DiskSec is a tool for assessing the firmware security of storage drives. It tests accessibility of undocumented manufacturer features, called Vendor Unique Commands (VUCs), that provide low-level access to drive internals such as reprogramming firmware, accessing hidden storage in the drive System Area (SA), and direct access to controller RAM.
Further details such as drive types supported and specific checks performed can be found in the wiki.
DiskSec must be executed on Windows or Linux with administrator or root equivalent privileges. Checks performed only use read access to features with nothing written or modified, as such it should be safe to execute without risk of damage or other side effects, however as with any tool accessing low-level undocumented hardware features usage is at your own risk.
List available drives:
disksec list
Run checks on a single drive:
disksec run <PATH>
Run checks on all drives:
disksec run
Run checks on all drives with verbose logging, and write results to file:
disksec run -vv -o output.txt
Example output:
