Hacking Hack SXOS

[Foxi4]

A quick reminder that linking to SX OS, vanilla or modified, is prohibited on our site. The patching scripts are permissible, however you will have to obtain your own copies of SX OS elsewhere. Any uploaded or linked copies of the software will be removed.

 

[angrynewraze]

List of homebrews not working with patched license boot.dat

SX Dumper
SX Save Manager
Tinfoil

All these must have SXOS license checks, maybe there is a place missed in boot.dat that needs patched, or these homebrews can also be patched. Probably other SX based homebrews don't work - but I didn't check, these are the ones that were already on my switch that work with a non-patched boot.dat and valid license.

Also @Reacher17

Let me suggest you add this to your script (python 3.9), so that users don't need to manually install packages:

import subprocess
import sys
import pip

reqs = subprocess.check_output([sys.executable, '-m', 'pip', 'freeze'])
installed_packages = [r.decode().split('==')[0] for r in reqs.split()]

#print(installed_packages)

def install():
    try:
        if not 'pycryptodome' in installed_packages:
            pip.main(['install', "pycryptodome"])
        if not 'pycryptodomex' in installed_packages:
            pip.main(['install', "pycryptodomex"])  
 
    except ImportError:
        print("Can't install pycryptodome or pycryptodomex")

install()

Zip file contains modded script to check for those packages and install them if they are missing.

Thanks

How do I know if the boot.dat file got patched?

 

[angrynewraze]

My friend used the boot.dat and license of that link but gets a blackscreen after the Nintendo logo. Does that one still have to be patched somehow?

that link is no longer valid says the original post was removed by subreddit addmin. Sure wish I could get that mod script to work but I can't seem to be able to do that.

 

[jhSW]

Thanks to the guys who made this happen, from the start Reacher17 seemed to have no doubt that he could achieve this. I was rooting for him after reading all the negative comments

Cheers!

Edit: I've found answers to my questions, I had to downgrade Sysnand from 11.01 to 9.2 using restore (Hakate), then upgraded the firmware to 11.00 via choidujournx within SXOS.

Running XCI's from HDD is a pretty handy feature. Now I just need to work out how to run SXOS from EmuNAND, so I can restore my SysNAND back to 11.01 for legit online gaming.

 

[mspy]

List of homebrews not working with patched license boot.dat

SX Dumper
SX Save Manager
Tinfoil

All these must have SXOS license checks, maybe there is a place missed in boot.dat that needs patched, or these homebrews can also be patched. Probably other SX based homebrews don't work - but I didn't check, these are the ones that were already on my switch that work with a non-patched boot.dat and valid license.

I hope this can be fixed somehow.

It's been tested by many people now and even when we were messing about patching and failing nobody got bricked or had any files mess up on their sd cards. It's safe - just make sure when you mod that you get the sxos boot.dat from a reliable source. Use the python file I posted that has the hash check to make sure you are using a good file.

I'm not saying it is the case here, but there are something called timeboms so just because something is working now doesn't mean it can't harm your system in the future, this to say that everyone should be careful and make a full nand backup of their system before doing anything.

 

[JonJaded]

Well done, glad to know that if I ever get another switch I can just transfer my license.

Excelsior!

 

[shanefromoz]

Please correct me if i am wrong.
If a user already has an sxos licence then this is no good for them yes?

 

[leerpsp]

Please correct me if i am wrong.
If a user already has an sxos licence then this is no good for them yes?

nope its no good for you at all right now since there is so much that don't work with this like a hand full of apps i bet you use, now give it time and it will be fixed but even then it is no good to you, now if some one cracks there Source code then makes a new ver or some kind of cross between atmos and sxos then yes it would be good to you then.

 

[chronoss]

Licence with your name

 

[mrdude]

Script updated - added fingerprint.txt

If you want to use your own fingerprint - put it in a text file called fingerprint.txt and use your own licence.dat.

If the fingerprint.txt file is missing the script will use it's own embedded fingerprint and make a licence.dat file for you automatically.

This means you don't need to edit the python file now, when using this script.

(put only the fingerprint shown from the switch that contains the valid licence in the text file - no other data)

 

[deejay87]

Tinfoil don't work how for you ? cause i have test and i can launch

 

[Inaki]

that link is no longer valid says the original post was removed by subreddit addmin. Sure wish I could get that mod script to work but I can't seem to be able to do that.

