Skip to main content ↑ ↓

Show Posts

This section allows you to view all Show Posts made by this member. Note that you can only see Show Posts made in areas you currently have access to.

Messages - datura

1
Bus Pirate Support / [n00b] Help using bus pirate to hack a fingerprint encrypted USB
Hi, I'm trying to use the Bus Pirate that I just got to hack into a generic Chinese fingerprint encrypted USB drive. If you're wondering why, my landlord sometimes gets me to do odd jobs in exchange for beer. He apparently has bitcoin and ethereum keys on said drive that he bought from eBay and didn't enrol his fingerprint the right way (pressed instead of swiped his finger)..

Apparently you can use the Bus Pirate to connect to the USB drive via UART and send it the open sesame code.
The only thing I had to go off were the resources below, currently I'm trying to solder the leads from the bus pirate onto the USB drive's serial debug points but I have no idea which points to solder. Currently I've only soldered on 5V, GND, TXD and RXD and I can't seem to connect to it with teraterm.
Any idea what else I have to solder? The serial points on the USB drive are DM, CLK, RXD, +5V, DP, IO, TXD, GND


"Bypassing fingerprint identification via command injection"
https://www.youtube.com/watch?v=MCkOhymGDaY&feature=emb_title

"Attacking encrypted USB keys the hard(ware) way"
https://elie.net/talk/attacking-encrypted-usb-keys-the-hardware-way/


The image below isn't mine but it's the exact same fingerprint usb that I have.








( ! ) Fatal error: Uncaught exception 'Elk_Exception' with message 'Please try again. If you come back to this error screen, report the error to an administrator.' in /var/www/dangerousprototypes/forum/sources/database/Db-mysql.class.php on line 696
( ! ) Elk_Exception: Please try again. If you come back to this error screen, report the error to an administrator. in /var/www/dangerousprototypes/forum/sources/database/Db-mysql.class.php on line 696
Call Stack
#TimeMemoryFunctionLocation
10.01302253008session_write_close ( )...(null):0
20.01332384584ElkArte\sources\subs\SessionHandler\DatabaseHandler->write( )...(null):0
30.01332385360Database_MySQL->query( ).../DatabaseHandler.php:119
40.06042524080Database_MySQL->error( ).../Db-mysql.class.php:273