Hacking Hack SXOS

[Inaki]

Did you disassemble the tinfoil nro or nsp?

Ooops... hehe, no, not yet. I have been having a look, just that. I apologize...

EDIT: Hmmm... you are right, I took the .nro... I need the updated nsp ( I thought this was a forwarder... ). Thank you...

 

[mrdude]

Ooops... hehe, no, not yet. I have been having a look, just that. I apologize...

Disassemble the NRO, you can use IDA - but put nxo64.py (google that), into IDA loaders folder. Maybe Blawar can help you?

 

[Inaki]

Disassemble the NRO, you can use IDA - but put nxo64.py (google that), into IDA loaders folder. Maybe Blawar can help you?

yeah, I use IDA and ghidra, but I am a PC infosec guy...
also, asking @blawar is a bit rude, he is the tinfoil developer...

 

[mrdude]

yeah, I use IDA and ghidra, but I am a PC infosec guy...
also, asking @blawar is a bit rude, he is the tinfoil developer...

I know, that's why I said - maybe he will remove the checks when using a cracked version of sxos.

 

[Inaki]

Disassemble the NRO, you can use IDA - but put nxo64.py (google that), into IDA loaders folder. Maybe Blawar can help you?

uhm... but I need to get whatever that has the elf of the latest updated version, the R9 one...

 

[blawar]

yeah, I use IDA and ghidra, but I am a PC infosec guy...
also, asking @blawar is a bit rude, he is the tinfoil developer...

The nro is not what you want, it just installs Tinfoil. Check the romfs in the nro and you will find the nsp that it installs. You want to download the latest nsp, extract the program nca, then extract main from that, and load that into IDA or ghidra.

edit: main will be compressed, you will want to decompress that before loading it into IDA or ghidra. There is some program out somewhere that will do it for you.

 

[mrdude]

uhm... but I need to get whatever that has the elf of the latest updated version, the R9 one...

In Rommenu.bin - take a look here:

 

[Inaki]

The nro is not what you want, it just installs Tinfoil. Check the romfs in the nro and you will find the nsp that it installs. You want to download the latest nsp, extract the program nca, then extract main from that, and load that into IDA or ghidra.

edit: main will be compressed, you will want to decompress that before loading it into IDA or ghidra. There is some program out somewhere that will do it for you.

wow ! thank you... maybe I can get the final updated nca of R9 from the installed one.

 

[Sandmann]

SX modified - Cheats not working!

 

[Inaki]

In Rommenu.bin - take a look here:

yeah ( you are way more advanced than me on this ). Also, it seems rommenu.bin is not an .nro, maybe an nca ? striped header ? EDIT: seems those are .nso files...

 

[Xyphoseos]

Yes it really works!

can we launch xci througt HDD ?

 

[blawar]

wow ! thank you... maybe I can get the final updated nca of R9 from the installed one.

You could, but its easier to download it from the site. The latest NSP is always posted. It says v9 in the url:

https://tinfoil.io/Home/Bounce/?url...%5B050000BADDAD0000%5D%5B11.00%5D%5Bv9%5D.nsp

 

[Inaki]

You could, but its easier to download it from the site. The latest NSP is always posted. It says v9 in the url:

https://tinfoil.io/Home/Bounce/?url=https://tinfoil.media/repo/Tinfoil%20%5B050000BADDAD0000%5D%5B11.00%5D%5Bv9%5D.nsp

Thank you.

 

[tivu100]

Now SXOS is hacked for the public. No remorse remained. Are there anyone building XCI loader, External HDD..., for other public CFW, so we can enjoy the stability from latest firmware?

--------------------- MERGED ---------------------------

 

[jellybeangreen2]

25 pages.. Whats the latest situation. I am a genuine SXOS license owner, but curious on the progress?

 

[jhSW]

can we launch xci througt HDD ?

Yes, XCI is running from HDD.

 

[linuxares]

25 pages.. Whats the latest situation. I am a genuine SXOS license owner, but curious on the progress?

TLDR; SXOS cracked, but software (DRMed shit) that use it won't work at the moment

 

[mrdude]

@Reacher17

There's a fault with your script: in the rommenu.bin part.

What the script is actually doing is this:

It's getting all the bytes from the decrypted ROMMENU.bin (1,753,088 bytes) and then from decrypted HBMENU.bin (from hex address 0-FFF), Then it's putting the sha256 of those two files(combined) into decrypted app_header.bin.

When you check the unpatched decrypted files - app_header.bin doesn't have this hash, so basically your script is breaking that.

Just thought you should know.

 

[weatMod]

TLDR; SXOS cracked, but software (DRMed shit) that use it won't work at the moment

like what exactly?
I am in the same boat already have SX pro and lite but am curious as to what is going on
I saw someone in a chat earlier today mention something about the cracked SXOS working on the lite does that mean it works with no hardmod? seem ridiculous that they would make you do such a difficult install just for DRM purposes they already did with a dongle so I am guessing no but who knows
my friend has a lite so it would be good news for him

 

[linuxares]

No, it just fixed that Rommenu works, basically what most people use SXOS for.
Tinfoil, SX Dumper etc. do not work at the moment. @mrdude example is checking what might cause it.

You still need a Hardmod for Lite and newer Switches.