SlideShare ist ein Scribd-Unternehmen logo
1 von 19
The Reset Glitch Hack Using the Matrix Glitcher.




                                                   CREDITS:
This tutorial is based on the excellent “Reset Glitch Hack” tutorial made by Razkar and Tuxuser that is
           available in hic original and complete for in the download section of our website.




      Required Hardware:

              •        Matrix Glitcher
              •        Matrix NAND Programmer or any other USB SPI Programmer to dump/flash the
                       Xbox360's NAND
              •        Xilinx Jtag Programmer Cable
              •        Soldering Material




      Required Software:

              •        Impact (from Xilinx Lab Tools)
              •        Python and Python Crypto
              •        NandPro V 2.0e or greater




      Identification of NAND Size:

      As a first step we should identify the NAND size that is installed into the XBOX360.
      The skilled ones can simply read the NAND size directly from the code written on the NAND.

      The second solution is to go to the memory tab under the settings menu.
          •       If there is no memory unit shown there then you have a 16MB NAND.
          •       If there is a Memory Unit showing 214MB then you have a 256MB NAND.
          •       If there is a Memory Unit showing 451MB, then you have 512MB NAND.




                                                                                                   1
1.Dumping NAND
• Use the following diagram to solder your NAND Programmer




• Open windows' command prompt and Launch NandPro

• D ump your NAND twice by using the read command for 16MB
   NAND :

  nandpro usb: -r16 nanddumpname.bin




                                                             2
• Compare the two dumps with the following command (you can
  use MD5 Checksums too) :

    fc   /b   nanddumpname.bin nanddumpname2.bin




• You should see something like FC: No difference found. If the
  two dumps don't match, do a new dump and check again.



•   If you have a 256 MB or 512 MB NAND you can run the following
    commands:

    nandpro usb: -r256 nanddumpname.bin
    nandpro usb: -r512 nanddumpname.bin




                                                                    3
2 .Installation of Python and Python Crypto

• Install Python 2.7 (32bit!) with the default settings:




                                                           4
• Install PyCrypto 2.3 with the default settings :




To enable python in windows' command prompt, we will have to modify
the environment variables .

   • Go in Control Panel > System > Advanced System Settings




                                                                      5
• Click on Environment variable




                                  6
• Click on New in system variables




• Add this for the name and the value of the variable :

   PYTHONPATH
   %PYTHONPATH%;C:Python27;




                                                          7
3.Creating the Hack image

• D ownload the gggggg-hack (from our website or from “Free60-Git Repository”).

• Put your original NAND dump in the root of the gggggg-folder
  and create a folder named “output” (in the root as well).




• Open windows' command prompt again and navigate to the
  gggggg-folder than type this Python command (don’t forget to
  modify it with your NAND dump name) :

   python common/imgbuild/build.py nanddumpname.bin
   common/cdxell/CD common/xell/xell-gggggg.bin




                                                                        8
You should see the following




The file image_00000000.ecc is located in the output folder now.




                                                                   9
• Copy this file into your Nandpro folder and navigate to the
     folder via command prompt again

   • Use the following command to flash the image to your console's
     NAND.
    nandpro usb: +w16 image_00000000.ecc
    nandpro usb: +w64 image_00000000.ecc (Jasper 256 and 512mb ONLY)

/! Pay attention that you have to use the +w16 or +w64 switch and not
the -w16 or –w64 one /!




The flashed file has a size of 50 blocks so you should see 004F when
the flashing is done.