This one ? https://www.reddit.com/r/SwitchHack...you_reacher17_and_others_sx_os_license_spoof/
this is still accessible ( I can still access it... ) and the first comment has the info to get the pack...

you can also look for patched310pluslic

 

[mrdude]

This one ? https://www.reddit.com/r/SwitchHack...you_reacher17_and_others_sx_os_license_spoof/
this is still accessible ( I can still access it... ) and the first comment has the info to get the pack...

you can also look for patched310pluslic

For free reddit user it only shows 2 comments (not 4) and none of those give any info.

 

[Inaki]

For free reddit user it only shows 2 comments (not 4) and none of those give any info.

shit, I hate it when websites do that silently. Thank you for warning me. Anyone looking for the pack can look for patched310pluslic.

EDIT: I also edited the main post on that subreddit and added the info to point to the site. So it should be visible now.

 

[TheyKilledKenny]

I've got a legit license and don't get any errors/warnings using an un-modded boot.dat. This is down to the patched boot.dat and nothing else.

To do a quick test I used Inaki prepathced boot and licence and I renamed both the Atmosphere and sept folders on my sd card and tinfoil works without problems.
As soon as I have more time I will do more detailed tests.

Ciao!

 

[mrdude]

To do a quick test I used Inaki prepathced boot and licence and I renamed both the Atmosphere and sept folders on my sd card and tinfoil works without problems.
As soon as I have more time I will do more detailed tests.

Ciao!

Probably tinfoil nro can be modded to ignore these folders then, I dual boot so have these folders present - as I say, with the original untouched boot.dat I don't get any issues with these folders/files present, using the modded boot.dat tinfoil and some other sx based apps give errors (probably due to license checks).

 

[Inaki]

Probably tinfoil nro can be modded to ignore these folders then, I dual boot so have these folders present - as I say, with the original untouched boot.dat I don't get any issues with these folders/files present, using the modded boot.dat tinfoil and some other sx based apps give errors (probably due to license checks).

yeah, those apps check license.dat. You can even use atmosphere and put license.dat on the sd card so that tinfoil detects it and enables icon view, not present without a valid license.dat.

For @Reacher17, I am doing tests with another switch lite and a vanilla boot.dat works but the patched boot.dat does not ( the boot.dat ? missing sadface logo appears; I tried with a 512gb sandisk and a 64gb samsung, both fail with patched and both succeed with vanilla, several times )... are you sure there is no checks in boot stage ? I am creating an emunand using the vanilla boot.dat now and I will test with the patched boot.dat again after that...

 

[mrdude]

yeah, those apps check license.dat. You can even use atmosphere and put license.dat on the sd card so that tinfoil detects it and enables icon view, not present without a valid license.dat.

For @Reacher17, I am doing tests with another switch lite and a vanilla boot.dat works but the patched boot.dat does not ( the boot.dat ? missing sadface logo appears; I tried with a 512gb sandisk and a 64gb samsung, both fail with patched and booth succeed with vanilla, several times )... are you sure there is no checks in boot stage ? I am creating an emunand using the vanilla boot.dat now and I will test with the patched boot.dat again after that...

If that's the case - maybe we can mod boot.dat to look for example bincence.dat instead of licence.dat - then see if it affects tinfoil? I'll maybe try that later if I get time.

 

[laotoulyh]

Yes, this method cannot be applied to SX CORE and SX LITE.
Will prompt "boot.dat?"
I just tested it.

 

[Inaki]

If that's the case - maybe we can mod boot.dat to look for example bincence.dat instead of licence.dat - then see if it affects tinfoil? I'll maybe try that later if I get time.

I will have a look into tinfoil.nro ( or the elf file ) and see if there is some easy way. The thing is the license.dat seems not enough, right ? first I need to see wether that is actually the case and then see how it accesses console fingerprint.

--------------------- MERGED ---------------------------

Yes, this method cannot be applied to SX CORE and SX LITE.
Will prompt "boot.dat?"
I just tested it.

yeah, it seems those check it, somehow, or the boot.dat itself does it, probably reading the firmware serial ID if boot.dat is doing the check...