Exploit Chart

From ConsoleMods Wiki
Jump to navigation Jump to search
(Fix.)
(More details on Bad Update exploit.)
 
(31 intermediate revisions by 6 users not shown)
Line 1: Line 1:
[[Category:Xbox360]]
[[Category:Xbox 360]]
==Recommended Exploit Chart==
<languages/><translate>
<!--T:1-->
The following chart shows ''all compatible hacks'' for each console.


The below chart highlights the ''recommended'' hack to use on each console.
<!--T:2-->
 
{| class="wikitable sortable" style="text-align:center;"
{| class="wikitable"
|- style="font-weight:bold; vertical-align:middle;"
! Dashboard
!Exploit
! Xenon
!Xenon
! Zephyr
!Zephyr
! Falcon<sup>1</sup>
!Falcon/Opus
! Jasper
!Jasper
! Trinity
!Tonasket
! Corona
!Trinity
! Winchester
!Corona
|-
!Winchester
| ≤7371<sup>2</sup>
|- style="color:#FFF;"
| JTAG
| style="text-decoration:underline; color:#06C;" |[[Xbox 360:JTAG|JTAG]]
| JTAG
| style="background-color:#67FD9A;" |✔️2
| JTAG
| style="background-color:#67FD9A;" |✔️2
| JTAG
| style="background-color:#67FD9A;" |✔️2
| N/A
| style="background-color:#67FD9A;" |✔️2
| N/A
| style="background-color:#FD6864;" |❌
| N/A
| style="background-color:#FD6864;" |❌
|-
| style="background-color:#FD6864;" |❌
| ≤14699
| style="background-color:#FD6864;" |❌1
| EXT_CLK<sup>3</sup>
|- style="color:#FFF;"
| EXT_CLK
| style="text-decoration:underline; color:#06C;" | [[Xbox 360:R-JTAG|R-JTAG]]
| RGH1
| style="background-color:#FFB18D;" |➖3
| RGH1
| style="background-color:#FFB18D;" |➖3
| RGH3<sup>4, 5</sup>
| style="background-color:#67FD9A;" |✔️
| RGH3<sup>4, 5</sup>
| style="background-color:#67FD9A;" |✔️
| N/A
| style="background-color:#67FD9A;" |✔️
|-
| style="background-color:#FD6864;" | ❌
| >14699<sup>4</sup>
| style="background-color:#FD6864;" |❌
| EXT_CLK<sup>3</sup>
| style="background-color:#FD6864;" |❌1
| EXT_CLK
|- style="color:#FFF;"
| RGH1.2
| style="text-decoration:underline; color:#06C;" |[[Xbox 360:R-JTOP|R-JTOP]]
| RGH1.2
| style="background-color:#FFB18D;" |➖3
| RGH3<sup>5</sup>
| style="background-color:#FFB18D;" |➖3
| RGH3<sup>5</sup>
| style="background-color:#67FD9A;" |✔️
| N/A
| style="background-color:#67FD9A;" | ✔️
| style="background-color:#67FD9A;" |✔️
| style="background-color:#FD6864;" |❌
| style="background-color:#FD6864;" | ❌
| style="background-color:#FD6864;" |❌1
|- style="color:#FFF;"
| style="text-decoration:underline; color:#06C;" |[[Xbox 360:RGH/RGH1|RGH1]]
| style="background-color:#FFB18D;" |➖3
| style="background-color:#FFB18D;" |➖3
| style="background-color:#67FD9A;" |✔️
| style="background-color:#67FD9A;" |✔️
| style="background-color:#67FD9A;" |✔️
| style="background-color:#FD6864;" |❌
| style="background-color:#FD6864;" |❌
| style="background-color:#FD6864;" |❌1
|- style="color:#FFF;"
| style="text-decoration:underline; color:#06C;" |[[Xbox 360:RGH/RGH1.2|RGH1.2]]
| style="background-color:#FFB18D;" |➖3
