Hacking Hack SXOS

[stl25]

So this will require loading modified rommenu.nro each time you load XCI image?

 

[mspy]

That's because the posted file doesn't work on newer versions of python - you should use the one I posted as it produces the exact same file (compare md5 or binary compare if you don't want to take my word for it) as the one that the OP posted on the first post.

But you're wasting your time - as neither work. If the OP wanted to prove it worked - PM him your fingerprint (not the licence.dat) and he could make you a working boot.dat from only that info, however don't hold your breath. Also aes keys in his script are only for 2.95 sxos and can't decrypt anything other than that version of sxos (no matter how many videos he posts saying the contrary).

I'm no expert on the matter, but could the system language (or any other console configuration) that you are using impact this hack somehow? I just notice that the guys posting videos of it working all have the UI in french or something.

 

[Zoria]

Am I going crazy?? You mounted the gane through the regular sx menu then did it again through the "hacked" one, its already mounted so of course it worked??

Edit this is so stupid that no one can provide actual proof, im out have fun

So you must not have watched the video well, I mount the XCI a first time on the new crack menu in 3.1.0
We don't need to go in the hbl to launch the romenu to access the hacked menu, it has been integrated in the boot.dat
I have access to the modified menu from the hbl only to show the modified valid license in monpseudo license (but it's super simple to modify xD)
It's crazy the more I read the post the more I realize that people are coming up with conspiracy theories, it's amazing. If you don't believe in it, you're not obliged to do anything, Reatcher's crack works very well on a switch that never had an official license.

On the other hand I found a bug with the reboot to payload.
If you do the reboot via the power option menu instead of rebooting SXOS you will probably get a "boot.dat? "

 

[mspy]

It's crazy the more I read the post the more I realize that people are coming up with conspiracy theories, it's amazing. If you don't believe in it, you're not obliged to do anything, Reatcher's crack works very well on a switch that never had an official license.

What firmware are you using?
To make it clear you only used the script posted on the 1st post of this thread on the boot.dat of SXOS_beta_v3.1.0 and it worked for you ? You did it yourself and you did not PM files or receive from the OP, correct ?

 

[Zoria]

What firmware are you using?
To make it clear you only used the script posted on the 1st post of this thread on the boot.dat of SXOS_beta_v3.1.0 and it worked for you ? You did it yourself and you did not PM files or receive from the OP, correct ?

I used the latest script from Reatcher and not the one here.
(I'm acting as a beta tester if you prefer)
I use the 10.0.3 firmware especially for the test with SX 2.9.5
Tomorrow I will update to 11.0.0 and I will look at the behavior of the crack.

 

[mspy]

I used the latest script from Reatcher and not the one here.
(I'm acting as a beta tester if you prefer)
I use the 10.0.3 firmware especially for the test with SX 2.9.5
Tomorrow I will update to 11.0.0 and I will look at the behavior of the crack.

Then keep us informed when you get XCI working with SX 3.1.0 on 11.0.0 firmware and plz post all the files/scripts you used to do so.

 

[RideOnTheStorm]

take this script with python 3.x and boot.dat in same folder.
replace fingerprint in file with yours.
python3 BubbleSpoofer.py
boot.dat is ready for v3.1.0

 

[Reacher17]

For python 2.7.

Hacksxos3.1.0

https://mega.nz/file/goQCxBrb#7zKePxZoFNNO-_b403ykxEgwBhiKQ6a6Rd3xtLEEWTo

 

[mspy]

take this script with python 3.x and boot.dat in same folder.
replace fingerprint in file with yours.
python3 BubbleSpoofer.py
boot.dat is ready for v3.1.0

And is it supposed to work in all firmwares (except 11.0.1 which SX OS does not support yet) or any specific one ?

 

[RideOnTheStorm]

And is it supposed to work in all firmwares (except 11.0.1 which SX OS does not support yet) or any specific one ?

It's OP official script so all infos on what can are in the thread

 

[said31]

For python 2.7.

Hacksxos3.1.0

https://mega.nz/file/goQCxBrb#7zKePxZoFNNO-_b403ykxEgwBhiKQ6a6Rd3xtLEEWTo

j'ai cette erreur

ImportError: No module named Crypto.Cipher

 

[Zoria]

j'ai cette erreur

ImportError: No module named Crypto.Cipher

you probably have python 3 which is a "normal" error since the script is only released for python 2.7

 

[mspy]

It's OP official script so all infos on what can are in the thread

Nothing related to what firmware it is supposed to work is on the OP that I can see atm, not even the script for SX 3.1.0 seems to be updated on the 1st post... I will wait.

 

[said31]

you probably have python 3 which is a "normal" error since the script is only released for python 2.7

j'ai python 2.7

 

[Zoria]

j'ai python 2.7

https://gbatemp.net/attachments/bubblespoof-zip.255353/
try this script instead

 

[Artaifix]

Relay by LS, thanks for the rectification

 

[AquaSeaWing]

Dam amazing wish I had a spare sd card to test this as my only sd card is at the moment is flash with edev firmware

 

[mrdude]

Confirmed - hacked.
Tested so far: CFW 11.0.0 - SXOS 3.10
Boots into emunand.
Runs installed nsp+homebrew.

 

[JoeBloggs777]

Confirmed - hacked.
Tested so far: CFW 11.0.0 - SXOS 3.10
Boots into emunand.
Runs installed nsp+homebrew.

good news, what about XCI loading ?
also please could you list the steps and which of these files you used ?
Thanks

 

[mrdude]

good news, what about XCI loading ?
also please could you list the steps and which of these files you used ?
Thanks

I'm just converting a nsp just now, will test in a while and write back. I'll mod the script for python 3.9