TGFC Lifestyle - Powered by Discuz! Board

标题: Xbox360 重大破解！全区！硬盘直接读取游戏！ [打印本页]

作者: apple524 时间: 2009-12-2 08:31 标题: Xbox360 重大破解！全区！硬盘直接读取游戏！

Xbox360 重大破解！全区！硬盘直接读取游戏！免费DLC！免费Arcade！可以接任意SATA硬盘！
转自xbox-skyer
freeBOOT v0.02 发布提供下载

--------------------------------------------------------------------------------

今天早上的消息，不过要没有秋更才行。
freeBOOT v0.02 提供个下载吧，270kb很小，有兴趣的去当小白鼠
第一
__ ____ ___ ___ _____
/ _|_ __ ___ ___| __ ) / _ \ / _ \_ _|
| |_| '__/ _ \/ _ \ _ \| | | | | | || |
| _| | | __/ __/ |_) | |_| | |_| || |
|_| |_| \___|\___|____/ \___/ \___/ |_|
[v0.02 - coded by ikari]

I. Introduction
================

freeBOOT is a rebooter for the Microsoft Xbox 360. This version of freeBOOT
allows you to reboot into kernel 2.0.8955 on all Xenon, Zephyr, Falcon, and
Jasper consoles with 16MB flashes, which are vulnerable to the JTAG hack.
Support for Opus and Jasper consoles with larger flashes will follow soon.

As freeBOOT needs a second flash memory to store kernel 2.0.8955 and
associated data, either a Cygnos360 or an xD card mod is required at the
moment.

II. Bug Fixes
=============

- Harddisk installation and save game/profile issues have been fixed

III. New Features
=================

- updated to kernel 8955

- additional support for Zephyr and Jasper consoles with 16MB flashes

- support for xD card mod and Cygnos360 V1 added

- Harddisk authentication disabled

The Xbox 360 will now accept any SATA harddisk.

- removed XEX signature checks

Execution of unsigned devkit and retail XEXes is now possible. Encrypted
devkit XEXes must be decrypted with XexTool prior to use.

- removed LIVE/PIRS signature checks

The dashboard will now run applications from unsigned LIVE/PIRS
containers.

- extendable patch system

Researchers/hackers can now try new patches easily. Please refer to
"src\patches_kernel_8955.S" for more information.

IV. Instructions
================

Read these instructions carefully and follow them exactly. Failing to do so
may render your Xbox 360 unusable!

1. Extract the contents of this archive to a directory of your choice. All
file and directory names in the proceeding steps will be given relative
to that directory.

2. Update your Xbox 360 to kernel 2.0.7371 (Fall 08 Update). If your Xbox 360
has already been updated to a newer kernel, you can proceed to the next
step. The update process will not succeed with resistor R6T3 desoldered.
Resolder resistor R6T3 in that case before starting the update process.

*************************************************************************
*** Make sure you do *NOT* update to kernel 2.0.8xxx, since this will ***
*** fix the JTAG hack vulnerability. Check the update before! ***
*************************************************************************

3. *************************************************************************
*** If present, desolder resistor R6T3 to prevent any accidentally ***
*** applied update fixing the JTAG hack vulnerability. ***
*************************************************************************

4. Save an image of your flash memory to the file "bin\7371.bin".

5. In case you don't already know your Xbox 360's CPU key, retrieve it now.
There are various ways to accomplish this, but they will not be covered
here.

6. Extract the contents of your "bin\7371.bin" image with ibuild now. Launch
ibuild with the following parameters:

> ibuild x -d data\ -b <1BL key> -p <CPU key> bin\7371.bin

Replace <1BL key> with the 1BL key and <CPU key> with the CPU key matching
your "bin/7371.bin" image. Enter both 16 byte keys as hexadecimal numbers
without leading "0x". Data previously extracted with 360 Flash Tool can
no longer be used.

