Main » Forums home » Software and hardware tools

All times are UTC - 5 hours [ DST ]



Post new topic Reply to topic  Page 1 of 1
  [ 10 posts ] 
  Print view Previous topic | Next topic 
Author Message
aekhv
 Post subject: CYUSB3014 parallel ATA sniffer
PostPosted: March 16th, 2025, 3:39 
Offline
User avatar

Joined: September 11th, 2024, 10:21
Posts: 59
Location: Russia
Hey all! I did this project a few years ago and I think it's time to make some improvements and share them with everyone.

The sniffer device based on Cypress EZ-USB Superspeed Explorer Kit. This pretty toy can help you to capture vendor tech keys, :!: ATA passwords :!: and much more.
Attachment:
CYUSB3014.jpg
CYUSB3014.jpg [ 148.54 KiB | Viewed 2021 times ]


No additional adapters or soldering needed, only few wires are required.
Attachment:
2025-03-15 15-20-12 11.JPG
2025-03-15 15-20-12 11.JPG [ 739.03 KiB | Viewed 2021 times ]

Attachment:
2025-03-15 15-48-53 11.JPG
2025-03-15 15-48-53 11.JPG [ 976.28 KiB | Viewed 2021 times ]


Features:
- USB 3.0 speed supported;
- Full WINUSB compatible, no special driver needed;
- Full ATA PIO flow capturing (commands and data) between PC host and target PATA/SATA device;
- User friendly decoder from captured raw data into readable text;

Limitations:
- The correct PIO mode (0...4) must be selected. Otherwise, some data may be lost;
- Data transfer in UltraDMA mode is not supported;

Actual pinout:
Code:
FX3 board pin:    IDE cable pin:
DQ_0  <---------> DD0 (17)
DQ_1  <---------> DD1 (15)
DQ_2  <---------> DD2 (13)
DQ_3  <---------> DD3 (11)
DQ_4  <---------> DD4 (9)
DQ_5  <---------> DD5 (7)
DQ_6  <---------> DD6 (5)
DQ_7  <---------> DD7 (3)
GND   <---------> GND (19)

DQ_8  <--------> DD8 (4)
DQ_9  <--------> DD9 (6)
DQ_10 <--------> DD10 (8)
DQ_11 <--------> DD11 (10)
DQ_12 <--------> DD12 (12)
DQ_13 <--------> DD13 (14)
DQ_14 <--------> DD14 (16)
DQ_15 <--------> DD15 (18)
GND   <--------> GND (22)

DQ_16 <--------> DA0 (35)
DQ_17 <--------> DA1 (33)
DQ_18 <--------> DA2 (36)
DQ_19 <--------> CS0 (37)
DQ_20 <--------> CS1 (38)
GND   <--------> GND (40)

DQ_24 <--------> DIOR (25)
DQ_25 <--------> DIOW (23)
GND   <--------> GND (24)

Two short wires on FX3 board:
CTL_0 <--------> DQ_24
CTL_1 <--------> DQ_25


TO BE CONTINUED...
Top
 Profile  
 
aekhv
 Post subject: Re: CYUSB3014 parallel ATA sniffer
PostPosted: March 19th, 2025, 8:00 
Offline
User avatar

Joined: September 11th, 2024, 10:21
Posts: 59
Location: Russia
SNIFFER FIRMWARE

Source code: https://github.com/aekhv/pata-sniffer-fx3-firmware

How to flash:
1. Download and install Cypress EZ-USB FX3 SDK;
2. Download latest ready to flash binary image from GitHub;
3. Connect FX3 board to PC, install jumper J4, press reset button;
4. Run Cypress USB Control Center, program binary image to I2C EEPROM;
5. Remove jumper J4, press reset button;
6. FX3 board is ready to work. Run sniffer application and enjoy.

Blue LED mode:
- Blinks two times when FX3 board connected to USB 2.0 host. I do not recommend this mode because of possible data loss.
- Blinks three times when FX3 board connected to USB 3.0 host. It is optimal mode.

TO BE CONTINUED...
Top
 Profile  
 
aekhv
 Post subject: Re: CYUSB3014 parallel ATA sniffer
PostPosted: March 23rd, 2025, 0:59 
Offline
User avatar

Joined: September 11th, 2024, 10:21
Posts: 59
Location: Russia
SNIFFER APPLICATION

Source code: https://github.com/aekhv/pata-sniffer

Hot to run:
1. Download and unpack latest release from GitHub;
2. Connect sniffer device to a USB 3.0 host, blue LED must to blink three times;
3. Run pata-sniffer.exe and enjoy!

