Monolith pin out: Difference between revisions

From datarecoverywiki.com
Jump to navigation Jump to search
← Older edit
No edit summary
No edit summary
 
(5 intermediate revisions by the same user not shown)
Line 112: Line 112:
     <h2>Contents <a href="javascript:void(0);" class="hide-link" onclick="toggleTOC()">[hide]</a></h2>
     <h2>Contents <a href="javascript:void(0);" class="hide-link" onclick="toggleTOC()">[hide]</a></h2>
     <ul>
     <ul>
        <li><a href="#section0">What tools you will need</a>
   
            <ul>
                <li><a href="#required">Required</a></li>
                <li><a href="#optional">Optional but useful</a></li>
            </ul>
        </li>
        <li><a href="#section1"> Uses of this skill</a></li>
         <li><a href="#section2"> Step-by-step guide with images</a></li>
         <li><a href="#section2"> Step-by-step guide with images</a></li>
         <li><a href="#section3"> Flow chart of order of operations</a></li>
         <li><a href="#section3"> Flow chart of order of operations</a></li>
Line 129: Line 123:
<h1> Background information </h1>
<h1> Background information </h1>
<p> This page will cover Monolith pin out, how it functions, how to communicate with a device over it, and where to find the pads.</br>
<p> This page will cover Monolith pin out, how it functions, how to communicate with a device over it, and where to find the pads.</br>
Monolith storage refers to any storage that is completely built into a singular PCB often inencased in plastic, for example a SD card, </br>
Monolith storage refers to any storage that is completely built into a singular PCB often in encased in plastic, for example a SD card, </br>
They typically made up of 4 major compotents</br>
They typically made up of 4 major components</br>
<ul>
<ul>
<li>contact pads- The external pads that connects the device to what ever its plugged into<li>
<li>Contact pads-The external pads that connects the device to what ever it's plugged into<li>
<li>Controller- Responable for handling the commications between external devices and the internal memory</li>
<li>Controller- Responsible for handling the communication between external devices and the internal memory</li>
<li>Memory- Stores the data </li>
<li>Memory-Stores the data </li>
<li>Passive componets-Such as capacitors,resistors,inductors,ESD and protection Diodes<li>
<li>Passive components-Such as capacitors, resistors, inductors, ESD and protection Diodes<li>
The only way to reasonably access the data on these devices is to solder directly to the pin on the back of the PCB by removing the plastic</br>
The only way to reasonably access the data on these devices is to solder directly to the pin on the back of the PCB by removing the plastic</br>
and locating the correct pins to access the storage within the device,<see locating pin out page>, while databases of these pinouts exist they typically </br>
and locating the correct pins to access the storage within the device, <see locating pin out page>, while databases of these pinouts exist they typically </br>
require subscriptions to services provided by ACElab or RUsolut, otherwise singular pinouts can be bought from 3rd party vendors or AliExpress</br>
require subscriptions to services provided by ACElab or Rusolut, otherwise singular pinouts can be bought from 3rd party vendors or AliExpress</br>
</br>
</br>
<h2> typical Pin out </h2>
<h2> Standardized Pin out </h2>
All NAND devices should follow the <a href="https://onfi.org/specs.html">ONFI standard</a>and use the same pins, just in different locations on each device.
All NAND devices should follow the <a href="https://onfi.org/specs.html">ONFI standard</a>and use the same pins, just in different locations on each device.
</br>
</br>
1. Vcc, </br>
1. VCC,- Power </br>
2. GND, </br>
2. GND,- Ground </br>
3. CLE,</br>
3. CLE,- Command latch enable</br>
4. RE,</br>
4. RE,- Read enable </br>
5. CE,</br>
5. CE,- Chip enable</br>
6. ALE,</br>
6. ALE,- Address latch enable</br>
7. WP,</br>
7. WP,- Write protect</br>
8. WE,</br>
8. WE, - Write enable</br>
9. RB,</br>
9. RB, - Ready/Busy</br>
10. D0-D7</br>
10. D0-D7- Data lines</br>


