Modders hint at potential kernel exploit hack for Xbox One consoles

xbawks.png

It's been a while since Microsoft released the Xbox One, and despite its age, there haven't been any reliable softmod methods to hack the console. Until now. A post started making the rounds, saying that a method for executing kernel level code on the Xbox One had been found. A list of instructions for preparing Xbox One systems to be hacked was also provided, with the process being as follows:

  1. Ensure your Xbox Live account Login-Type is configured as “No barriers” aka. auto-login with no password prompt
  2. Set your console as “Home Console” for this account
  3. Download the App Game Script
  4. Start the app (to ensure license is downloaded/cached)
  5. Take your console offline! To make extra sure it cannot reach the internet, set a manual primary DNS address of 127.0.0.1
  6. Get a device/microcontroller that can simulate a Keyboard (rubber ducky or similar) - otherwise you have to type a lot manually :D

This method appears to use a UWP app called Game Script on the Xbox One to execute the code, and was discovered by a user named carrot_c4k3. It seems as though the hack will require a lot of manual typing, unless you have a device that can simulate a keyboard, according to the preparation instructions. Reportedly, the latest firmware update for the Xbox One has already patched the exploit out, with the last exploitable firmware being 10.0.25398.4478.

:arrow: Source
:arrow: Video guide on how to prepare your system
:arrow: Proof of concept code
 

gisel213

Well-Known Member
Member
Joined
Aug 2, 2007
Messages
463
Trophies
1
Age
42
Location
Delaware
XP
840
Country
United States
Micro$oft might already have patched it according to Wololo

https://wololo.net/2024/06/10/xbox-...-firmware-update-probably-patched-it-already/

Edit
According to the dev, exploit will also work on series-x and not just the X-Bone....but he says it will not enable Sailing the Seven Seas


And why it was patched damn big mouth folks broadcasting prequistes on youtube lol... Why couldn't the dev have been like the flow and had it all together actually doing something??? But then the xboxone like the ps3 was is very secure for a long time... But man impatient folks publish tidbits too early too anxious now everyone's outta luck lol 😆 😆 😆
 

ChickensAss

Member
Newcomer
Joined
Mar 23, 2024
Messages
9
Trophies
0
Age
16
XP
36
Country
United States
Cuz if you got your game script revoked you could reupload it privately and you would have no choice too go online and download the privately uploaded copy of game script I assume
 

guily6669

GbaTemp is my Drug
Member
Joined
Jun 3, 2013
Messages
2,381
Trophies
1
Age
34
Location
Doomed Island
XP
2,191
Country
United States
the person who gave me the appx says it works on windows and xbox here is the archive org page this may work in retail but why would anyone try to reupload it just to get there account banned 🤷‍♂️ https://archive.org/details/game-script
with that if I buy a brand new Xbox series X can I run the exploit or I would really have to had the app game script on my console before and no way to just run now without it???

If so, I wish there was a way to inject it into the console :(
 

ChickensAss

Member
Newcomer
Joined
Mar 23, 2024
Messages
9
Trophies
0
Age
16
XP
36
Country
United States
with that if I buy a brand new Xbox series X can I run the exploit or I would really have to had the app game script on my console before and no way to just run now without it???

If so, I wish there was a way to inject it into the console :(
yeah the appx I provided should work but you need to have access to a UWP developer account ever sense the crackdown on emulators in retail I don't think game script is going too last long even if you privately upload it for yourself something similar too injecting would just too move game script app too a usb drive and put the drive into another console i have not tested this but it might work? I wonder if we upload game script under the game category to somewhat access the game os like switching app to game in dev mode idk if that will work either
 

MSearles

Well-Known Member
Member
Joined
Jan 4, 2016
Messages
599
Trophies
0
Age
36
XP
2,707
Country
United States
Can someone with more expertise answer the question of whether or not this will work on an Xbox Series S console? I thought I had read that, but can't find anything that shows that.
 

BigOnYa

Has A Very Big
Member
Joined
Jan 11, 2021
Messages
3,344
Trophies
1
Age
50
XP
7,930
Country
United States
Can someone with more expertise answer the question of whether or not this will work on an Xbox Series S console? I thought I had read that, but can't find anything that shows that.
Yes the game script also works on series s/x, but the app has already been taken down and patched in the June update by MS. So if you didn't get the app before, and update FW to a specific version, you're out of luck now. Its unknown yet if the dev has plans to support series s/x though, or what will come of this in the future. Tbh I personally would not risk getting a newer gen console banned, but old Xbox one I don't care about if console banned.
 
