Over the last two weeks I have been teaching myself the ATA spec, and have written a complete ATA driver in Delphi that uses RAW I/O to access the HDDs. Through experimentation I have found a way to unlock the Western Digital WD80EB series of HDDs that are in XBOXs without needing the XBOX, a master key, or any form of information about the drive.
The key lies in a WD vendor command, I am not sure what the command actually is that I am using, but it seems to enable a service mode, the side effect of entering this "service mode", is that any security lock on the drive becomes disabled!. While in this mode, it is possible to call SECURITY_SET_PASSWORD and set a new password. After a re-scan of the disks in the computer, the password that was set can be used to unlock the drive.
I am still yet to tidy up the application, but I am just so excited to be able to unlock a WD80EB from an xbox without a master password that I had to post my success somewhere....
Oh, and btw, this forum is awesome, and this is my first contribution to it
