Free60: Homebrew JTAG Hack Thread für Xbox 360

[Razorback_v3]

11.08.09: NXE System Update (Summer '09) blockiert ab Kernel: 849x den JTAG Hack

Felix Domke, Michael Steil, Free60 Project; 11 August 2009

Dangerous Xbox 360 Update Killing Homebrew

On Tuesday, Microsoft has released an Xbox 360 software update that overwrites the first stage bootloader of the system. Although there have been numerous software updates for Microsoft's gaming console in the past, this is the first one to overwrite the vital boot block. Any failure while updating this will break the Xbox 360 beyond repair. Statistics from other systems have shown that about one in a thousand bootloader updates goes wrong, and unless Microsoft has a novel solution to this problem, this puts tens of thousands of Xboxes at risk.

It seems that this update is being done to fix a vulnerability already known to the Free60 Project. This vulnerability has been successfully exploited to run arbitrary code, and a complete end user compatible hack has been in development for some time and is planned to be released on free60.org shortly. It will allow users to take back control of their Xboxes and run arbitrary code like homebrew applications or Linux right after turning on the console and without the need of a modchip, finally opening up the Xbox 360 to a level of hacking as the original Xbox.

Because of the dangerousness of the update and the homebrew lockout, the Free60 Project advises all Xbox 360 users to not update their systems to the latest software version. The Project website at http://free60.org/ will provide the latest information on this ongoing topic, including the final hack software.

Free60 (www.free60.org) is a project that aims to enable Xbox 360 users to run homebrew applications and operating systems like Linux on their consoles. The effort is headed by Felix Domke and Michael Steil, who have a background in dbox2, Xbox and GameCube hacking, and who have spoken at various conferences about their findings. Two years ago, Free60 released a hack that allowed arbitrary code execution using a game ("King Kong Hack") as well as an adapted version of Linux, but this possibility has been disabled by Microsoft in subsequent updates of the Xbox 360 software.

Felix and Michael have repeatedly argued that game console manufacturers should open up their platforms to Linux and homebrew, similar to what Sony has done with the PlayStation 3.

Quelle: http://www.free60.org/849x_System_Update


22.08.09: New Bootloader found in newly manufactured units

User "jc" in #free60 found that his Jasper, built June-30th 2009, already contained the new bootloader (but with a 7363 Kernel).

We don't know when Microsoft switched it in production, but this discovery means that they did this at least over a month before the update.

So far, we don't know what Boxes are safe to buy. If you want to check your box, dump the flash, at look at the "CB" Version (offset 0x8202, the two hex bytes after "CB"). For Jasper, CB Versions 6750 (and up) are bad, CB Version 6723 is still good (at least we think so), CB Version 6712 is good for sure.

If you find that your jasper is still either "good" or "bad", please post the mfg date (and CB version) here so we can determine the cutoff date.

Let me remind your that we are not completely done with the adaptation of the hack to jasper yet. We've sorted out most things now, so we'll release it soon. The recent build.py changes will make an adaptation easily possible, and nandpro already supports jasper. Remaining things are the SMC and the J1F1-replacement points. We're working on this, don't worry.

My Jasper, built 2008-10-10, is "good" (CB version 6712).

So, bottom line:

Everything after 2009-06-30 already has the new bootloader. Everything before 2009-06-18 seems to have the old one.


IF YOU WANT TO BUY A NEW CONSOLE FOR THE HACK, MAKE SURE THAT IT WAS MANUFACTURED BEFORE 2009-06, TO BE SAFE. There should be enough old consoles out. I remember how hard I had to search to get a Jasper back in 2008-12. Also make sure that it was never turned on (so nobody could update it), and wasn't a refurbished console.

5761 is exploitable falcon.

You can't make any comparisations with ranges or so.

The list of exploitable CBs is:

1888, 1902, 1903: Xenon, but you need to use 1920/1921 in the exploit image
1920,1921: exploitable xenon
4558: exploitable Zephyr
5761, 5766, 5770: exploitable falcon
6712, 6723: exploitable jasper


The list of fixed CBs is: 1922, 1923, 1940, 4571, 4572, 4578, 4579, 5771, 6750 (CD = 8453 for all of them).

If you have a CB/CD version which isn't in either list, please ask here and don't make any assumption

Quelle: http://www.xboxhacker.net/index.php?topic=12241.0



10.11.09: JTAG/SMC Hack für Xbox 360 mit Xenon/Zephyr/Falcon/Opus/Jasper Mainboards released:

Xenon v1:

Spoiler: 

JTAG Points:

This is newest XELL (compiled 11.09.09) inserted into 1920 Xenon-Kernel.

This Version has much better support for USB-Sticks and you are able to update XELL with USB.
Also some other changes are included.

Don't wonder about the Filesize, its correct like that.
It just flashes the beginning of the NAND so your console specific data like MAC adress will stay.

Of course you should have a working backup of your NAND before you proceed.

Just flash with:

LPT
nandpro lpt: -w16 xenon_hack.bin

USB
nandpro usb: -w16 xenon_hack.bin

!USE THIS AT YOUR OWN RISK!