                                                                         10
4.Programming the CPLD

Power the Glitcher with 3.3V on the 3.3V pad and GND on GND pad. There are
many solution to do this ... here are some of them :

  • Use an old DVD drive supply cable by cutting 5 and 6 cable (3.3V
    and GND) and connect it to the a CK or the motherboard drive
    socket
OR
     • Solder the 3,3V pad to the J2C1. 8 point of the motherboard and the
       GND to a point of the motherboard like the legs of the
        various connector-metal casing.
OR
 •      Use an external 3,3V power supply




                                                                             11
•   Grab your LPT/USB XilinX JTAG programmer cable. Connect the
           cable to the PC and the CPLD.(If you don't have one, you can use
           GliGli's schematic to build a LPT JTAG Programmer)




•   Set up the Matrix Glitcher to work with your Phat or Slim model XBOX360
    with two solder points as indicated below:


                 SLIM                                    PHAT




             This the the 3.3v and GND for programming
             Using DVD Drive cable or other source
                                                                              12
• Launch "iMPACT" (from XilinX Lab Tools) and let's start the
  programming ... just follow the images.(You have to setup the
  compatibility mode only if your Programmer does not get
  detected right away)




                                                                  13
14
15
16
17
5.Wiring

•   Once programming is complete you can proceed directly to solder the Matrix
    Glitcher directly to the XBOX360 motherboard.

•   Use the diagrams that are supplied together with this tutorial. A copy is
    available on the website.




                                                                                18
6.Enjoy



 •    You can now start your console normally and see XeLL boot
      within 2 minutes. You can now enjoy unsigned code on your slim.




7.Credits / Thanks


Thanks to GliGli and everyone involved in this hack.

Thanks to Razkar and Tuxuser for making the original tutorial from which this
version is derived. (The original is available in its integral form on our website.)

Thanks to everyone that still thinks that hacking a console can be fun :-)




                                                                                  19

Weitere ähnliche Inhalte

Was ist angesagt?

OpenWrt101 2007
OpenWrt101 2007OpenWrt101 2007
OpenWrt101 2007Rex Tsai
 
Dragonboard 410c/820c
Dragonboard 410c/820cDragonboard 410c/820c
Dragonboard 410c/820cLinaro
 
Building Android for the Cloud: Android as a Server (Mobile World Congress 2014)
Building Android for the Cloud: Android as a Server (Mobile World Congress 2014)Building Android for the Cloud: Android as a Server (Mobile World Congress 2014)
Building Android for the Cloud: Android as a Server (Mobile World Congress 2014)Ron Munitz
 
Virtual box installation
Virtual box installationVirtual box installation
Virtual box installationNiranjan Pandey
 
x86_64 Hardware Deep dive
x86_64 Hardware Deep divex86_64 Hardware Deep dive
x86_64 Hardware Deep diveNaoto MATSUMOTO
 
CUDA by Example : Getting Started : Notes
CUDA by Example : Getting Started : NotesCUDA by Example : Getting Started : Notes
CUDA by Example : Getting Started : NotesSubhajit Sahu
 
Mainline kernel on ARM Tegra20 devices that are left behind on 2.6 kernels
Mainline kernel on ARM Tegra20 devices that are left behind on 2.6 kernelsMainline kernel on ARM Tegra20 devices that are left behind on 2.6 kernels
Mainline kernel on ARM Tegra20 devices that are left behind on 2.6 kernelsDobrica Pavlinušić
 
[Hackito2012] Hardware backdooring is practical
[Hackito2012] Hardware backdooring is practical[Hackito2012] Hardware backdooring is practical
[Hackito2012] Hardware backdooring is practicalMoabi.com
 
How to boot a VM form a Forensic Image
How to boot a VM form a Forensic ImageHow to boot a VM form a Forensic Image
How to boot a VM form a Forensic ImageKrešimir Hausknecht
 
Intel neural compute_stick_2
Intel neural compute_stick_2Intel neural compute_stick_2
Intel neural compute_stick_2Zhin-hsin Ou
 
Gentoo on a 486
Gentoo on a 486Gentoo on a 486
Gentoo on a 486yeokm1
 
Programming esp8266
Programming esp8266Programming esp8266
Programming esp8266Baoshi Zhu
 
Booting an image as a forensically sound vm in virtual box
Booting an image as a forensically sound vm in virtual boxBooting an image as a forensically sound vm in virtual box
Booting an image as a forensically sound vm in virtual boxBrent Muir
 
