ConSign Options

[Xbox-Scene]

ConSign Posted by Iriez | June 29 12:58 EST | News Category: Xbox360

A container file signature tool finally goes public.... What is it? ============ The CON file tool updates signatures found in Xbox 360 user content files ("CON" file). CON is the format used for saved games and settings. The tool requires a valid keyvault file to work. How it works: ============= In the keyvault of every Xbox 360 is a unique CON keypair that is used for signing CON files. The public key component of this keypair is signed by Microsoft to ensure that arbitrary keypairs cannot be used. A copy of the public key and its signature is stored in each CON file. This allows Xbox 360 consoles to verify CON files that may be signed by other Xbox 360 consoles.Because the signing keys are per-box, individual consoles can have their keypair revoked in firmware updates. For more information, see the source code included in the archive. What can it do? =============== The tool is not very interesting from the perspective of running unsigned code or Linux. It would require an exploit that is unlikely given the architecture of the Xbox 360.It is useful for activities such as porting saved game content from PC to Xbox. Credits ======= roofus & angerwound for proving it was possible and posting on xboxhacker.net the basic outline of how it works. Rene Ladan for package file research, including hash table research. No Credit ========= superaison & haxalot88 (ie Michael Kaufman of Talent, Oregon 97540) who stole this work in order to try to live up to fantasies of messing with Xbox Live and somehow making financial gain out of it, then trying to claim it as their own work. Official Site: http://xss.ath.cx Download: n/a (May be illegal under EULA/DMCA) News-Source: xbins.org

[xboxjason]

Hmm... This may lead to more exploit discoveries. Or maybe it's just wishful thinking.

~Jason

[Chimp5000]

I am a little lost as to what this is...

[CreisoN]

Please correct me if im wrong.



with this i might be able to get or change the key from a 360 that lost for some reason the dvd drive ?

Thanks in advance !

[I'dkickurass@cod2]

Ok, first off. I know superaison personally and he did not steal the code to write his own resigner. I've known this guy for 4 years and I would trust him over my friends I know in person. They also said he stole the code to write a Halo 3 forge map rehasher, but I can tell you he did not steal that either. Is it so hard to believe that he can write his own resigner? but yeah he was trying to sell it, I know that much. But so what, Any one of u would have done the exact same thing if u were offered $500 for it. So don't get all pissy just because someone else figured it out.

[leorimolo]

Ok, first off. I know superaison personally and he did not steal the code to write his own resigner. I've known this guy for 4 years and I would trust him over my friends I know in person. They also said he stole the code to write a Halo 3 forge map rehasher, but I can tell you he did not steal that either. Is it so hard to believe that he can write his own resigner? but yeah he was trying to sell it, I know that much. But so what, Any one of u would have done the exact same thing if u were offered $500 for it. So don't get all pissy just because someone else figured it out.

Yes he did, Haxalot basically killed two sites when he STOLE derived CON resigner, he started releasing then tout suparison how to make it...

[Burgleflickle]

No Credit
=========
superaison & haxalot88 (ie Michael Kaufman of Talent, Oregon 97540) who stole this work in order to try to live up to fantasies of messing with Xbox Live and somehow making financial gain out of it, then trying to claim it as their own work.

Name and addy nice!

. === )~ p3wned
_)

[No_Name]

Please correct me if im wrong.
with this i might be able to get or change the key from a 360 that lost for some reason the dvd drive ?

Thanks in advance !

Myabe if you would read the description of what this tool is for you would see you are so wrong to not even be close to to being right.

There is at the time of me making this post THERE IS NO WAY TO GET THE DRIVE KEY OFF THE MOTHERBOARD WITHOUT A WORKING DVD DRIVE.

Hopefully this will stop any more idiots who failed to read the description from posting the same question time and time again but I doubt it will.

This post has been edited by No_Name: Jun 29 2008, 09:15 PM

[Iriez]

Ok, first off. I know superaison personally and he did not steal the code to write his own resigner. I've known this guy for 4 years and I would trust him over my friends I know in person. They also said he stole the code to write a Halo 3 forge map rehasher, but I can tell you he did not steal that either. Is it so hard to believe that he can write his own resigner? but yeah he was trying to sell it, I know that much. But so what, Any one of u would have done the exact same thing if u were offered $500 for it. So don't get all pissy just because someone else figured it out.

