCWDCWDCWDCWDCWDCWDCWDCWDCWDCW” Not worked.

look at 00000170 tabernus is your password

doesn't work

which program you use for entering the password?

zenelli wrote:which program you use for entering the password?

Mhdd 4.5

Succefully unlocked WD2500BEVT-35A23T0 from Samsung notebook NP-R530! After 2 weeks of "dances with a tambourine" on 4 different desktops with MHDD4.5 and scripts for it from here and from http://yura.puslapiai.lt/files/wd/mhdd/index.html, I suspected some firmware modification from notebook manufacturer and just installed disk to its place on notebook and gave a try pwgwn-samsung.py from https://github.com/dogbert/bios-pwgen/b ... samsung.py and also the http://bios-pw.org Voilà!
Need a remark. First time both of them generated a little different passwords p54xa8s and p54xa8sb for code 318C300AA587097C30. No luck with both. On second try password was p54xa8s5 for code 436403284b3c841fc0. No luck. Then I entered to BIOS Setup and set supervisor password 11111111. Superviser password needed to set/clear HDD password in BIOS Setup. After that catched that password by code 360110044080020800 and one more time by code 280401104002088010. Entered in BIOS Setup again and cleared supervisor password. After that notebook accept password p54xa8s5. After unlocking HDD all scripts, I tried before with no luck, works fine. Script from fzabkar damped master password as '50 00 35 00 34 00 58 00 41 00 38 00 53 00 35 00 ..... 00' i.e. P54XA8S5 - all capitals spaced with 00 and ended with 00's.

Unlocking ATA Password for Western Digital

Re: Unlocking ATA Password for Western Digital

Re: Unlocking ATA Password for Western Digital

Re: Unlocking ATA Password for Western Digital

Re: Unlocking ATA Password for Western Digital

Re: Unlocking ATA Password for Western Digital

Re: Unlocking ATA Password for Western Digital

Re: Unlocking ATA Password for Western Digital

Re: Unlocking ATA Password for Western Digital

Re: Unlocking ATA Password for Western Digital

Re: Unlocking ATA Password for Western Digital

Re: Unlocking ATA Password for Western Digital

Re: Unlocking ATA Password for Western Digital

Re: Unlocking ATA Password for Western Digital

Re: Unlocking ATA Password for Western Digital

Re: Unlocking ATA Password for Western Digital

Re: Unlocking ATA Password for Western Digital

Re: Unlocking ATA Password for Western Digital

Re: Unlocking ATA Password for Western Digital

Re: Unlocking ATA Password for Western Digital

Re: Unlocking ATA Password for Western Digital