Hacking Privilege escalation achieved
- Thread starter TheStonedModder
- Start date
- Views 3,375
- Replies 10
- Likes 3
Looks like it allows you to run stuff in SystemOS devmode as administrator, maybe more useful for curiosity and research than actually useful for devmode, you could run stuff as an administrator in a full feature Windows installation anyway.
It doesn't go down into hostOS or security processor so it will be entirely useless in terms of fully cracking the console as an actual console, it won't help dumping/running games.
Still may be good as an angle to look into the SystemOS.
It doesn't go down into hostOS or security processor so it will be entirely useless in terms of fully cracking the console as an actual console, it won't help dumping/running games.
Still may be good as an angle to look into the SystemOS.
afaik we've been this far at least once and nothing more came out of it.
As impressive as it is, this exploit here was way more interesting for the average user:
https://gbatemp.net/threads/pop-a-shell-on-xbox-one-video.616810/
And this one also went dark in terms of interest from other people.
fingers crossed that enough talented people get involved with the project and open this wide for all to enjoy
Honestly I doubt it anytime soon
Years ago the SDK and a bunch of other documents leaked on se7ensins for the Xbox one and nothing came from that either
Page tables are the way forward for this console as the PT's only require a certain amount of conditions met to bypass the hypercalls that request privileges. At the point of making A PT meet certain constraints and hypercalls being satisfied a small amount of memory access is all that is needed to setup new PT's in the memory or even existing PT's for a full memory breakout, at this point we are able to read and write arbitrary machine memory and control of the VM should not be to difficult.
Although this is a vulgar and oversimplified explanation it is what will work. The reason nobody wants to hack this console is that Microsoft has taken all the fun out of it by already giving us everything we would want to achieve, they have only really locked down piracy and left nothing else of interest.
Well done MS
Although this is a vulgar and oversimplified explanation it is what will work. The reason nobody wants to hack this console is that Microsoft has taken all the fun out of it by already giving us everything we would want to achieve, they have only really locked down piracy and left nothing else of interest.
Well done MS
Last edited by ARVI80,
Similar threads
-
- Portal
- No one is chatting at the moment.
-
-
-
@
BigOnYa:
He was the ass of gbatemp, everyone knocked on him, I honestly felt bad, even though I was guilty myself, but he egged it all on himself, -
-
-
@
BigOnYa:
I feel like gbatemp should make t-shirts or memorabilia to remember the lost ones. I bet the Polly shirts would sell out quick.
-
-
-
-
@
BigOnYa:
Your correct, Somebody would be guilty and there would be riots, then they storm the gbatemp capitol,
-
@
K3Nv2:
Online or not there are still certain rights that judges would have no issue handing out a warrant over -
-
@
BigOnYa:
Honestly I'm scared to, from you, but ok, lemme turn on vpn, virtual machine, private browser first
-
-
-
@
BigOnYa:
That robot is here somewhere, I hear it moving around at night, but I haven't seen it for months.
-
@
BigOnYa:
Oh that laptop I give to ancientboi, so you been watching him for months, and he's been watching you
-
-
-
-
-
-
-
-