| style="background-color:#FFB18D;" |➖3
| style="background-color:#67FD9A;" |✔️
| style="background-color:#67FD9A;" |✔️
| style="background-color:#67FD9A;" |✔️
| style="background-color:#67FD9A;" |✔️7
| style="background-color:#67FD9A;" |✔️7
| style="background-color:#FD6864;" |❌1
|- style="color:#FFF;"
| style="text-decoration:underline; color:#06C;" |[[Xbox 360:RGH/RGH2|RGH2]]
| style="background-color:#FD6864;" |❌5
| style="background-color:#FFB18D;" |➖6
| style="background-color:#FFB18D;" |➖6
| style="background-color:#FFB18D;" |➖6
| style="background-color:#FFB18D;" |➖6
| style="background-color:#67FD9A;" |✔️
| style="background-color:#67FD9A;" |✔️
| style="background-color:#FD6864;" | ❌1
|- style="color:#FFF;"
| style="text-decoration:underline; color:#06C;" |[[Xbox 360:RGH/S-RGH|S-RGH]]
| style="background-color:#FD6864;" |❌5
| style="background-color:#FFB18D;" |➖4
| style="background-color:#FFB18D;" |➖4
| style="background-color:#FFB18D;" |➖6
| style="background-color:#FFB18D;" |➖6
| style="background-color:#67FD9A;" |✔️
| style="background-color:#67FD9A;" |✔️
| style="background-color:#FD6864;" |❌1
|- style="color:#FFF;"
| style="text-decoration:underline; color:#06C;" | [[Xbox 360:RGH/Mufas|Mufas]]
| style="background-color:#FD6864;" |❌
| style="background-color:#FD6864;" |❌
| style="background-color:#FD6864;" |❌
| style="background-color:#FD6864;" |❌
| style="background-color:#FD6864;" | ❌
| style="background-color:#67FD9A;" |✔️
| style="background-color:#67FD9A;" |✔️
| style="background-color:#FD6864;" |❌1
|- style="color:#FFF;"
| style="text-decoration:underline; color:#06C;" |[[Xbox 360:RGH/EXT CLK|EXT_CLK]]
| style="background-color:#67FD9A;" |✔️
| style="background-color:#67FD9A;" |✔️
| style="background-color:#A1B9CB;" |TBD
| style="background-color:#A1B9CB;" |TBD
| style="background-color:#A1B9CB;" |TBD
| style="background-color:#A1B9CB;" |TBD
| style="background-color:#A1B9CB;" |TBD
| style="background-color:#FD6864;" |❌1
|- style="color:#FFF;"
| style="text-decoration:underline; color:#06C;" |[[Xbox 360:RGH/RGH3|RGH3]]
| style="background-color:#FD6864;" |❌
| style="background-color:#FD6864;" |❌
| style="background-color:#67FD9A;" |✔️8
| style="background-color:#67FD9A;" |✔️8
| style="background-color:#67FD9A;" |✔️8
| style="background-color:#67FD9A;" |✔️7
| style="background-color:#67FD9A;" |✔️7
| style="background-color:#FD6864;" |❌1
|- style="color:#FFF;"
| style="text-decoration:underline; color:#06C;" |[[Xbox_360:Bad_Update|Bad Update]]
| style="background-color:#67FD9A;" |✔️9
| style="background-color:#67FD9A;" |✔️9
| style="background-color:#67FD9A;" |✔️9
| style="background-color:#67FD9A;" |✔️9
| style="background-color:#67FD9A;" |✔️9
| style="background-color:#67FD9A;" |✔️9
| style="background-color:#67FD9A;" |✔️9
| style="background-color:#67FD9A;" |✔️9
|}
|}