Anleitung 1: http://www.free60.org/JTAG_Hack
Anleitung 2 Deutsch: KLICK
Anleitung 3 English: KLICK


Benötige Software zum NAND auslesen/checken/schreiben:

360 Flash Tool
NANDPro v2.0b
Infectus NAND Checker
CD Info
MD5 Summer


Download XeLL Xenon Image: KLICK
Download XeLL Xenon 1921 Image: KLICK
Download XeLL Xenon 8192 Image: KLICK

Zephyr v2:

Spoiler: 

JTAG Points:

Finally the Zephyr JTAG Hack is here
This is XELL (compiled 11.09.09) inserted into 4558 Zephyr-Kernel.
!Fixed Version! USB Support was broken

Don't wonder about the Filesize, its correct like that. It just flashes the beginning of the NAND so your console specific data like MAC adress will stay.

Of course you should have a working backup of your NAND before you proceed.

Just flash with:
LPT
nandpro lpt: -w16 zephyr_hack_updxell.bin 0
USB
nandpro usb: -w16 zephyr_hack_updxell.bin 0

SMC-JTAG Hack Wiring
DB1F1 ---|<|--- J2D2.1
RFUnit 2nd row, 2nd Pin ---|<|---- J2D2.2
J2D2.4 --------- J2D2.7

Anleitung 1: http://www.free60.org/JTAG_Hack
Anleitung 2 Deutsch: KLICK
Anleitung 3 English: KLICK


Benötige Software zum NAND auslesen/checken/schreiben:

360 Flash Tool
NANDPro v2.0b
Infectus NAND Checker
CD Info
MD5 Summer


Download XeLL Zephyr Image: KLICK
Download XeLL Zephyr 4570 Image: KLICK

Falcon v3 & Opus v3.1:

Spoiler: 

JTAG Points:

Finally the Falcon JTAG Hack is here

This is newest XELL (compiled 05.10.09) inserted into 5770 Falcon-Kernel.

Don't wonder about the Filesize, its correct like that. It just flashes the beginning of the NAND so your console specific data like MAC adress will stay.

Of course you should have a working backup of your NAND before you proceed.

Just flash with:
* LPT
nandpro lpt: -w16 falcon_hack.bin 0
* USB
nandpro usb: -w16 falcon_hack.bin 0

SMC-JTAG Hack Wiring
DB1F1 ---|<|--- J2D2.1
RFUnit 2nd row, 2nd Pin ---|<|---- J2D2.2
J2D2.4 --------- J2D2.7

Anleitung 1: http://www.free60.org/JTAG_Hack
Anleitung 2 Deutsch: KLICK
Anleitung 3 English: KLICK


Benötige Software zum NAND auslesen/checken/schreiben:

360 Flash Tool
NANDPro v2.0b
Infectus NAND Checker
CD Info
MD5 Summer


Download XeLL Falcon / Opus Image: KLICK

Jasper v4:

Spoiler: 

JTAG Points:




Anleitung 1: http://www.free60.org/JTAG_Hack
Anleitung 2 Deutsch: KLICK
Anleitung 3 English: KLICK


Benötige Software zum NAND auslesen/checken/schreiben:

360 Flash Tool
NANDPro v2.0b
Infectus NAND Checker
CD Info
MD5 Summer



Jasper 16MB Version:

Finally the Jasper JTAG Hack is here

This is XELL (compiled 11.09.09) inserted into 6712 Jasper-Kernel.

Don't wonder about the Filesize, its correct like that. It just flashes the beginning of the NAND so your console specific data like MAC adress will stay.

Of course you should have a working backup of your NAND before you proceed.

*** NOTE ***

Only work with 16mb version, a fix may come out.

*** NOTE ***

Just flash with:

LPT
nandpro lpt: -w16 jasper_6712_hack.bin 0

USB
nandpro usb: -w16 jasper_6712_hack.bin 0

Download XeLL Jasper 6712 Image (16MB Version): KLICK
Download XeLL Jasper 6723 Image (16MB Version): KLICK



Jasper 256MB & 512MB Version:

Finally the Jasper JTAG Hack is here

This is XELL (Redline99's XeLL) inserted into 6723 Jasper-Kernel.

Don't wonder about the Filesize, its correct like that. It just flashes the beginning of the NAND so your console specific data like MAC adress will stay.

Of course you should have a working backup of your NAND before you proceed.

*** NOTE ***

It's for the Large Block Jaspers, 256MB and 512MB

*** NOTE ***

Just flash with:

LPT
nandpro lpt: -w256/-w512 jasper_6723_hack_for_256mb_512mb.bin 0

USB
nandpro usb: -w256/-w512 jasper_6723_hack_for_256mb_512mb.bin 0

-------------
Bliep

Download XeLL Jasper 6723 Image (256MB & 512MB Version): KLICK

Rebooters:

Spoiler: 

30.11.09: freeBOOT-0.02 released für Xenon/Zephyr/Falcon/Jasper 16MB Version:

Spoiler: 

__ ____ ___ ___ _____
/ _|_ __ ___ ___| __ ) / _ \ / _ \_ _|
| |_| '__/ _ \/ _ \ _ \| | | | | | || |
| _| | | __/ __/ |_) | |_| | |_| || |
|_| |_| \___|\___|____/ \___/ \___/ |_|
[v0.02 - coded by ikari]



I. Introduction
================

freeBOOT is a rebooter for the Microsoft Xbox 360. This version of freeBOOT
allows you to reboot into kernel 2.0.8955 on all Xenon, Zephyr, Falcon, and
Jasper consoles with 16MB flashes, which are vulnerable to the JTAG hack.
Support for Opus and Jasper consoles with larger flashes will follow soon.

As freeBOOT needs a second flash memory to store kernel 2.0.8955 and
associated data, either a Cygnos360 or an xD card mod is required at the
moment.



II. Bug Fixes
=============

- Harddisk installation and save game/profile issues have been fixed



III. New Features
=================

- updated to kernel 8955

- additional support for Zephyr and Jasper consoles with 16MB flashes

- support for xD card mod and Cygnos360 V1 added

- Harddisk authentication disabled

The Xbox 360 will now accept any SATA harddisk.

- removed XEX signature checks

Execution of unsigned devkit and retail XEXes is now possible. Encrypted
devkit XEXes must be decrypted with XexTool prior to use.

- removed LIVE/PIRS signature checks

The dashboard will now run applications from unsigned LIVE/PIRS
containers.

- extendable patch system

Researchers/hackers can now try new patches easily. Please refer to
"src\patches_kernel_8955.S" for more information.



IV. Instructions
================

Read these instructions carefully and follow them exactly. Failing to do so
may render your Xbox 360 unusable!

1. Extract the contents of this archive to a directory of your choice. All
file and directory names in the proceeding steps will be given relative
to that directory.

2. Update your Xbox 360 to kernel 2.0.7371 (Fall 08 Update). If your Xbox 360
has already been updated to a newer kernel, you can proceed to the next
step. The update process will not succeed with resistor R6T3 desoldered.
Resolder resistor R6T3 in that case before starting the update process.

*************************************************************************
*** Make sure you do *NOT* update to kernel 2.0.8xxx, since this will ***
*** fix the JTAG hack vulnerability. Check the update before! ***
*************************************************************************

3. *************************************************************************
*** If present, desolder resistor R6T3 to prevent any accidentally ***
*** applied update fixing the JTAG hack vulnerability. ***
*************************************************************************

4. Save an image of your flash memory to the file "bin\7371.bin".

5. In case you don't already know your Xbox 360's CPU key, retrieve it now.
There are various ways to accomplish this, but they will not be covered
here.

6. Extract the contents of your "bin\7371.bin" image with ibuild now. Launch
ibuild with the following parameters:

> ibuild x -d data\ -b <1BL key> -p <CPU key> bin\7371.bin

Replace <1BL key> with the 1BL key and <CPU key> with the CPU key matching
your "bin/7371.bin" image. Enter both 16 byte keys as hexadecimal numbers
without leading "0x". Data previously extracted with 360 Flash Tool can
no longer be used.

7. Delete all files from the "data" directory except:

- crl.bin
- crl.bin.meta
- extended.bin
- extended.bin.meta
- kv.bin
- odd.bin
- odd.bin.meta
- secdata.bin
- secdata.bin.meta
- smc.bin
- smc_config.bin

8. The remaining files necessary to build an image with kernel 2.0.8955 must
be extracted from an image of an updated Xbox 360, further on referred to
as "bin\other8955.bin". Please do *NOT* update your Xbox 360 to kernel
2.0.8955, otherwise you will loose the ability to run the JTAG hack and
freeBOOT.

Launch ibuild with the following parameters:

> ibuild x -d tmp\ -b <1BL key> -p <CPU key> bin\other8955.bin

Replace <1BL key> with the 1BL key and <CPU key> with the CPU key matching
the "bin/other8955.bin" image.

9. Copy the following files from the "tmp" to the "data" directory:

- aac.xexp[1,2]
- aac.xexp[1,2].meta
- bootanim.xex
- bootanim.xex.meta
- bootanim.xexp[1,2]
- bootanim.xexp[1,2].meta
- cb_[1940, 4579, 5771, 6750].bin
- cd_8453.bin
- ce_1888.bin
- cf_8498.bin
- cg_8498.bin
- createprofile.xex
- createprofile.xex.meta
- createprofile.xexp[1,2]
- createprofile.xexp[1,2].meta
- dash.xex
- dash.xex.meta
- deviceselector.xex
- deviceselector.xex.meta
- deviceselector.xexp[1,2]
- deviceselector.xexp[1,2].meta
- gamerprofile.xex
- gamerprofile.xex.meta
- gamerprofile.xexp[1,2]
- gamerprofile.xexp[1,2].meta
- hud.xex
- hud.xex.meta
- hud.xexp[1,2]
- hud.xexp[1,2].meta
- huduiskin.xex
- huduiskin.xex.meta
- mfgbootlauncher.xex
- mfgbootlauncher.xex.meta
- mfgbootlauncher.xexp[1,2]
- mfgbootlauncher.xexp[1,2].meta
- minimediaplayer.xex
- minimediaplayer.xex.meta
- minimediaplayer.xexp[1,2]
- minimediaplayer.xexp[1,2].meta
- nomni.xexp1
- nomni.xexp1.meta
- nomnifwm.xexp1
- nomnifwm.xexp1.meta
- signin.xex
- signin.xex.meta
- signin.xexp[1,2]
- signin.xexp[1,2].meta
- updater.xex
- updater.xex.meta
- updater.xexp[1,2]
- updater.xexp[1,2].meta
- vk.xex
- vk.xex.meta
- vk.xexp[1,2]
- vk.xexp[1,2].meta
- xam.xex
- xam.xex.meta
- xam.xexp[1,2]
- xam.xexp[1,2].meta
- xenonclatin.xtt
- xenonclatin.xtt.meta
- xenonclatin.xttp[1,2]
- xenonclatin.xttp[1,2].meta
- xenonjklatin.xtt
- xenonjklatin.xtt.meta
- xenonjklatin.xttp[1,2]
- xenonjklatin.xttp[1,2].meta
- ximecore.xex
- ximecore.xex.meta
- ximedic.xex
- ximedic.xex.meta
- ximedic.xexp[1,2]
- ximedic.xexp[1,2].meta

"[A, B]" means the file name contains either "A" or "B" at that position.

10. Now you can build your kernel 2.0.8955 image with ibuild. To do so,
launch ibuild with the following parameters:

> ibuild c -c <console> -d data/ -b <1BL key> -p <CPU key>
./bin/my8955.bin ./bin/fuses.bin

Replace <1BL key> with the 1BL key and <CPU key> with the CPU key
matching your "bin/7371.bin" image. Since ibuild currently does neither
support Opus consoles nor Jasper consoles with large flashes, valid
parameters for <console> at the moment are "xenon", "zephyr", "falcon",
and "jasper". When ibuild completes successfully, you will find two new
files in the "bin" directory. The file "bin\my8955.bin" contains your
newly built kernel 2.0.8955 image, that will be booted by freeBOOT. The
file "bin\fuses.bin" contains the virtual fuse settings used by freeBOOT.

11. In order to build the freeBOOT image, Python is needed. If you already
have Python installed, you can proceed to step 12.

The easiest way to run Python scripts under Windows is to install Cygwin.
You can download the Cygwin setup from here:

http://www.cygwin.org/cygwin/

Install Cygwin to any directory of your choice along with the these
packages:

- python
- python-crypto

12. Open "build.py" with a text editor and look for these two lines:

# you need to fill in this
secret_1BL = None

Replace "None" with the 1BL key. This example shows you the format
in which the key has to be entered. The key itself is wrong.

secret_1BL = "\x01\x0F\x0E\x0C\x0E\xD6\x69\xE7\xB5\x67\x94\xFB\x68\x56\x3E\xFA"

13. The freeBOOT image can now be built. Open a Cygwin shell and change to the
directory where you extracted the contents of this archive into. Launch
the Python build script with the following parameters:

> python build.py bin/<console>_hack.bin smc.bin

The "bin\<console>_hack.bin" image is a standard JTAG hack image and can
be found at the usual places. The "smc.bin" is a patched SMC generated
by the Cygnos toolbox. When the build process finishes successfully, a new
image "bin\hack.bin" can be found.

14. Program "bin\my8955.bin" to the Cygnos360 flash memory and "bin\hack.bin"
to the Xbox 360 flash memory.

15. Power on your Xbox 360. If everything went correctly, you should see the
blue LED light up a few seconds later, followed by the usual boot
animation. If you power on your Xbox 360 with the DVD tray eject button,
XeLL will be loaded instead.



VI. What's Next
===============

- support for Opus consoles and Jasper consoles with large flashes
- further removal of security system restrictions
- easier build process



VII. Credits
============

My gratitude goes to all those who helped me get this new release done.



-----
ikari, 2009/11/21

Download freeBOOT v0.0.2: KLICK

02.12.09: XBReboot v0.05:

Spoiler: 

* XBReboot Block Layout:
Ox00 - 0x2F 4548 boot FW
0x30 - 0x3F Backup Xell
0x40 - 0x4F XBRfw.bin Rebooter core
0x50 - 0xBF Patch.bin Kernel and patches
0xC0 - 0x?? Flash file system

* Version: XBRfw 0.5beta Initial
The fw version need not change for any given Patch.bin
Patch.bin is what needs to change for any new patch

* The following are Patch.bin versions
+8955_0: Initial
Don't need xextool:
automatically detect correct key for dev or retail xex.
Drag and drop any xex to cdr.
No specific secdata.bin or crl.bin requirements.
+8955_1:
Add support for PIRS
Fixed Backup Xell

* HowTo:
1) Extract KV and Config blocks from orig.bin
nandpro orig.bin: -r16 rawkv.bin 1 1
nandpro orig.bin: -r16 rawconfig.bin 3de 2
2) Inject those blocks into XBR.bin
nandpro XBR.bin: -w16 rawkv.bin 1 1
nandpro XBR.bin: -w16 rawconfig.bin 3de 2
3) Flash result
nandpro lpt: -w16 XBR.bin

* Notes:
There is no need to unpack and repack pirs files! This is a limitation of freeboot. Not XBR. Aside from that major difference, all functionality is the same.
Individual sections can be updated or extracted separately using nandpro.
The image can be made to work for all 16M consoles.
The standard method of using build.py can be used to change the 4548 boot FW portion of the flash to the console type.
Generally:
Create the image as described above.
The command to rebuild it might look like this:
build.py XBR.bin CB CD update.bin xell-1f.bin XBRfw.bin smcp.bin
Then the .ecc file result from build.py would be "flashed" back into the XBR
nandpro XBR.bin: -w16 image_00000000.ecc

Download XBReboot Xenon v0.05: KLICK
Download XBReboot Xenon 1921 v0.05: KLICK
Download XBReboot Zephyr v0.05: KLICK
Download XBReboot Zephyr 4570 v0.05: KLICK
Download XBReboot Falcon v0.05 : KLICK
Download XBReboot Jasper 16MB Version v0.05: KLICK
Download XBReboot Jasper 256MB & 512MB Version v0.05: KLICK
Download Bad Block Mover v1: KLICK
XBR Installation Tutorial Deutsch: KLICK

Homebrew Software:

Spoiler: 

24.08.09: XeLL (Xenon Linux Loader) mit DHCP - Funktion released:

Spoiler: 

Original Xenon_Hacked.bin, updated with the
xell-1f.bin file that adds DHCP, and
1024x786 VGA out
and Support for composite RGB


Still no sound
RCA cables do not work

You need either VGA or RGB(component) Cables

Quelle: http://www.xboxhacker.net/index.php?topic=12258.0
Download: http://www.megaupload.com/?d=RKNDWIEM
NFO:http://xbins.org/nfo.php?file=xboxnfo1731.nfo

11.09.09: XeLL Update:

Spoiler: 

When a XeLL update comes, you don't need to attach your LPT flasher again if you can use the integrated xell update.

But please be aware: The update feature as added on August-31th, so if your XeLL is older than that, you won't be able to do the update. In this case, you need to flash a new image.

Also, you need a recent image which can be updated. All image created with a build.py prior to August-23th cannot be updated. In this case, you also need to flash a new image.

If you have a recent enough xell/image, then grab the xell binary. There should be one up from today on xbins, but you can also compile your own. (In that case, grab the file "xell-1f.bin", i.e. the same file you would use to produce an image)

Rename the file to updxell.bin, and put it on a FAT-formatted USB stick which is supported by the currently installed xell version. Remove (or rename) the xenon.elf, that file must not exist.

Put in the USB stick, and powerup the box. Xell will display

* found XeLL update. press power NOW if you don't want to update.

and then wait for 15s. After that, the update will be started. If you want to abort, just switch of your box.

There might be a number of reasons why the update wouldn't work. Let me list the most probable failures:

- "* try booting tftp"
XeLL couldn't find the updxell.bin file on the USB stick, either because it didn't support the filesystem (must be FAT16/FAT32), or because XeLL didn't support your usb sticks at all (previous xells had a problem here)
- " * unknown hackimage version."
Your hackimage isn't supported. Usually that means that it is too old, meaning you first need to do a full reflash.
- " * relocating sector yyyyyyyy to xxxxxxxx..."
That's completely normal, and should not interrupt the update.

Otherwise, it should say " * update done" and then you can reboot the box.


In case updating went bad (for example, if updxell.bin was broken etc.), there is a way to boot back into the "backup xell" (there are two xell versions in flash, the normal one, and the backup one.) Usually the normal xell is started, but you can start the backup one by either:
- Attaching a wired controller on the back USB port, and pressing the X button to powerup the box, or
- Pressing the windows-button on a remote control to powerup the box.

In both cases, the backup xell will be started instead, and you can re-try the update. Note that xell will never touch the backup xell, it will always just reflash the normal one.

If you need to flash a new hackimage, and don't want to attach LPT/USB, the easiest way is to boot into linux, and use "lflash". But please only do that if you know that LPT/USB flashing works ok.


Speaking of the new XeLL, the following fixes were done in the 2009-09-11 release:
- Console border when using SD
- fixing a lot of USB sticks which didn't work before

Quelle: http://www.xboxhacker.net/index.php?topic=12373.0
Download: http://www.megaupload.com/?d=SHHL3KEE

15.09.2009: Xmenu v0.3 - Erster ELF Loader mit Grafischer Benutzeroberfläche (GUI) für Xbox 360 released:

Spoiler: 

Xmenu 0.3
========

Xmenu is an elf loader with a basic gui.


Installation
============

Copy the file xenon.elf and the "xenon" folder to the root of your usb disk/pen.
Load it with the free60.org hack.


Changelog
=========

Version 0.3 :
- It's now possible to load custom icons. Put a ".png" image (32 bits, with alpha channel, 32*32 pixels would be better)
alongside your executable file, with the ".ico" extension. Example :
If you have an executable named "snes9x.elf", put the ".png" icon in the same directory with the name "snes9x.ico".

Version 0.2 :
- Graphics data is now loaded at startup, allowing to customise.
- Smaller fonts, this allow more items to be displayed.

Version 0.1 :
- Alpha testing version.


Thanks
======
Sasoseso from xboxhacker.net for sending me a free xbox 360, if all the people could be like you
Tmbinc of course for all his work.
Ced2911 for sega master system emulators sources, helped me a lot.
Ge0rG and ssmurf, because they are nice guys



Cpasjuste @ mydedibox.fr

Quelle: http://www.modcontrol.com/Board/xbox...915-build.html
Xmenu Homepage: http://mydedibox.fr/index.php?option...ware&Itemid=66
Download: http://mydedibox.fr/index.php?option...d=16&Itemid=29

24.09.09: Ced2911's Video Player Alpha Test:

Spoiler: 

A basic video player for xbox 360.

Currently it can only just play a file called video.avi at the root of the first usb stick.

No sound and the screen output is very bad.

The first Brick for a video player

ps: Sega genesis is coming …

Quelle: http://ced2911.wata.fr/2009/09/24/vi...er-alpha-test/
Download: http://blogfile.wata.fr/videoplay.elf32.tar.gz
Ced2911's Homepage: http://ced2911.wata.fr/

02.10.09: Linux Geräte Treiber für Xbox 360 Audio:

Spoiler: 

I am releasing the first version of linux device driver for xbox 360 audio. you can get source from here: http://www.megaupload.com/?d=SVAUYFBL. The device driver is alsa compitable, so basically you can compile mplayer and then it should play various music formats for you easily. It supports both analog stereo and digital spdif (only dobly digital by now). Thanks for tmbinc for his finding on 360 audio hardware details and his help on debuging the code. The license for the code is GPL.

In order to compile it, you will need to properly edit sound/pci/Makefile with the following statements, and also change Kconfig if needed. do not forget to enable ALSA support in your kernel.
snd-xenon-objs := xenon_snd.o
obj-$(CONFIG_SND_XENON) += snd-xenon.o

To compile mplayer, download MPlayer-1.0rc2.tar.bz2 and edit libmpcodecs/ad_hwac3.c by applying the following patch:

--- ad_hwac3.c  1969-12-31 19:15:52.000000000 -0500
+++ ad_hwac3.c.org      1969-12-31 19:15:17.000000000 -0500
@@ -144,4 +144,17 @@
 }

+static inline unsigned short bswap16(unsigned short a)
+{
+      return ((a&0xff)<<8) | ((a&0xff00)>>8);
+}
+
+static inline void mem_swap16(void *buf, int line)
+{
+    int i=0;
+    uint16_t *buf16 = (uint16_t *)buf;
+    for (i=0; i<line/2; i++)
+        buf16[i]=bswap16(buf16[i]);
+}
+
 static int decode_audio(sh_audio_t *sh_audio,unsigned char *buf,int minlen,int maxlen)
 {
@@ -177,4 +190,6 @@
     memset(buf + 8 + len, 0, 6144 - 8 - len);

+    mem_swap16(buf, 6144);
+
     return 6144;
   }
@@ -375,4 +390,6 @@
   memset(&buf[fsize + 8], 0, nr_samples * 2 * 2 - (fsize + 8));

+  mem_swap16(buf, nr_samples * 2 * 2);
+
   return nr_samples * 2 * 2;
 }

To test:
-bash-3.2# aplay -l
**** List of PLAYBACK Hardware Devices ****
card 0: AudioPCI [Xenon AudioPCI], device 0: Xenon Audio [Analog]
Subdevices: 0/1
Subdevice #0: subdevice #0
card 0: AudioPCI [Xenon AudioPCI], device 1: Xenon Audio [Digital]
Subdevices: 1/1
Subdevice #0: subdevice #0

stereo music:
./mplayer -ao alsa:device=hw=0.0 music.mp3/ape/flac/wav

digital music:
./mplayer -ao alsa:device=hw=0.1 -ac hwac3 music.ac3
./mplayer -ao alsa:device=hw=0.1 -ac hwdts music.dts


Please feel free to improve this driver for the following things:
1) Interrupt: I could not get pci interrupt to work. This driver currently uses a timer interrupt.
2) DTS passthrough: my receiver could not decode the raw dts bit stream sent by mplayer, I guess one register was not set correctly for dts passthrough. If you have a jtag setup on xbox 360 motherboard, you could help on this: put a dvd movie with dts track into 360 drive and play(check if your receiver receive dts signal), read 64 bytes from address 0xea001600 with your jtag device and then post the result here.
3) Mixer such as volumn setting etc.

The driver may not be bug free. I am not responsible for any damge that the driver may cause to your hardware, so use it at your own risk.

