Hacking Discussion Is it possible to flash SX PRO to a different payload?

[SeekNDstroy]

Hi, Ive been wondering, is it possible to flash SX PRO so that it can run a different payload?

 

[James310]

It’s already supportive to run different payloads off the ssd card search in the sx os website and it will teach you how to run different payloads

 

[SonyUSA]

The TX bootloader can load a payload off SD. The dongle is connectable via USB but you would need the driver then figure out the software to re-flash it... so technically yes but feasibly no.

 

[SeekNDstroy]

@James310
I know, but Ive been hearing recently of it locking up the emmc cause of the payload? Is that correct?

 

[SonyUSA]

@James310
I know, but Ive been hearing recently of it locking up the emmc cause of the payload? Is that correct?

I think it can get stuck on black screen maybe? Just hold power for 30 seconds then press power again and it's fine. It happens if you shut down the Switch then remove the dongle too fast I think.

 

[SeekNDstroy]

I think it can get stuck on black screen maybe? Just hold power for 30 seconds then press power again and it's fine. It happens if you shut down the Switch then remove the dongle too fast I think.

No, its not that, Ive heard over from twitter a security researcher "hexkyz" claiming there is brick code with TX's software and it locks up the emmc with a random password. (Similar method to what Gateway did in the past) If my emmc gets locked, then I won't be able to restore my nand dump right?

 

[The Real Jdbye]

@James310
I know, but Ive been hearing recently of it locking up the emmc cause of the payload? Is that correct?

They do have brick code that could potentially affect legitimate SX users. If you're worried about that then I would just not use SX at all.

No, its not that, Ive heard over from twitter a security researcher "hexkyz" claiming there is brick code with TX's software and it locks up the emmc with a random password. (Similar method to what Gateway did in the past) If my emmc gets locked, then I won't be able to restore my nand dump right?

It can be unlocked, requires erasing the NAND but as long as you have a NAND backup that's not a huge problem.

 

[Centergaming]

They do have brick code that could potentially affect legitimate SX users. If you're worried about that then I would just not use SX at all.

It can be unlocked, requires erasing the NAND but as long as you have a NAND backup that's not a huge problem.

CTCaer is currently adding an option to permanently disable password emmc locking with hekate. Here is the link: https://github.com/CTCaer/hekate/issues/18

 

[rsn8887]

So if I don't want to inject the TX .bin payload, can I somehow flash the SX Pro with Hekate 3.0 ( https://github.com/CTCaer/hekate/releases/latest ) .bin to inject that?

 

[aos10]

i know i can run othe payloads using SX, but is there a way to flash the SX pro usb dongle to launch custom payload instantly?

 

[Mr. Wizard]

The brick code was disabled and looped several versions back. sxos, one cfw to rule them all.

 

[loler55]

i know i can run othe payloads using SX, but is there a way to flash the SX pro usb dongle to launch custom payload instantly?

No

 

[linuxares]

You can boot any payload via the dongle. It just inject a payload that boots a boot.dat
If you so wish, you can rename ReiNX to boot.dat and it will boot it as well.
Actually, SX allow you to boot other payloads from their menu even.

 

[smf]

Hi, Ive been wondering, is it possible to flash SX PRO so that it can run a different payload?

This is as close are you can get.

https://twitter.com/CTCaer/status/1017048606971453441

It doesn't flash the SX Pro, but it does allow you to replace the default payload so you don't have to select it each time.

 

[subcon959]

This is as close are you can get.

https://twitter.com/CTCaer/status/1017048606971453441

It doesn't flash the SX Pro, but it does allow you to replace the default payload so you don't have to select it each time.

Is this even needed if you can just rename the payload to boot.dat?

 

[rsn8887]

You can boot any payload via the dongle. It just inject a payload that boots a boot.dat
If you so wish, you can rename ReiNX to boot.dat and it will boot it as well.
Actually, SX allow you to boot other payloads from their menu even.

Also, you can leave the boot.dat from SX OS on your SD Card and use it to boot any cfw you want. Just put your ".bin" file in the root of the SD Card and boot with the dongle. In the SX menu, choose options, then choose to boot a custom payload. It will give you a requester to choose your .bin file. I booted the latest hekake using that method without any problems. It really is very user-friendly.

 

[linuxares]

Also, you can leave the boot.dat from SX OS on your SD Card and use it to boot any cfw you want. Just put your ".bin" file in the root of the SD Card and boot with the dongle. In the SX menu, choose options, then choose to boot a custom payload. It will give you a requester to choose your .bin file. I booted the latest hekake using that method without any problems.

Yepp, as I said SX Allows you to boot other payloads from their menu even.

 

[smf]

Is this even needed if you can just rename the payload to boot.dat?

Does that actually work though?

Yepp, as I said SX Allows you to boot other payloads from their menu even.

Sure, but if someone wants to boot into hekate every time then it's more steps each time you boot

 

[electronrancher]

If you keep holding + while the sxos screen is on, sx loader drops into a menu that lets you choose any payload, such as hekate, that is on your SD card.

There is really no need to flash the dongle directly to hekate, the sx loader is all you need. And the protection was in sx operating system, not the USB payload. The USB payload in the sx dongle is just sx loader. That bin file has already been dumped and put into nxloader and trinket formats. It's pretty good.

 

[smf]

If you keep holding + while the sxos screen is on, sx loader drops into a menu that lets you choose any payload, such as hekate, that is on your SD card.

There is really no need to flash the dongle directly to hekate, the sx loader is all you need.

Unless you always want to use hekate and want to save the hassle of holding volume and selecting from a menu.

Or are you saying that because you don't feel that is important, that nobody else should too?