<h2> Steps </h2>
<h2> Steps </h2>
In this example, we will be working with a Mirco Secure Digital card(SD)
In this example, we will be working with a Micro Secure Digital card(SD)
</br>
</br>
1. Visual analysis of the Mirco SD card </br>
1. Visual analysis of the Micro SD card </br>
Is there any visable damage?, Is there any physical cracks?</br>
Is there any visible damage?, Is there any physical cracks?</br>
2. Removal of material to expose pins</br>
2. Removal of material to expose pins</br>
Unless there is serious damage to the card and the PCB is exposed,</br>
Unless there is serious damage to the card and the PCB is exposed,</br>
then material must be removed in order to access the PCB,</br>
then material must be removed in order to access the PCB,</br>
This can be done in a few major ways such as,</br>
This can be done in a few major ways such as,</br>
Acid(chemical decapsulation) - Soaking the Monolith in Acid just long enough to remove the casing without damaging the internal PCB <a href="https://jcjc-dev.com/2020/10/20/learning-to-decap-ics/">Learning to Decapsulate Integrated Circuits Using Acid Deposition</a>
Acid (chemical decapsulation) - Soaking the Monolith in Acid just long enough to remove the casing without damaging the internal PCB <a href="https://jcjc-dev.com/2020/10/20/learning-to-decap-ics/">Learning to Decapsulate Integrated Circuits Using Acid Deposition</a>
</br>
</br>
Laser(Laser decapsulation - Using a high powered layer to burn away the material surounding the die within the monolith</br>
Laser (Laser decapsulation - Using a high-powered layer to burn away the material surrounding the die within the monolith</br>
<a href="https://www.youtube.com/watch?v=GTG1iSd_3Vw">IC Laser decapsulation - just experimenting with decapping</a></br>
<a href="https://www.youtube.com/watch?v=GTG1iSd_3Vw">IC Laser decapsulation - just experimenting with decapping</a></br>
<a href="https://www.researchgate.net/publication/304626094_Repeatable_Method_for_Automated_Decapsulation_of_Silver_Alloy_Wire_Packages">Repeatable Method for Automated Decapsulation of Silver Alloy Wire Packages</a>
<a href="https://www.researchgate.net/publication/304626094_Repeatable_Method_for_Automated_Decapsulation_of_Silver_Alloy_Wire_Packages">Repeatable Method for Automated Decapsulation of Silver Alloy Wire Packages</a>
</br>
</br>
CNC(computer numerical controll) - Using a preccisly controlled drill bit to slowly remove the external casing.Similar to Laser decapsulation but with a drill bit instead of a laser</br>
CNC (computer numerical control) - Using a precisely controlled drill bit to slowly remove the external casing. Similar to Laser decapsulation but with a drill bit instead of a laser</br>
</br>
</br>
Heat and brute force - For bigger chips a heat source and a pair of pillars to simple remove the casing around the die will often do the job
Heat and brute force - For bigger chips, a heat source and a pair of pillars to simple remove the casing around the die will often do the job
</br>
</br>
Sanding - the use of absative pads such as carbon fibre abssive pens to remove material</br>
Sanding - the use of abrasive pads such as carbon fibre abrasive pens to remove material</br>
While standard low grid pieces of sandpaper can be used it is not recomended as it lacks precisison</br>
While standard low grid pieces of sandpaper can be used it is not recommended as it lacks precision</br>
and makes it more likely to sand through the PCB.
and makes it more likely to sand through the PCB.
</br>
</br>
The easiest and cost effective method is Sanding.  
The easiest and cost-effective method is sanding with an abrasive pad or pen.  
3. Identification of each required Pin</br>
3. Identification of each required Pin</br>
The best way to idenify a cards a pinout is to check databases of prexisting pinouts if they include the device your looking for</br>
The best way to identify a card a pinout is to check databases of preexisting pinouts if they include the device you're looking for</br>
such as </br>
such as </br>
Rusolut NAND monlith database(requies expensive subcription)</br>
Flash extractor fourm(open but requires login)</br>
Ace lab database(requies expensive subcription)</br>
HDD guru fourm(free and open)</br>
Badcaps fourm(free but requires a account to download schmatic files)</br>
Aliexpress(pinouts can be purchased, often expensive espically if only going to be used once)</br>
Search the internet for the model number and the term pinout(using the "" with make most search certains search for that exact term)</br>
If you are unable to access or find the pinout then, you might have to locate the pins yourself through the following techquies</br>
These can be done with basic but often expensive tools such as a multimeter with counuinity and voltage dection modes, osclioscope and logic analysers</br>
<ul>
<ul>
<li>Ground(GND)- Using the multimeter couninity mode placing one probe on the casing(this is typically grounded), then touch enough pad untill there is a beep</br>
<li>Rusolut NAND monolith database (requires an expensive subscription)</br><li>
this indcates there is counonity(the two points are connected) you have now found ground</li>
<li>Flash extractor forum(open but requires login)</br></li>
<li>Ace lab database(requires expensive subscription)</br></li>
<li>HDD guru forum(free and open)</br></li>
<li>Badcaps forum(free but requires an account to download schematic files)</br></li>
<li>AliExpress(pinouts can be purchased, often expensive espically if only going to be used once)</br></li>
<li>Search the internet for the model number and the term pinout(using the "" with make most search certain search for that exact term)</br></li>
If you are unable to access or find the pinout then, you might have to locate the pins yourself through the following techniques </br></li>
</br>
These can be done with basic but often expensive tools such as a multimeter with continuity and voltage detection modes, oscilloscope and logic analysers</br>
<ul>
<li>Ground(GND)- Using the multimeter continuity mode placing one probe on the casing(this is typically grounded), then touch enough pad until there is a beep</br>
this indicates there is continuity (the two points are connected) you have now found ground</li>
<li>VCC(power) - Typically VCC traces are thicker than others and often on the edge of the PCB</br>
<li>VCC(power) - Typically VCC traces are thicker than others and often on the edge of the PCB</br>
Power up the card(if possible) then using the multimeters voltage mode(typically the 2V setting) then place the black probe on the GND pad you found previously</br>
Power up the card(if possible) then using the multimeter's voltage mode(typically the 2V setting) then place the black probe on the GND pad you found previously</br>
and touch the red pin to each pad untill the multi meter reads around either 3.3v or 1.8v (due to resistence and the quality of the multimeter it it unlikely to be exect but with 0.1-0.2v is acceptable)</br>
and touch the red pin to each pad until the multi meter reads around either 3.3v or 1.8v (due to resistance and the quality of the multimeter it is unlikely to be exact but with 0.1-0.2v is acceptable)</br>
this is likely the VCC pin</br>
this is likely the VCC pin</br>