Android As a Server- Building Android for the Cloud (AnDevCon SF 2013)
Android As a Server- Building Android for the Cloud (AnDevCon SF 2013)Android As a Server- Building Android for the Cloud (AnDevCon SF 2013)
Android As a Server- Building Android for the Cloud (AnDevCon SF 2013)Ron Munitz
 
Hardware backdooring is practical : slides
Hardware backdooring is practical : slidesHardware backdooring is practical : slides
Hardware backdooring is practical : slidesMoabi.com
 
[Defcon] Hardware backdooring is practical
[Defcon] Hardware backdooring is practical[Defcon] Hardware backdooring is practical
[Defcon] Hardware backdooring is practicalMoabi.com
 
[Ruxcon 2011] Post Memory Corruption Memory Analysis
[Ruxcon 2011] Post Memory Corruption Memory Analysis[Ruxcon 2011] Post Memory Corruption Memory Analysis
[Ruxcon 2011] Post Memory Corruption Memory AnalysisMoabi.com
 

Was ist angesagt? (20)

OpenWrt101 2007
OpenWrt101 2007OpenWrt101 2007
OpenWrt101 2007
 
Dragonboard 410c/820c
Dragonboard 410c/820cDragonboard 410c/820c
Dragonboard 410c/820c
 
Porting Android
Porting AndroidPorting Android
Porting Android
 
Building Android for the Cloud: Android as a Server (Mobile World Congress 2014)
Building Android for the Cloud: Android as a Server (Mobile World Congress 2014)Building Android for the Cloud: Android as a Server (Mobile World Congress 2014)
Building Android for the Cloud: Android as a Server (Mobile World Congress 2014)
 
Virtual box installation
Virtual box installationVirtual box installation
Virtual box installation
 
x86_64 Hardware Deep dive
x86_64 Hardware Deep divex86_64 Hardware Deep dive
x86_64 Hardware Deep dive
 
CUDA by Example : Getting Started : Notes
CUDA by Example : Getting Started : NotesCUDA by Example : Getting Started : Notes
CUDA by Example : Getting Started : Notes
 
Mainline kernel on ARM Tegra20 devices that are left behind on 2.6 kernels
Mainline kernel on ARM Tegra20 devices that are left behind on 2.6 kernelsMainline kernel on ARM Tegra20 devices that are left behind on 2.6 kernels
Mainline kernel on ARM Tegra20 devices that are left behind on 2.6 kernels
 
[Hackito2012] Hardware backdooring is practical
[Hackito2012] Hardware backdooring is practical[Hackito2012] Hardware backdooring is practical
[Hackito2012] Hardware backdooring is practical
 
How to boot a VM form a Forensic Image
How to boot a VM form a Forensic ImageHow to boot a VM form a Forensic Image
How to boot a VM form a Forensic Image
 
Intel neural compute_stick_2
Intel neural compute_stick_2Intel neural compute_stick_2
Intel neural compute_stick_2
 
Gentoo on a 486
Gentoo on a 486Gentoo on a 486
Gentoo on a 486
 
Programming esp8266
Programming esp8266Programming esp8266
Programming esp8266
 
Booting an image as a forensically sound vm in virtual box
Booting an image as a forensically sound vm in virtual boxBooting an image as a forensically sound vm in virtual box
Booting an image as a forensically sound vm in virtual box
 
Android As a Server- Building Android for the Cloud (AnDevCon SF 2013)
Android As a Server- Building Android for the Cloud (AnDevCon SF 2013)Android As a Server- Building Android for the Cloud (AnDevCon SF 2013)
Android As a Server- Building Android for the Cloud (AnDevCon SF 2013)
 
Hardware backdooring is practical : slides
Hardware backdooring is practical : slidesHardware backdooring is practical : slides
Hardware backdooring is practical : slides
 
[Defcon] Hardware backdooring is practical
[Defcon] Hardware backdooring is practical[Defcon] Hardware backdooring is practical
[Defcon] Hardware backdooring is practical
 
