themaddoctor / linux-mybook-tools

tools for opening some encrypted WD My Book drives in linux

GNU General Public License v3.0

181 stars 26 forks source link

attempting to recover mydisk duo 4tb #77

Open zjohnson opened 2 years ago

zjohnson commented 2 years ago

Followed the PDF but could not find a key.

Any guidance would be very much appreciated! :-)

Hopefully useful info:

xuc_mybook_duo_disk1_first4MB.bin.gz xuc_mybook_duo_disk1_last4MB.bin.gz root@after:/opt/dd# fdisk -l /dev/sda Disk /dev/sda: 3.65 TiB, 4000787030016 bytes, 7814037168 sectors Disk model: EFRX-68N32N0
Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes

Here is the first and last 4MB of disk 1 removed from my enclosure

dd if=/dev/sda count=8192 of=xuc_mybook_duo_disk1_first4MB.bin dd if=/dev/sda count=8192 of=xuc_mybook_duo_disk1_last4MB.bin skip=7814028976

xuc_mybook_duo_disk1_first4MB.bin.gz xuc_mybook_duo_disk1_last4MB.bin.gz

themaddoctor commented 2 years ago

It looks like the MBR is also encrypted. What chip is on the USB-SATA bridge card? Did you use RAID?

zjohnson commented 2 years ago

Hello,

I managed to scrounge up a dental mirror today so I could get pics of the chips. Based on the pics to me it looks like it is a JMicron JMS561 rather than the asmedia ASM1074 chip which I think is a USB HUB controller.

I found this product brief for the JMS561:

https://www.jmicron.com/file/download/1033/JMS561_Product+Brief.pdf

Here are the pics just in case they help.

wd_bridge_chip1_edited wd_bridge_chip2_edited

Used this Mybook Duo 4TB enclosure+drives on an apple macbook laptop circa the same age as the drive. I believe it was set up as RAID1/mirror, the idea being data redundancy at the time.

Again, thanks for checking this out for me!

themaddoctor commented 2 years ago

Unfortunately, I don't know how to crack the JMS561. Here is another case, where I think the solution was to use another enclosure, or maybe the original still worked (I don't remember):

12 https://github.com/themaddoctor/linux-mybook-tools/issues/12

The problem is that we don't know where the key is stored. Probably on a chip on the bridge card.

Does your enclosure still work? Do you have the ability to read EPROMs?

zjohnson commented 2 years ago

Enclosure does not work. trying to source another power supply or determine the amp rating for the input to verify that isn't the problem.

Don't have a way to read EPROMs but may be willing to obtain that if it isn't prohibitively expensive.

themaddoctor commented 2 years ago

I have seen EPROM readers for $50 or $100, I don't remember exactly.

Keep me informed.