PDA

View Full Version : Phoenix from DVD?



catfish
08-18-2003, 10:17 PM
has anyone tried making an exploit that runs entirely from the DVD?
or perhaps the audio exploit that looks to the DVD for Linux.xbe?
I have managed to fuse the Xbox movie and a homemade xISO together and do not end up with any errors, but instead the screen goes black like it's trying to boot. (this occurs on DVD-RW)
on CD-RW it does almost the same thing, except with some corrupted graphics for a few sec, then black again.
the guys at xbox-linux think the corruption could possibly be the dashboard crashing or just the movie playing badly.
I think this warrants a closer look by all as I'm not a hacker, just a windows user and have very little skill with Linux.

AlcoholFuelled
08-19-2003, 07:06 AM
Im not entirly sure on what your getting at but attempting to load Phoenix poses the problem that to load unsigned data on the xbox you need an exploit of somesort installed so to load Phoenix from a CD you would inturn need Phoenix (or another exploit) installed.

Of course if you are able to load unsigned data then what is the point of loading phoenix.

catfish
08-19-2003, 04:32 PM
ok, what I'm "gettingf at", is simple.
I want to make/combine a software exploit that is as unobtrusive as possible.
I started this because I want to mod my friend's Xbox without changing the software on his harddrive, or by only changing 1 file, (st.db). The problem is all the software exploits look to the C or E drive, i have seen none modified to load from the DVD drive. What could be better than a 20 meg IOS image that anyone can use to gain control of their Xbox? After I gain control, I hope to discover the original HD's password and apply it to my new one that already has the original drive duplicated to it.
What surpises me is the fact that hardly anyone seems to take this seriously, as I feel I have made a significant discovery. I don't think I have seen anyone this close to getting software to load from DVD without a mod.

for anyone who wants to roll with this discovery, I have a few ideas:
1. try to find a flaw in the loading mechanism, either by xbe header hacking or perhaps a DVD player exploit.
2. modify the audio exploit to load from DVD, CD-XA may do this with an audio track first and data track second.
3. acyually take a signed XBE, (M$ dashboard perhaps) and place in on the DVD using my hybrid technique and one or more of the various exploits.
4. hack the VOB file
5. modify the audio exploit to give us enough control to extract our HD passwords and/or flash the BIOS while only uising 1 or 2 files on the HD
6. maybe making an ISO (normal , not xISO), reversing the blocks and appending it to my ISO could yeild better results. I have seen the drive in action, it definetly reads from the outer edge inward after it checks the game DVD format
7. somehow discover the "bootsector" that gdfimage can use
8. someone write software for a modded Xbox that will allow me to extract an Image from a retail game (if I could see how the sectors were arranged, I feel i could duplicate the format or at least spoof the layout enough to fool the Xbox)

now the simple steps used to create this "hybrid" disk:
1. extract an image of an Xbox game using your PC- this should be sector copies, not copying using explorer
2. hex-edit that image, look for "SecDualLayerStart=" and change 6832 to 6992 (6992 is the number of blocks in your extracted image) save the image.
3. create an xISO placing the files u want in it.
4. combine the 2 in binary mode, the Xbox image first, your xISO image second. (in DOS it's "copy /b 1.iso + 2.iso test.iso")
5. burn to disk and test

AlcoholFuelled
08-19-2003, 09:29 PM
Ok now I see more in depth what your TRYING to do. I can see a few hurdles that will likely block your path but it will be intresting to see how you go with this.

In my personal opinion, I dont see a point really in making the xbox exploitable off a boot disk so to speak if you have to modify files (even just one) in the first place. I dont see the difference in modifying one or 3 myself.

Keep trying though and let us know how you go and if you need particular help.

catfish
08-19-2003, 09:53 PM
the one file that I think will work is the audio exploit's st.db
it looks to the C-drive for linux.xbe.this would be ideal as the file is a standard file on the HD, that is is't not a forein filename or anything that should raise a flag is M$ sees it there.
the help I need is for someone with more skill than I to edit the st.db file to look for linux/Phoenix from DVD and have those files modified/signed to run from there

underthebridge
08-20-2003, 10:50 PM
If I understood correctly, the problem with what you're trying to do is that with a DVD there is no way to copy the files the HD. You know what you can do, try getting ahold of an XBox live-enabled game or XBlive starter CD (one that updates the dash). Examine the contents of the CD, see if you can replace files and reburn ISO to get it to update the way you want.

you said you needed to edit the st.db , well you can try this:
Hexedit st.db , search for "xbe". You should see "d:\linux.xbe" . Change the letter to something else, I suppose this will work.

catfish
08-20-2003, 11:07 PM
yep, saw that in there, as that file is unprotected, I would assume change it to D: and I'm set. My road block is my lack of knowlege about Linux. I'm pretty sure that Linux.xbe and whatever else I want to use will need to be resigned to run from DVD, media flag I think it's called.