Announcement of the “Ultimate Dashboard Exploit”!
(Devised by Pedro - Achieved by Rmenhal)

Q: What is the Ultimate Dashboard Exploit (UDE)?
A: Not to use a Dashboard.

The result? The “Ultimate Dashboard Exploit” allows the booting of a habibi signed XBE, with no risk of a clock loop.

• Pros:
  • Directing booting to Linux/PBL/Evox, etc.
  • No risk of clock loop.
  • Can still use custom sound tracks in games (the M$ Dashboard can still be accessed from Evox).
• Cons:
  • No Dashboard access to the XBOX!Live console.
  • No XBOX!Live game access to the XBOX!Live console.

It achieves this by not actually booting a Dashboard at all, but by booting another M$ signed XBE, with the appropriate flags set to enable it to run from the hard disk. The actual XBE exploited is the C:\xodash\update.xbe, installed by the “updater to Live 1.0 Dashboard 4920” that is part of the original XBOX!Live startup kit, and shipped with most of the early XBOX!Live games (Splinter Cell, etc.).
There are a few different versions out there. Ensure you use the right expoit font for the right update.xbe!

Q: Why "Ultimate" Dashboard Exploit?
A: At the time, I doubted that a Dashboard exploit for Kernel 5713+ was possible. Hence my belief that this will be the “Ultimate Dashboard Exploit” - during the XBOX v1's lifetime. I use the word "Ultimate" to mean "Being last in a series, process, or progression", and in no way to claim any superiority. [definition]. As it turns out we were able to build on these ideas and produce a UDE2 for K:5713+ owners .

Only attempt this if you're confident that you can recover from your actions.
Warning: This version of the exploit does not work on Kernels that prevent the execution of pre-live Dashboards, such as K:5713 or higher! Owners of K:5713+ XBOXs should look at the UDE2

To install the “Ultimate Dashboard Exploit”:

• 1st BACKUP YOUR XBOX DRIVE C – via FTP access granted by a game-save exploit.
• Rename your C:\xboxdash.xbe to C:\MODxboxdash.xbe. See below.
• Copy Dashboard 4920’s C:\xodash\update.xbe to C:\ and rename it C:\xboxdash.xbe.
• Copy the correct UDE font for your system (linked below) to C:\ (do not rename the fonts, just keep the font named "bert_ate_ernie-generic.xtf" or "bert_ate_ernie-xxxx-01.xtf" - renaming the font can stop it working) - Ensure that there are no other XTF fonts are present in C:\
• Rename C:\fonts\ folder to C:\f0nts\ (note the zero replacing the letter ‘o’)

This is all you need to boot a habibi signed E:\default.xbe! (Your Linux loader, PBL, Evox, etc.).

An optional extra, necessary to be able to launch the M$ Dashboard:

• Hex edit C:\MODxboxdash.xbe (the original C:\xboxdash.xbe you renamed above), and Hex edit the 2 occurrences of "fonts\" to "f0nts\" (note the zero in place of the 'o'). "fonts" in Unicode is 66 00 6F 00 6E 00 74 00 73 00

The M$ Dashboard can now be reached by launching C:\MODxboxdash.xbe (via Evox, etc.) - for setting ya clock or copying custom sound tracks, etc.

See how it compares to the other Dashboard exploits at the Dashboard Exploit Summary thread.

The history of the development of this exploit can be read in the, increasingly inaccurately titled, "Working Easter-egg Exploit" thread.

If you're not confident in your technical abilities, or find anything here confusing please wait for one of the _Packages to be released/updated at the 'usual places'.

For early adopters, here are the links to the files.

Revision History:
V1.0 - 2004-05-22 - rmenhal - First release.
V1.1 - 2004-05-25 - rmenhal - Enlarged to work with more kernels.
V1.2 - 2004-05-26 - Grospolina - Reformatted.
V1.3 - 2004-06-11 - rmenhal - Auto ClockSet routines added.
V1.4 - 2004-06-11 - Angerwound - TrayState Decision Making added.
V4 - 2004-06-14 - rmenhal - Kernel-specific fonts for versions: 3944.01, 4034.01, 4627.01, 4817, 5101.01 and 5530.01. [release note]
V5 - 2004-06-20 - rmenhal - Latest and greatest fonts. Includes fonts for both the 1914880-byte and 1974272-byte update.xbe.
V6 - 2004-06-21 - rmenhal - Improved support for the 1914880-byte update.xbe. [release note]
V7 - 2004-07-09 - rmenhal - Supports XBOX Chinese language setting.

Extras:
V1 - 2004-06-15 - rmenhal - External tray-state branching utilities.
V2 - 2004-06-16 - rmenhal - External tray-state branching utilities - updated code. [release note]
nkpatcher - Benefits of PBL for kernel 5530 users - now in own thread!

To extract the files from the posts:
1. Cut and paste the code into a text editor (Notepad, etc)
2. Take note of the filename on the first line of the fragment
3. Save the text file as [filename].b64
4. Open the [filename].b64 file using ICEOWS, or Winzip (v8+)
5. Save the extract the UNKNOWN.001 file listed to a disk folder
6. Rename UNKNOWN.001 to the [filename]
7. If the filename extension is .bz2, or .rar, WinRAR will open it and let you extract the files within. If the filename extension in .zip, WinZip will open it and let you extract the files within.