A short video to demonstrate how parallel ATA sniffer works: https://youtu.be/JzeESNMVAWQ

Screenshots:
Attachment:
img1.png
img1.png [ 9.34 KiB | Viewed 1572 times ]

Attachment:
img2.png
img2.png [ 32.31 KiB | Viewed 1572 times ]


Top
 Profile  
 
fzabkar
 Post subject: Re: CYUSB3014 parallel ATA sniffer
PostPosted: March 23rd, 2025, 4:40 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16402
Location: Australia
Can you buy the rainbow cable ready-made?

Which PATA-SATA bridge IC do you recommend?

_________________
A backup a day keeps DR away.
Top
 Profile  
 
aekhv
 Post subject: Re: CYUSB3014 parallel ATA sniffer
PostPosted: March 23rd, 2025, 22:09 
Offline
User avatar

Joined: September 11th, 2024, 10:21
Posts: 59
Location: Russia
fzabkar wrote:
Can you buy the rainbow cable ready-made?

Could you rephrase please? Why do I need to buy rainbow cable? A have a lot of them already.

fzabkar wrote:
Which PATA-SATA bridge IC do you recommend?

If you plan to capture standard ATA commands then any bridge chip should be fine. In same time, as I know, some of them can block non-standard ATA commands, like vendor specific commands, tech keys and so on. Before PC-3000 Portable-III was released ACE Lab recommended to use JMicron JM20330 bridge with EXPRESS and UDMA complexes for some SSD in tech mode, because this chip does not block anything. So that's why I use it, but it's hard to buy it now.
Top
 Profile  
 
HaQue
 Post subject: Re: CYUSB3014 parallel ATA sniffer
PostPosted: March 23rd, 2025, 23:55 
Offline
User avatar

Joined: December 4th, 2012, 1:35
Posts: 3881
Location: Adelaide, Australia
Thanks for sharing, looks very interesting indeed. The card in the PC is any regular IDE card?

This explains a screenshot on another thread!
Top
 Profile  
 
aekhv
 Post subject: Re: CYUSB3014 parallel ATA sniffer
PostPosted: March 24th, 2025, 0:23 
Offline
User avatar

Joined: September 11th, 2024, 10:21
Posts: 59
Location: Russia
HaQue wrote:
The card in the PC is any regular IDE card?

My sniffer device connected to the PC-3000 EXPRESS board but you can use any PATA/IDE controller of course. Or even SATA host controller, no problem:
SATA host controller <-> SATA-to-PATA bridge <-> Sniffer device <-> PATA-to-SATA bridge <-> SATA HDD/SSD
Top
 Profile  
 
Lardman
 Post subject: Re: CYUSB3014 parallel ATA sniffer
PostPosted: March 24th, 2025, 5:50 
Offline

Joined: November 7th, 2020, 5:31
Posts: 1237
Location: United Kingdom
aekhv wrote:
fzabkar wrote:
Can you buy the rainbow cable ready-made?

Could you rephrase please? Why do I need to buy rainbow cable? A have a lot of them already.

It looks like just M-F dupont cable. I think Fzabkar was asking if it was anything special and could just be purchased.

_________________
Data Recovery Services in the UK.
https://www.usbrecovery.co.uk/
Top
 Profile  
 
aekhv
 Post subject: Re: CYUSB3014 parallel ATA sniffer
PostPosted: March 24th, 2025, 7:07 
Offline
User avatar

Joined: September 11th, 2024, 10:21
Posts: 59
Location: Russia
Lardman wrote:
It looks like just M-F dupont cable. I think Fzabkar was asking if it was anything special and could just be purchased.

Yep, I use dupont wires. Something like this: https://www.ebay.com/sch/i.html?_nkw=dupont+arduino+cable
Top
 Profile  
 
fzabkar
 Post subject: Re: CYUSB3014 parallel ATA sniffer
PostPosted: March 24th, 2025, 12:37 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16402
Location: Australia
aekhv wrote:
Lardman wrote:
It looks like just M-F dupont cable. I think Fzabkar was asking if it was anything special and could just be purchased.

Yep, I use dupont wires. Something like this: https://www.ebay.com/sch/i.html?_nkw=dupont+arduino+cable

Yes, that's what I was looking for. Thanks.

FYI, I compared the various PATA-SATA bridges here:

https://www.hddoracle.com/viewtopic.php?p=24565#p24565

_________________
A backup a day keeps DR away.
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
  [ 10 posts ] 

Main » Forums home » Software and hardware tools

All times are UTC - 5 hours [ DST ]

Who is online

Users browsing this forum: No registered users and 40 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Switch to mobile style
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group