If the card will not power up then set the multimeter to reistence mode(Ω)(20k mode)</br>
If the card does not power up then set the multimeter to resistance mode(Ω)(20k mode)</br>
place the black probe on your GND pin, then using the red probe look for the pin with the lowest resistance (likely within 100Ω-10kΩ)
place the black probe on your GND pin, then using the red probe look for the pin with the lowest resistance (likely within 100Ω-10kΩ)
the pin with the lowest resistence is likely VCC.</li>
the pin with the lowest resistance is likely VCC.</li>
<li> Data lines(I/0) - Due to the fact that datalines typically link directly to the internal memory they often do not show direct continuity to both GND and VCC</br>
<li> Data lines(I/0) - Due to the fact that datelines typically link directly to the internal memory they often do not show direct continuity to both GND and VCC</br>
if a pin does not show continuity to either it is likely a data line.</br>
if a pin does not show continuity to either it is likely a data line.</br>
Data lines typically have the resistence of around 1kΩ - 50kΩ unlike VCC which is typically 100Ω - 10kΩ and non connected pads will typically show either extremely high resistence or a open line message(OL)</br>
Data lines typically have the resistance of around 1kΩ - 50kΩ unlike VCC which is typically 100Ω - 10kΩ and non-connected pads will typically show either extremely high resistance or an open line message(OL)</br>
A oscliloscope or logic analyzer can be used to check if it is likely a data line.</br>
An oscilloscope or logic analyser can be used to check if it is likely a data line.</br>
enable power by providing the power pins with either 3.3v or 1.8v depending on what you located,</br>
enable power by providing the power pins with either 3.3v or 1.8v depending on what you located,</br>
place probes on each pin and look for <B>A wave/pulsing pattern</B> this means it is likely a dataline.</br></li>
place probes on each pin and look for <B>A wave/pulsing pattern</B> this means it is likely a dataline.</br></li>
<li> CLK/CE(clock or chip enable) - follow the same method as for datalines but instead of a <B>wave/pulsing</B> pattern it should be a steady <B> square like</B> pattern.</li></br>
<li> CLK/CE(clock or chip enable) - follow the same method as for datalines but instead of a <B>wave/pulsing</B> pattern it should be a steady <B> square like</B> pattern.</li></br>
4. Wiring of pins to device(mircosoldering)</br>
4. Wiring of pins to device(mircosoldering)</br>
Once the pins have been Idenified it is a case of connecting the correct pads to the flash box, either through <a href="https://datarecoverywiki.com/index.php/Microsoldering">mircosoldering</a></or the use of a spiderboard.</br>
Once the pins have been Identified it is a case of connecting the correct pads to the flash box, either through <a href="https://datarecoverywiki.com/index.php/Microsoldering">mircosoldering</a></or the use of a spiderboard.</br>
5. Data extraction</br>
5. Data extraction</br>
Depending on the software you are using that should direct you from this point.</br>
Depending on the software you are using that should direct you from this point.</br>
</p>
</p>
<h1 id="section0">What tools you will need</h1>
<i> Items are not listed in any particular order </i>
<div class="infobox">
    <table>
        <tr></tr>
        <tr>
            <h3 id="required">Required</h3>
            <ul>
                <li>Test</li>
            </ul>
        </tr>
        <tr>
          <h3 id="optional">Optional but useful</h3>
            <ul>
                <li>Test</li>
            </ul>
        </tr>
    </table>
</div>