Quelle: KLICK
Download Linux Device Driver for Xbox 360 Audio: KLICK

24.12.09: XeXLoader v0.26:

Spoiler: 

-------------------------------------------------------------------------------
Release Notes
-------------------------------------------------------------------------------
+ New, more friendly GUI.
+ Auto Discovery mode. All applications/games which are in the Games directory
at the root of any device will be displayed in the first screen when you launch
XeXLoader. For example, if "hdd1:\Games\MyGame" exists, and there is a
default.xex in "MyGame", it will be shown in the first menu.
+ Enhanced File Manager (you can now Copy, Move, Paste, Delete and Create). You
can display help with Back, change current device with X, open sub-menu with Y,
and show only .xex with RB.
+ Overwriting is now available.
+ Progress bar when copying files/folders. You can cancel a copy with B.
+ Automatically displays selected game's theme when browsing directories

* The default.xex auto-patch when copying DVDs is not included in this version.
This function will be implemented for the next release.
* Lot of bugs fixed.
* Known bug: Some game previews could cause memory corruption (very few
spotted), which can cause crashes and other weird behavior. If you encounter
this, delete the files "nxeart" and "nxebg.dds" from the game directory.

Note: if the list you get at startup is empty you can use left or right dpad to
get the normal file listing

Download XeXLoader v0.26-ISO: KLICK
Download XeXLoader v0.26-LIVE: KLICK
Download XeXLoader v0.26-XEX: KLICK
Download XexTool v5.2: KLICK

EMULATOREN:

Spoiler: 

08.09.09: Snes9x Gx:

Spoiler: 

********************************************************
SNES9X GX Xenon
********************************************************

--------------------------------------------------------
General Information
--------------------------------------------------------

Type.................: Emulator
Platform.............: Xbox 360

--------------------------------------------------------
Release Notes
--------------------------------------------------------
Build:Snes9x-Gx-Beta001 2009/09/08

This version of snes9x fixes the ticking sound problem and also swaps the B & A
buttons around.

Build also has wireless pad support so no more wired controllers needed.

Only currently running on the xenon xell hack. Support for other chipsets
are in the works!

Thanks to snes9x-gx and tmbinc for releasing his version of the source.

--------------------------------------------------------
Install Notes
--------------------------------------------------------
The program looks for a static filename - SNES9X.SMC

Copy Xenon.elf to the root of your mem stick along with any rom which has been
renamed as SNES9X.SMC

Insert mem stick into xbox 360 & power on.

THIS ONLY WORKS WITH HACKED 360 RUNNING XELL


--------------------------------------------------------
Thanks to TMBINC- XBH - Free60 - And the rest of the CREW
--------------------------------------------------------

Download SNES9X GX: KLICK

25.09.09: Sega Master System Plus & Genesis (Mega Drive) Plus Emulator released:

Spoiler: 

Sound is now fully working thanks to tmbinc
Back to menu with select key

Next will be genesis (mega drive)

Source code

xenon.elf

10:44

fixed controller bug

xenon.elf fixed

Sms Plus v250909

Added change from genesis plus

Quelle: http://ced2911.wata.fr/2009/09/25/sms-plus-v250909/
Source Code: http://blogfile.wata.fr/smsplus/smsp...0090925.tar.gz
SMS Download: http://blogfile.wata.fr/smsplus/smsplus_20090925.zip

Introduction:
Genesis Plus is a freeware, open-source, portable emulator for the Genesis and MegaDrive consoles

Changelog:
v240909: First public release
Sound doesn’t work as it should ….
It supports bin and zip files but rom’s in smd format doesn’t work
UI updated and supports skinning:
Background: uda:/mdbg.png
File Icon: uda:/mdfile.png
Folder Icon: uda:/mddir.png

Contact:
http://ced2911.wata.fr | cedric2911@free.fr

Thanks:
Tmbinc
Jc
Relapse
And all people in #free60
Authors of Genesis Plus Wii and Dc
Charles MacDonald

Genesis Plus v250909

Fixed some bug in menu.

Add some loading screen.

In Game Menu … allow you to going back to menu (more to come)

Quelle: http://ced2911.wata.fr/2009/09/25/genesis-plus-v250909/
Source Code: http://blogfile.wata.fr/genplus/gene...0090925.tar.gz
Genesis Download: http://blogfile.wata.fr/genplus/gene...s_20090925.zip

Weitere nützliche Tools,Fixes & Drivers:

http://free60.git.sourceforge.net/gi...ols;a=shortlog
http://free60.git.sourceforge.net/gi...e60;a=shortlog



Für alle die in nächster Zeit Homebrew und Linux auf der Xbox 360 ausführen wollen, sollten sich nicht das NXE Update (Fall: 11.08.09) installieren!

[MyXery]

aber die box musste doch so schon immer einen anderen Kernel haben (von vor 2007).
oder ist das was anderes gemeint ? das es auch demnächst mit aktuellen boxen gehen soll ?

[deep1987]

Ja es sollte demnächst auch mit aktuellen boxen gehen. Jetzt frag ich mich nur ob es auch noch mit der preview Version funktioniert denke jedoch nicht, so ein mist auch^^

[luckythirteen]

Tja... das kam wohl nen paar Tage zu spät, wenns wirklich klappen sollte muss man sich da mal überlegen was zu machen ist, Homebrew ist natürlich der langersehnte Traum von vielen.

