Modders hint at potential kernel exploit hack for Xbox One consoles

xbawks.png

It's been a while since Microsoft released the Xbox One, and despite its age, there haven't been any reliable softmod methods to hack the console. Until now. A post started making the rounds, saying that a method for executing kernel level code on the Xbox One had been found. A list of instructions for preparing Xbox One systems to be hacked was also provided, with the process being as follows:

  1. Ensure your Xbox Live account Login-Type is configured as “No barriers” aka. auto-login with no password prompt
  2. Set your console as “Home Console” for this account
  3. Download the App Game Script
  4. Start the app (to ensure license is downloaded/cached)
  5. Take your console offline! To make extra sure it cannot reach the internet, set a manual primary DNS address of 127.0.0.1
  6. Get a device/microcontroller that can simulate a Keyboard (rubber ducky or similar) - otherwise you have to type a lot manually :D

This method appears to use a UWP app called Game Script on the Xbox One to execute the code, and was discovered by a user named carrot_c4k3. It seems as though the hack will require a lot of manual typing, unless you have a device that can simulate a keyboard, according to the preparation instructions. Reportedly, the latest firmware update for the Xbox One has already patched the exploit out, with the last exploitable firmware being 10.0.25398.4478.

:arrow: Source
:arrow: Video guide on how to prepare your system
:arrow: Proof of concept code
 

RedColoredStars

Well-Known Member
Member
Joined
Aug 14, 2022
Messages
1,212
Trophies
1
Location
Angoche
XP
1,629
Country
Mozambique
I cannot rule out that it already had the preview updates enabled at the store where I bought it assuming it was brand new (fyi it was a reputable electronics store chain), but I can assure you that neither did the packaging look suspicious when I bought it nor did I ever sign up to be a beta tester for what amounts to a home menu. And I can think of nobody other than me who had the 6-digit passcode I initially set up... But most notably I couldn't think of anyone feeling the need to somehow get access to said console in order to download the hub application, enroll into preview updates and wipe all traces afterwards. Having seen how MS treats users on Windows I found it way more plausible if they felt like they didn't have enough beta testers for their updates and decided to "help a little".

That being said I'm 99 per cent sure the console shouldn't have had that update installed in the first place. If you think it's more plausible that someone bought it, enabled preview updates and then returned it, I understand that, but from my perspective the chances of that having happened are next to none. And I'm definitely not buying a new Xbox just for a conspiracy theory.

None of that changes the fact that you need to literally enroll as an insider AND enroll in the preview builds after that. Not a chance all of that was done by MS without consent. I don't buy it for a second. Shrug.
 

jacobas92

Well-Known Member
Newcomer
Joined
Jul 12, 2012
Messages
52
Trophies
1
Location
Virginia
XP
632
Country
United States
So does anyone here know of any reason to use this (when it releases) over dev mode? Like, would we have access to more system resources? I'm fairly ignorant to how this works. I have used dev mode before.
 

codezer0

Gaming keeps me sane
Member
Joined
Jul 14, 2009
Messages
3,601
Trophies
2
Location
The Magic School Bus
XP
4,672
Country
United States
So does anyone here know of any reason to use this (when it releases) over dev mode? Like, would we have access to more system resources? I'm fairly ignorant to how this works. I have used dev mode before.
Retail has always had more resources than dev mode on an off the shelf console. Xbox one was the rare exception of a console where *any* off the shelf unit could be converted to a developer console, in full.

Iirc, gamers nexus had ended up with a developer series x (unfortunately already banned from running such code), and the board showed something around 40gh of memory modules to allow overhead for debugging and tinkering purposes.
 

naed06

Well-Known Member
Member
Joined
May 16, 2017
Messages
130
Trophies
0
Age
42
XP
2,410
Country
Interested to see where this goes, but not got my hopes up for anything amazing. The Xbox modding/hacking scene has always been a bit lacklustre since the original Xbox and 360 days, dev mode kinda made it this way since there’s no real reason to hack/mod unless you want to /s play your original back-ups /s
 

The Catboy

GBAtemp Official Catboy™: Savior of the broken
Member
Joined
Sep 13, 2009
Messages
28,213
Trophies
4
Location
Making a non-binary fuss
XP
40,136
Country
Antarctica
Gimmy more news on the ps5.
It only has 12 games

I don't own an Xbox because that's a useless thing for me to own, but I am always interested in seeing the world of homebrew and hacking expanding
 

Jayinem

Well-Known Member
Member
Joined
Dec 16, 2021
Messages
746
Trophies
0
XP
1,820
Country
United States
I think it might be the only modern console to come and go with no piracy what so ever. Some of the older consoles were just emulated but you could still play the pirated games somehow somewhere which is the point.
 
  • Like
Reactions: FFTW and BigOnYa

chrisrlink

Has a PhD in dueling
Member
Joined
Aug 27, 2009
Messages
5,602
Trophies
2
Location
duel acadamia
XP
5,921
Country
United States
Sadly, it seems this may not meet the expectations of many. Personally, I was hyped about the possibility of accessing obscure and delisted titles, such as early Kinect demos, or even unofficial OG Xbox and 360 games.