[Ruxcon 2011] Post Memory Corruption Memory Analysis
[Ruxcon 2011] Post Memory Corruption Memory Analysis[Ruxcon 2011] Post Memory Corruption Memory Analysis
[Ruxcon 2011] Post Memory Corruption Memory Analysis
 
Qnap nas ts serie x53-catalogo
Qnap nas ts serie x53-catalogoQnap nas ts serie x53-catalogo
Qnap nas ts serie x53-catalogo
 
At90 analysis
At90 analysisAt90 analysis
At90 analysis
 

Ähnlich wie Matrix glitcher tutorial

Headless Android at AnDevCon3
Headless Android at AnDevCon3Headless Android at AnDevCon3
Headless Android at AnDevCon3Opersys inc.
 
UWE Linux Boot Camp 2007: Hacking embedded Linux on the cheap
UWE Linux Boot Camp 2007: Hacking embedded Linux on the cheapUWE Linux Boot Camp 2007: Hacking embedded Linux on the cheap
UWE Linux Boot Camp 2007: Hacking embedded Linux on the cheapedlangley
 
LMG Lightning Talks - SFO17-205
LMG Lightning Talks - SFO17-205LMG Lightning Talks - SFO17-205
LMG Lightning Talks - SFO17-205Linaro
 
Introduction to Computing on GPU
Introduction to Computing on GPUIntroduction to Computing on GPU
Introduction to Computing on GPUIlya Kuzovkin
 
How To Flash Xbox 360 Firmware Tutorial by mksoftware
How To Flash Xbox 360 Firmware Tutorial by mksoftwareHow To Flash Xbox 360 Firmware Tutorial by mksoftware
How To Flash Xbox 360 Firmware Tutorial by mksoftwareSlamet Purwanto
 
Yocto and IoT - a retrospective
Yocto and IoT - a retrospectiveYocto and IoT - a retrospective
Yocto and IoT - a retrospectiveOpen-RnD
 
Java on the GPU: Where are we now?
Java on the GPU: Where are we now?Java on the GPU: Where are we now?
Java on the GPU: Where are we now?Dmitry Alexandrov
 
Quickboot on i.MX6
Quickboot on i.MX6Quickboot on i.MX6
Quickboot on i.MX6Gary Bisson
 
Starting Raspberry Pi
Starting Raspberry PiStarting Raspberry Pi
Starting Raspberry PiLloydMoore
 
Cnc 3axis-shield
Cnc 3axis-shieldCnc 3axis-shield
Cnc 3axis-shieldhandson28
 
Linux as a gaming platform, ideology aside
Linux as a gaming platform, ideology asideLinux as a gaming platform, ideology aside
Linux as a gaming platform, ideology asideLeszek Godlewski
 
Linux Kernel Platform Development: Challenges and Insights
 Linux Kernel Platform Development: Challenges and Insights Linux Kernel Platform Development: Challenges and Insights
Linux Kernel Platform Development: Challenges and InsightsGlobalLogic Ukraine
 
Android Platform Debugging and Development
Android Platform Debugging and DevelopmentAndroid Platform Debugging and Development
Android Platform Debugging and DevelopmentKarim Yaghmour
 
Android Platform Debugging and Development
Android Platform Debugging and DevelopmentAndroid Platform Debugging and Development
Android Platform Debugging and DevelopmentOpersys inc.
 
