XboxHacker BBS
 
*
Welcome, Guest. Please login or register.
Did you miss your activation email?
May 20, 2013, 07:56:07 PM


Login with username, password and session length


Pages: 1
  Print  
Author Topic: Packet sniffing dashboard updates  (Read 2227 times)
InsaneNutter
Member
**
Posts: 10


View Profile
« on: October 23, 2010, 09:24:41 AM »

On another forum a few of us are in the Dash preview / Kinect beta and have been packet sniffing our consoles when updating the dash to a new beta build. (see here if you wish: http://digiex.net/gaming-section/console-gaming/7041-known-360-builds-ms-server.html)

The end goal of this is to have working offline updates of the various Kinect dashboard betas, with working avatars.

We can obtain the actual system update easily, however getting the avatars to work when updating is proving more difficult.

To obtain the actual system update we simply packet sniff the update process, then download it with a web browser, like in the screenshot below:
 
http://users.digiex.net/insanenutter/media/360/12603-systemupdate.jpg
 
So for example the 12603 update can be downloaded from:
 
Code:
http://download.xbox.com/content/xenon/12603/su89433E9D8FC4B3B8FC5BBDDD943DE71FBED207E6.bin

After that all we need to do is:

  • Create a folder in the root of a Fat32 formatted USB drive called $SystemUpdate
  • Rename su89433E9D8FC4B3B8FC5BBDDD943DE71FBED207E6.bin to su20076000_00000000
  • Place it in the folder and it will ask your console to update when the USB drive is inserted.

So updating the console offline is easy, which I guess is the main thing as this dashboard can be archived and used by anyone in the future.

Of course we can also obtain the files that get dumped on the hard drive for avatars and such by packet sniffing:

Code:
http://download.xbox.com/content/fffe07d1/fb5c6cbfbd847b520f6606865abf898a6107a036.xcp?n=AE37B4BF29BBB714
http://download.xbox.com/content/xenon/12603/su89433E9D8FC4B3B8FC5BBDDD943DE71FBED207E6.bin
http://download.xbox.com/content/fffe07d1/manifests/01803D46265C9BF6/system.manifest
http://download.xbox.com/content/fffe07d1/files/CFFC6BF756383A0892A7CC5713A6EAE0BA44939E/FFFE07DF00000002.cab
http://download.xbox.com/content/fffe07d1/files/216897370A59B58681CF4A3DF22BF46E5F833A9D/FFFE07DF00000006.cab
http://download.xbox.com/content/fffe07d1/files/F1DFF8F3680FFEA51F879C0B72FCE3BB0170A5C3/FFFE07DF00000008.cab
http://download.xbox.com/content/fffe07d1/files/AAEE3DFD3CFE07FC699CA0F633298F4AD97DE90A/FFFE07DF00000001.cab
http://download.xbox.com/content/fffe07d1/files/EAF06E294B1E9ABD1C47A3AFAC1ED5ED8B0619FC/AvatarEditor.xex
http://download.xbox.com/content/fffe07d1/files/40A3513EB72AD18EDF8B85DD6392957FDD0D036D/BiometricSetup.xex
http://download.xbox.com/content/fffe07d1/files/68B69D6CB2A20799D8BEDF6C0B582F9C586D9931/Dash.AttractionScreen.xex
http://download.xbox.com/content/fffe07d1/files/FC6DD7209B57BD1D10DFFA037B33D19D68A4621D/dash.ExtraAVCodecs.xex
http://download.xbox.com/content/fffe07d1/files/DA6F3F60C08340E5C842D8A5393CC43D0C244AF6/Dash.FieldCalibration.lex
http://download.xbox.com/content/fffe07d1/files/6D0A41140A5A0620456935AA9876198D2ADC8219/dash.firstuse.xex
http://download.xbox.com/content/fffe07d1/files/1DF79159C9FDC8DABCDC625EDC7FFB3F45A8E102/Dash.MP.Offline.lex
http://download.xbox.com/content/fffe07d1/files/C6FF4B81DA1865DF44D411E81E970B2EF2748A9B/dash.natalpregame.xex
http://download.xbox.com/content/fffe07d1/files/E4C0B2A06BD215FDADD1328BED763B0821349077/dash.NuiFirstUse.xex
http://download.xbox.com/content/fffe07d1/files/18F19AB0BECA8B2D98F23A4F2C960F9A7CAA15EC/dash.nuihub.xex
http://download.xbox.com/content/fffe07d1/files/795216D20656F365B1BFD9BCD172630940B7D4B8/Dash.NuiTroubleshooter.lex
http://download.xbox.com/content/fffe07d1/files/F3A1CD0C765235F2BB4F468F67FC42406F580B9E/dashnui.xex
http://download.xbox.com/content/fffe07d1/files/3C65E37CAF6B33C646E06627C433C1A2DDFF60E1/Guide.AvatarMiniCreator.xex
http://download.xbox.com/content/fffe07d1/files/F95DF1C67B85E9A64F0058143173DD8A25436D20/Guide.NuiTroubleshooter.xex
http://download.xbox.com/content/fffe07d1/files/17D006AA9B4099B68216E63E9B3CCCFAF0209999/livepack.xex
http://download.xbox.com/content/fffe07d1/files/DECC79BCADA37CF1F53EEEB75625683A83B160C8/mediasite.xzp
http://download.xbox.com/content/fffe07d1/files/966F2237415A6C9CFDFB2821A3AF99D3D27CE8F4/natalsu.xex
http://download.xbox.com/content/fffe07d1/files/2CD65090120CC552AF384CBBB9940A0E19FBFF92/nuihud.xex
http://download.xbox.com/content/fffe07d1/files/8C9FF5B864CF98AA1983736F3BE06470B3B9AE78/Xam.Community.xex
http://download.xbox.com/content/fffe07d1/files/D0BA5689D1A13FA5560A25F239C8935D84B08D0C/Xam.LiveMessenger.xex
http://download.xbox.com/content/fffe07d1/files/FE7A5F9EFA04A675CB14369C52D22640BD38FD52/Xam.WordRegister.xex
http://download.xbox.com/content/fffe07d1/files/B4D0FE21AD216A44E45E1BF1E43D699AD187DAF5/XimeDic.xex
http://download.xbox.com/content/fffe07d1/files/E4C2A6FDF84719676A51D306D916E1F2125AB71B/XimeDicCh.xex
http://download.xbox.com/content/fffe07d1/files/9CABF291723A63E89D7554A232D1924F289ED4E3/ximedicex.xex