View attachment 441645
perma ban for retail hb use in 3...2...1 remember both users and uploaders got wacked for running/publishing retail emulators (though i hope punishment won't be too heavy hander like the switch
 

digipimp75

Well-Known Member
Member
Joined
Jan 16, 2014
Messages
706
Trophies
1
Age
48
XP
2,039
Country
United States
can anyone verify if the offline update file on Microsoft’s website is the exploitable version? Grabbing an Xbox one but won’t be able to get it for another day and a bit, but hoping the update file up rn is still fine

Also if a new update gets released, will i still be able to download the app?

Even if the offline update file is the correct version, you still need to go online and download the Game Script app from the MS store, at which point they'll force you to update to whatever the latest system update is. So if they patch this exploit while you're waiting for the Xbox to arrive, unfortunately it might be too late
 

The Catboy

GBAtemp Official Catboy™: Savior of the broken
Member
Joined
Sep 13, 2009
Messages
28,213
Trophies
4
Location
Making a non-binary fuss
XP
40,136
Country
Antarctica
Sadly, it seems this may not meet the expectations of many. Personally, I was hyped about the possibility of accessing obscure and delisted titles, such as early Kinect demos, or even unofficial OG Xbox and 360 games.

View attachment 441645
Damn, the Xbox really needed a W too!
 

Wolfy

Person That Never Was
Member
Joined
Aug 18, 2015
Messages
1,146
Trophies
0
Age
25
Location
Somewhere In The Aether...
XP
3,066
Country
United States
Why would they give instructions rn???

Probably due to that tidbit at the bottom, "Reportedly, the latest firmware update for the Xbox One has already patched the exploit out, with the last exploitable firmware being 10.0.25398.4478."

So unless you're already on it then it doesn't matter.
 

Nakamichi

Well-Known Member
Member
Joined
Dec 10, 2021
Messages
433
Trophies
0
Age
36
XP
1,901
Country
Germany
Thank god for Microsoft!
I knew the moment they started to aggressively delete emulators, ban them off of retail mode and made life unbearable for homebrew devs that this was finally around the corner!

Had they actually offered an "okay"-experience for homebrew devs we would have never seen any exploits.

Im so happy MS are stuck up, pigheaded morons. Im glad i kept my One X now.
Microsoft, never change!
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
  • HiradeGirl @ HiradeGirl:
    Anyone played that game?
  • Sicklyboy @ Sicklyboy:
    Only one I played was the DBZ trading card game game on the GBA
  • K3Nv2 @ K3Nv2:
    Sparking zero is looking pretty good but not $70 good
  • HiradeGirl @ HiradeGirl:
    okay
  • BakerMan @ BakerMan:
    isn't sparking zero supposed to be accurate to their canon power too?
  • BakerMan @ BakerMan:
    meaning unlike dbfz a weaker character like nappa wouldn't stand a chance against someone stronger like broly
  • BakerMan @ BakerMan:
    aaalllright then, i guess i should hit the hay
  • K3Nv2 @ K3Nv2:
    People are complaining about flying in it I'm like wut that's half of what it is
    +1
  • BigOnYa @ BigOnYa:
    Surprise surprise, @HiradeGirl is back today
  • BigOnYa @ BigOnYa:
    Alright @SylverReZ you win, lets go double or nothing.
  • cearp @ cearp:
    good morning
    +2
  • O @ Olqase93:
    Hi, I need help whit my r4 r4itt new please
  • AncientBoi @ AncientBoi:
    🛌 Shhhhhhh
  • DinohScene @ DinohScene:
    homebrew your DSi and forgo the flashcard with NDS bootstrap or something along those lines
    +1
  • DinohScene @ DinohScene:
    it allows utilisation of the SD card for ROM storage
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    Get a 3DS and do the same 🥰
  • AncientBoi @ AncientBoi:
    Nah. Just get a 3rd [3000 series] gen PSP.
    +2
  • Psionic Roshambo @ Psionic Roshambo:
    I like PSP on my Pi lol
  • Psionic Roshambo @ Psionic Roshambo:
    Gameboy Advanced SP emulator or GASP for short lol
    +1
  • RedColoredStars @ RedColoredStars:
    Finally got an appointment with an ENT, but it's not for another month. It's already been 4- days of loud ringing in my left ear, substantial pain on left side of my neck and left side on the back of my head. Doctors here at the regular clinic put me on a couple different meds for a month that did absolutely nothing, then they told me there's nothing more they can do for me despite being in pain and my ear sounding like im underwater and ringing.
  • RedColoredStars @ RedColoredStars:
    Then three chiropractor appointments which also didn't help at all so i didn't go to the 4th. Been trying to get ahold of this ENT clinic out of town for a week and finally got an appointment set up. But its not til the 17th of July so I have to suffer all this shit for nearly another month.
  • RedColoredStars @ RedColoredStars:
    I hope relief from all of this is on the way because I've felt so defeated and severaly lacking in sleep because of the pain and ringing.
  • AncientBoi @ AncientBoi:
    :sad::sad::sad: for RCS
    AncientBoi @ AncientBoi: :sad::sad::sad: for RCS