<h1 id="section1">Uses of this skill</h1>
<ul>
<li>1.test</li>
<li>2.test</li>
<li>3.test</li>
<h1 id="section2">Step-by-step guide with images</h1>
<h1 id="section2">Step-by-step guide with images</h1>
<p>Insert step-by-step walkthrough with images and summary text here</p>
<p>Insert step-by-step walkthrough with images and summary text here</p>
Line 259: Line 231:
     <ol>
     <ol>
         <li>Reference 1: <a href="https://wiki.z3x-team.com/index.php?title=Monolith_pinout_search_guide">Monolith pinout search guide</a></li>
         <li>Reference 1: <a href="https://wiki.z3x-team.com/index.php?title=Monolith_pinout_search_guide">Monolith pinout search guide</a></li>
         <li>Reference 2: <a href="https://onfi.org/specs.html">Open nand flash interface standard</a></li>
         <li>Reference 2: <a href="https://onfi.org/specs.html">Open NAND flash interface standard</a></li>
         <li>Reference 3: <a href="https://www.nature.com/articles/s41467-023-41498-x">Robotic-OCT guided inspection and microsurgery of monolithic storage devices</a></li>
         <li>Reference 3: <a href="https://www.nature.com/articles/s41467-023-41498-x">Robotic-OCT guided inspection and microsurgery of monolithic storage devices</a></li>
         <li>Reference 4: <a href="https://ieeexplore.ieee.org/abstract/document/9733364">New Diagnostic Forensic Protocol for Damaged Secure Digital Memory Cards</a></li>
         <li>Reference 4: <a href="https://ieeexplore.ieee.org/abstract/document/9733364">New Diagnostic Forensic Protocol for Damaged Secure Digital Memory Cards</a></li>
         <li>Reference 5: <a href="https://www.sciencedirect.com/science/article/pii/S2666281724000076">Case of study for in situ memory reading on damaged MultiMedia Card</a></li>
         <li>Reference 5: <a href="https://www.sciencedirect.com/science/article/pii/S2666281724000076">Case of study for in situ memory reading on damaged Multimedia Card</a></li>
         <li>Reference 6: <a href="https://www.circuitstoday.com/monolithic-ic">Monolithic IC</a></li>
         <li>Reference 6: <a href="https://www.circuitstoday.com/monolithic-ic">Monolithic IC</a></li>
        <li>Reference 7: <a href="https://www.youtube.com/playlist?list=PL4FTP856GcGfr8hFvsW4s1GV7pwyOBNgF">Microsoldering</a></li>
     </ol>
     </ol>
</div>
</div>

Latest revision as of 12:33, 10 March 2025

Data Recovery Resources

Background information

This page will cover Monolith pin out, how it functions, how to communicate with a device over it, and where to find the pads.
Monolith storage refers to any storage that is completely built into a singular PCB often in encased in plastic, for example a SD card,
They typically made up of 4 major components

  • Contact pads-The external pads that connects the device to what ever it's plugged into
  • Controller- Responsible for handling the communication between external devices and the internal memory
  • Memory-Stores the data
  • Passive components-Such as capacitors, resistors, inductors, ESD and protection Diodes
  • The only way to reasonably access the data on these devices is to solder directly to the pin on the back of the PCB by removing the plastic
    and locating the correct pins to access the storage within the device, , while databases of these pinouts exist they typically
    require subscriptions to services provided by ACElab or Rusolut, otherwise singular pinouts can be bought from 3rd party vendors or AliExpress

    Standardized Pin out

    All NAND devices should follow the ONFI standardand use the same pins, just in different locations on each device.
    1. VCC,- Power
    2. GND,- Ground
    3. CLE,- Command latch enable
    4. RE,- Read enable
    5. CE,- Chip enable
    6. ALE,- Address latch enable
    7. WP,- Write protect
    8. WE, - Write enable
    9. RB, - Ready/Busy
    10. D0-D7- Data lines