Sorry, but superaison did not write this. He contacted me recently to tell me about his having it, and when I asked him if i could check it out he just responded with this:
"[13:06] superaison1: skatezero says :
[13:06] superaison1: Daniel =] - [-oh-em-gee--thats-hXc!-] says:
and dont give it out"

So apparentlly whoever daniel is (perhaps haxalot88) is the supposed 'author' of this tool. Please bear in mind that this tool was functional well over a year ago, with angerwound and 360gamesaves.net, just never public.

And as far as im concerned, anyone trying to SELL a tool that utilized public information is nothing but a complete low life. The information on how to resign containers was made public by angerwound a long time ago, just no one's bothered to give the effort until somewhat recently.

Im glad that their efforts have been crushed. Its people like these two that should not be involved in ANY type of development, nor recieve any credit for their obviously inappropriate actions.

[Ed_209]

Is this a tool to authenticate public gamesaves to work on your 360? If that's the case, I guess we are going to see a flood of people such as "StripClubDJ" that had a gamerscore of 120,000+. This will end up with Microsoft being more strict with how gamesaves are shared between consoles.

[TheSchonk]

Is this a tool to authenticate public gamesaves to work on your 360? If that's the case, I guess we are going to see a flood of people such as "StripClubDJ" that had a gamerscore of 120,000+. This will end up with Microsoft being more strict with how gamesaves are shared between consoles.

Im not sure if gamesaves is in the CON folder but it allows you to edit halo forge maps or whatever else is in there.

[Yappadappadu1000]

Would be great, if that way, I could use the same save games which I created for an earlier GT. Kinda sucks to have different save games for different profiles/GT's.
I'd also love it if that made it possible to download Top Spin 3 characters for those who are too lazy (read me) to play the career mode and are only interested in the online aspect of the game.

This post has been edited by Yappadappadu1000: Jun 30 2008, 01:32 AM

[JimmyGoon]

Who is derived? Their email address appears in the source.
*edit* Found out myself. Nevermind.

This post has been edited by JimmyGoon: Jun 30 2008, 03:37 AM

[Agent ME]

I know this is what lets hacked forge saves work for Halo3, so I assume now that all gamesaves are editable. I'm curious to see what this will bring with everyone able to mod things like forge saves (assuming they have the right hardware to interface to the HD or mem card), but I'm sure it's only a matter of time before we get hundreds of people with hacked gamerscores. (Even if you can't edit the profile directly, people could edit saves for games to mark that they should have an achievement or be right about to get achievements.)


But... ugh, where can we download it from? Is it at #xbins? The other site linked to needs registration...

This post has been edited by Agent ME: Jun 30 2008, 04:23 AM

[I'dkickurass@cod2]

Sorry, but superaison did not write this. He contacted me recently to tell me about his having it, and when I asked him if i could check it out he just responded with this:
"[13:06] superaison1: skatezero says :
[13:06] superaison1: Daniel =] - [-oh-em-gee--thats-hXc!-] says:
and dont give it out"

So apparentlly whoever daniel is (perhaps haxalot88) is the supposed 'author' of this tool. Please bear in mind that this tool was functional well over a year ago, with angerwound and 360gamesaves.net, just never public.

And as far as im concerned, anyone trying to SELL a tool that utilized public information is nothing but a complete low life. The information on how to resign containers was made public by angerwound a long time ago, just no one's bothered to give the effort until somewhat recently.

Im glad that their efforts have been crushed. Its people like these two that should not be involved in ANY type of development, nor recieve any credit for their obviously inappropriate actions.

Daniel is skate if u haven't figured that by urself by now. They both wrote it. He was obviously telling him not to give out their resigner to anyone. And no skate is not hax. Superaison has hardly anything to do with hax ever since he shelled his server and stole the SDK he had. Hax did not help in anyway with this. U do not have rock solid evidence to back up ur statement. All u are going by is what one person said. So u shouldn't be so hasty to yell out 'witch' in a matter of speaking.

FYI: superaison and skates resigner is sooo much better than derived's anyway. Rehashes, resigns, can change id's, saves ur id's, and has a keyvault already built in. =P

This post has been edited by I'dkickurass@cod2: Jun 30 2008, 05:44 AM