<sup>1</sup> Opus motherboards are Falcon motherboards without HDMI
<sup>1</sup> Winchester consoles cannot be RGH'd or JTAG'd


<sup>2</sup> Must check CB via NAND dump to see if JTAGable. Most - but not all - consoles under 7371 and some on 7371 have an unpatched CB.
<!--T:4-->
<sup>2</sup> Must check CB via NAND dump to see if it is JTAGable. Most - but not all - consoles below 7371 and some on 7371 have an unpatched CB.


<sup>3</sup> RGH is not currently working on Elpis Xenons with Samsung memory. A solution is being investigated. It works on all other Xenons.
<!--T:5-->
<sup>3</sup> Only works on some boards and can take minutes to boot if at all - some randomly crash on PLL de-assertion. R-JTAG requires dashboard 14719, and R-JTOP requires dashboard 15572.


<sup>4</sup> Update to latest dashboard prior to RGH.
<!--T:6-->
<sup>4</sup> Hangs for unknown reason.


<sup>5</sup> Requires scraping solder mask off of point (more difficult).
<!--T:7-->
 
<sup>5</sup> RGH2 and S-RGH requires the HANA chip, which is not present on Xenon.


==Full Exploit Compatibility Chart==
<!--T:8-->
 
<sup>6</sup> Unreliable due to requirement of long wires.
The below chart shows ''all compatible hacks'' for each console.
 
{| class="colortable"
! Exploit
! Xenon
! Zephyr
! Falcon<sup>1</sup>
! Jasper
! Trinity
! Corona
! Winchester
|-
| JTAG
| [[#reliable|✔️2]]
| [[#reliable|✔️2]]
| [[#reliable|✔️2]]
| [[#reliable|✔️2]]
| [[#impossible|❌]]
| [[#impossible|❌]]
| [[#impossible|❌]]
|-
| RGH1
| [[#unreliable|➖3]]
| [[#unreliable|➖3]]
| [[#reliable|✔️]]
| [[#reliable|✔️]]
| [[#impossible|❌]]
| [[#impossible|❌]]
| [[#impossible|❌]]
|-
| RGH1.2
| [[#unreliable|➖3]]
| [[#unreliable|➖3]]
| [[#reliable|✔️]]
| [[#reliable|✔️]]
| [[#reliable|✔️7]]
| [[#reliable|✔️7]]
| [[#impossible|❌]]
|-
| RGH2
| [[#impossible|❌5]]
| [[#unreliable|➖6]]
| [[#unreliable|➖6]]
| [[#unreliable|➖6]]
| [[#reliable|✔️]]
| [[#reliable|✔️]]
| [[#impossible|❌]]
|-
| S-RGH
| [[#impossible|❌5]]
| [[#unreliable|➖4]]
| [[#unreliable|➖4]]
| [[#unreliable|➖6]]
| [[#reliable|✔️]]
| [[#reliable|✔️]]
| [[#impossible|❌]]
|-
| RGH3
| [[#impossible|❌]]
| [[#impossible|❌]]
| [[#reliable|✔️]]
| [[#reliable|✔️]]
| [[#reliable|✔️7]]
| [[#reliable|✔️7]]
| [[#impossible|❌]]
|-
| R-JTAG
| [[#unreliable|➖3]]
| [[#unreliable|➖3]]
| [[#reliable|✔️]]
| [[#reliable|✔️]]
| [[#impossible|❌]]
| [[#impossible|❌]]
| [[#impossible|❌]]
|-
| R-JTOP
| [[#unreliable|➖3]]
| [[#unreliable|➖3]]
| [[#reliable|✔️]]
| [[#reliable|✔️]]
| [[#impossible|❌]]
| [[#impossible|❌]]
| [[#impossible|❌]]
|-
| EXT_CLK
| [[#reliable|✔️]]
| [[#reliable|✔️]]
| TBD
| TBD
| TBD
| TBD
| TBD
|}


<sup>1</sup> Opus motherboards are Falcon motherboards without HDMI
<!--T:9-->
<sup>7</sup> Requires scraping solder mask off of PLL point (more difficult).


<sup>2</sup> Must check CB via NAND dump to see if JTAGable. Most - but not all - consoles below 7371 and some on 7371 have an unpatched CB.
<!--T:10-->
<sup>8</sup> Often works, but is more likely to have issues compared to if it's done on Trinity/Corona. On the other hand, RGH 1.2 has a much more guaranteed success rate on these motherboards.