Last edited by BigOnYa,
  • Like
Reactions: HawaiianInTown

MasterJ360

Well-Known Member
Member
Joined
Jan 10, 2016
Messages
2,825
Trophies
1
Age
35
XP
3,520
Country
United States
Noice, I got that same clear case for a RGH3 slim, yours looks sharp.
Thanks :) I can't take all the credit this guy built it for me I only just told him what I wanted. He had his own store selling hacked x360's back when ppl were buying them like hot cakes. Glad he kept his youtube channel almost teared up with the nostalgic moments.
I also have a Falcon model with a flashed disc drive to play burned games.
 

ArgonUK

Well-Known Member
Newcomer
Joined
May 8, 2016
Messages
76
Trophies
0
XP
312
Country
Of course its possible, but if not really soon, there will be the June fw update being pushed to you, which will take out the possibility.
no, 4908 appears to still be vulnerable. if you're on 4908 and have game script you should be good, but avoid any future updates.
https://nitter.poast.org/carrot_c4k3/status/1801299700659982614#m

June update 4908 seems to be volnerable according to the hacker's post. I actually updated my consoles to this version. I noticed that another small update (less than 100 mb) has shown up afterwards on Xbox One X, but I didn't risk installing it. Not sure what it was related to.
  • Xbox One X (4908) - It takes about 35 seconds to produce 1337 response in the Game Script. Please share your consoles, firmwares and timings :)
I assume the timing should be much shorter on the Xbox Series S/X consoles.
 
Last edited by ArgonUK,
  • Love
Reactions: BigOnYa

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
  • BigOnYa @ BigOnYa:
    Surprised they never made a second one.
  • K3Nv2 @ K3Nv2:
    It takes two was their newest different theme
  • BigOnYa @ BigOnYa:
    I didn't care for that one so much, but didn't play it much either.
  • BigOnYa @ BigOnYa:
    I just played little of "Still Wakes The Deep" , just came to gamepass today, its alright, kinda creepy. I'm not usually a horror game fan, but it looks really good graphic wise, esp w 4k. I admit it made me jump a few times.
  • LNLenost @ LNLenost:
    Anyone here using the 3DS?
  • LNLenost @ LNLenost:
    do u have pretendo?
  • LNLenost @ LNLenost:
    whats ur code?
  • B @ btjunior:
    i dont have pretendo sorry
  • LNLenost @ LNLenost:
    oh ok
  • LNLenost @ LNLenost:
    well if ur console isnt modded i suggest u to mod it
  • B @ btjunior:
    also, just curius, does the freinds app still work after the shutdown?
  • LNLenost @ LNLenost:
    yes
  • B @ btjunior:
    nice
  • LNLenost @ LNLenost:
    but u cant play online games anymore :(
  • LNLenost @ LNLenost:
    i miss going in other peoples town
  • B @ btjunior:
    yeah
  • LNLenost @ LNLenost:
    i have a friend named Pineapple (@pineappleJuice hi). we played a lot the day b4 the server shutdown
  • K3Nv2 @ K3Nv2:
    I preten to know doe
  • BigOnYa @ BigOnYa:
    @LNLenost how well is the pretendo servers, you ever get kicked off games when playing online?
    +1
  • LNLenost @ LNLenost:
    @BigOnYa not always you get kicked. it happens rarely to me.
    +1
  • LNLenost @ LNLenost:
    ofc they're not great, but props to them for making this
    +1
  • LNLenost @ LNLenost:
    btw, I decided to make the nintendo support team going insane
  • LNLenost @ LNLenost:
    i told them my badges disappeared after i opened the badge arcade after the shutdown, but actually they disappeared because i opened the badge arcade w/ pretendo
  • AcuteBulbasaurappears @ AcuteBulbasaurappears:
    Hey, is there anybody who knows how to create wuhb-files? :) I would like to create forwarders for two Wii-channels: https://gbatemp.net/threads/wuhb-to-vwii-channel-request.657253/#post-10441514
    AcuteBulbasaurappears @ AcuteBulbasaurappears: Hey, is there anybody who knows how to create wuhb-files? :) I would like to create forwarders...