Top Banner
Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision 19-July-2016.
48

Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision

Aug 08, 2020

Download

Documents

dariahiddleston
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision

Brute-Forcing Lockdown Harddrive PIN Codes

Colin O’Flynn

Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision 19-July-2016.

Page 2: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 3: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 4: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision

http://hardwear.io/wp-content/uploads/2015/10/Slide-hardware_re_for_software_reversers-By-Czarny-Rigo.pdf

Joffrey Czarny & Raphaël Rigo

https://www.sstic.org/media/SSTIC2015/SSTIC-actes/hardware_re_for_software_reversers/SSTIC2015-Article-hardware_re_for_software_reversers-czarny_rigo.pdf

Presentation at Hardwear.io:

Lots of details in paper:

Page 5: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 6: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 7: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 8: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 9: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 10: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 11: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision

https://github.com/colinoflynn/hddkeyboard-spoof-demo/

Page 12: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 13: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 14: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 15: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 16: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 17: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 18: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 19: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 20: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 21: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 22: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 23: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 24: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 25: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 26: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 27: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision

Data Busses...

Page 28: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 29: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 30: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 31: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 32: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 33: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 34: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 35: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 36: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 37: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 38: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 39: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision

0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

1: ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00

2: 00 00 00 00 ff ff ff ff 00 00 00 00 00 00 00 00

3: ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

4: 00 ff 00 00 d3 32 80 f9 00 00 00 00 00 00 00 00

5: 00 00 ff 00 00 00 00 00 00 00 00 00 00 00 00 00

6: 00 00 00 ff 00 00 00 00 00 00 00 00 00 00 00 00

7: 70 0e 75 ad 00 00 00 00 00 00 00 00 00 00 00 00

8: 8f f1 8a 52 00 00 00 00 00 00 00 00 00 00 00 00

9: 00 00 00 00 2c cd 7f 06 00 00 00 00 00 00 00 00

10: 00 00 00 00 d3 32 80 f9 00 00 00 00 00 00 00 00

11: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff

12: 00 00 00 00 8f f1 8a 52 00 00 00 00 00 00 00 00

13: a3 3c f5 54 00 00 00 00 00 00 00 00 00 00 00 00

Page 40: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision

0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

1: ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00

2: 00 00 00 00 ff ff ff ff 00 00 00 00 00 00 00 00

3: ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

4: 00 ff 00 00 d3 32 80 f9 00 00 00 00 00 00 00 00

5: 00 00 ff 00 00 00 00 00 00 00 00 00 00 00 00 00

6: 00 00 00 ff 00 00 00 00 00 00 00 00 00 00 00 00

7: 70 0e 75 ad 00 00 00 00 00 00 00 00 00 00 00 00

8: 8f f1 8a 52 00 00 00 00 00 00 00 00 00 00 00 00

9: 00 00 00 00 2c cd 7f 06 00 00 00 00 00 00 00 00

10: 00 00 00 00 d3 32 80 f9 00 00 00 00 00 00 00 00

11: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff

12: 00 00 00 00 8f f1 8a 52 00 00 00 00 00 00 00 00

13: a3 3c f5 54 00 00 00 00 00 00 00 00 00 00 00 00

Page 41: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 42: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 43: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 44: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision

• 128 words per “block”• 512 bytes

Page 45: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 46: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 47: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision
Page 48: Brute-Forcing Lockdown Harddrive PIN Codes · Brute-Forcing Lockdown Harddrive PIN Codes Colin O’Flynn Black Hat USA 2016. Las Vegas, N.V. August 3-4, 2016. Presentation revision

@colinoflynn

oflynn.com

newae.com

[email protected]

Colin O’Flynn