This is where we now have problems, when placing those files in the $SystemUpdate folder we can not get the 360 to use them in the update process.

Using the 12603 update as an example:

su89433E9D8FC4B3B8FC5BBDDD943DE71FBED207E6.bin has been renamed to su20076000_00000000 - This file has to be renamed for the 360 to find the update and allow you to flash it.

Now on the leaked 12416 update which has working avatars the following .cab files have no file extentions, so I have removed them.

FFFE07DF00000001.cab renamed to FFFE07DF00000001
FFFE07DF00000002.cab renamed to FFFE07DF00000002
FFFE07DF00000006.cab renamed to FFFE07DF00000006
FFFE07DF00000008.cab renamed to FFFE07DF00000008

This is where I think we now have problems, it appears that in system.manifest the update process looks for a file called Xna_TitleLauncher.xex which we have not obtain by packet sniffing the update process.

This appears to be present in the 12416 update with working avatars (you can download that here: http://digiex.net/downloads/download-center-2-0/xbox-360-content/dashboard-updates/6652-xbox-360-kinect-dashboard-update-2-0-12416-0-avatars-download.html )

We also have a file called fffe07d1/c49408b9f1639f2866e18e4dcdb31d0538628c08.xcp which i'm not sure if something needs to be done with that or not.

Any thoughts on this?
Logged
qwertz13
Newbie
*
Posts: 1


View Profile
« Reply #1 on: October 24, 2010, 06:05:38 PM »

Quote from: InsaneNutter
Now on the leaked 12416 update which has working avatars the following .cab files have no file extentions, so I have removed them.

FFFE07DF00000001.cab renamed to FFFE07DF00000001
FFFE07DF00000002.cab renamed to FFFE07DF00000002
FFFE07DF00000006.cab renamed to FFFE07DF00000006
FFFE07DF00000008.cab renamed to FFFE07DF00000008
do not rename them.
for each file you have to extract its content without replacing. use winrar, if prompted, choose "rename all", so you get 70-100 files.
then merge them to one file. easily done in command prompt
Code:
copy /b $package+$package(1)+$package(2)+..+$package(97)+$package(98) MergedFile
then rename it to FFFE07DF00000001 and so on.

This is where I think we now have problems, it appears that in system.manifest the update process looks for a file called Xna_TitleLauncher.xex which we have not obtain by packet sniffing the update process.
system.manifest contains sha-1 hash of each file, so you can rebuild download link
http://download.xbox.com/content/fffe07d1/files/[SHA-1]/Xna_TitleLauncher.xex
Xna_TitleLauncher.xex would not downloaded because it was already on HDD. this file stayed unchanged in several updates.

We also have a file called fffe07d1/c49408b9f1639f2866e18e4dcdb31d0538628c08.xcp which i'm not sure if something needs to be done with that or not.
you can discard this one. it seems to be encrypted and packed cab file, after decrypting and extracting  it goes in cache directory of you 360, its name starts with "SU_".
this file contains sha-1 hash of main update file, having them we can rebuild the link to su89433E9D8FC4B3B8FC5BBDDD943DE71FBED207E6.bin.
so it seems to be just a downloader for su89433E9D8FC4B3B8FC5BBDDD943DE71FBED207E6.bin
Logged
Pages: 1
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.11 | SMF © 2006-2009, Simple Machines LLC

Valid XHTML 1.0! Valid CSS! Dilber MC Theme by HarzeM