Hacking Privilege escalation achieved

[TheStonedModder]

https://x.com/kudayasu/status/1700705790514905367?s=46&t=n-3L-dL3UbieWF1v8K4QpQ

 

[CMDreamer]

I was about to report this thread.

How about a little description of what is this about?

That link looks suspicious af. (No offense meant).

 

[TheStonedModder]

I was about to report this thread.

How about a little description of what is this about?

That link looks suspicious af. (No offense meant).

lol it’s a Twitter (now x) link you nerd

 

[FR0ZN]

I was about to report this thread.

How about a little description of what is this about?

That link looks suspicious af. (No offense meant).

Dude...

 

[peteruk]

I'm surprised this has not been more heavily reported, this is great news for those who've been patiently waiting for developments on this console

 

[TomChaai]

Looks like it allows you to run stuff in SystemOS devmode as administrator, maybe more useful for curiosity and research than actually useful for devmode, you could run stuff as an administrator in a full feature Windows installation anyway.

It doesn't go down into hostOS or security processor so it will be entirely useless in terms of fully cracking the console as an actual console, it won't help dumping/running games.

Still may be good as an angle to look into the SystemOS.

 

[FR0ZN]

I'm surprised this has not been more heavily reported, this is great news for those who've been patiently waiting for developments on this console

afaik we've been this far at least once and nothing more came out of it.
As impressive as it is, this exploit here was way more interesting for the average user:
https://gbatemp.net/threads/pop-a-shell-on-xbox-one-video.616810/
And this one also went dark in terms of interest from other people.

 

[peteruk]

afaik we've been this far at least once and nothing more came out of it.
As impressive as it is, this exploit here was way more interesting for the average user:
https://gbatemp.net/threads/pop-a-shell-on-xbox-one-video.616810/
And this one also went dark in terms of interest from other people.

fingers crossed that enough talented people get involved with the project and open this wide for all to enjoy

 

[TheStonedModder]

fingers crossed that enough talented people get involved with the project and open this wide for all to enjoy

Honestly I doubt it anytime soon

Years ago the SDK and a bunch of other documents leaked on se7ensins for the Xbox one and nothing came from that either

 

[gamerhaha]

Xbox Series X works too?

 

[ARVI80]

Page tables are the way forward for this console as the PT's only require a certain amount of conditions met to bypass the hypercalls that request privileges. At the point of making A PT meet certain constraints and hypercalls being satisfied a small amount of memory access is all that is needed to setup new PT's in the memory or even existing PT's for a full memory breakout, at this point we are able to read and write arbitrary machine memory and control of the VM should not be to difficult.

Although this is a vulgar and oversimplified explanation it is what will work. The reason nobody wants to hack this console is that Microsoft has taken all the fun out of it by already giving us everything we would want to achieve, they have only really locked down piracy and left nothing else of interest.

Well done MS