Mar 8, 2014

Partitions, Formatted volumes and Other Disk Disasters

Power Recovery is powerful data recovery software that will scan and find lost partitions, boot sectors and other file system components. Power Recovery can detect drives even if they are not visible in explorer. The full directory structure of the drive is displayed (even on NTFS Drives where it is recoverable) and the built in search feature makes finding files much easier. The Recovery Wizard allows even novice users to successfully recover lost data.

Power Recovery Features :
  • Supported file systems: FAT 12/16/32 (used by hard disks, disks, Smartmedia™, Compact Flash™, Memory Stick and other) and NTFS (used by hard drives)
  • Ability to scan all volumes in a local machine and build a directory tree of all lost and deleted files.
  • Search lost and deleted files matching file name criteria.
  • Fast scanning engine allows the file list to be built in a few minutes.
  • Easy to understand File Manager and typical Save File dialog.
  • Secure undelete: program does no write operation on drive containing files to be undeleted.
  • Saving data to any windows (including network drives, removable media, etc.) drive possible.
  • Supports compressed and encrypted files (for NTFS).
  • Report lists of recovered files (i.e. for forensic use) can be saved to disk or printed.
  • Download Power Recovery

Creating a Recovery Disk on a USB Flash Disk

HP and Compaq PCs with Windows Vista or Windows 7 are configured with a recovery manager that can return the computer to its original operating condition. By default, the Recovery Manager creates a bootable disk on a blank DVD disc in the optical disc drive. HP also provides a USB Recovery Flash Disk Utility to create a bootable disk on a USB Flash Disk.

Using a Flash Disk is helpful for notebooks that do not have an internal optical disc drive. The USB Recovery Flash Disk Utility requirements include :
  • Only one copy of the recovery disk can be created. If you have already created or attempted to make a recovery DVD, do not try to use the Flash Disk Utility.
  • The computer must have the original HP configuration, including the recovery partition, with either Vista or Windows 7.
  • Recovery disk cannot be created if the original operating system has been changed.
  • You cannot use the Flash Disk Utility if the Recovery partition has been removed.
  • The USB Flash Disk must have at least 8 GB of free space available.
A standard 8GB drive may not have the full amount of space available for creating a recovery disk. Depending on the brand, a small amount of the Flash Disk space may be used by the file system, or there may be space lost in bad sectors. Use a 16GB (or larger) Flash Disk for best results.

Because the recovery manager files being created will be used to protect your computer for years to come, you should select a quality Flash Disk product made by a well known manufacturer. Store the recovery disk in a safe place away from the computer.

Download USB Recovery Flash Disk Utility

The utility for creating a recovery image on a USB flash disk is specific to the operating system. To locate and download the correct software click one of the following links to download the HP Recovery Flash Disk Utility for Vista or HP Recovery Flash Disk Utility for Windows 7 softpaq.

When prompted to either save the file to your computer or run the file from the web, select Save and download the softpaq to a convenient location on your hard drive, such as the desktop.

NOTE: Do not select Run during the download. Save the program to your hard drive so you can disconnect from the web and run the disk creation at a time you choose. If you select Run, the disk creation process will start immediately and you cannot use the computer while the recovery disk on the USB Flash Disk is being created.

Run USB Recovery Flash Disk Utility

Creating the recovery disk on an 8GB or larger USB Flash Disk can take 30-60 minutes or more. Do not use the computer for any other activities during the creation process.
You can create the recovery disk by performing the following steps :

CAUTION: This process will involve data loss for anything currently on the USB flash disk as a format will be performed during the creation process.
  • Connect the notebook to the proper AC power supply.
  • Save and close all other computer programs.
  • Insert the 8GB or larger USB Flash Disk in the USB connector.
  • Double-click the Flash Disk USB Recovery Flash Disk Utility , which was downloaded earlier, to launch utility.
  • When prompted, accept the software user agreement.
  • When prompted, select the desired USB Flash Disk.
  • Allow the utility to examine the notebook and then create the USB Flash Disk recovery disk.
During the creation process, the computer will pause periodically and there will be no signs of action for long periods of time. Do not interrupt the disk creation process, or turn off the power, or attempt to remove the USB disk. When the creation process is complete, the computer will restart and prompt you to login to the computer.

You should now have a bootable recovery disk on a USB flash disk that can be used to restore your computer to its original factory condition.

Mar 4, 2014

Arduino The Simpliest JTAG Adapter

A good while ago I won one of the free PCBs regularly given away by DIY hardware shop Dangerous Prototypes. My board of choice was a CPLD breakout board, for the Xilinx XC9572XL. CPLDs are the smaller brother of FPGAs: "programmable logic" chips that can be made to act as any integrated circuit within the device's limits. The XC9572XL is programmed via a standard JTAG interface. I did not have anything that speaks JTAG so went looking if my Arduino can be turned into an appropriate programmer. The solution that I found, however, did not work; so I built my own.

"Normally", to program a CPLD, or FPGA, one buys an expensive interface cable and uses it with the software development suite supplied by the particular chip's vendor. Of course there are plenty of DIY alternatives; in fact, Dangerous Prototypes sell one or two. One of my goals with this project was, however, to spend next to no money on it. I got the circuit board for free, the parts cost around 3EUR, and I had already done a similar job with my Arduino Atmel programmer.