7. Delete all files from the "data" directory except:

- crl.bin
- crl.bin.meta
- extended.bin
- extended.bin.meta
- kv.bin
- odd.bin
- odd.bin.meta
- secdata.bin
- secdata.bin.meta
- smc.bin
- smc_config.bin

8. The remaining files necessary to build an image with kernel 2.0.8955 must
be extracted from an image of an updated Xbox 360, further on referred to
as "bin\other8955.bin". Please do *NOT* update your Xbox 360 to kernel
2.0.8955, otherwise you will loose the ability to run the JTAG hack and
freeBOOT.

Launch ibuild with the following parameters:

> ibuild x -d tmp\ -b <1BL key> -p <CPU key> bin\other8955.bin

Replace <1BL key> with the 1BL key and <CPU key> with the CPU key matching
the "bin/other8955.bin" image.

9. Copy the following files from the "tmp" to the "data" directory:

- aac.xexp[1,2]
- aac.xexp[1,2].meta
- bootanim.xex
- bootanim.xex.meta
- bootanim.xexp[1,2]
- bootanim.xexp[1,2].meta
- cb_[1940, 4579, 5771, 6750].bin
- cd_8453.bin
- ce_1888.bin
- cf_8498.bin
- cg_8498.bin
- createprofile.xex
- createprofile.xex.meta
- createprofile.xexp[1,2]
- createprofile.xexp[1,2].meta
- dash.xex
- dash.xex.meta
- deviceselector.xex
- deviceselector.xex.meta
- deviceselector.xexp[1,2]
- deviceselector.xexp[1,2].meta
- gamerprofile.xex
- gamerprofile.xex.meta
- gamerprofile.xexp[1,2]
- gamerprofile.xexp[1,2].meta
- hud.xex
- hud.xex.meta
- hud.xexp[1,2]
- hud.xexp[1,2].meta
- huduiskin.xex
- huduiskin.xex.meta
- mfgbootlauncher.xex
- mfgbootlauncher.xex.meta
- mfgbootlauncher.xexp[1,2]
- mfgbootlauncher.xexp[1,2].meta
- minimediaplayer.xex
- minimediaplayer.xex.meta
- minimediaplayer.xexp[1,2]
- minimediaplayer.xexp[1,2].meta
- nomni.xexp1
- nomni.xexp1.meta
- nomnifwm.xexp1
- nomnifwm.xexp1.meta
- signin.xex
- signin.xex.meta
- signin.xexp[1,2]
- signin.xexp[1,2].meta
- updater.xex
- updater.xex.meta
- updater.xexp[1,2]
- updater.xexp[1,2].meta
- vk.xex
- vk.xex.meta
- vk.xexp[1,2]
- vk.xexp[1,2].meta
- xam.xex
- xam.xex.meta
- xam.xexp[1,2]
- xam.xexp[1,2].meta
- xenonclatin.xtt
- xenonclatin.xtt.meta
- xenonclatin.xttp[1,2]
- xenonclatin.xttp[1,2].meta
- xenonjklatin.xtt
- xenonjklatin.xtt.meta
- xenonjklatin.xttp[1,2]
- xenonjklatin.xttp[1,2].meta
- ximecore.xex
- ximecore.xex.meta
- ximedic.xex
- ximedic.xex.meta
- ximedic.xexp[1,2]
- ximedic.xexp[1,2].meta

"[A, B]" means the file name contains either "A" or "B" at that position.

10. Now you can build your kernel 2.0.8955 image with ibuild. To do so,
launch ibuild with the following parameters:

> ibuild c -c <console> -d data/ -b <1BL key> -p <CPU key>
./bin/my8955.bin ./bin/fuses.bin

Replace <1BL key> with the 1BL key and <CPU key> with the CPU key
matching your "bin/7371.bin" image. Since ibuild currently does neither
support Opus consoles nor Jasper consoles with large flashes, valid
parameters for <console> at the moment are "xenon", "zephyr", "falcon",
and "jasper". When ibuild completes successfully, you will find two new
files in the "bin" directory. The file "bin\my8955.bin" contains your
newly built kernel 2.0.8955 image, that will be booted by freeBOOT. The
file "bin\fuses.bin" contains the virtual fuse settings used by freeBOOT.