<sup>3</sup> Only works on some boards and can take minutes to boot - some randomly crash on PLL de-assertion.
<!--T:11-->
<sup>9</sup> Bad Update is a software-only hypervisor exploit that can be used on the latest dashboard version to execute unsigned code, such as homebrew. It works on all console revisions, but may require multiple attempts (with a ~30% success rate and at least 5-10 minutes per attempt) to successfully execute. This exploit is not permanent, as arbitrary code execution is lost when you reboot.


<sup>4</sup> Hangs for unknown reason.
===Legend=== <!--T:11-->


<sup>5</sup> RGH2 requires HANA chip, which is not present on Xenon.
<!--T:12-->
 
{| class="wikitable"
<sup>6</sup> Unreliable due to requirement of long wires.
|- style="font-weight:bold; text-align:center;"
 
! style="vertical-align:middle;" |Status
<sup>7</sup> Requires scraping solder mask off of point (more difficult).
! style="text-align:left;" |Color & Symbol
 
|-
{| class="wikitable"
| style="vertical-align:middle;" |Reliable
!align="center"| Legend
| style="text-align:center; background-color:#64ff82;" |✔️
|-
|-
|align="center"| Reliable [[#reliable|✔️]]
| style="vertical-align:middle;" |Unreliable
| style="text-align:center; background-color:#ffb18d;" |
|-
|-
|align="center"| Unreliable [[#unreliable|➖]]
| style="vertical-align:middle;" |Impossible
| style="text-align:center; background-color:#fd6864;" |
|-
|-
|align="center"| Impossible [[#impossible|❌]]
|To be determined
| style="text-align:center; background-color:#a1b9cb; color:#ffffff;" |TBD
|}
|}
</translate>

Latest revision as of 17:08, 2 April 2025

Other languages:

The following chart shows all compatible hacks for each console.

Exploit Xenon Zephyr Falcon/Opus Jasper Tonasket Trinity Corona Winchester
JTAG ✔️2 ✔️2 ✔️2 ✔️2 ❌1
R-JTAG ➖3 ➖3 ✔️ ✔️ ✔️ ❌1
R-JTOP ➖3 ➖3 ✔️ ✔️ ✔️ ❌1
RGH1 ➖3 ➖3 ✔️ ✔️ ✔️ ❌1
RGH1.2 ➖3 ➖3 ✔️ ✔️ ✔️ ✔️7 ✔️7 ❌1
RGH2 ❌5 ➖6 ➖6 ➖6 ➖6 ✔️ ✔️ ❌1
S-RGH ❌5 ➖4 ➖4 ➖6 ➖6 ✔️ ✔️ ❌1
Mufas ✔️ ✔️ ❌1
EXT_CLK ✔️ ✔️ TBD TBD TBD TBD TBD ❌1
RGH3 ✔️8 ✔️8 ✔️8 ✔️7 ✔️7 ❌1
Bad Update ✔️9 ✔️9 ✔️9 ✔️9 ✔️9 ✔️9 ✔️9 ✔️9

1 Winchester consoles cannot be RGH'd or JTAG'd

2 Must check CB via NAND dump to see if it is JTAGable. Most - but not all - consoles below 7371 and some on 7371 have an unpatched CB.

3 Only works on some boards and can take minutes to boot if at all - some randomly crash on PLL de-assertion. R-JTAG requires dashboard 14719, and R-JTOP requires dashboard 15572.

4 Hangs for unknown reason.

5 RGH2 and S-RGH requires the HANA chip, which is not present on Xenon.

6 Unreliable due to requirement of long wires.

7 Requires scraping solder mask off of PLL point (more difficult).

8 Often works, but is more likely to have issues compared to if it's done on Trinity/Corona. On the other hand, RGH 1.2 has a much more guaranteed success rate on these motherboards.

9 Bad Update is a software-only hypervisor exploit that can be used on the latest dashboard version to execute unsigned code, such as homebrew. It works on all console revisions, but may require multiple attempts (with a ~30% success rate and at least 5-10 minutes per attempt) to successfully execute. This exploit is not permanent, as arbitrary code execution is lost when you reboot.

Legend

Status Color & Symbol
Reliable ✔️
Unreliable
Impossible
To be determined TBD