Print

[Radament]

I suspect modfreakz method will be slightly different, but the main concept will be the same, f*cking the controller chip over.
Anyway, seems like it will require some soldering.

However, i'd be happier with a key-only type dumping. Releasing this exploit probably makes it harder for modders, decapping everytime there is a new revision must suck.

[Ranger72]

This looks doable. But until the dump you get can be decrypted it does not look like much use will come of this hack.

[OggyUK]

Drive key was never encypted - this just adds to the fun (IMG:style_emoticons/default/smile.gif)

[danthaman673]

I don't believe he's upsert over missed oportunity on milking cash for a brief period of time. It's a case of when an exploit becomes widely used, M$ are forced to address it, making it short-lived. The next logical step for them will make things VERY difficult for modders, keeping in mind so far we have relied on the fact that if the Xbox can read the key from the drive then there must be a way to read the key. What if we couldn't use the new cap-delay mod?? where would we be?? I suggest you think about that one at length and think about the prospect of the Key system becoming expotentially harder to hack in a manner(s) I wont even mention here on the off chance M$ extends it's policy of stealing ideas to posts on XS (I wouldn't put it past them so I'm not giving them ne clever new ideas they don't already have use ur imagination) It's an ongoing and old hackers argument (fairly generic actually) Public knowlege vs Ongoing Practicality it seems the general public get all the good stuff these days (not like when I was young ...) and the ppl that bring it to them a level of celebrity. Sometimes ppl get more caught-up in it than the actual tech itself.  (IMG:style_emoticons/default/biggrin.gif)

PS:I'm not suggesting that's what's happening here by the way.

[Ranger72]

QUOTE(OggyUK @ Nov 29 2009, 07:03 PM)

Drive key was never encypted - this just adds to the fun (IMG:style_emoticons/default/smile.gif)

Yes I just noticed that.  (IMG:style_emoticons/default/biggrin.gif)

Fun times to be had.

[danthaman673]

Has anyone tried this yet???(MRA Method)  I will later it seems pretty straight forward :

-Lift pin 101 and 122
-solder a cable to pin 100, pin 101 and one to 3,3V
-use a 2-way switch which either connects 101 to 3,3V or to 100
-put the switch into the position so that it connects 100 to 101
-power drive
-start Dosflash, it will recognise the SPI with Status x72
-if you read it out now, it will just give you a .bin full of FFFFFFFF, but thats OK, this is how we tricked the Flash Controller to think the SPI is empty
-put the switch in the other position (so that 101 is connected to 3,3V)
-now read the flash

---> Voila, you got your dump!
Then open .bin with JF

(apparently he did it w/ a 75xxx , it should work with 85xxx or 95xxx)

I might get a chance to have a go a bit later today (Pity Modfreakz pulled his proof of concept vid form utube, I never got a look)

After I get this to work later today I might even post a tut (perhaps) for the 83850c v2

This post has been edited by danthaman673: Today, 01:52 AM

[xxpittbullxx]

Quote from MRA
Today I made some progress too. I was able to dump the O-FW of a 74850. So here is how it works (although I just tried it with one drive til now):

-Lift pin 101 and 122
-solder a cable to pin 100, pin 101 and one to 3,3V
-use a 2-way switch which either connects 101 to 3,3V or to 100
-put the switch into the position so that it connects 100 to 101
-power drive
-start Dosflash, it will recognise the SPI with Status x72
-if you read it out now, it will just give you a .bin full of FFFFFFFF, but thats OK, this is how we tricked the Flash Controller to think the SPI is empty
-put the switch in the other position (so that 101 is connected to 3,3V)
-now read the flash

---> Voila, you got your dump!

Maybe someone else is going to give it a try, would be nice to get some feedback. For today my tests are finished, its pretty late....

Oh yes, and of course: no warranty at all, I even fried one drive myself a few days ago, when I was performing some tests. I suppose working on it a 4:30 in the morning obviously wasn´t the best idea...

Source: http://www.xboxhacker.net/index.php?PHPSES...p;topic=12956.0

This Should Work on all Lite-on Drives Including the New Lite-on 93450

This post has been edited by xxpittbullxx: Today, 01:41 AM

[m4n0w4r]

no one has had the opportunity to dump a 9 series yet

[syntaxerror329]

QUOTE(danthaman673 @ Nov 29 2009, 07:29 PM)

 (Pity Modfreakz pulled his proof of concept vid form utube, I never got a look)

Video never worked, said processing for about a hour before he pulled it.

[chorizo1]

lets keep discussion of this in this thread only till a new one gets opened in the news if it works out.