11. In order to build the freeBOOT image, Python is needed. If you already
have Python installed, you can proceed to step 12.

The easiest way to run Python scripts under Windows is to install Cygwin.
You can download the Cygwin setup from here:

http://www.cygwin.org/cygwin/

Install Cygwin to any directory of your choice along with the these
packages:

- python
- python-crypto

12. Open "build.py" with a text editor and look for these two lines:

# you need to fill in this
secret_1BL = None

Replace "None" with the 1BL key. This example shows you the format
in which the key has to be entered. The key itself is wrong.

secret_1BL = "\x01\x0F\x0E\x0C\x0E\xD6\x69\xE7\xB5\x67\x94\xFB\x68\x56\x3E\xFA"

13. The freeBOOT image can now be built. Open a Cygwin shell and change to the
directory where you extracted the contents of this archive into. Launch
the Python build script with the following parameters:

> python build.py bin/<console>_hack.bin smc.bin

The "bin\<console>_hack.bin" image is a standard JTAG hack image and can
be found at the usual places. The "smc.bin" is a patched SMC generated
by the Cygnos toolbox. When the build process finishes successfully, a new
image "bin\hack.bin" can be found.

14. Program "bin\my8955.bin" to the Cygnos360 flash memory and "bin\hack.bin"
to the Xbox 360 flash memory.

15. Power on your Xbox 360. If everything went correctly, you should see the
blue LED light up a few seconds later, followed by the usual boot
animation. If you power on your Xbox 360 with the DVD tray eject button,
XeLL will be loaded instead.

VI. What's Next
===============

- support for Opus consoles and Jasper consoles with large flashes
- further removal of security system restrictions
- easier build process

VII. Credits
============

My gratitude goes to all those who helped me get this new release done.

-----
ikari, 2009/11/21
the patches.s says:
# Disable XEX Signature Check
# Disable PIRS/LIVE Signature Check
# Disable Harddisk Authentication

第二
BReboot v0.05 - OnBoard NAND XDK Homebrew Solution
More early xmas presents with XBReboot v0.05! Like freeBOOT v0.02 it will reboot into a patched 8955 kernel. However, this one can be flashed directly in your onboard NAND flash, no need for a 2-nand solution. Before flashing it on your system, you will have to dump your console specific KeyVault (kv.bin) from your dumped Xbox 360 NAND image and put it inside the hacked image with nandpro:
nandpro 7371.bin: -r16 kv.bin 1 1
nandpro xbr.bin: -w16 kv.bin 1 1

Afaik, this initial version of XBReboot will only work on Xenon (v1) motherboards, but it's probably only a matter of time before it's made for other motherboard revisions.

Again, this hack relies on the JTAG hack to boot into XeLL from where it will do the reboot to the patched 8955 with virtual fuses, so will only work with 360s that don't have the new bootloader.

The hack contains no readme/nfo so for now that's all the info we can confirm, but I assume it has the same patches as freeBOOT v0.02.

作者: qy911 时间: 2009-12-2 08:42

没有秋更？那不是说魔女和mw2这样的游戏就没办法玩了？

作者: 3036273 时间: 2009-12-2 08:46

[posted by wap, platform: UCWEB]

等小白鼠试验

作者: znt999 时间: 2009-12-2 08:59

全区，那就是可以玩FFB咯

作者: eva3d 时间: 2009-12-2 09:01

只要11月17日的那个没更新过的，都可以

我的ban机刚好可以拿来做这个啊，先解ban，再freeboot。等LPC2148到货喽

作者: jinwei8108 时间: 2009-12-2 09:05

[posted by wap, platform: UCWEB]

那光驱坏了的机器也可以咯?非常期待

作者: mephisto 时间: 2009-12-2 09:10

等好心人测试……

作者: sniperm82 时间: 2009-12-2 09:48

引用:

原帖由 eva3d 于 2009-12-2 09:01 发表
只要11月17日的那个没更新过的，都可以

我的ban机刚好可以拿来做这个啊，先解ban，再freeboot。等LPC2148到货喽

硬盘解ban还是机器解ban？

作者: ooo 时间: 2009-12-2 10:06

那要换硬盘了，免光盘很赞啊

作者: GuiltySpark 时间: 2009-12-2 10:23

免费dlc?
就是说装了这玩儿还可以上live?

