Mweghachi na hacking mpụta draịva nzuzo nke onwe bụ ihe omume ochie m. N'oge gara aga, enwere m ohere ịme ihe na ụdị ndị dị ka Zalman VE-400, Zalman ZM-SHE500, Zalman ZM-VE500. N'oge na-adịbeghị anya, otu onye ọrụ ibe wetara m ihe ngosi ọzọ: Patriot (Aigo) SK8671, nke a na-ewu dị ka ihe a na-ahụkarị - ihe ngosi LCD na keyboard maka itinye koodu PIN. Nke ahụ bụ ihe si na ya pụta…

1. Okwu mmeghe
2. Akụrụngwa architecture
- 2.1. Isi bọọdụ
- 2.2. Ihe ngosi LCD
- 2.3. bọọdụ ahụigodo
- 2.4. Na-ele anya na wires
3. Usoro nke mbuso agha
- 3.1. Na-ebufu data site na draịva SPI
- 3.2. Mmekọrịta na-ekpo ọkụ

1. Okwu mmeghe

Ụlọ

Упаковка

A na-eme ịnweta data echekwara na diski ahụ, nke e chere na ezoro ezoro ezo, ka etinyere koodu PIN. Ihe ndetu mmalite ole na ole na ngwaọrụ a:

Ka ịgbanwee koodu PIN, ị ga-pịa F1 tupu imeghe;
Koodu PIN ga-enwerịrị site na nkeji 6 ruo 9;
Mgbe mbọ 15 na-ezighi ezi, a na-ehichapụ diski ahụ.

2. Akụrụngwa architecture

Nke mbụ, anyị na-ekesa ngwaọrụ ahụ n'ime akụkụ iji ghọta ihe mejupụtara ya. Ọrụ kachasị na-agwụ ike bụ imepe ikpe ahụ: ọtụtụ skru microscopic na plastik. Mgbe anyị mepechara ikpe ahụ, anyị na-ahụ ihe ndị a (Lezienụ anya na njikọ eriri ise m rere):

2.1. Isi bọọdụ

Isi bọọdụ dị nnọọ mfe:

Akụkụ ya kacha ama ama (lee site n'elu ruo na ala):

njikọ maka ihe ngosi LCD (CN1);
tweeter (SP1);
PM25LD010 (nkọwapụta) SPI flash mbanye (U2);
Jmicron JMS539 njikwa (nkọwapụta) maka USB-SATA (U1);
Njikọ USB 3 (J1).

SPI flash mbanye na-echekwa firmware maka JMS539 na ụfọdụ ntọala.

2.2. Ihe ngosi LCD

Ọ dịghị ihe dị ịrịba ama na LCD osisi.

Naanị:

Ihe ngosi LCD nke amaghi ebe o si (ikekwe ya na ihe odide nke China); na njikwa usoro;
Njikọ Ribbon maka bọọdụ ahụigodo.

2.3. bọọdụ ahụigodo

Mgbe ị na-enyocha bọọdụ ahụigodo, ihe na-atọ ụtọ karịa.

N'ebe a, n'akụkụ azụ, anyị na-ahụ njikọ rịbọn, yana Cypress CY8C21434 microcontroller PSoC 1 (nke a ga-akpọ ya PSoC)

CY8C21434 na-eji usoro ntụziaka M8C (lee akwụkwọ). Na [akwụkwọ ngwaahịa]((http://www.cypress.com/part/cy8c21434-24ltxi) e gosiri na ọ na-akwado teknụzụ CapSense (ihe ngwọta sitere na Cypress, maka ahụigodo capacitive). N'ebe a, ị nwere ike ịhụ njikọ nke nwere pin ise m resịrị - nke a bụ usoro ọkọlọtọ maka ijikọ onye mmemme mpụga site na interface ISSP.

2.4. Na-ele anya na wires

Ka anyị chọpụta ihe jikọrọ ebe a. Iji mee nke a, jiri multimeter nwalee wires:

Nkọwa maka eserese a e sere na ikpere:

A kọwara PSoC na nkọwapụta teknụzụ;
njikọ na-esote, nke dị n'aka nri, bụ interface ISSP, nke, site na ọchịchọ nke akara aka, kwekọrọ n'ihe edere banyere ya na Ịntanetị;
Njikọ kacha mma bụ ọnụ maka njikọ rịbọn na bọọdụ ahụigodo;
Nkume ojii bụ ihe osise nke njikọ CN1, nke e mere iji jikọọ isi osisi na osisi LCD. Ejikọtara P11, P13 na P4 na pin PSoC 11, 13 na 4, na bọọdụ LCD.

3. Usoro nke mbuso agha

Ugbu a anyị maara ihe akụrụngwa nke draịva a nwere, anyị kwesịrị: 1) hụ na ọrụ nzuzo bụ isi dị ugbu a; 2) chọpụta ka esi emepụta / chekwaa igodo nzuzo; 3) chọta ebe a ga-enyocha koodu PIN kpọmkwem.

Iji mee nke a, emere m usoro ndị a:

weghaara data site na draịva SPI;
nwara ịkwatu data sitere na draịva PSoC;
kwadoro na nzikọrịta ozi dị n'etiti Cypress PSoC na JMS539 nwere n'ezie mkpịsị ugodi;
Eji m n'aka na mgbe ị na-agbanwe paswọọdụ, ọ dịghị ihe edegharịrị na draịvụ SPI;
dị umengwụ iji tụgharịa firmware 8051 na JMS539.