Bootloader and MMU (english)
Bootloader and MMU (english)Bootloader and MMU (english)
Bootloader and MMU (english)Sneeker Yeh
 
Iot Bootcamp - abridged - part 1
Iot Bootcamp - abridged - part 1Iot Bootcamp - abridged - part 1
Iot Bootcamp - abridged - part 1Marcus Tarquinio
 
Let's trace Linux Lernel with KGDB @ COSCUP 2021
Let's trace Linux Lernel with KGDB @ COSCUP 2021Let's trace Linux Lernel with KGDB @ COSCUP 2021
Let's trace Linux Lernel with KGDB @ COSCUP 2021Jian-Hong Pan
 

Ähnlich wie Matrix glitcher tutorial (20)

Headless Android at AnDevCon3
Headless Android at AnDevCon3Headless Android at AnDevCon3
Headless Android at AnDevCon3
 
UWE Linux Boot Camp 2007: Hacking embedded Linux on the cheap
UWE Linux Boot Camp 2007: Hacking embedded Linux on the cheapUWE Linux Boot Camp 2007: Hacking embedded Linux on the cheap
UWE Linux Boot Camp 2007: Hacking embedded Linux on the cheap
 
LMG Lightning Talks - SFO17-205
LMG Lightning Talks - SFO17-205LMG Lightning Talks - SFO17-205
LMG Lightning Talks - SFO17-205
 
Introduction to Computing on GPU
Introduction to Computing on GPUIntroduction to Computing on GPU
Introduction to Computing on GPU
 
Readme
ReadmeReadme
Readme
 
How To Flash Xbox 360 Firmware Tutorial by mksoftware
How To Flash Xbox 360 Firmware Tutorial by mksoftwareHow To Flash Xbox 360 Firmware Tutorial by mksoftware
How To Flash Xbox 360 Firmware Tutorial by mksoftware
 
Yocto and IoT - a retrospective
Yocto and IoT - a retrospectiveYocto and IoT - a retrospective
Yocto and IoT - a retrospective
 
Flowframes
FlowframesFlowframes
Flowframes
 
Java on the GPU: Where are we now?
Java on the GPU: Where are we now?Java on the GPU: Where are we now?
Java on the GPU: Where are we now?
 
Quickboot on i.MX6
Quickboot on i.MX6Quickboot on i.MX6
Quickboot on i.MX6
 
Starting Raspberry Pi
Starting Raspberry PiStarting Raspberry Pi
Starting Raspberry Pi
 
Cnc 3axis-shield
Cnc 3axis-shieldCnc 3axis-shield
Cnc 3axis-shield
 
Headless Android
Headless AndroidHeadless Android
Headless Android
 
Linux as a gaming platform, ideology aside
Linux as a gaming platform, ideology asideLinux as a gaming platform, ideology aside
Linux as a gaming platform, ideology aside
 
Linux Kernel Platform Development: Challenges and Insights
 Linux Kernel Platform Development: Challenges and Insights Linux Kernel Platform Development: Challenges and Insights
Linux Kernel Platform Development: Challenges and Insights
 
Android Platform Debugging and Development
Android Platform Debugging and DevelopmentAndroid Platform Debugging and Development
Android Platform Debugging and Development
 
Android Platform Debugging and Development
Android Platform Debugging and DevelopmentAndroid Platform Debugging and Development
Android Platform Debugging and Development
 
Bootloader and MMU (english)
Bootloader and MMU (english)Bootloader and MMU (english)
Bootloader and MMU (english)
 
Iot Bootcamp - abridged - part 1
Iot Bootcamp - abridged - part 1Iot Bootcamp - abridged - part 1
Iot Bootcamp - abridged - part 1
 
Let's trace Linux Lernel with KGDB @ COSCUP 2021
Let's trace Linux Lernel with KGDB @ COSCUP 2021Let's trace Linux Lernel with KGDB @ COSCUP 2021
Let's trace Linux Lernel with KGDB @ COSCUP 2021
 

Mehr von José Mota

A introducao e
A   introducao eA   introducao e
A introducao eJosé Mota
 
Calculos e massas
Calculos e massasCalculos e massas
Calculos e massasJosé Mota
 
Teoria do conhecimento
Teoria do conhecimentoTeoria do conhecimento
Teoria do conhecimentoJosé Mota
 
Economia política do bem público
Economia política do bem públicoEconomia política do bem público
Economia política do bem públicoJosé Mota
 