作者: eva3d 时间: 2009-12-2 10:27

引用:

原帖由 GuiltySpark 于 2009-12-2 10:23 发表
免费dlc?
就是说装了这玩儿还可以上live?

以前的DLC是和机器号，live id, 硬盘序号捆绑的，现在只需要有下载过的人从他的硬盘中复制出来，你再复制到你的硬盘里一样有效. 呃，理论上就是这样，例如辐射3的一堆DLC

作者: squallySP 时间: 2009-12-2 10:33

我艹，这个太强悍了！

等测试

等成熟方案

作者: LILIT 时间: 2009-12-2 10:47

很好，痿卵赶紧出720吧

作者: 四裤全输 时间: 2009-12-2 11:08

极度期待啊

作者: legendkang 时间: 2009-12-2 11:24

打了补丁玩现代战争2的是不是意味着秋耕了？

作者: LILIT 时间: 2009-12-2 11:31

引用:

原帖由 legendkang 于 2009-12-2 11:24 发表
打了补丁玩现代战争2的是不是意味着秋耕了？

是的

作者: 猫猫熊 时间: 2009-12-2 11:34

这个能玩COD6么？期待进一步破解！

作者: eva3d 时间: 2009-12-2 11:37

你们怎么这么激动，这些hack也就是给ban了机的乐乐而已，你们没被ban的，还在连线的，一边玩去..

作者: abe1007之马甲 时间: 2009-12-2 12:20

是不是说必须是08秋更的才能用？我i这台貌似已经09夏更了，杯具……

作者: huangjianxiang 时间: 2009-12-2 12:25

全区实在太强了，实质性的突破啊，搬小板凳等测试报告

作者: yellowbigbird 时间: 2009-12-2 12:31

任意硬盘很好........

作者: woodnymph 时间: 2009-12-2 12:32

能玩acade很好，我要玩castle阿，虽然被很多人玩烂了，233

作者: 飞翔的天空 时间: 2009-12-2 12:42

好事啊，mark

作者: anakin 时间: 2009-12-2 12:43

[posted by wap, platform: UCWEB]

好，国内有个被ban的老机器，正好来玩这个

作者: 猫猫猫 时间: 2009-12-2 12:49

果然是重大破解

免光驱,就不用刻D9盘了, 省时间省钱
任意硬盘, 那就可以大硬盘免刷firmware

可惜, 玩过COD MW2的人就没戏

作者: ram1424 时间: 2009-12-2 12:54

不用放碟就可以玩太好啦！

作者: Tavia 时间: 2009-12-2 13:10

[posted by wap, platform: Nokia (E51)]

马克…

作者: arrow 时间: 2009-12-2 13:32

说了半天到底谁成功了？

作者: bobykid 时间: 2009-12-2 14:59

杯具了,刚更新了~

作者: God88 时间: 2009-12-2 15:23

现在没更新没三红的机器还有多少？

还好我有台全新的

作者: easy3user 时间: 2009-12-2 17:11

8955不就是秋耕吗。楼主怎么说的？？

作者: runhua 时间: 2009-12-2 17:11

人类科技的里程碑，太伟大了

作者: Missing 时间: 2009-12-2 17:21

可以运行这个的机器。可不可以玩最新游戏。 MW2之类

作者: 马拉多纳 时间: 2009-12-2 18:04

[posted by wap]

这个国内还没人实验成功过

作者: cgbox2006 时间: 2009-12-2 18:13

我更新了8955...然后又刷了光驱免阴道盘那个。。。。。。杯具么

欢迎光临 TGFC Lifestyle (http://club.tgfcer.com/)