So after soldering the board I flashed the abovementioned JTAG code onto the Arduino. This was my second time SMD-soldering so I was not expecting the board to work on first try. But even after checking every connection with a multimeter, JTAGWhisperer would do apparently nothing after receiving the first chunk of data. I eventually gave up searching for the cause.

Instead I decided to write a very simple Arduino program that allows direct interaction with the JTAG interface from a serial terminal. It is called jtagbang because it is essentially bit-banging on the JTAG pins. By pure coincidence, it also requires frequent use of the exclamation mark ("bang") when talking to it.

I didn't know anything about JTAG until three days ago. Now I know that it is awesome. The point of JTAG is to connect to any number of chips in some circuit design, taking up next to no space on the board, requiring only very simple support from the chip, and allowing the user to inspect and manipulate virtually every pin and connection at any time without touching anything. I call it f*cking magic.


These LEDs are lit because I told the chip I needed those outputs on for testing purposes.

Unfortunately I cannot explain the magic in the space of this post, however, here is a link to the IEEE specification. While IEEE doesn't want you to read their standards, someone has helpfully put the 2001 version on slideshare… Reading that spec is still not much fun, but I made a drawing of the important part.


So, long story short: Upload the attached sketch to an Arduino, take a peek at the top of the file maybe, and connect to it with a terminal emulator (read minicom) or the Arduino IDE's serial monitor (set to line-ending "Newline"). Enter a capital X and it will interrogate the JTAG interface to find all the connected devices (chips). It lists their built-in identification codes which take the form of 32 bits in four groups:

59604093 [0101 1001011000000100 00001001001 1]

The groups are, from most to least significant bit: 4-bit product version (5), 16-bit product code (9604 is the XC9572XL), 11-bit manufacturer code (00001001001 is Xilinx), and one bit that is always 1 for thaumaturgic reasons.


I should find a PC mainboard to try this with.

Next, I need to get the CPLD programmed. Xilinx uses (X)SVF files for this, a file format that describes what to do on a JTAG interface in a more high-level fashion than my bit-banging. I need a "player" for this format that translates standard SVF commands into "bang language" and vice-versa. The good thing is that I can now do this in a high-level programming language of my choice entirely on the host instead of cramming it into the Arduino.

The adventure after that will be learning VHDL and designing an actual integrated circuit.

Attachment: jtagbang.ino (v0.1)

I am releasing the code under the terms of the quite permissive ISC license.

How-To Protect The MediaTek Firmware Destroyer

Just recently last December 2013 there have been so many releases of  MediaTek 4G WiMAX modem firmware both Huawei BM622m and myBRO DV235T of Green Packet Technology are among has the tutorials given for free by Netizens via forums on how-to tweak this both devices. These two (2) CPEs are the latest 4G WiMAX modem of Globe Telco and Smart/PLDT ISP for their wireless broadband subscribers claimed to be the high speed internet connection.

After the released of the firmwares and the tutorials, now there are so many 4G WiMAX wireless broadband modem are facing the so-called firmware destroyer. Screenshot below attached the Globe Huawei BM622m being remoted and uploaded by a malicious script.

image credit to turbotor

Another 4G WiMAX modem is myBRO DV235T manufactured by Green Packet Technology used by Smart/PLDT, since they used same MediaTek chipset they belong to same vulnerabilities. These two (2) 4G WiMAX CPEs are both insecured, if you are using this wireless home residential gateways make sure this device is fully patched, you must do something to safeguard this modem otherwise this could be a headache for you.

image credit to orl4nd

Of course, there is a solution for this exploit you can manually closed all the unprotected ports for the remoter not being able to get inside to your myBRO likewise the BM622m. Alternatively, changing the default username and password can also help you CPEs tweak by unauthorized person from the outside of your network zone.

Feb 28, 2014

How-To Change Admin Password PLDT MyDSL SpeedSurf 504AN

This Tutorial is on How-to change the default PLDT myDSL username Admin Password of  residential gateway model SpeedSurf 504AN wireless modem router.


Because the Philippines Giant Telco uses many different modem router devices for their internet broadband subscriber they have also several default username and password for the different residential gateway. If you try Googling it via any search engine you can find too many results that give the credentials for the username user and admin for PLDT myDSL modem router.

Here's my few step-by-step on how-to change the default username Admin Password of PLDT myDSL SpeedSurf 504AN.

1. Once the PLDT myDSL SpeedSurf 504AN device is power on and all the LEDs light stable, plug the LAN cable to any LAN port of the modem router directly to your PC/ Lappy Network Interface Controller (NIC) card aka LAN Card. Make sure that the LEDs of both modem router and you PC/Lappy is blinking otherwise you can not open the graphical user interface (gui) of the device.

Open any of your favorite web browser and  point it to http://192.168.1.1 you will be prompted to a login page. And you will be ask for a username and  password you may use the default credentials below given.

User Name: adminpldt
Password: 1234567890


2. Next is navigate your mouse to the Admin Main Menu,  then click the Password sub-menu, now you can select the Admin and by dropping down the Privilege by choosing one of those given.


This only proves that the default PLDT myDSL username Admin Password can be changed showing the hidden elements.


All PLDT myDSL modem router that has built-in wireless LAN has the same default WiFi password format and it look like this, PLDTWIFI + the last five (5) characters of the device MAC address of the PLDT router modem.