Introducaoanalise
IntroducaoanaliseIntroducaoanalise
IntroducaoanaliseJosé Mota
 
Slide unid 1-_nocoes_fin_e_econ_-__merc_capitais (1)
Slide unid 1-_nocoes_fin_e_econ_-__merc_capitais (1)Slide unid 1-_nocoes_fin_e_econ_-__merc_capitais (1)
Slide unid 1-_nocoes_fin_e_econ_-__merc_capitais (1)José Mota
 

Mehr von José Mota (9)

A introducao e
A   introducao eA   introducao e
A introducao e
 
Ligacoes
LigacoesLigacoes
Ligacoes
 
Calculos e massas
Calculos e massasCalculos e massas
Calculos e massas
 
Teoria do conhecimento
Teoria do conhecimentoTeoria do conhecimento
Teoria do conhecimento
 
Economia política do bem público
Economia política do bem públicoEconomia política do bem público
Economia política do bem público
 
Lista enc
Lista encLista enc
Lista enc
 
Introducaoanalise
IntroducaoanaliseIntroducaoanalise
Introducaoanalise
 
Tutorial
TutorialTutorial
Tutorial
 
Slide unid 1-_nocoes_fin_e_econ_-__merc_capitais (1)
Slide unid 1-_nocoes_fin_e_econ_-__merc_capitais (1)Slide unid 1-_nocoes_fin_e_econ_-__merc_capitais (1)
Slide unid 1-_nocoes_fin_e_econ_-__merc_capitais (1)
 

Kürzlich hochgeladen

GenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationGenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationMichael W. Hawkins
 
My Hashitalk Indonesia April 2024 Presentation
My Hashitalk Indonesia April 2024 PresentationMy Hashitalk Indonesia April 2024 Presentation
My Hashitalk Indonesia April 2024 PresentationRidwan Fadjar
 
Salesforce Community Group Quito, Salesforce 101
Salesforce Community Group Quito, Salesforce 101Salesforce Community Group Quito, Salesforce 101
Salesforce Community Group Quito, Salesforce 101Paola De la Torre
 
How to convert PDF to text with Nanonets
How to convert PDF to text with NanonetsHow to convert PDF to text with Nanonets
How to convert PDF to text with Nanonetsnaman860154
 
08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking Men08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking MenDelhi Call girls
 
08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking Men08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking MenDelhi Call girls
 
Unblocking The Main Thread Solving ANRs and Frozen Frames
Unblocking The Main Thread Solving ANRs and Frozen FramesUnblocking The Main Thread Solving ANRs and Frozen Frames
Unblocking The Main Thread Solving ANRs and Frozen FramesSinan KOZAK
 
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Drew Madelung
 
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Miguel Araújo
 
Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...
Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...
Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...Igalia
 
Finology Group – Insurtech Innovation Award 2024
Finology Group – Insurtech Innovation Award 2024Finology Group – Insurtech Innovation Award 2024
Finology Group – Insurtech Innovation Award 2024The Digital Insurer
 
A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)Gabriella Davis
 
Presentation on how to chat with PDF using ChatGPT code interpreter
Presentation on how to chat with PDF using ChatGPT code interpreterPresentation on how to chat with PDF using ChatGPT code interpreter
Presentation on how to chat with PDF using ChatGPT code interpreternaman860154
 
Transforming Data Streams with Kafka Connect: An Introduction to Single Messa...
Transforming Data Streams with Kafka Connect: An Introduction to Single Messa...Transforming Data Streams with Kafka Connect: An Introduction to Single Messa...
Transforming Data Streams with Kafka Connect: An Introduction to Single Messa...HostedbyConfluent
 
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptxHampshireHUG
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerThousandEyes
 
The Codex of Business Writing Software for Real-World Solutions 2.pptx
The Codex of Business Writing Software for Real-World Solutions 2.pptxThe Codex of Business Writing Software for Real-World Solutions 2.pptx
The Codex of Business Writing Software for Real-World Solutions 2.pptxMalak Abu Hammad
 
