The Xbox 360 finally gets a hypervisor exploit for the latest dashboard.

[SuffahBish]

Known as the "BadUpdate" exploit. It can be launched on a stock console through Tony Hawk's American Wasteland.

Github
Write-up

 

[CMDreamer]

American Wasteland.

Now this is a very appropriate name for a console game...

First PS1 console, what was next?

And now XBOX 360.

Neversoft is an awesome hack team... XD

 

[SuffahBish]

Now this is a very appropriate name for a console game...

First PS1 console, what was next?

And now XBOX 360.

Neversoft is an awesome hack team... XD

Well, the Tony Hawk's American Wasteland exploit is still the Tony Hawk's Pro Strcpy exploit. It's just being used to chainload BadUpdate.

 

[alexfree]

Thoughts:

1) Unbelievable that a true soft mod is finally possible. He discounts his work as not a soft-mod, not a replacement for JTAG/RGH because it requires doing xyz after booting the console. It is extremely close to being one.

2) The Tonyhawk game devs keep giving They never learned safe C, and I still have so much respect for that as a C enthusiast. Glad they kept the same devs on for multiple generations of consoles.

3) I get a bad feeling about him reporting this to microsoft. I have mad respect for his work, but even if it was 2030 Micro$oft would find a way to push an update to fix this. Him reporting it just makes it even more likely. I hope he at least got some $$$ out of it...

4) He discredits his work saying this isn't a RGH/JTAG replacement, it doesn't work on boot, the reliability sucks, etc.. If the author is reading this somehow, your just missing a Tonyhax International/Tonyhax style loader and nothing else to chain load another unencrypted executables/backups. This has exactly as much potential as the Tonyhax/Tonyhax International save game exploits. For the PS2 the Tonyhax/Tonyhax International soft-mods work exactly in this manner (although the exploits are 100% reliable and can't be patched, yes) and people deal with it because it is the best option available with the most compatiblity.

/End rant. Bravo to the author, proving everyone wrong for near 20 years... Even the JTAG required soldering. I can't solder for shit hence making a soft-mod for PS1/PS2. Lots of people don't want to touch hardware. IDC if it takes 3 days for the exploit to work. There are zero fuse CPU mods for the 360 while CPU supplies last and people like mikes360jtage exist which means this should last a bit even if they do patch it. And this dash version has compat for all games (if you know 360 dash compat you'll understand). But Micro$oft will I promise. As someone who grew up on 360 as the hottest new thing, it's just unbelievable.

 

[BigOnYa]

Known as the "BadUpdate" exploit. It can be launched on a stock console through Tony Hawk's American Wasteland.

Github
Write-up

There is already a thread for this: https://gbatemp.net/threads/new-xbox-360-hypervisor-exploit-software-based.662219/

 

[ChibiMofo]

If the author is reading this somehow, your just missing a Tonyhax International/Tonyhax style loader and nothing else to chain load another unencrypted executables/backups. This has exactly as much potential as the Tonyhax/Tonyhax International save game exploits. For the PS2 the Tonyhax/Tonyhax International soft-mods work exactly in this manner (although the exploits are 100% reliable and can't be patched, yes) and people deal with it because it is the best option available with the most compatiblity.

LOL! You think the author doesn't know that? He's the same dude who came up with the Tonyhax hack! Read his blog. He's been at this for the better part of a year. You aren't going to be able to point him to a better solution.

 

[alexfree]

LOL! You think the author doesn't know that? He's the same dude who came up with the Tonyhax hack! Read his blog. He's been at this for the better part of a year. You aren't going to be able to point him to a better solution.

Tonyhax hack was done by Socram8888. His hack is a different thing for another Tonyhawk game on a different cosole. Your missing the whole point of my reply. I'm not pointing him to any better solution.

 

[Armadillo]

Bravo to the author, proving everyone wrong for near 20 years... Even the JTAG required soldering. I can't solder for shit

You could have learned in the near 20 years people had been asking for a softmod and enjoying unsigned code for all that time.

 

[Jayinem]

I couldn't soldier either so I went on google found someone to do it for $50 the cost of one game not a big deal.

 

[SylverReZ]

Learnt soldering from watching a series of YouTube videos, they have helped me to get better in my work. It's very easy to solder and I don't see why not to learn from somebody's experience.

 

[alexfree]

Learnt soldering from watching a series of YouTube videos, they have helped me to get better in my work. It's very easy to solder and I don't see why not to learn from somebody's experience.

It's not everyone's cup of tea. Using unmodified hardware in ways it was never supposed to function is part of the fun for me. I haven't had a 360 since 2018 either so I haven't been missing out on anything either @Armadillo . As @Jayinem stated there are send in services and I mentioned in my reply you can buy a zero fuse 360 for the past year or so from mikes360jtag (which I had been looking into for awhile now.)

I don't understand how my post here has been so misunderstood.
1) It is good to have options that are more accessible to everyone. I could learn to solder better but especially now why would I for this. I'd just wait for this to fully develop into the soft-mod it can be or again as I mentioned in my original post just buy a modified console. Some people are more software-focused, people are good at different things we are all different.
2) This is almost a full blow soft-mod with as much potential as Tonyhax/International save game exploit boot method. It is essentially the same UX with worse exploit reliability in comparison due to the nature of how it works.
3) Not everyone wants to modify their console.

 

[MrQQ]

Xelllaunch.xex was a thing. wonder if that would work to get the cpu key

 

[Deleted member 486901]

First PS1 console, what was next?

Something happened on the PS1 scene?

 

[SylverReZ]

Xelllaunch.xex was a thing. wonder if that would work to get the cpu key

FreeMyXe (if used as the BadUpdate payload) will display the CPU key if it was successful.

 

[SigmaStingray]

About damn time, Been waiting for a softmod of sorts to come out for the Xbox 360 for years

 

[Totino]

this is pretty cool but useless for me since i have an rgh. i know this works on a winchester but can it lead to a start of getting the winchester fully hacked like an rgh or jtag?

 

[SylverReZ]

About damn time, Been waiting for a softmod of sorts to come out for the Xbox 360 for years

It's not a 'softmod' or a 'custom firmware' as explained in the repository. It's only a temporary solution, so when you restart, you cannot access your homebrew or backups without redoing the exploit all over again. The exploit has a 30% success rate, so it could take a couple or more tries to get it to work.

i know this works on a winchester but can it lead to a start of getting the winchester fully hacked like an rgh or jtag?

You need to swap the XCGPU with one from an exploitable model to mod a Winchester, maybe one day we'll see a softmod for that which doesn't require physically reballing chips. But as of writing, it's not worth the effort to mod a Winchester when there's plenty of other models that'll work with RGH.

 

[L3gi0n0fh311]

• Will the 20 minutes time taken for the exploit to work be reduced? how much can it be reduced?
• Will the 30% probability of exploit's success ever be improved? how much can it get improved?
• Will this exploit be as good as the PS3HEN on PS3 ?

 

[BigOnYa]

• Will the 20 minutes time taken for the exploit to work be reduced? how much can it be reduced?
• Will the 30% probability of exploit's success ever be improved? how much can it get improved?
• Will this exploit be as good as the PS3HEN on PS3 ?

Most likely no to all.

 

[SylverReZ]

You need to swap the XCGPU with one from an exploitable model to mod a Winchester, maybe one day we'll see a softmod for that which doesn't require physically reballing chips. But as of writing, it's not worth the effort to mod a Winchester when there's plenty of other models that'll work with RGH.

Bad Update supports Winchester 360 models, forgot to mention.