Reverse Engineering and Modifying HDD and SSD Firmware: A Technical Deep Dive
By
jsploit
An everything bagel for the brain. Substantive, layered, well-seasoned.
Summary
A technical deep-dive into hacking hard drive and SSD firmware, starting with the author's work on an Xbox 360 exploit. The article covers dumping and analyzing firmware, live debugging HDDs via JTAG, modifying drive firmware, and using AI to assist with reverse engineering and analysis. It's the first part of a series exploring low-level firmware manipulation of storage devices.
Key quotes
· 3 pulledSome time last year I was working on an exploit for the Xbox 360 console (which would later turn into the much anticipated softmod) and found myself in need of a way to modify the firmware for a HDD to try and exploit a race condition.
This sent me down a rabbit hole of trying to modify the firmware for a few different brands of HDDs and SSDs I had on hand.
In this series of blog posts I'll cover all the work I did including: dumping and analyzing the firmware, live debugging a HDD via JTAG, modifying the drive firmware, and how I used AI to help with analysis and identify
You might also wanna read
Testing a Cheap STM32 RDP1 Flash Reader from Chinese Marketplace
The article details the author's purchase and testing of a cheap STM32 RDP1 'decryptor' device found on Chinese marketplace Xianyu. The devi
Hosting a website on an 8-bit AVR64DD32 microcontroller
A technical blog post detailing the author's experiment of hosting a functional website on an AVR64DD32 microcontroller — an 8-bit AVR chip
maurycyz.com·15d ago
Technical Analysis: Exploiting the Tesla Wall Connector via Charge Port Firmware Manipulation
This article details the technical process of exploiting a Tesla Wall Connector through its charge port connector. It describes the firmware
synacktiv.com·18d ago
Building a RAR compressor using LLMs: A 5-week reverse-engineering project
A developer documents their experience using LLMs (OpenAI Codex 5.5 and Claude Opus 4.7) to reverse-engineer the RAR compression format and
bitplane.net·19d ago
Reverse Engineering the Wahoo ELEMNT Bolt v3: How a Sync Failure Led to Discovering a Hidden Debug Mode
A frustrated cyclist reverse-engineers the Bluetooth Low Energy (BLE) protocol of their Wahoo ELEMNT Bolt v3 cycling computer after rides st
noahclements.com·1mo ago
Rodecaster Duo audio interface ships with SSH enabled by default, no password authentication
A user discovers that their Rodecaster Duo audio interface has SSH enabled by default with no password authentication. They capture the firm