Ichwart jetzt erstmal ab was es mit der News auf sich hat bevor ich Panik schieb...bis dann

[warpilein]

eine woche zu spät die info XD

[MyXery]

eyterne platte anschliesen und dann davon isos laden wäre net schlecht. aber mkv videos abspielen wäre für die meisten doch noch wichtiger.
die 2 euro für nen rohling gehen ja noch....

[Big Mike]

eine woche zu spät die info XD

Warum denn das? Ist das update nicht gestern oder so gekommen?

Als ich "hack has been in development for some time and is planned to be released on free60.org shortly" gelesen habe, dachte ich erstmal, dass da jemand einfach nur für Besuche auf ihrer Seite sorgen will, ist ja an sich eine auffällige Sache.
Aber das scheinen ja sehr anerkannte Menschen zu sein, jetzt bleibt nur noch zu hoffen, dass "shortly" auch wirklich "shortly" heißt und nicht in ... monaten.
Hoffen! Hoffen! Hoffen!

[luckythirteen]

Naja...also für mich ist Homebrew halt interessant, weil ich gerne solche Spielerien mit der Box mache, nur Sk's spielen kann man jetzt ja schon relativ einfach, aber das ist eben nicht alles.
Kanns einfach nicht verstehen wieso man mit solch einer News erst jetzt kommt, spätestens seit dem Release der Beta hätte man sich das Update doch anschauen können und somit schon Veränderungen feststellen können.

Ich habs jetzt leider schon geladen und muss wohl erstmal verzichten falls sich da was entwickelt.

[deep1987]

kann mir jemand mal seine kernel Version posten der das Update heute aufgespielt hat

[webmarc]

Naja, aber wann kommt denn nützliche homebrew wie z.B. xbmc für die 360?? Im Moment ist ja auf der Seite nur von Linux was zu sehen und das ist ja eher Spielerei als nützlich.

[seisenberger]

wie geil!! hoffentlich ist das kein fake.
wenn linux wider läuft. dan ist es bald nicht mehr weit zum xbmc.
notfalls lauft xbmc halt über linux xD

[ayhack]

wie geil!! hoffentlich ist das kein fake.
wenn linux wider läuft. dan ist es bald nicht mehr weit zum xbmc.
notfalls lauft xbmc halt über linux xD

Da schlies ich mich mal an

Edit: Es wird doch auch sicherlich dan möglich sein, seinen "verflashten" key wieder zu bekommen oder?

[Anton82]

Für alle die in nächster Zeit Homebrew und Linux auf der Xbox 360 ausführen wollen, sollten sich nicht das NXE Update (Fall: 11.08.09) installieren!

Das würde dann aber auch heißen das man auf das zocken neuer games verzichten muss,da diese das neue dashboard voraussetzen,sowie sich bei live einzuloggen wird dann auch nicht mehr möglich sein.

[ayhack]

Das würde dann aber auch heißen das man auf das zocken neuer games verzichten muss,da diese das neue dashboard voraussetzen,sowie sich bei live einzuloggen wird dann auch nicht mehr möglich sein.

Wird bestimmt auch möglich sein....

[Big Mike]

Das würde dann aber auch heißen das man auf das zocken neuer games verzichten muss,da diese das neue dashboard voraussetzen,sowie sich bei live einzuloggen wird dann auch nicht mehr möglich sein.

vllt wirds diesmal auch eine möglichkeit geben die spiele zu patchen, war doch auch letztes mal so, oder?

[seisenberger]

wenn der exploid ähnlich ist wie der von kingkong, dan wirds schwierig mit key widerbekommen. weil man muss ja kingkong starten können, und dazu braucht man den key.
aber mal schaun was die zeit bringt

[RayLiota]

Da schlies ich mich mal an

Edit: Es wird doch auch sicherlich dan möglich sein, seinen "verflashten" key wieder zu bekommen oder?

Den wirst du auch nicht mehr dann brauchen, sie schreiben ja dass sie kein DVD-Laufwerk benötigen, laso dnke ich mal das isos abgespielt werden können.

[GundulaGause]

OMG glaubt ihr an solche Troll Meldungen?

Ausgrechnet am Tag des Updates, was die meisten installiert haben, oder noch installieren werden gibts eine Meldung über einen Hack, der aber nur ohne Update funktioniert.

Ja nee is klar

Wer das noch glaubt....

[Big Mike]

OMG glaubt ihr an solche Troll Meldungen?

Ausgrechnet am Tag des Updates, was die meisten installiert haben, oder noch installieren werden gibts eine Meldung über einen Hack, der aber nur ohne Update funktioniert.

Ja nee is klar

Wer das noch glaubt....

das war auch mein erster gedanke aber die leute von free60 sind nicht irgendwelche unbekannten scherzkekse.

[GundulaGause]

Nunja, irgendwie klingts ein bisschen komisch, so richtig glaub ich nicht dran. Falls doch muss ich mir eben eine neue Konsole kaufen

Aber was nutzt mir das, wenn ich damit nicht mehr Online komme, weil ich das Update nicht installieren darf?