xboxscene.org forums

Author Topic: Suspicious 32 Repeating Characters In Nand  (Read 42 times)

Antman1

  • Archived User
  • Hero Member
  • *
  • Posts: 887
Suspicious 32 Repeating Characters In Nand
« on: September 15, 2009, 05:09:00 AM »

I was looking through my nand using a hexedittor and I noticed that there is a 32 character section that shows up the same in a few places. If anyone wants to see what I am talking about check offset 000A3FC0.

I have the newest dash on this 360 and was just looking through to see if I could somehow get my dvd key.  This 360 was used only as a netflix box and was given to me because the original owner lost the key.  Anyone have a new dash and a dump of it and can check with a search of there nand to see if there dvd key is in that offset or if it is something else.  maybe it is something useful.  I hope so.
Logged

majinsoftware

  • Archived User
  • Hero Member
  • *
  • Posts: 703
Suspicious 32 Repeating Characters In Nand
« Reply #1 on: September 15, 2009, 05:30:00 AM »

The nand wont contain just the dvdkey, Its a file system.
It would be pritty much the same as searching your windows folder for your windows key, once its compacted in a password protected rar file, because the nand is encrypted with the cpukey and 1lb key.
Which with the latest dash you can no longer get because it was patched.

If you managed to get the cpukey and 1lb key then you could decrypt the keyvault which contains the dvdkey.
Logged

Antman1

  • Archived User
  • Hero Member
  • *
  • Posts: 887
Suspicious 32 Repeating Characters In Nand
« Reply #2 on: September 15, 2009, 05:56:00 AM »

QUOTE(majinsoftware @ Sep 15 2009, 06:30 AM) View Post

The nand wont contain just the dvdkey, Its a file system.
It would be pritty much the same as searching your windows folder for your windows key, once its compacted in a password protected rar file, because the nand is encrypted with the cpukey and 1lb key.
Which with the latest dash you can no longer get because it was patched.

If you managed to get the cpukey and 1lb key then you could decrypt the keyvault which contains the dvdkey.


I understand it may not be a key but it may be something else.  for 1 why does your dump only have all FFFs and mine has this series of characters show up in several places?  Others may have dumps like mine and maybe they can help with this.  I wanted to report what I have found in case it helps.  I am no programer or anything like that but we are all here to help.
Logged