This repository contains the following items:
Oct 04, 2014 One of the most common drives in the US - Sandisk Ultra 16GB USB 3.0 - has the 2251-03 (2303) controller. Plugged it up today, ran ChipEasy, Phison 2303 chip is present. Not 100% sure as to whether all batches have the same chip. Jul 26, 2018 I am looking for assistance on formatting a hand full of USB drives. They are 32gb running the Phison Ps2251-03-Q with two chips of TT57G2LAPA memory. I have tried several versions of MPall and just about every combination of burner and Firmware that I can find for the 2251-03 chipset.
Releases have the following items:
Take note that the firmware patches have only been tested against PS2251-03 firmware version 1.03.53 (which is for an 8K eD3 NAND flash chip). They may work for others, but be careful.
As long as you are using the correct firmware image for your controller version and NAND chip, there is no harm in downgrading to an earlier version (such as from 1.10.53).
WARNING: This is experimental software. Use on unsupported devices, or even on supported devices, may cause loss of data, or even permananent damage to devices. Use at your own risk.
Getting Started
See Known Supported Devices for information on supported devices; use on an unsupported device may cause permanent damage to the device.
To get started, you'll need to obtain a burner image, which is the 8051 executable responsible for flashing firmware to the drive.
See Obtaining a Burner Image on the wiki for more information.
Build Environment
To patch or modify existing firmware, you must first set up a build environment. See Setting Up the Environment on the wiki for more information.
At a minimum, SDCC needs to be installed to
C:Program FilesSDCC .
Dumping Firmware
Run DriveCom, passing in the drive letter representing the drive you want to flash, the path of the burner image you obtained, and the destination path for the firmware image:
where
E is the drive letter, BN03V104M.BIN is the path to the burner image, and fw.bin is the resulting firmware dump.
Currently, only 200KB firmware images can be dumped (which is what the Patriot 8GB Supersonic Xpress drive uses).
Flashing Custom Firmware
Run
DriveCom , passing in the drive letter representing the drive you want to flash, the path of the burner image you obtained, and the path of the firmware image you want to flash:
where
E is the drive letter, BN03V104M.BIN is the path to the burner image, and fw.bin is the path to the firmware image.
Running Demo 1 (HID Payload)
Create a key script in Rubber Ducky format, then use Duckencoder to create an
inject.bin version of it:
where
keys.txt is the path to your key script.
You may notice the delays are not quite the same between the Rubber Ducky and the drive -- you may need to adjust your scripts to compensate.
(These tools are available from https://code.google.com/p/ducky-decode/.)
Once you have an
inject.bin file, embed it into the custom firmware with:
where
inject.bin is the path to your inject.bin file, and hid.bin is the path to the HID payload custom firmware.
(Notice that the firmware image is copied, and the payload is embedded into the copy -- this is because the payload can only be embedded once, so the original
CFW.bin must remain intact.)
You can now flash the firmware to your drive with:
where
E is the drive letter representing your drive, BN03V104M.BIN is the path to your burner image, and hid.bin is the path to the HID payload custom firmware.
Huge thanks to the Hak5 team for their work on the excellent USB Rubber Ducky!
Running Demo 2 (Hidden Partition Patch)
First, determine the number of logical blocks (sectors) your drive has with the following command:
Go into the
patch directory and modify base.c to disable all other patches, and enable the hidden partition patch:
Then modify the
NUM_LBAS define to the number of logical blocks on your drive:
Make sure you round down to an even number, and it couldn't hurt to subtract a few first, in case a few blocks go bad over time. (For example, if the number of LBAs was
0xE6C981 , you might reduce it to 0xE6C940 .)
Place the firmware image you want to patch into the
patch directory and name it fw.bin .
Go to the
patch directory and run build.bat . It will produce a file at patchbinfw.bin -- this is the modified firmware image.
You can now flash this file to your drive.
After flashing, Windows may be confused, as it now only sees half of the partition it once did -- it may ask you to format the first time you view either the public or hidden halves of the drive. This is normal.
Phison 2251 03 2303 Usb CableRunning Demo 3 (Password Patch)Phison 2251 03 2303 Usb Driver
Go into the
patch directory and modify base.c to disable all other patches, and enable the password patch:
Place the firmware image you want to patch into the
patch directory and name it fw.bin .
Go to the
patch directory and run build.bat . It will produce a file at patchbinfw.bin -- this is the modified firmware image.
You can now flash this file to your drive.
Running No Boot Mode Patch
Go into the
patch directory and modify base.c to disable all other patches, and enable the no boot patch:
Place the firmware image you want to patch into the
patch directory and name it fw.bin .
Go to the
patch directory and run build.bat . It will produce a file at patchbinfw.bin -- this is the modified firmware image.
![]()
You can now flash this file to your drive. Once flashed to your device, it will no longer act on the command to jump to boot mode. To update the firmware again will require shorting pins on the controller. To make it impossible* to update, after flashing this patch coat the device with epoxy.
Converting to Mode 7
You can run the
ModeConverterFF01.exe application (see Useful Links) to split the drive into public and secure partitions, or restore the original (mode 3) functionality.
Phison 2251 03 2303 Usb Charger
After converting to mode 7, you should be able to set, change, or disable the secure partition password with the
USB DISK Pro LOCK utility.
![]() Building From Source
Modify the C files in the
firmware directory for custom firmware, or the patch directory for the firmware patches, then run the build.bat file in the appropriate directory.
Once it has built successfully, use DriveCom to flash the resulting file (
binfw.bin ) to your drive:
Note: MySQL Installer is 32 bit, but will install both 32 bit and 64 bit binaries. Online Documentation. MySQL Installer Documentation and Change History; Please report any bugs or inconsistencies you observe to our Bugs Database. Thank you for your support! Detailed instructions, as well as other methods for installation, can be found in Installing MySQL on Linux. Microsoft Windows. The recommended way to install MySQL on Microsoft Windows is to use the MySQL Installer; see MySQL Installer Method on how to download and run the MySQL Installer. For a detailed explanation for each step of the installation wizard, see MySQL Installer for Windows. Dec 25, 2012 Beginners MYSQL Database Tutorial 1 # Download, Install MYSQL and first SQL query. MySQL Cluster CGE. MySQL Cluster is a real-time open source transactional database designed for fast, always-on access to data under high throughput conditions. MySQL Cluster; MySQL Cluster Manager; Plus, everything in MySQL Enterprise Edition; Learn More » Customer Download » (Select Patches & Updates Tab, Product Search) Trial Download ». How to download mysql database management.
..or..
Questions? Comments? Complaints?![]()
Unfortunately this isn't the most straightforward process at the moment, so if you have questions, open an issue and we'll do our best to help (and update the readme/wiki).
Comments are closed.
|
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |