Psychson icon indicating copy to clipboard operation
Psychson copied to clipboard

[Query] Which manufacturers/model use Controller type PS2251-03 (2303)

Open priyankn opened this issue 11 years ago • 190 comments

Patriot Supersonic Xpress only ?

priyankn avatar Oct 04 '14 01:10 priyankn

Not necessarily. As mentioned in a video found here, Phison is a large manufacturer. It is very likely that many other USB devices are affected too.

joedf avatar Oct 04 '14 02:10 joedf

Just killed two 2251-67 (Silicon Power). As for now, found these to be 2303:

  • Kingston DataTraveler 3.0 T111 8GB
  • Silicon power marvel M60 64GB
  • Toshiba TransMemory-MX™ Black 16 GB
  • Patriot Stellar 64 Gb Phison
  • Silicon Power32G

aspcartman avatar Oct 04 '14 09:10 aspcartman

I suggest having an "official" list of known affected USB Devices. It would be nice and certainly helpful.

joedf avatar Oct 04 '14 17:10 joedf

Going to test six drives today\tomorrow.

aspcartman avatar Oct 04 '14 17:10 aspcartman

I've setup a page on the wiki for this:

https://github.com/adamcaudill/Psychson/wiki/Known-Supported-Devices

I'll add a link to the readme, so hopefully people will see it before they get too far into the process.

ghost avatar Oct 04 '14 20:10 ghost

As far as having a supported controller goes, has the method and code provided here been verified to work with any of the USB sticks listed above, given the appropriate firmware for the device?

I can also verify that the Silicon Power Blaze B30 (32 GB) listed here (http://www.amazon.com/gp/product/B00H7PBWK8/) also possesses a PS2251-03 controller. I conjecture that all Silicon Power USB 3.0 devices use this controller, but I have no way of proving this.

zzazzdsa avatar Oct 04 '14 21:10 zzazzdsa

@zzazzdsa take a look at #3 , I've listed some sticks I bought today. Silicon Power ones have 2307 currently, although those same sticks were reported to have 2303 a year ago.

aspcartman avatar Oct 04 '14 21:10 aspcartman

@adamcaudill Great, hoping to save some innocent USB lives. :+1:

joedf avatar Oct 04 '14 22:10 joedf

Just a little warning: I bought 2 x Kingston DataTraveler 3.0 T111 8GB Both are 2251-02(2302?) chipsets, and doesn't work with this project.

GulfBull avatar Oct 07 '14 15:10 GulfBull

Hi, I know that this project is aiming 2303 controller but if let's say a similar or closer controller like 2302 or 2307 is encountered, how do one go about modifying the codes to suit such controllers? Hopefully I'm making sense. Thank you.

raif7 avatar Oct 08 '14 02:10 raif7

We don't know because we haven't disassembled the firmware for those controllers and studied it to see what, if any, differences there are. You'd have to reverse engineer it the same way the 2303 was done and compare the two, which is no small task.

brandonlw avatar Oct 08 '14 03:10 brandonlw

I just bought PATRIOT Supersonic Express 8GB which was supposed to have 2303 controller, but instead it has 2307. This means im screwed and it's not gonna work ?

kamilsss655 avatar Oct 09 '14 20:10 kamilsss655

Yes.

On Fri, Oct 10, 2014 at 12:46 AM, kamilsss655 [email protected] wrote:

I just bought PATRIOT Supersonic Express 8GB which was supposed to have 2303 controller, but instead it has 2307. This means im screwed and it's not gonna work ?

Reply to this email directly or view it on GitHub: https://github.com/adamcaudill/Psychson/issues/4#issuecomment-58574865

aspcartman avatar Oct 09 '14 21:10 aspcartman

Are there any other alternatives to Rubber Ducky other than the psychson ?

kamilsss655 avatar Oct 09 '14 22:10 kamilsss655

Too bad on your PATRIOT Supersonic Express 8GB, kamil. I and my colleague were looking for this too but could not find it. Found instead the Toshiba mentioned earlier. It still has the 2303, at least the ones we bought.

raif7 avatar Oct 10 '14 00:10 raif7

@kamilsss655 According to the site run by @adamcaudill, if you're looking to just replicate the Rubber Ducky experience, the teensy is also a viable option.

MrSchism avatar Oct 10 '14 02:10 MrSchism

@MrSchism Thank you for your feedback. In my opinion teensy is too bulky for this application. I've decided to try to replicate rubber ducky with Digispark. Please let me know what do you think about it?

Is there a way to unbrick the PATRIOT Supersonic Express 8GB with 2251-07 controller ? I couldn't find any suitable firmware over the Internet.

kamilsss655 avatar Oct 10 '14 11:10 kamilsss655

BTW maybe u use an atmel avr controller? I've been using them for a long time now, they fit great. I think rubberducky itself is made with it. You will have to code, though. Not much.

