xboxscene.org forums

Author Topic: Savegame Exploit  (Read 266 times)

mkjones

  • Archived User
  • Hero Member
  • *
  • Posts: 810
Savegame Exploit
« on: December 08, 2005, 05:37:00 AM »

QUOTE(Darren101 @ Dec 8 2005, 11:41 AM) View Post

Hi!

I have a (probably stupid) idea for hacking the 360.
Would it be possible to hack the memory unit, and make a savegame hack, to ftp into the 360?

The only problem that I can see, is that there are no homebrew dev kits about yet, so actually coding a program that allows you to ftp into the 360 could be hard.

But, I suppose they've probably signed the saves or something, so another idea would be a buffer overflow.

Anyways, there's always gonna be some kind of security hole.


Idea is sound but it looks like xbox1 gamesaves will not be compatible with the xbox 360. Not becuase they cant but because of security issues.

Majornelsons blog informed me of this a while ago and I doubt this policy will be changed.

Weather or not its a simple hardware issue and we can somehow get the gamesave onto the 360 from an old memory card and it will simply "work" remains to be seen. But I assume even then the gamesave will not be compatible.
Logged

lordvader129

  • Archived User
  • Hero Member
  • *
  • Posts: 5860
Savegame Exploit
« Reply #1 on: December 08, 2005, 12:40:00 PM »

QUOTE(Darren101 @ Dec 8 2005, 01:05 PM) View Post

Well, when I get my xbox360, I'll try a buffer overflow with a jpg.
From what I hear, it can read images from a USB flash drive.

it also has an assload of protection against buffer overflows, its been tried
Logged

lordvader129

  • Archived User
  • Hero Member
  • *
  • Posts: 5860
Savegame Exploit
« Reply #2 on: December 08, 2005, 02:13:00 PM »

QUOTE(RocketMBA @ Dec 8 2005, 02:28 PM) View Post

The fact that MS decided to get rid of old game saves altogether makes me think that the "emulator" would is close to the guts of the Xbox 360 (duh, I guess) - and therefore a good place to get in. I like the "better safe than sorry" approach.

i dont think its so much that it allows alot of access to the processor and other sysetm functions, i think its just that they didnt even want to give us the chance of finding a way through, plus there could be been other reasons not even related to gamesave exploits, maybe they couldnt get the games to read the old saves properly from the new HD

besides, none of the exploitable games are even on the compatibility list (this probably is for security reasons) so even if you did manage to make a 360-compatible exploited save you have no game to load it with
Logged

lordvader129

  • Archived User
  • Hero Member
  • *
  • Posts: 5860
Savegame Exploit
« Reply #3 on: December 08, 2005, 03:08:00 PM »

QUOTE(RocketMBA @ Dec 8 2005, 03:47 PM) View Post

I read on Xbox.com that they want to support all Xbox games eventually - so I guess that Splinter Cell, Mechassault and the Bond one will be last.

perhaps, perhaps not, they might still leave them off just because they can

even if they do we still dont have access to the exploited saves on 360

even if they do allow saves they will certainly patch the xbes on the fly to the new versions of the game that didnt load the exploited saves

even if we can get the exploited saves loaded on 360, the system has alot of buffer overflow protection, its likely the save will simply crash the system

even if we can successfully initiate an overflow, everything at the hardware level is different, its doubtful the overflow would even alter the public signing key properly to allow homebrew xbes to be signed

even if we get all that, we are still simply running an emulated exploited xbox, i doubt we can go from an emulated system to the actual system and still maintain any amount hackedness (yeah, i know thats not a word)


by the time we break through all those barriers we will probably be trying to hack xbox720 and ps4
Logged

jwin767

  • Archived User
  • Sr. Member
  • *
  • Posts: 271
Savegame Exploit
« Reply #4 on: December 08, 2005, 06:08:00 PM »

QUOTE(lordvader129 @ Dec 9 2005, 12:15 AM) View Post

even if we get all that, we are still simply running an emulated exploited xbox, i doubt we can go from an emulated system to the actual system and still maintain any amount hackedness (yeah, i know thats not a word)


Just to Translate this paragraph, think PSP version 2.0 hack Homebrew is running only in USER memory (not KERNAL where the good stuff is AKA UMD emulation etc etc) we need to hit the core not a piece around the outside.
Logged

wmadoss

  • Archived User
  • Newbie
  • *
  • Posts: 45
Savegame Exploit
« Reply #5 on: December 09, 2005, 04:43:00 AM »

QUOTE(RocketMBA @ Dec 8 2005, 10:47 PM) View Post

I read on Xbox.com that they want to support all Xbox games eventually - so I guess that Splinter Cell, Mechassault and the Bond one will be last.


