Create glitchhack with first 2MB of NAND?

[Maniaxx]

Hallo,
is it possible to create a glitchhack just by the first 2MB of the nand like its possible with JTAG hack (get keys, flash XeLLous->write full dump)?

[fratslop]

It's recommended to get a full dump, But yes you can.

[Maniaxx]

Will the python script accept the 2MB image?

[guerrierodipace]

you can use autoGG for that, is very easy

[Maniaxx]

Thx. Will try that once i have all things together.

@fratslop:
This method also delivers a fulldump. Once xell is running a fulldump will be made over http and the 2MB block will be replaced with the unpatched one.

[nknave]

Thx. Will try that once i have all things together.

@fratslop:
This method also delivers a fulldump. Once xell is running a fulldump will be made over http and the 2MB block will be replaced with the unpatched one.

This is exactly how I do all my JTAG/Glitch hacks.

Beware of a glitch(not the hack) that happens when flashing via RawFlash v4, this has happened to me and it is why I warn.

Scenario: First 1.28mb of nand resides Xell Reloaded via .ecc image flashed, rest of nand contains the retail files untouched so that I backup via Xell's HTTP.

Sometimes, not always, as I have only seen it on JaspersBB and 1 trinity, where RawFlash begins to show badblock errors when writing, these errors report
in 3 flavors, 208, 210, and I forgot the other code.

Botom line is that when you open your original dump (reconstructed using the method you mention) it shows zero bad blocks, and I´m like   

So I tried remapping the blocks manually, or letting rawflash do the job and the console will always boot to BlackScreen, except for Xell.

Solution: ONLY DO THIS AFTER YOU HAVE THE FULL RETAIL BACKUP OF NAND!!!

- delete nand with nandpro via LPT
- flash image_00....00.ecc with the +w
- leave the rest of the nand empty
- flash using RawFlash v4

This will get rid of the errors and you'll flashing just fine.

[Maniaxx]

Thx, everything worked fine. The timing issues (cable/capacitor) really gave me a hard time but in the end its an instant glitch jasper now.

I've had no problems with missing bad blocks. My image shows 4 bad blocks (in 360_Flash_Tool) that were properly processed by Xebuild/rawflash.