[Info] Xbox One - Getting somewhat started

Discussion in 'Xbox One - Hacking & Homebrew' started by XVMM, Sep 9, 2018.

  1. XVMM
    OP

    XVMM Member

    Newcomer
    2
    Sep 9, 2018
    Afghanistan
    United Kingdom
    NOTE: This is not an exploit or breakthrough of any sort. It's simply taking advantage of provided debugging features in developer mode! This is for any one who may be curious and want to reverse engineer the Xbox One.

    This is also mainly provided for anyone who wants to just have a go at reversing the system. There's a lot to utilize with the public features anyway.

    Prerequisites:
    - Must be in developer-mode (obviously)
    - Have some form of SSH/telnet client. (PuTTy, etc)
    - At least have Visual Studio 2015 or 2017

    To get started without putting up with developing UWP applications we can instead utilize the open SSH connection provided by the console. This is only available in developer mode, just in case you get any ideas.

    If you're using Windows and will be using standard command prompt for telnet then make sure you enable it first!
    Warning: Spoilers inside!

    First open up whatever client you have for SSH, in this instance PuTTy, and connect using your console IP and default port.
    There'll be a pop-up. Just hit yes.

    Now it will ask for login details. Make sure you have Dev Home opened and hit "Show Visual Studio Pin". Keep note of this pin but also remember it will change after a small period of time!

    Username: DevToolsUser
    Password: The Visual Studio pin provided in Dev Home.

    If all goes successfully then you can either stick with it or intialise telnet. Run the following command in order to do so (ignore quotes):
    Warning: Spoilers inside!
    Now you can connect over!
    Warning: Spoilers inside!

    The telnet session will be running under the VSProfilingAccount privileges which is the same as what the VS debugger runs under when building UWP apps.

    Keep in mind that there is not too much of a difference at this stage. It just allows a tiny bit more flexability.

    Basic file system exploration:
    Warning: Spoilers inside!

    So what now? Well, I'm going to provide a small "template" which you can use in order to write a standard "Win32" application. The only difference is that it will run on the Xbox One.

    (Requires Windows 10 SDK compatible with Xbox One and probably Visual Studio 2017, at least 2015.)
    XRF: Attached below.
    Place anywhere on the console and run "xrf cinfo" for a basic spit of console info.

    Additional information:
    Warning: Spoilers inside!
     

    Attached Files:

    Last edited by XVMM, Sep 11, 2018
  2. kingtut

    kingtut GBAtemp Advanced Fan

    Member
    5
    May 3, 2017
    United States
    Wait so if I understand you correctly, you can use this template to run win32 apps on xbox one? Can I use this to try and run something like dolphin on xbox one. if so, can you let me know where to start.
     
  3. Gunz4Hire

    Gunz4Hire Member

    Newcomer
    2
    Jun 27, 2018
    United States
    This is very interesting, keep it up!
     
  4. dominater01

    dominater01 GBAtemp Advanced Fan

    Member
    6
    Mar 13, 2009
    United States
    hey kingtut welcome back did you read my message i sent you? i was just curious if you could compile ppsspp again
     
    kingtut likes this.
  5. XVMM
    OP

    XVMM Member

    Newcomer
    2
    Sep 9, 2018
    Afghanistan
    United Kingdom
    The template can run console win32 apps, yes. There may not be a way to get any visuals unless you hook and alter the way they handle the window manager. I can't say yes or no since I never looked into the way that worked specifically.
     
    jakibaki likes this.
  6. kingtut

    kingtut GBAtemp Advanced Fan

    Member
    5
    May 3, 2017
    United States
    Sorry, I missed it. yeah, I can try.

    — Posts automatically merged - Please don't double post! —

    Huh, so what needs to change in the window manager for visuals?
     
  7. XVMM
    OP

    XVMM Member

    Newcomer
    2
    Sep 9, 2018
    Afghanistan
    United Kingdom
    Probably the entire thing. Since the OS is a branch from Windows Core / OneCore, I don't think it has anything left for it fully work.
     
    Orangy57 and kingtut like this.
  8. kingtut

    kingtut GBAtemp Advanced Fan

    Member
    5
    May 3, 2017
    United States
    Oh ok, awesome job regardless.
     
  9. milkybar1983

    milkybar1983 Newbie

    Newcomer
    2
    Nov 11, 2012
    devtoolsuser@XBOXONE D:\DevelopmentFiles>xrf cinfo
    [XRF] Hello!
    Console Revision: Unknown
    Console Flavour: DEVKIT SRA

    xbox one X scorpio edition needs adding to the console revisions @XVMM
     
  10. XVMM
    OP

    XVMM Member

    Newcomer
    2
    Sep 9, 2018
    Afghanistan
    United Kingdom
    Was added on the github. I can't link since new here but search for XRF on Github and you'll find it.
     
    milkybar1983 likes this.
  11. milkybar1983

    milkybar1983 Newbie

    Newcomer
    2
    Nov 11, 2012
    [XRF] Hello! Console Revision: Scorpio (0x0050) Console Flavour: DEVKIT SRA

    nice thanks
     
    XVMM likes this.
  12. UltiNaruto

    UltiNaruto GBAtemp Regular

    Member
    2
    Sep 4, 2015
    France
  13. ploggy

    ploggy WAKA! WAKA!

    Member
    12
    Aug 29, 2007
    United Kingdom
    Huh, GliGli is involved with this too? I saw on another site that he was one of the people working on this? If so thats good.. He was one of the guys who first hacked the 360 :)
     
    wiired24 likes this.
  14. wiired24

    wiired24 GBAtemp Maniac

    Member
    8
    Sep 3, 2013
    United States
    Dev_Home
    Th
    Things are getting interesting again in this scene ^_^
     
    kingtut and ploggy like this.
  15. ploggy

    ploggy WAKA! WAKA!

    Member
    12
    Aug 29, 2007
    United Kingdom
    I hope so. Xbox scene is in real need of a kick up the ass ;P
     
    kingtut likes this.
  16. wiired24

    wiired24 GBAtemp Maniac

    Member
    8
    Sep 3, 2013
    United States
    Dev_Home
    I could be totally wrong but my line of thinking is maybe if win32 can be loaded perhaps this could lead to running some arbitrary exploit code that could allow for serious homebrew :)
     
  17. ploggy

    ploggy WAKA! WAKA!

    Member
    12
    Aug 29, 2007
    United Kingdom
    That would be great. We'll just have to play the waiting game now. :)
     
  18. XVMM
    OP

    XVMM Member

    Newcomer
    2
    Sep 9, 2018
    Afghanistan
    United Kingdom
    Yup!
     
  19. Pickle_Rick

    Pickle_Rick Ya boi Zack

    Member
    3
    Aug 28, 2017
    United States
    Somewhere
    Yeah, like I said in your thread, it might be possible to pwn dev mode with a Windows 10 exploit.
     
  20. rommy667

    rommy667 GBAtemp Advanced Fan

    Member
    3
    Mar 21, 2008
    Down the road around the corner
    Awesome stuff cant wait to see how this grows :)
     
Loading...