reallymine
reallymine copied to clipboard
andlabs
Forgot password of WD my passport essential
I forgot the password to my passport essential, and i am just wondering if it is possible to unlock and get the files from it?. I am a windows user, i have looked through the issues sections to try to find some sort of help on how to use this program on windows, since that didn't work i thought i should just ask.
@themaddoctor what would be a valid prove? I've had it for years (so receipt of purchase isn't going to an option). All I know is that the content inside are some pictures of me and other files.
If you read my comments before I deleted them, then please disregard what I said.
Passports can only be done if you are able to remove the USB-SATA card (older models) or bypass the USB (newer models). Here is a link to one person who did it: http://blog.acelaboratory.com/pc-3000-hdd-how-to-solder-a-sata-adapter-to-the-usb-western-digital-drive.html
Unless you can (1) prove that you own the drive, and (2) get access to the raw drive, I cannot be any help.
If you registered with WD for the warranty, they can send you an email to verify your ownership.
Or if you know some of the password, that might be enough to prove it.
In any case, you have to gain access to the raw drive first, and I have already given you everything that I know about how to do that.
reallymine can only decrypt a password-protected drive without knowing the password if it uses a very specific chip where the password was not stored securely. The only way to find out which chip you have is to run reallymine on the raw drive, alas. (It was mainly intended for recovering a drive whose USB parts had broken, meaning all you have is the raw drive.)
The paper at https://eprint.iacr.org/2015/1002.pdf that first successfully described how the encryption works does talk about vulnerabilities in the way WD did encryption on the other chips that would make it easier to figure out the password, but I haven't written those in reallymine yet, and in some cases they wouldn't even be feasible to have in reallymine...
Thanks for all the sources, i doubt i will be able to execute any of them. I will just have to continue looking at My passport hoping one day i remember it; or find an alternative method.
@themaddoctor I have a WD my book essentials 1TB drive and have forgotten the password I used to lock the drive.
I had registered my drive with WD and have that record and account listing the hard drive in.
I can also prove my ownership in different valid ways kindly help me out on how to decrypt the drive in Linux ( I’lll use the Kubuntu release ) or may be if you can help me recover the first 4 letters of the password ( I can list you all possible combinations I used) this or it would be great if you could remotely help me out
I am ready to put in efforts to perform this just need a kick start from your experience
Thanks
Post your ownership documents and tell me which chip is on the USB-SATA bridge card.
Thanks for replying. Can I share the email I got from WD when I registered the drive ? I can also list folder names in the drive which I have, and can share possible pasword keyword I used , but how can I send you this info in a Private message here or if you can share your email address, I am not comfortable sharing those details here in Public.
EDIT: can you also direct me which cable / I need to purchase to be able to connect the drive from the motherboard, I saw some video of taking out the hard drive from enclosure and hooking up a SATA - USB cable on the pins placed on the motherboard.
I managed to open the drive, but cant identify the chip on USB-SATA bridge card, how to know that ? Should I remove the 2 side screws and remove the SATA connector chip too ?
I sent you an email, so you can just reply to it with your attachments.
The bridge card should be a square or triangular card that is plugged into the SATA port on the drive, and held in place with a screw or two. If you remove the screw(s), slide it off carefully in the direction that you would use to unplug the drive's SATA cable.
To connect to a motherboard, use a normal internal SATA cable. DO NOT connect to a windows system, unless you don't mind destroying the master boot record. Use linux or mac.
I received your email. If you have more questions, you should ask them here, and not in email.
If you have the INIC chip, there is no easy backdoor to open in. It requires checking all possible passwords until one works. I might have to ask for some money to do this.
To do it, I will need sectors 0, 2048, and 1953519624 from the disk.
Hi, contd from the email convo...
I have some quetions:
- Can I use Kubuntu 18.04.0 LTS to access the drive, please confirm so I can prepare the environment. I am not sure if Team Viewer works with the same so I can give you remote access wherever possible.
