Not a big deal for just accessing boot0, but for dumping the entire eMMC it would take a while. Not necessary for just dumping the keys in case you need to reconstruct an image after a brick.
Well, there is an Xbox 360 emmc reader project called PicoFlasher. https://github.com/X360Tools/PicoFlasher. It can read 16mb Xbox nand in spi mode and 4gb emmc in 1bit mode (according to only 4 pins required). Don’t know is it capable of reading boot 0/1. In windows definitely no, but Linux may be an option. I do have this picoflasher and a ft2232h reader (also used for Xbox 360 mods). If it can be helpful for the scene I can try, just give instructions what to do
.
I did research with my mariko console, and I realized that we need proper mariko_kek, mariko_bek, and sbk in keyslot to boot hos on mariko.
keyslots are 'write only', and we can easily write keys to keyslots using hekate bdk, so I just made keyslot validator/writer payload. (Based on Lockpick_RCM)
https://github.com/henryjmin/keyslot_writer/releases
Usage
1. Fill `keyslot.keys` and put it in the sd card path `sd:/switch/keyslot.keys`
2. Boot to hekate and chainload keyslot_writer.bin
3. Select `Validate keyslots` to validate keyslot 0-13
4. Select `Write to keyslots` to write mariko_kek, mariko_bek from file to keyslot 12, 13
5. Select `Reboot to hekate` (Do not select `Power off`)
6. Try to boot Atmosphere
Anyone who has installed rp2040 to mariko can try this method
keyslots are 'write only', and we can easily write keys to keyslots using hekate bdk, so I just made keyslot validator/writer payload. (Based on Lockpick_RCM)
https://github.com/henryjmin/keyslot_writer/releases
Usage
1. Fill `keyslot.keys` and put it in the sd card path `sd:/switch/keyslot.keys`
2. Boot to hekate and chainload keyslot_writer.bin
3. Select `Validate keyslots` to validate keyslot 0-13
4. Select `Write to keyslots` to write mariko_kek, mariko_bek from file to keyslot 12, 13
5. Select `Reboot to hekate` (Do not select `Power off`)
6. Try to boot Atmosphere
Anyone who has installed rp2040 to mariko can try this method
Did anybody try this method ? what is the result?I did research with my mariko console, and I realized that we need proper mariko_kek, mariko_bek, and sbk in keyslot to boot hos on mariko.
keyslots are 'write only', and we can easily write keys to keyslots using hekate bdk, so I just made keyslot validator/writer payload. (Based on Lockpick_RCM)
Usage
1. Fill `keyslot.keys` and put it in the sd card path `sd:/switch/keyslot.keys`
2. Boot to hekate and chainload keyslot_writer.bin
3. Select `Validate keyslots` to validate keyslot 0-13
4. Select `Write to keyslots` to write mariko_kek, mariko_bek from file to keyslot 12, 13
5. Select `Reboot to hekate` (Do not select `Power off`)
6. Try to boot Atmosphere
Anyone who has installed rp2040 to mariko can try this method
does not work. all the same BEK is missingI did research with my mariko console, and I realized that we need proper mariko_kek, mariko_bek, and sbk in keyslot to boot hos on mariko.
keyslots are 'write only', and we can easily write keys to keyslots using hekate bdk, so I just made keyslot validator/writer payload. (Based on Lockpick_RCM)
https://github.com/henryjmin/keyslot_writer/releases
Usage
1. Fill `keyslot.keys` and put it in the sd card path `sd:/switch/keyslot.keys`
2. Boot to hekate and chainload keyslot_writer.bin
3. Select `Validate keyslots` to validate keyslot 0-13
4. Select `Write to keyslots` to write mariko_kek, mariko_bek from file to keyslot 12, 13
5. Select `Reboot to hekate` (Do not select `Power off`)
6. Try to boot Atmosphere
Anyone who has installed rp2040 to mariko can try this method
Last edited by IgraBIT1,
Can you show me 'Validate keyslots' result after writing keys?
Did you get 'Is BEK missing' error or just black screen?
If you got black screen, you may have to write sbk too.
I did research with my mariko console, and I realized that we need proper mariko_kek, mariko_bek, and sbk in keyslot to boot hos on mariko.
keyslots are 'write only', and we can easily write keys to keyslots using hekate bdk, so I just made keyslot validator/writer payload. (Based on Lockpick_RCM)
https://github.com/henryjmin/keyslot_writer/releases
Usage
1. Fill `keyslot.keys` and put it in the sd card path `sd:/switch/keyslot.keys`
2. Boot to hekate and chainload keyslot_writer.bin
3. Select `Validate keyslots` to validate keyslot 0-13
4. Select `Write to keyslots` to write mariko_kek, mariko_bek from file to keyslot 12, 13
5. Select `Reboot to hekate` (Do not select `Power off`)
6. Try to boot Atmosphere
Anyone who has installed rp2040 to mariko can try this method
Attachments
So is this legit or not? Or do I have to go through 72 pages to figure it out?
At a very high level here, yes the chip/pico is able to perform the glitch. However the very clever people here and elsewhere are working on the software (FW) to get it working.
They've been discussing the possibility of writing their own
The people working on this deserve a lot of credit, they're working hard for everyone's benefit.... be patient, could be next week, next month or never... Sit tight and enjoy the ride
they are not unique. it's always on marikoI did research with my mariko console, and I realized that we need proper mariko_kek, mariko_bek, and sbk in keyslot to boot hos on mariko.
keyslots are 'write only', and we can easily write keys to keyslots using hekate bdk, so I just made keyslot validator/writer payload. (Based on Lockpick_RCM)
https://github.com/henryjmin/keyslot_writer/releases
Usage
1. Fill `keyslot.keys` and put it in the sd card path `sd:/switch/keyslot.keys`
2. Boot to hekate and chainload keyslot_writer.bin
3. Select `Validate keyslots` to validate keyslot 0-13
4. Select `Write to keyslots` to write mariko_kek, mariko_bek from file to keyslot 12, 13
5. Select `Reboot to hekate` (Do not select `Power off`)
6. Try to boot Atmosphere
Anyone who has installed rp2040 to mariko can try this method
I can also confirm writing the keys lots doesn't work, I tried that ages ago when it was brought up originally in this thread
That is correct. Look back around page 34. It’s still not fully working yet though…
yes
Attachments
Did you use two of them or just the one? I like how you did this one without the need for insulation. do you have a pic of the other one?
Single
Attachments
Similar threads
-
@
Psionic Roshambo:
But congressman X needs to have government funding for his cousins unicycle business -
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
Rotflmao 