SplinterCell are already on the list

Tom Clancy's Splinter Cell®
Tom Clancy's Splinter Cell® Chaos Theory™
Tom Clancy's Splinter Cell® Pandora Tomorrow™

From today I think...
Logged

StepsAscend

  • Archived User
  • Full Member
  • *
  • Posts: 122
Savegame Exploit
« Reply #6 on: December 09, 2005, 09:25:00 AM »

I'm sure if they decide to support the exploitable games they will patch the emulator to prevent it.
Logged

Staticvoid

  • Archived User
  • Jr. Member
  • *
  • Posts: 80
Savegame Exploit
« Reply #7 on: December 10, 2005, 12:26:00 AM »

it for sure could read and use files from the harddrive, games have to uncompress somewhere, then be read to play. MS proabbly took the safer than sorry route is all.

does the xbox 360 suport system link games for xbox1? if so then if we could exploit the emulator then we should atleast be able to use ftp. not likely to help us much but who knows.
Logged

Darren101

  • Archived User
  • Newbie
  • *
  • Posts: 11
Savegame Exploit
« Reply #8 on: December 10, 2005, 05:46:00 AM »

I think I have an idea.

What about using a usb flash drive to hold x360 saves, then modify them to cause a buffer overflow, to execute some kind of exploit.

We might not have much chance with an overflow in the Dashboard, but there will eventually be a game thats vulnerable to it.

It's just a matter of time.
Logged

Mad_Gouki

  • Archived User
  • Sr. Member
  • *
  • Posts: 310
Savegame Exploit
« Reply #9 on: December 10, 2005, 09:49:00 AM »

is the emulator completely software? i thought they had to make some hardware for it too, but i could be wrong.

in any case, the emulator does sound like a good place to try to get in.

somebody posted that the xbox360 has ftp access but you need a username and password... does anyone by chance know anyone with a dev kit? that might know what that password is?
Logged

DaBiscuit

  • Archived User
  • Jr. Member
  • *
  • Posts: 89
Savegame Exploit
« Reply #10 on: December 11, 2005, 06:07:00 PM »

I do wish people would stop harping on about old gamesave exploits. I will film myself eating my keyboard, and post the damn video clip if this proves to be a possible way to hack an X360. It's not gonna happen. I don't know much about hacking, but I know just enough to know this is pointless.
Logged

elephantaman37

  • Archived User
  • Newbie
  • *
  • Posts: 1
Savegame Exploit
« Reply #11 on: December 11, 2005, 07:42:00 PM »

J Allard, Xbox Chief Executive, in a recent interview posted at Gamespot, acknowledged the Xbox 360’s vulnerability to hacking.

“We do know that they’re already being very ambitious with it and it’s flattering in a way. […] There will be the hobbyists that want to rip it apart. There’ll still be the pirates that want to rip it off. We can’t avoid that. The philosophy that we applied on 360 is, “It’s going to happen.”"

they know it; we know it as well, simply keep your ear to the ground.  
Some hard research might reveal more reverse eng. meth's for
360 than one might think ;')




Logged

lordvader129

  • Archived User
  • Hero Member
  • *
  • Posts: 5860
Savegame Exploit
« Reply #12 on: December 11, 2005, 07:49:00 PM »

QUOTE(jonny_eh @ Dec 11 2005, 07:54 PM) View Post

I disagree, I think a savegame exploit could allow the use of the 360, in a limited way (which is better than none). It could allow us to run XBMC, in the emulator. It wouldn't be able to access the 360 hardrive nor hardware directly.

The fact that each xbox1 Live game needs to download the same update convinces me that each game has its' own virtual xbox1 disc image.

as you say, each game would have its own specific emualtor settings and drive images, meaning any xbe other than that game (xbmc) would probably crash the emluator

the 360 has massive protection against buffer overflow attacks (savegame exploits)

the saves cannot be tranferred from xbox1, meaning if we are even to consider this we need to dump the 360 version of the xbox save and try to hack that

this is also hoping the exloitable games are patched on the fly to non-exploitable versions (IE, platinum hits)

it also assumes the memory bytes patched by the buffer overflow are in the same offset in memory


no, i think savegame exploits are pretty much a dry hole on the 360
Logged

Darren101

  • Archived User
  • Newbie
  • *
  • Posts: 11
Savegame Exploit
« Reply #13 on: December 12, 2005, 03:55:00 AM »

I think that the first exploit will be software based not hardware based.

Anyways, the x360 will probably be hacked in a few months time, just like the DS was, after it was thought to have no security loopholes smile.gif. Even the encryption in the ds cart was hacked tongue.gif.
Logged