- Can I use a simple SATA-USB external drive enclosure like this OR do you want me to use something like this . OR if you can find a suitable cable / enclosure on amazon.in for me to buy, it will be a great help.
- Having the INIC 1607E chip , is it not possible to decrypt the drive while connected to Linux and copy the data ?
- I am thinking of making an image backup of this Drive before we begin, any recommendations ? Should I make a full image of part ?
- any safe guards you can suggest to keep the drive safe ? ( while I follow your instruction of NOT to connect it to a Windows machine to keep the encrypted MBR safe )
I am ready to pay you a reasonable amount for the help you do for me either decrypting the drive for me or helping me with few digits of the password so I can relate and enter the correct one.
Thanks a lot man.
Any linux except Kali should work. I would choose the one that actually encloses the disk. The data on the disk can be accessed once the key is found. Image it if you want to. I need those three sectors in order to start, and reading them from the disk is trivial. It's an all-or-nothing procedure. The entire key or none of it. No "few digits".
Great, I will begin then. Will follow your instructions for the INIC 1607E chip. Once connected to the Linux system, I will image the disk may take a day or so as I will leave it unattended. And contact you back with required info, hope this is OK. Thanks a lot.
EDIT: I hope the local enclosure chip wont affect the drive or anything on it. Also, is your solution going to change anything on device for which I must image the disc first ? I am asking this as I do not currently have a spare 1 TB drive to image this and would basically be risking out the disc without backup.
@d8ytes I haven't heard back from you. And I don't understand your question. Making an image gives you a backup in case you somehow damage the data. The procedures I use don't care if you use the original disk or an image. The only difference is what level of risk you accept.
@themaddoctor Hi, sorry for keeping you waiting, had trouble installing Ubuntu on the ssd in my laptop don’t know for what reason it never got installed , I’m yet to image the disk to start further, please allow me a few days to come back to you.
I will image the disk using the imaging option in u Ubuntu, is that good enough ? Or can you suggest some other tool ?
I use ddrescue, aka dd_rescue or gddrescue. Just be careful that you read the manual for it, because you can destroy data if you accidentally write to the wrong disk.
Hi, how bout if I use this Create Disk Image option in Ubuntu ? Would this do the job ? Else I'll try the ddrescue or if any other GUI based tool you could recommend ? As I am naive at Linux commands, but getting to comprehend the same gradually ,
Hi, sorry it took me long to arrange a backup drive for imaging the affected one, but now i\ve got one.
But I have a question, now my affected drive is in ntfs 1tb and backup drive ntfs 2tb , both connected to ubuntu, is it ok if I image the afftected drive as is to the ntfs backup drive ( while in ubuntu ) or is it recommended to format the backup drive into ext4 and then make that ntfs ( affected drive ) image ? Just curious, please suggest. will target image be a partition of type ntfs / ext4 ? Currently the affected drive shows as unknown type, but im sure its ntfs
Also, once image is done I will work on the image than the actual drive to be safe, mounting the same in ubuntu.
Do a "dd_rescue /dev/sdX /path/to/image.file.to.be.created" where X is the right thing for source disk and replace /path... with the path to the image file you want to make. dd_rescue has an instruction page (do "man dd_rescue").
The format of the disk where you write the image shouldn't matter.
EDIT 3: I managed to install ddrescue-GUI , can I use that for imaging ? If yes, I will chose source as sdc ( not sdc1, as I want to cover whole of my source drive ) and will chose sdd ( and not sdd1 , as my destination drive ) , also can you guide what to chose in log file option ?
Is this OK ?
EDIT 2: I tried imaging a 2GB pendrive at /dev/sdc1 to the 2tb drive at /dev/sdd1 with following command user@user-X555UA:~$ ddrescue /dev/sdc1 /dev/sdd1/image/ got the below error ddrescue: Can't open input file: Permission denied any help ?