08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking MenDelhi Call girls
 
Handwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsHandwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsMaria Levchenko
 
Swan(sea) Song – personal research during my six years at Swansea ... and bey...
Swan(sea) Song – personal research during my six years at Swansea ... and bey...Swan(sea) Song – personal research during my six years at Swansea ... and bey...
Swan(sea) Song – personal research during my six years at Swansea ... and bey...Alan Dix
 

Kürzlich hochgeladen (20)

GenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationGenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day Presentation
 
My Hashitalk Indonesia April 2024 Presentation
My Hashitalk Indonesia April 2024 PresentationMy Hashitalk Indonesia April 2024 Presentation
My Hashitalk Indonesia April 2024 Presentation
 
Salesforce Community Group Quito, Salesforce 101
Salesforce Community Group Quito, Salesforce 101Salesforce Community Group Quito, Salesforce 101
Salesforce Community Group Quito, Salesforce 101
 
How to convert PDF to text with Nanonets
How to convert PDF to text with NanonetsHow to convert PDF to text with Nanonets
How to convert PDF to text with Nanonets
 
08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking Men08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking Men
 
08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking Men08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking Men
 
Unblocking The Main Thread Solving ANRs and Frozen Frames
Unblocking The Main Thread Solving ANRs and Frozen FramesUnblocking The Main Thread Solving ANRs and Frozen Frames
Unblocking The Main Thread Solving ANRs and Frozen Frames
 
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
 
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
 
Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...
Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...
Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...
 
Finology Group – Insurtech Innovation Award 2024
Finology Group – Insurtech Innovation Award 2024Finology Group – Insurtech Innovation Award 2024
Finology Group – Insurtech Innovation Award 2024
 
A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)
 
Presentation on how to chat with PDF using ChatGPT code interpreter
Presentation on how to chat with PDF using ChatGPT code interpreterPresentation on how to chat with PDF using ChatGPT code interpreter
Presentation on how to chat with PDF using ChatGPT code interpreter
 
Transforming Data Streams with Kafka Connect: An Introduction to Single Messa...
Transforming Data Streams with Kafka Connect: An Introduction to Single Messa...Transforming Data Streams with Kafka Connect: An Introduction to Single Messa...
Transforming Data Streams with Kafka Connect: An Introduction to Single Messa...
 
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 
The Codex of Business Writing Software for Real-World Solutions 2.pptx
The Codex of Business Writing Software for Real-World Solutions 2.pptxThe Codex of Business Writing Software for Real-World Solutions 2.pptx
The Codex of Business Writing Software for Real-World Solutions 2.pptx
 
08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men
 
Handwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsHandwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed texts
 
Swan(sea) Song – personal research during my six years at Swansea ... and bey...
Swan(sea) Song – personal research during my six years at Swansea ... and bey...Swan(sea) Song – personal research during my six years at Swansea ... and bey...
Swan(sea) Song – personal research during my six years at Swansea ... and bey...
 