On Fri, Oct 10, 2014 at 3:15 PM, kamilsss655 [email protected] wrote:

@MrSchism Thank you for your feedback. In my opinion teensy is too bulky for this application. I've decided to try to replicate rubber ducky with Digispark. Please let me know what do you think about it?

Reply to this email directly or view it on GitHub: https://github.com/adamcaudill/Psychson/issues/4#issuecomment-58642222

aspcartman avatar Oct 10 '14 11:10 aspcartman

Rubber Ducky is better,Teensy is too slow.

m1a0yu3 avatar Oct 10 '14 12:10 m1a0yu3

(Surpise)

One of the most common drives in the US - Sandisk Ultra 16GB USB 3.0 - has the 2251-03 (2303) controller. Plugged it up today, ran ChipEasy, Phison 2303 chip is present.

Not 100% sure as to whether all batches have the same chip. This particular drive's model is SDCZ48-016G.

Output:

Logical drive : E:\ Capacity: 14.8G Device ID : VID = 0781 PID = 5581 Device SN : XXXXXXXXXXXXXXXXXXXXXXXX Device version : PMAP

Device vendor : SanDisk Device model : SanDisk Ultra Protocol : USB2.0 Max power : 300mA

Partition type : FAT32 Device active : no Aligned state : 4032 KB, Have been Aligned

Controller : Phison Controller model: PS2251-03 Flash Vendor : SanDisk, Type: TLC, Process: 19nm, Page: 16K Flash ID : 45DE9493
Score : 40 (Normal Score >= 30) Firmware : 01.09.10 FW Date: 2013.12.11

Tools : http://www.upan.cc/tools/mass/Phison/ OS Version : Microsoft Windows XP Professional Service Pack 3 Update Status : The current version is the latest version!

dwegiel avatar Oct 12 '14 07:10 dwegiel

Patriot 8GB Supersonic Express - 2301 Damn it!

priyankn avatar Oct 12 '14 07:10 priyankn

I also bricked two PATRIOT Supersonic Xpress 8GB (2251-07), any ideas to unbrick them?

pmlabs avatar Oct 12 '14 21:10 pmlabs

Kingston DataTraveler G4 64 GB usb device has Phison 2251-03 controller.

mertsarica avatar Oct 14 '14 13:10 mertsarica

"Patriot PSF16GXPUSB Supersonic Xpress 16GB" seems to have the 2251-03 Chipset (at least sometimes) :

Action specified: GetInfo Gathering information... Reported chip type: 2303 Reported chip ID: 98-3A-A8-92-76-57 Reported firmware version: 1.10.53 Mode: Firmware

The 8GB-version I bought before hat the 2251-07 chipset :( Hope you get that one flying too.

WCTFT avatar Oct 15 '14 18:10 WCTFT

I also bought a PATRIOT Supersonic Express 8GB (from Poland), unfortunetly it has 2251-07. :( Many vendors stopped selling this type of usb drive. The last vendor, that is still selling this, is located in France and I'm gonna try my luck for the last time..

galagie avatar Oct 20 '14 10:10 galagie

@galagie Sorry to hear about that. You can bring them back to life with : -Phison Mpall (u need to replace the IDBLK_TIMING.dll file with the one called IDBLK_TIMING Dynamic Link Library v1.2.59.0 ) -Firmware PS2251-07

get all of them from here:http://www.usbdev.ru/files/phison/

In Phison Mpall use these files:

Burner :BN07V106M.BIN Firmaware: FW07FF01V10053M_20130408.BIN

:+1: I no longer see a point in using this 'exploit'. If you are only looking for Rubber Ducky features then get a Digispark or Teensy and program it yourself as a HID keyboard and you are all set.

kamilsss655 avatar Oct 21 '14 08:10 kamilsss655

Why are the vendors stopping selling the Patriot?

@galagie What do you mean, you see no longer a point in using this exploit?

bl4k1st avatar Oct 21 '14 14:10 bl4k1st

Which controller has Kingston DataTravel G4 8GB USB 3.0 DTIG4? Is it the same of 64GB version? I have a Kingston Digital 8GB USB 3.0 DataTraveler (DT100G3/8GB) with controller PS2251-07, is there some hope for enjoy with it?

Thank you.

ghost avatar Oct 21 '14 16:10 ghost

If you're having trouble finding a compatible drive and are only interested in Rubber Ducky functionality, I'd also recommend you get a Rubber Ducky or Teensy. This is a research project intended to explore custom/modified firmware for the PS2251-03 controller.

The PS2251-07 is not currently supported.

brandonlw avatar Oct 22 '14 03:10 brandonlw

Thank you brandonlw, I'm not interested in Rubber Ducky functionality, some years ago I have already maked something similar with a PIC18F2550, you can see my bad project here: http://www.grix.it/viewer.php?page=6484 sorry for not english language.

ghost avatar Oct 22 '14 21:10 ghost