While using the
XBMM (
XBox
Music
Mixer), it is possible to eject the XBMM application DVD, insert an audio CD from which to rip a sound sample, then pop in the XBMM DVD and continue mixing. The XBMM XBE remains running in memory, and has obviously already passed all its signature and media checks. The
APILogger utility was developed to help work out how XBMM determined then the audio CD was removed, and the XBMM application DVD reinserted. The working theory was that the program sensed this by checking for the existence of a file on the XBMM media. The hope was that an
alternative DVD could be inserted after the audio CD was removed, and the XBMM XBE tricked into reading in a file containing an exploit.
IIRC XBMM makes extensive use of the XBOX cache drives, and limits what it reads from the application DVD once running. IIRC I never figured out how to force it to read from the
alternative DVD after it was inserted. That said I'm not at all familiar with the program, and spent not much more than a single night on this whole investigation. It was very quickly shelved in favour of more promising ideas, with a mental note to return to it when time allowed.