    Steps

    In this example, we will be working with a Micro Secure Digital card(SD)
    1. Visual analysis of the Micro SD card
    Is there any visible damage?, Is there any physical cracks?
    2. Removal of material to expose pins
    Unless there is serious damage to the card and the PCB is exposed,
    then material must be removed in order to access the PCB,
    This can be done in a few major ways such as,
    Acid (chemical decapsulation) - Soaking the Monolith in Acid just long enough to remove the casing without damaging the internal PCB Learning to Decapsulate Integrated Circuits Using Acid Deposition
    Laser (Laser decapsulation - Using a high-powered layer to burn away the material surrounding the die within the monolith
    IC Laser decapsulation - just experimenting with decapping
    Repeatable Method for Automated Decapsulation of Silver Alloy Wire Packages
    CNC (computer numerical control) - Using a precisely controlled drill bit to slowly remove the external casing. Similar to Laser decapsulation but with a drill bit instead of a laser

    Heat and brute force - For bigger chips, a heat source and a pair of pillars to simple remove the casing around the die will often do the job
    Sanding - the use of abrasive pads such as carbon fibre abrasive pens to remove material
    While standard low grid pieces of sandpaper can be used it is not recommended as it lacks precision
    and makes it more likely to sand through the PCB.
    The easiest and cost-effective method is sanding with an abrasive pad or pen. 3. Identification of each required Pin
    The best way to identify a card a pinout is to check databases of preexisting pinouts if they include the device you're looking for
    such as
    • Rusolut NAND monolith database (requires an expensive subscription)
    • Flash extractor forum(open but requires login)
    • Ace lab database(requires expensive subscription)
    • HDD guru forum(free and open)
    • Badcaps forum(free but requires an account to download schematic files)
    • AliExpress(pinouts can be purchased, often expensive espically if only going to be used once)
    • Search the internet for the model number and the term pinout(using the "" with make most search certain search for that exact term)
      • If you are unable to access or find the pinout then, you might have to locate the pins yourself through the following techniques

      These can be done with basic but often expensive tools such as a multimeter with continuity and voltage detection modes, oscilloscope and logic analysers
      • Ground(GND)- Using the multimeter continuity mode placing one probe on the casing(this is typically grounded), then touch enough pad until there is a beep
        this indicates there is continuity (the two points are connected) you have now found ground
      • VCC(power) - Typically VCC traces are thicker than others and often on the edge of the PCB
        Power up the card(if possible) then using the multimeter's voltage mode(typically the 2V setting) then place the black probe on the GND pad you found previously
        and touch the red pin to each pad until the multi meter reads around either 3.3v or 1.8v (due to resistance and the quality of the multimeter it is unlikely to be exact but with 0.1-0.2v is acceptable)
        this is likely the VCC pin
        If the card does not power up then set the multimeter to resistance mode(Ω)(20k mode)
        place the black probe on your GND pin, then using the red probe look for the pin with the lowest resistance (likely within 100Ω-10kΩ) the pin with the lowest resistance is likely VCC.
      • Data lines(I/0) - Due to the fact that datelines typically link directly to the internal memory they often do not show direct continuity to both GND and VCC
        if a pin does not show continuity to either it is likely a data line.
        Data lines typically have the resistance of around 1kΩ - 50kΩ unlike VCC which is typically 100Ω - 10kΩ and non-connected pads will typically show either extremely high resistance or an open line message(OL)
        An oscilloscope or logic analyser can be used to check if it is likely a data line.
        enable power by providing the power pins with either 3.3v or 1.8v depending on what you located,
        place probes on each pin and look for A wave/pulsing pattern this means it is likely a dataline.
      • CLK/CE(clock or chip enable) - follow the same method as for datalines but instead of a wave/pulsing pattern it should be a steady square like pattern.

        • 4. Wiring of pins to device(mircosoldering)
        Once the pins have been Identified it is a case of connecting the correct pads to the flash box, either through mircosoldering 5. Data extraction
        Depending on the software you are using that should direct you from this point.

        Step-by-step guide with images

        Insert step-by-step walkthrough with images and summary text here

        Flow chart of order of operations

        Insert a flow chart of steps and actions for each task (create using diagram)

        Troubleshooting/tips and tricks

        Fixes to any common issues that were encountered or could be easily encountered

        Related Topics

        Topics such as desoldering to chip off or firmware dumping for disk PCB repairs

        Further reading

        External references in wiki references can just be cited through the keyword link

        1. Reference 1: Monolith pinout search guide
        2. Reference 2: Open NAND flash interface standard
        3. Reference 3: Robotic-OCT guided inspection and microsurgery of monolithic storage devices
        4. Reference 4: New Diagnostic Forensic Protocol for Damaged Secure Digital Memory Cards
        5. Reference 5: Case of study for in situ memory reading on damaged Multimedia Card
        6. Reference 6: Monolithic IC
        7. Reference 7: Microsoldering

Retrieved from "https://datarecoverywiki.com/index.php?title=Monolith_pin_out&oldid=986"