RGH3 Chipless Glitching!!

[Darth Meteos]

 

[Allen-R]

RGH3 be like:

 

[chrisrlink]

can this be patched like JTAG since it's chipless? it's basicly JTAG 2.0

 

[DinohScene]

Software wise, I doubt it as it still follows the basic RGH principals.
Perhaps an updated revision but MS isn't producing 360s anymore.
Hell the Xbox One isn't much of a focus for MS anymore.

 

[ploggy]

Ah, its released?! soo who's gonna write a nice detailed tut? the files are in the vids description

... I can put the files here I guess.. (these are NOT my files) THIS IS NOT A TUT .. I'll leave that to the smart people

README..

- POST_BUS_1 -> DB3R3

Wiring, Trinity:
- CPU_PLL_BYPASS -> DB2G3 (1-10k safety resistor recommended!)
- POST_BUS_1 -> R3R19

Wiring, Jasper / Falcon:
- CPU_PLL_BYPASS -> DB1F1 (1-10k safety resistor recommended!)
- POST_BUS_1 -> R3P7

Known Jasper/Falcon issues:
- HANA PLL bypass slowdown is not enough for perfect precision,
but HANA PLL reconfig slowdown is unstable. So there are two
files for both ways to try.
- Some consoles crash and never boot because of PLL slowdown, please use RGH2 there

Other known issues:
- Falcon, Jasper & Trinity wiring on retail SMC results in RRoD.

Contacts, PayPal donates: [email protected]

WIRING..

Spoiler: Falcon/Jasper

Spoiler: Corona

Spoiler: Trinity

FREEBOOT 2 TO 3 README..

RGH2 to 3 by DrSchottky

Usage: python.exe 2to3.py RGH3_ECC.bin updflash.bin CPUKEY outfile.bin

Known limitations:
- Bad Blocks before Xell (addr 0x70000, blocks 0x0-0x3 on BB, blocks 0x0-0x1B on SB) have to be manually remapped
- Misc


Credits:
- 15432 for RGH3
- build.py creators for ECC code

 

[tech3475]

No love for Xenon?

Yes I know, but I have a banned one lying around.

 

[Sypherone]

Ok, it seems that my ace chip is gotta removed.

 

[giovany86]

I'm currently trying it on one of my original Falcon, i'l stuck at the ecc step, how do i boot XELL Reloaded without a modchip ?



UPDATE : One of my solder was bad, and i was writing the ecc as "Retail" and not as" Glitch2". Now everything boot just fine !

UPDATE 2 : Compared it with my first RGH 1.2 XBOX 360 (Falcon) with the same Version (17526), both boot within 8 seconds max. I think we can call it a success x)

 

[Retr04EVER]

I need a tutorial for trinity motherboard

 

[JackFrostSMT]

can this be patched like JTAG since it's chipless? it's basicly JTAG 2.0

No, this uses the same principles as RGH, and uses custom bootloaders, so they cannot patch it. JTAG was patched because newer bootloaders were told not to boot 4532 kernel, and you cannot downgrade bootloaders because of fuses, so therefore patched.

 

[ploggy]

I'm currently trying it on one of my original Falcon, i'l stuck at the ecc step, how do i boot XELL Reloaded without a modchip ?



UPDATE : One of my solder was bad, and i was writing the ecc as "Retail" and not as" Glitch2". Now everything boot just fine !

UPDATE 2 : Compared it with my first RGH 1.2 XBOX 360 (Falcon) with the same Version (17526), both boot within 8 seconds max. I think we can call it a success x)

Brilliant

 

[godreborn]

awesome! I still have my jtag plugged in, and it's about 13 years old as it's a falcon. never had a hardware problem with it, knock on wood. if it does fail one day, I doubt I'll buy another system or attempt to fix this one, since it's become more a test system now rather than one I play.

 

[rufuszombot]

Hey i would love to try this, but the only 360 o still have turns on but shuts off after about 10 seconds and the light on the power brick turns red. Can i just replace the power brick?

 

[godreborn]

Hey i would love to try this, but the only 360 o still have turns on but shuts off after about 10 seconds and the light on the power brick turns red. Can i just replace the power brick?

possibly, that would be suggestion on fixing it, but there's no guarantee that it's not something else.

 

[giovany86]

Hey i would love to try this, but the only 360 o still have turns on but shuts off after about 10 seconds and the light on the power brick turns red. Can i just replace the power brick?

Mine did the same thing after flashing the file with the wrong mode selected. Might be a short-circuit / false-contact on your board, did you checked for any thing that could prevent it from booting ?

 

[godreborn]

E79 iirc can happen if you messed up a flash. it's usually one blinking red light on phats just like E74.

 

[ploggy]

I'm a little confused about the Trinity points.. In the Trinity Wiring Pic you can see the SMC_PLL and SMC_POST1 points but not where they goto, The Corona Wiring Pic has both. Do I use the PLL and POST1 points from the Corona Pic?

 

[Lynxtver]

I'm a little confused about the Trinity points.. In the Trinity Wiring Pic you can see the SMC_PLL and SMC_POST1 points but not where they goto, The Corona Wiring Pic has both. Do I use the PLL and POST1 points from the Corona Pic?

Yes

 

[chrisrlink]

question is will rgh 3 work on E since it attacks a different part of the 360 w/o a chip (iirc you had to desolider something to reach the attack point on the E For RGH 2

 

[ploggy]

Yes

Thank You, I guessed so but I had to be sure