EDIT 1: I tried man ddrescue and it worked, is it the correct one ? May be the new version ? Could you confirm if I can Do a "ddrescue /dev/sdX /path/to/image.file.to.be.created" ?
hi, I'm new at linux, and this is what I got when I did
user@user-X555UA:~$ man dd_rescue No manual entry for dd_rescue
I don't know what ddrescue-GUI is, but I'm sure that it is not dd_rescue. You probably installed ddrescue.
I use "sudo" when I don't have permissions. sudo ddrescue /dev/sdX /path/to/image
sudo ddrescue -v-v -P /dev/sdX /path/to/image /path/to/log file.map On Sat, Sep 1, 2018, 9:52 AM themaddoctor [email protected] wrote:
I don't know what ddrescue-GUI is, but I'm sure that it is not dd_rescue. You probably installed ddrescue.
I use "sudo" when I don't have permissions. sudo ddrescue /dev/sdX /path/to/image
— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/andlabs/reallymine/issues/67#issuecomment-417864784, or mute the thread https://github.com/notifications/unsubscribe-auth/AQE6xQ3xQlB1d4nTqu3B6Hful5py3aPOks5uWp8ogaJpZM4UHhkP .
Hi, Thanks for suggestions guys. I tried doing the below, and got an error, did the same thing for 2gb ntfs drive to 8gb ntfs drive it worked flawlessly, don't know what's happening with these bigger drives
user1@user1-X555UA:~$ sudo ddrescue /dev/sdd /media/user1/MyPassport/backup/backup.img /media/user1/MyPassport/backup/backup.log
[sudo] password for user1:
ddrescue: Can't open output file: No such file or directory
user1@user1-X555UA:~$
my target drive is mounted at /media/user1/MyPassport/ , then I have made a folder inside it as backup its also denoted by /dev/sdc1 , the workable file partition, can I replace the mount path with /dev/sdc1 , will it be ok and not be disturbing existing data on that partition ?
Please rectify me
Update: I had a dual boot ubuntu/windows system, while having the affected drive connected to ubuntu rebooted in windows by mistake, but took off the drive immidiately on login screen looks like windows did its worst already and mbr is corrupted now, any hopes remaining for my data ? Earlier windows recognized this drive while the wd chip is on, now it just shows a CD Drive which vanishes away and I get a message The USB device connected has malfunctioned ( never got this message earlier ) , I'm rocked!!
Please help.
Should decrypt fine if it was just the mbr that took the hit.
On Thu, Sep 6, 2018, 1:29 PM design-bytes [email protected] wrote:
Update: I had a dual boot ubuntu/windows system, while having the affected drive connected to ubuntu rebooted in windows by mistake, but took off the drive immidiately on login screen looks like windows did its worst already and mbr is corrupted now, any hopes remaining for my data ? Earlier windows recognized this drive while the wd chip is on, now it just shows a CD Drive which vanishes away and I get a message The USB device connected has malfunctioned ( never got this message earlier ) , I'm rocked!!
Please help.
— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/andlabs/reallymine/issues/67#issuecomment-419196188, or mute the thread https://github.com/notifications/unsubscribe-auth/AQE6xVGD3bP0EdrwGWK7GYAxTjKlhZtSks5uYWmjgaJpZM4UHhkP .
Should decrypt fine if it was just the mbr that
On Thu, Sep 6, 2018, 1:29 PM design-bytes [email protected] wrote:
Update: I had a dual boot ubuntu/windows system, while having the affected drive connected to ubuntu rebooted in windows by mistake, but took off the drive immidiately on login screen looks like windows did its worst already and mbr is corrupted now, any hopes remaining for my data ? Earlier windows recognized this drive while the wd chip is on, now it just shows a CD Drive which vanishes away and I get a message The USB device connected has malfunctioned ( never got this message earlier ) , I'm rocked!!
Please help.
— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/andlabs/reallymine/issues/67#issuecomment-419196188, or mute the thread https://github.com/notifications/unsubscribe-auth/AQE6xVGD3bP0EdrwGWK7GYAxTjKlhZtSks5uYWmjgaJpZM4UHhkP .