Hacking Hack SXOS

sys64738

Well-Known Member
Member
Joined
Dec 23, 2013
Messages
156
Trophies
1
Age
47
XP
2,046
Country
Hungary
Anybody can write a step-to-step guide, with download links and latest files for noobs like me, how to hack SXOS ?
It's too many entrys to read back and I don't know which page's guide is the latest...
Thanks.
 

XD2020

Well-Known Member
Member
Joined
May 21, 2020
Messages
111
Trophies
0
Age
34
XP
314
Country
United States
Thanks to @Reacher17

Here's the guide with the graphics and new hacks, with this everything will work the same as on original sxos 3.10
======================================================================================

**SXOS currently only supports Switch firmware up to 11.0.0** - any newer firmware will fail, you can downgrade using AtmosphereNX and then create an emunand running 11.0.0 firmware for use with SXOS.

1: Copy an untouched clean SXOS 3.10 boot.dat to your sd card root directory and Use SXOS payload to launch it.
2: Launch SXOS - and if you don't have license-request.dat - this will be created on the root of your micro sd card.
3: Copy license-request.dat from your switch to the extracted folder you download from this post.
4: Copy a clean SXOS 3.10 boot.dat to the folder and rename it to boot.dat.orig (this will keep it from being modified).
5: Click SXOS-GFX.exe - this will create a new folder called out that will contain some bin files which a created from the themes folder (you can remove this be clicking on SXOS-GFX.exe again)
6: If you have python 3.9 installed - run SX_License_Hack.py and boot.dat and license.dat should be created.
7: Copy the newly created boot.dat and license.dat to the root of your micro sd card.
8: Use SXOS payload to launch.

**note - SXOS extra hekate icon can be modded at line 310 (BL.write(b'argon/payloads/hekate.bin') to launch any payload you want, just change the path to the payload you with to launch, line 314 contains the name for that icon - once again change this to what you want.**

Also autoboot code was commented out - you can re-enable this again in the script if you want to show the SXOS options during boot - or just press the volume + button to bring up the options menu.


I get Zpevdo.B detected when trying to download this.
 

winchen

New Member
Newbie
Joined
Jul 16, 2021
Messages
3
Trophies
0
Age
52
XP
38
Country
Taiwan
I copy 3.1.0 boot.dat then rename to boot_ori.dat in the folder of script.
SX_License_Hack_Spoof.py would generate boot.dat and license.dat
I copy boot.dat and license.dat into my SD card.
But Switch always shows boot.dat error.

I think this sxos hack is for erista, not for hard modding mariko.
 

winchen

New Member
Newbie
Joined
Jul 16, 2021
Messages
3
Trophies
0
Age
52
XP
38
Country
Taiwan
I copy 3.1.0 boot.dat then rename to boot_ori.dat in the folder of script.
SX_License_Hack_Spoof.py would generate boot.dat and license.dat
I copy boot.dat and license.dat into my SD card.
But Switch always shows boot.dat error.

I think hack sxos is for erista(RCM) but not for mariko(hard modding sx core)
 

angrynewraze

Well-Known Member
Member
Joined
May 27, 2020
Messages
137
Trophies
0
Age
34
XP
246
Country
United States
after running this script my sxos keeps rebooting to payload whenever I try to reboot my switch from the sxos cfw how do I stop that from happening and make it so the switch reboots naturally back to to the emunand sxos cfw?
 

Beast101

New Member
Newbie
Joined
Jan 2, 2019
Messages
3
Trophies
0
Age
34
XP
77
Country
United States
Followed all the steps and am able to boot into cfw on sysnand but when I load cfw emunand it just goes to ofw. Also any xci I try go to game but just stays on the games loading screen the whole time tried super Mario party munches odyssey and yoshi crafted world all stay on loading screens
 
Last edited by Beast101,

MMS4MSU

Member
Newcomer
Joined
Jul 29, 2015
Messages
11
Trophies
0
XP
89
Country
United States
I would appreciate any help getting this running. I have tried every hack file in this thread and the chronoss09 GitHub but cannot boot to the sx os cfw-it only goes to a blue screen. It will not boot using the python script with the lic-request nor boot.dat alone. I can install a hidden emunand without any invalid license error and tried a couple of versions of python.
 
Last edited by MMS4MSU,

AndryJKT

New Member
Newbie
Joined
Aug 4, 2021
Messages
2
Trophies
0
Age
36
XP
25
Country
Indonesia
Hi, i have managed to boot the latest sxos and update ofw to 11.0 via offline with no issue. But i face two problems here :
- some XCI crash during play but if i installed them, they run smoothly
- some XCI keep on asking for software update with no option to continue without update. Try to update the xci with nscbuilder and install the xci, still facing same warning.
Really appreciate your though on this. Thanks.
 

spotanjo3

Well-Known Member
Member
Joined
Nov 6, 2002
Messages
11,145
Trophies
3
XP
6,185
Country
United States
I used atmosphere and tin woo to installed XCI files.

Now, I want to try this one and it works for me. I have a question. How do I edit License status: Free License to something else?

And everyone tried it will have the same Console fingerprint numbers/alphabetics ? Or we will each have a different Console fingerprint numbers/alphabetics ?

And you have to install XCI files using SD Card for SXOS to installing it, correct ? Sorry about few questions.
 
Last edited by spotanjo3,

whitezombie

Well-Known Member
Newcomer
Joined
Apr 11, 2021
Messages
73
Trophies
0
XP
1,053
Country
United States
I used atmosphere and tin woo to installed XCI files.

Now, I want to try this one and it works for me. I have a question. How do I edit License status: Free License to something else

I have not tired it but I assume it's this line in the script.

#ROMMENU.bin
rom_in = open(rommenu, "wb")
rom_in.write(aes_ctr_dec(bootin[0x11EBA40:0x15c8080], fw_key, fw_ctr))

rom_in.seek(0x126d4+0x610)
rom_in.write(unhexlify("C3FFFF17"))
rom_in.seek(0x124FC+0x610)
rom_in.write(unhexlify("01248052"))
rom_in.seek(0x125e0+0x610)
rom_in.write(unhexlify("A30C00F00600805263C00B91"))

rom_in.seek(0x13AAD0)
rom_in.write(b'License Free By'+END)
rom_in.seek(0x1A92F0+0x610)
rom_in.write(b'Reacher17'+END)
 

spotanjo3

Well-Known Member
Member
Joined
Nov 6, 2002
Messages
11,145
Trophies
3
XP
6,185
Country
United States
I have not tired it but I assume it's this line in the script.

#ROMMENU.bin
rom_in = open(rommenu, "wb")
rom_in.write(aes_ctr_dec(bootin[0x11EBA40:0x15c8080], fw_key, fw_ctr))

rom_in.seek(0x126d4+0x610)
rom_in.write(unhexlify("C3FFFF17"))
rom_in.seek(0x124FC+0x610)
rom_in.write(unhexlify("01248052"))
rom_in.seek(0x125e0+0x610)
rom_in.write(unhexlify("A30C00F00600805263C00B91"))

rom_in.seek(0x13AAD0)
rom_in.write(b'License Free By'+END)
rom_in.seek(0x1A92F0+0x610)
rom_in.write(b'Reacher17'+END)

What tool and is it in boot.dat or in license.dat ?
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    Xdqwerty @ Xdqwerty: Good night