3.1. Na-ebufu data site na draịva SPI

Usoro a dị nnọọ mfe:

jikọọ nyocha na ụkwụ nke flash mbanye: CLK, MOSI, MISO na (nhọrọ) EN;
Nkwukọrịta “sniff” na onye na-eme ihe na-eji nyocha mgbagha (m ji Saleae Logic Pro 16);
decode protocol SPI na mbupu nsonaazụ na CSV;
were uru decode_spi.rbiji tugharia nsonaazụ wee nweta mkpofu.

Biko mara na usoro a na-arụ ọrụ nke ọma n'ihe gbasara onye njikwa JMS539, ebe onye njikwa a na-ebufe ngwa ngwa niile site na draịva flash na mmalite mmalite.

$ decode_spi.rb boot_spi1.csv dump
0.039776 : WRITE DISABLE
0.039777 : JEDEC READ ID
0.039784 : ID 0x7f 0x9d 0x21
---------------------
0.039788 : READ @ 0x0
0x12,0x42,0x00,0xd3,0x22,0x00,
[...]
$ ls --size --block-size=1 dump
49152 dump
$ sha1sum dump
3d9db0dde7b4aadd2b7705a46b5d04e1a1f3b125 dump

N'ịbụ onye mwepụrụ na draịvụ SPI, abịara m na nkwubi okwu na naanị ọrụ ya bụ ịchekwa ngwa ngwa maka ngwaọrụ njikwa JMicron, nke arụnyere n'ime 8051 microcontroller. N'ụzọ dị mwute, ikpofu SPI flash mbanye wee bụrụ ihe na-abaghị uru:

mgbe a gbanwere koodu PIN, mbanye flash mbanye na-anọgide otu;
Mgbe mmalite mmalite, ngwaọrụ anaghị enweta SPI flash mbanye.

3.2. Mmekọrịta na-ekpo ọkụ

Nke a bụ otu ụzọ ị ga-esi chọta mgbawa na-ahụ maka ịlele nkwukọrịta maka oge/ọdịnaya nke mmasị. Dị ka anyị maralarị, onye na-ahụ maka USB-SATA jikọtara ya na Cypress PSoC LCD site na njikọ CN1 na eriri abụọ. Ya mere, anyị na-ejikọta nyocha na ụkwụ atọ kwekọrọ:

P4, ntinye / mmepụta n'ozuzu;
P11, I2C SCL;
P13, I2C SDA.

Mgbe ahụ, anyị na-amalite Saleae Logic analyzer wee banye na keyboard: "123456 ~". N'ihi ya, anyị na-ahụ eserese na-esonụ.

Na ya anyị nwere ike ịhụ ọwa mgbanwe data atọ:

enwere ọtụtụ mkpirisi mkpirisi na ọwa P4;
na P11 na P13 - ọ fọrọ nke nta ka ọ bụrụ mgbanwe data na-aga n'ihu.

N'ịbanye na spike mbụ na ọwa P4 (rektangulu na-acha anụnụ anụnụ na foto gara aga), anyị na-ahụ ihe ndị a:

N'ebe a, ị nwere ike ịhụ na na P4, ọ fọrọ nke nta ka ọ bụrụ 70ms nke mgbaàmà na-enweghị atụ, nke na mbụ dị m ka ọ na-arụ ọrụ nke mgbama elekere. Otú ọ dị, mgbe m jisịrị oge nyochaa echiche m, achọpụtara m na nke a abụghị akara elekere, kama ọ bụ ụda ụda nke na-apụta na tweeter mgbe ịpịrị igodo. Ya mere, akụkụ a nke mgbaàmà n'onwe ya enweghị ozi bara uru maka anyị. Agbanyeghị, enwere ike iji ya dị ka ihe ngosi iji mara mgbe PSoC debanyere igodo igodo.

Agbanyeghị, iyi ọdịyo P4 kachasị ọhụrụ dịtụ iche: ọ bụ ọdịyo maka "PIN na-ezighi ezi"!

Ịlaghachi na eserese igodo mkpịsị ugodi, na-ebuba na eserese iyi egwu ikpeazụ (lee akụkụ anọ na-acha anụnụ anụnụ ọzọ), anyị ga-enweta:

N'ebe a, anyị na-ahụ akara ngosi monotonous na P11. Yabụ na ọ dị ka nke a bụ akara elekere. Na P13 bụ data. Rịba ama ka ụkpụrụ na-agbanwe mgbe ụda ahụ kwụsịrị. Ọ ga-adọrọ mmasị ịhụ ihe na-eme ebe a.

Usoro ndị na-eji waya abụọ na-arụ ọrụ na-abụkarị SPI ma ọ bụ I2C, nkọwa teknụzụ na Cypress na-ekwu na ntụtụ ndị a kwekọrọ na I2C, nke anyị na-ahụ bụ eziokwu n'ọnọdụ anyị:

Chipset USB-SATA na-atụgharị PSoC mgbe niile ka ọ gụọ ọnọdụ igodo, nke na ndabara bụ “0”. Mgbe ahụ, mgbe ịpịrị igodo "1", ọ na-agbanwe na "1". Nfefe ikpeazụ ozugbo ịpịrị "~" dị iche ma ọ bụrụ na abanyela koodu PIN na-ezighi ezi. Agbanyeghị, ugbu a enyochabeghị m ihe a na-ebufe ebe ahụ. Mana echere m na nke a agaghị abụ igodo nzuzo. Ka o sina dị, lee ngalaba na-esote ka ị ghọta ka m siri wepụrụ PSoC n'ime firmware.

isi: www.habr.com

Na-atụgharị na mbanye Aigo draịva HDD mpụga na-ezo onwe ya. Nkebi nke 1: Na-ekesa n'ime akụkụ