Hacking Hack SXOS

mrdude

Developer
Developer
Joined
Dec 11, 2015
Messages
3,071
Trophies
1
Age
56
XP
8,227
nstool --fsdir <output dir> <nsp path>
nstool -k prod.keys --listfs romfs\63b06b80d80c38a47fbfc52816a7cc40.nca <<< this for each extracted nca to list partitions
nstool -k prod.keys --part0 <output dir> romfs\63b06b80d80c38a47fbfc52816a7cc40.nca <<< this for each extracted nca to extract partition, change to part1, part2,... for as many as listed.
you would normally do this for the biggest sized nca only.

I've decompiled main in ida now, do you know the commands to repack again?
 
  • Like
Reactions: peteruk

xRober91

New Member
Newbie
Joined
Apr 3, 2021
Messages
1
Trophies
0
Age
33
XP
31
Country
Spain
This is really a very good achievement for the community and I am happy about it, but this does not work for me, I have the latest version in Sysnand and emunand in 11.0.0 and from the VOL + menu of SXOS it gives a license invalid if I want to boot from emunand. I don't know if I made a mistake
 

Inaki

Well-Known Member
Member
Joined
Jan 23, 2014
Messages
278
Trophies
0
Age
42
XP
603
Country
Thank you. Having a look.

--------------------- MERGED ---------------------------

This is really a very good achievement for the community and I am happy about it, but this does not work for me, I have the latest version in Sysnand and emunand in 11.0.0 and from the VOL + menu of SXOS it gives a license invalid if I want to boot from emunand. I don't know if I made a mistake
That will probably need another patch. Also, that means a sysmodule or kip to patch this on the fly is not enough :(

--------------------- MERGED ---------------------------


this app requires title.keys, nstool does not, and I tried opening some nsp and it crashes because of title.keys not having some required thing ( actually title.keys is supposed to have keys for the apps installed in the switch, am I wrong ? ). These are my prod.keys and title.keys dumped from one of my switches, but prod.keys shoud be enough... what gives ?
 
Last edited by Inaki,

ApoQ

Well-Known Member
Newcomer
Joined
Nov 4, 2014
Messages
60
Trophies
0
Age
38
XP
1,303
Country
Chile
Do anyone know if this works on Pegascape? I'm just getting "license.dat invalid for this Switch console" and the EmuNAND disabled button.
 

Imancol

Otak Productions
Member
Joined
Jun 29, 2017
Messages
1,375
Trophies
0
XP
2,762
Country
Colombia
Thank you. Having a look.

--------------------- MERGED ---------------------------


That will probably need another patch. Also, that means a sysmodule or kip to patch this on the fly is not enough :(

--------------------- MERGED ---------------------------



this app requires title.keys, nstool does not, and I tried opening some nsp and it crashes because of title.keys not having some required thing ( actually title.keys is supposed to have keys for the apps installed in the switch, am I wrong ? ). These are my prod.keys and title.keys dumped from one of my switches, but prod.keys shoud be enough... what gives ?
Every time a new title comes out and you want to open it, you must install said title and dump its key. But you can use a program like "nsz", which apart from compressing nsp to nsz (and xci to xcz), allows you to see and dump the keys.

https://github.com/nicoboss/nsz
upload_2021-4-3_20-29-26.png
Of course the program needs key.txt or title.key & prod.key to work. It is easier to store these keys in %USERPROFILE%\.Switch and most programs that use hactool will detect it.

--------------------- MERGED ---------------------------

Question. Is there a possibility to add new functions in SXOS by KIP?
Example: SX Save Manager.

Adding ftp to upload backups (xci) on a local network would be awesome.
 
Last edited by Imancol,
  • Like
Reactions: Cylent1

Imancol

Otak Productions
Member
Joined
Jun 29, 2017
Messages
1,375
Trophies
0
XP
2,762
Country
Colombia
I don't have SXOS, but could I download it, and use it for the hell of it for fun? My Switch isn't patched.
You need to verify what hardware version your Switch is, if it is vulnerable, use fuse gelee which is to enter RMC mode, inject the Xecuter payload.bin with the two patched files that are discussed in this thread and enjoy.
 

mrdude

Developer
Developer
Joined
Dec 11, 2015
Messages
3,071
Trophies
1
Age
56
XP
8,227

Thanks for that @Reacher17

Also you could change this on the front page - I cleaned up some typo's and popped in some info for address for fingerprint spoofing in rommenu. Maybe this can help someone else that wants to take a look. Cheers.

Also FYI:
rom_in.seek(0x14AE0) - breaks cheat menu because the code can't run the function that loads cheats.
rom_in.write(patch_license2)

This was your original patch which broke the cheat menu, as you returned from this function without ever running it, this meant the cheats code would never be able to run. Just thought you should know in case this was annoying you.
 

Attachments

  • Python-3.9-hacksxos3.1.0.zip
    3 KB · Views: 155
Last edited by mrdude,

chronoss

Well-Known Member
Member
Joined
May 26, 2015
Messages
3,007
Trophies
1
XP
4,892
Country
Congo, Republic of the
Thanks for that @Reacher17

Also you could change this on the front page - I cleaned up some typo's and popped in some info for address for fingerprint spoofing in rommenu. Maybe this can help someone else that wants to take a look. Cheers.
Cau u use this file for further update please ?
I add a header and a timer in wrong boot.dat file and when the script finish the spoof. This look is more betther
 

Attachments

  • Python-3.9-hacksxos3.1.0.rar
    3.2 KB · Views: 149

mrdude

Developer
Developer
Joined
Dec 11, 2015
Messages
3,071
Trophies
1
Age
56
XP
8,227
@chronoss

I don't want to add a timer as it would slow the script down.

Updated - added patch to show fake fingerprint - also this fake fingerprint is the one that gets sent to sx servers - so lessens the chance of your real switch fingerprint being flagged by sx or whoever has their domains now.
 

Attachments

  • Python-3.9-hacksxos3.1.0.zip
    3 KB · Views: 166

mrdude

Developer
Developer
Joined
Dec 11, 2015
Messages
3,071
Trophies
1
Age
56
XP
8,227
It's usefull for user to read the error message if succes or failed before the scripte :( and it work fine for me with the timer
Don't worry about it, once all the patches are finalised it will get turned into a windows program with a GUI so people that don't use or know how to use python can use it as well.
 

Lumince

Well-Known Member
Member
Joined
Aug 15, 2015
Messages
2,343
Trophies
1
XP
3,747
Country
United States
Has anyone looked into possibly updating sxos so it can run 11.0.1 as well? Seems like this could open up more possibilities other than just spoofing a license check?
 
  • Like
Reactions: chronoss

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    hazbeans @ hazbeans: im new