Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin...
Transcript of Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin...
![Page 1: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/1.jpg)
Brute-Forcing Lockdown Harddrive PIN Codes
Colin O’Flynn
Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision 19-July-2016.
![Page 2: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/2.jpg)
![Page 3: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/3.jpg)
![Page 4: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/4.jpg)
http://hardwear.io/wp-content/uploads/2015/10/Slide-hardware_re_for_software_reversers-By-Czarny-Rigo.pdf
Joffrey Czarny & Raphaël Rigo
https://www.sstic.org/media/SSTIC2015/SSTIC-actes/hardware_re_for_software_reversers/SSTIC2015-Article-hardware_re_for_software_reversers-czarny_rigo.pdf
Presentation at Hardwear.io:
Lots of details in paper:
![Page 5: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/5.jpg)
![Page 6: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/6.jpg)
![Page 7: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/7.jpg)
![Page 8: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/8.jpg)
![Page 9: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/9.jpg)
![Page 10: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/10.jpg)
![Page 11: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/11.jpg)
https://github.com/colinoflynn/hddkeyboard-spoof-demo/
![Page 12: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/12.jpg)
![Page 13: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/13.jpg)
![Page 14: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/14.jpg)
![Page 15: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/15.jpg)
![Page 16: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/16.jpg)
![Page 17: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/17.jpg)
![Page 18: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/18.jpg)
![Page 19: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/19.jpg)
![Page 20: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/20.jpg)
![Page 21: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/21.jpg)
![Page 22: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/22.jpg)
![Page 23: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/23.jpg)
![Page 24: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/24.jpg)
![Page 25: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/25.jpg)
![Page 26: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/26.jpg)
![Page 27: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/27.jpg)
Data Busses...
![Page 28: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/28.jpg)
![Page 29: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/29.jpg)
![Page 30: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/30.jpg)
![Page 31: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/31.jpg)
![Page 32: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/32.jpg)
![Page 33: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/33.jpg)
![Page 34: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/34.jpg)
![Page 35: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/35.jpg)
![Page 36: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/36.jpg)
![Page 37: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/37.jpg)
![Page 38: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/38.jpg)
![Page 39: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/39.jpg)
0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1: ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00
2: 00 00 00 00 ff ff ff ff 00 00 00 00 00 00 00 00
3: ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4: 00 ff 00 00 d3 32 80 f9 00 00 00 00 00 00 00 00
5: 00 00 ff 00 00 00 00 00 00 00 00 00 00 00 00 00
6: 00 00 00 ff 00 00 00 00 00 00 00 00 00 00 00 00
7: 70 0e 75 ad 00 00 00 00 00 00 00 00 00 00 00 00
8: 8f f1 8a 52 00 00 00 00 00 00 00 00 00 00 00 00
9: 00 00 00 00 2c cd 7f 06 00 00 00 00 00 00 00 00
10: 00 00 00 00 d3 32 80 f9 00 00 00 00 00 00 00 00
11: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff
12: 00 00 00 00 8f f1 8a 52 00 00 00 00 00 00 00 00
13: a3 3c f5 54 00 00 00 00 00 00 00 00 00 00 00 00
![Page 40: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/40.jpg)
0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1: ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00
2: 00 00 00 00 ff ff ff ff 00 00 00 00 00 00 00 00
3: ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4: 00 ff 00 00 d3 32 80 f9 00 00 00 00 00 00 00 00
5: 00 00 ff 00 00 00 00 00 00 00 00 00 00 00 00 00
6: 00 00 00 ff 00 00 00 00 00 00 00 00 00 00 00 00
7: 70 0e 75 ad 00 00 00 00 00 00 00 00 00 00 00 00
8: 8f f1 8a 52 00 00 00 00 00 00 00 00 00 00 00 00
9: 00 00 00 00 2c cd 7f 06 00 00 00 00 00 00 00 00
10: 00 00 00 00 d3 32 80 f9 00 00 00 00 00 00 00 00
11: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff
12: 00 00 00 00 8f f1 8a 52 00 00 00 00 00 00 00 00
13: a3 3c f5 54 00 00 00 00 00 00 00 00 00 00 00 00
![Page 41: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/41.jpg)
![Page 42: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/42.jpg)
![Page 43: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/43.jpg)
![Page 44: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/44.jpg)
• 128 words per “block”• 512 bytes
![Page 45: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/45.jpg)
![Page 46: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/46.jpg)
![Page 47: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision](https://reader034.fdocuments.us/reader034/viewer/2022042712/5f9eb4556b10b643f610f8fa/html5/thumbnails/47.jpg)