Matrix glitcher tutorial

  • 1. The Reset Glitch Hack Using the Matrix Glitcher. CREDITS: This tutorial is based on the excellent “Reset Glitch Hack” tutorial made by Razkar and Tuxuser that is available in hic original and complete for in the download section of our website. Required Hardware: • Matrix Glitcher • Matrix NAND Programmer or any other USB SPI Programmer to dump/flash the Xbox360's NAND • Xilinx Jtag Programmer Cable • Soldering Material Required Software: • Impact (from Xilinx Lab Tools) • Python and Python Crypto • NandPro V 2.0e or greater Identification of NAND Size: As a first step we should identify the NAND size that is installed into the XBOX360. The skilled ones can simply read the NAND size directly from the code written on the NAND. The second solution is to go to the memory tab under the settings menu. • If there is no memory unit shown there then you have a 16MB NAND. • If there is a Memory Unit showing 214MB then you have a 256MB NAND. • If there is a Memory Unit showing 451MB, then you have 512MB NAND. 1
  • 2. 1.Dumping NAND • Use the following diagram to solder your NAND Programmer • Open windows' command prompt and Launch NandPro • D ump your NAND twice by using the read command for 16MB NAND : nandpro usb: -r16 nanddumpname.bin 2
  • 3. • Compare the two dumps with the following command (you can use MD5 Checksums too) : fc /b nanddumpname.bin nanddumpname2.bin • You should see something like FC: No difference found. If the two dumps don't match, do a new dump and check again. • If you have a 256 MB or 512 MB NAND you can run the following commands: nandpro usb: -r256 nanddumpname.bin nandpro usb: -r512 nanddumpname.bin 3
  • 4. 2 .Installation of Python and Python Crypto • Install Python 2.7 (32bit!) with the default settings: 4
  • 5. • Install PyCrypto 2.3 with the default settings : To enable python in windows' command prompt, we will have to modify the environment variables . • Go in Control Panel > System > Advanced System Settings 5
  • 6. • Click on Environment variable 6
  • 7. • Click on New in system variables • Add this for the name and the value of the variable : PYTHONPATH %PYTHONPATH%;C:Python27; 7
  • 8. 3.Creating the Hack image • D ownload the gggggg-hack (from our website or from “Free60-Git Repository”). • Put your original NAND dump in the root of the gggggg-folder and create a folder named “output” (in the root as well). • Open windows' command prompt again and navigate to the gggggg-folder than type this Python command (don’t forget to modify it with your NAND dump name) : python common/imgbuild/build.py nanddumpname.bin common/cdxell/CD common/xell/xell-gggggg.bin 8
  • 9. You should see the following The file image_00000000.ecc is located in the output folder now. 9
  • 10. • Copy this file into your Nandpro folder and navigate to the folder via command prompt again • Use the following command to flash the image to your console's NAND. nandpro usb: +w16 image_00000000.ecc nandpro usb: +w64 image_00000000.ecc (Jasper 256 and 512mb ONLY) /! Pay attention that you have to use the +w16 or +w64 switch and not the -w16 or –w64 one /! The flashed file has a size of 50 blocks so you should see 004F when the flashing is done. 10
  • 11. 4.Programming the CPLD Power the Glitcher with 3.3V on the 3.3V pad and GND on GND pad. There are many solution to do this ... here are some of them : • Use an old DVD drive supply cable by cutting 5 and 6 cable (3.3V and GND) and connect it to the a CK or the motherboard drive socket OR • Solder the 3,3V pad to the J2C1. 8 point of the motherboard and the GND to a point of the motherboard like the legs of the various connector-metal casing. OR • Use an external 3,3V power supply 11
  • 12. Grab your LPT/USB XilinX JTAG programmer cable. Connect the cable to the PC and the CPLD.(If you don't have one, you can use GliGli's schematic to build a LPT JTAG Programmer) • Set up the Matrix Glitcher to work with your Phat or Slim model XBOX360 with two solder points as indicated below: SLIM PHAT This the the 3.3v and GND for programming Using DVD Drive cable or other source 12
  • 13. • Launch "iMPACT" (from XilinX Lab Tools) and let's start the programming ... just follow the images.(You have to setup the compatibility mode only if your Programmer does not get detected right away) 13
  • 14. 14
  • 15. 15
  • 16. 16
  • 17. 17
  • 18. 5.Wiring • Once programming is complete you can proceed directly to solder the Matrix Glitcher directly to the XBOX360 motherboard. • Use the diagrams that are supplied together with this tutorial. A copy is available on the website. 18
  • 19. 6.Enjoy • You can now start your console normally and see XeLL boot within 2 minutes. You can now enjoy unsigned code on your slim. 7.Credits / Thanks Thanks to GliGli and everyone involved in this hack. Thanks to Razkar and Tuxuser for making the original tutorial from which this version is derived. (The original is available in its integral form on our website.) Thanks to everyone that still thinks that hacking a console can be fun :-) 19