Also, see ldots Memcard UDE installer/uninstaller package, and his Ude Package For Xboxhdm, Easy install if you dont have a memcard.

So we will need to sign every xbe with habibi to run games, emus, apps?

i think u have been writing 4290 in your first post instead of 4920!

Also, any chance that sum1 can host teh font file?

I will be happy to do it, if sum1 can upload it to me, ill host it happily ona fast server.

let me know guys.

THANKS PEDROS (and rmehal of course)

"Dashboard exploit summary" thread now updated with "Ultimate Dashboard Exploit" details.

See Dashboard Exploit Summary

Oooh, looks like fun.

Might just wait a bit for more devolopment on it though so I don't accidentally get a $300 paperweight

Also, I wouldn't call this the "ultimate Dashboard exploit" because I see there to be 2 types of exploits (no not font an audio), automatically launched and user launched. I personally prefer the user launched exploits like DD, booting to an unmodded state first. Maybe "Ultimate Font Exploit"

And wouldn't ernie eat bert? Ernie was the bigger one wasn't he?

I already posted in the other thread as others did, but K: 4034 and D: 4920 definately have zero problems. I really see no need to wait for development as long as you can recover yourself from accidental problems like forgetting to copy a file. As long as you follow the instructions you should be fine.

BertAteErnie -> PBL 1.4.1(x2.4983) -> AvaLaunch .....

Forgot to mention I left my box unplugged for a bout 2 hours and then turned her on and no clock loop if any of you are unsure.....

K:5101
D:4920

& zero problems

EC

this topic deserves a good old pin and front page anouncment

Yes please do pin this.
K:4034
D:4920

This works flawlessly. Beautiful job. I think it would be a good idea to try to get a package hosted in "the usual places" that has the new (update) font file. It would also be nice if the package could include the 4920 dash but I don't think "the usual places" allow M$ code so that's probably not going to happen.

Pinned as promised, I believe we have finally made it

-devz3ro

http://sh0x.tk/

awesome! this truly is the ultimate exploit!
outstanding work pedro & rmenhal

This should definitely go on the news page

Hey gotta say well done, big step in the xbox life here. 1 small step for man 1 kickarse big jump for xbox =)
and to top it u got it pinned well done thanks to PedrosPad and rmenhal no order meant there u have both been a life saver =)
new quote i think " Live Long and Exploit" M$ reply "resigning is futile!"

pedro;
Can you explain how this works? Does dash update just load your chosen XBE, then is the xbe exploited?

Congratulations running here perfectly!

K:4034
D:4920

If there is a c:\fonts directory but not .xtf files in it, will update.xbe fail? The reason why im asking is because id like to run a modified tHc lite dash that looks for .fnt files in the c:\fonts directory.

Incredible find (seems amzing nobody thought about the update xbe that way b4 though) but just fu!@#ng incredible

Im so happy u found this props to both of u

as far as Ultimate though -- i dont see it as it doesnt work with 5713 (that would be Ultimate)

I was more pleased with the Update exploit title - seemed far more fitting

BUT who really cares (ITS DAMNED FANTASand i guess theres always the Ultimate dashboard Exploit the 2nd (call it .JR if that happens, like fahter and son) j/k lmao


GREAT JOBS

I don't know what i could possibly be doing wrong, but i cannot get pbl to load, my xbox just stays at the xbox loading screen on boot up. Any suggestions?
K: 3944
D: 4920

Hi All,

I have read up on the instructions on how to use this exploit but having some issues when I try to load the BIOS. I am using the PBL 1.41. I get to the Phoenix Loading Screen but when I select the xboxrom.bin file, I get a elongated green screen of a pipe or something. I have tried to use a couple of Executer bioses by renaming them to xboxrom.bin under E BIOS folder but then I get a bunch of hexadecimal which leads me to think either I have the wrong keys or something.

Any ideas on what could be the problem? It looks like the Phoenix Bios is loading but either the boot.cfg is bad or I am missing something. If anyone has this seutp, can you PM me with the correct bios and boot.cfg file for this Xbox. My xbox is not 1.0 or 1.1 but not sure if its either 1.3, 1.4, or 1.5 Manufactured around 11 2003. I have K 5101 and D 4920.


Thanks!

Kind of off topic but related (sort of)

When i try to run config magic, i don't get on the on screen info display.. but it worked before when using the DD exploit. Is it possible that configmagic uses the font files? I can still access the settings tab by pressing start to back-up info, lock/unlock hdd etc...

Can someone verify if this is exploit related or did i fubar something on my system.

I fallowed ur new instructions to a TEE and now it sits at the xbox boot screen (with the white letters under it) wont even boot retail games (looks like a hot-swap) worse than loop by the way which has always come out


anyway what did i do wrong

-was i supposed to have a pre 4920 dash and only use the 4920 update.xbe (cause i was using 4920 dash and instructions dont say thats a prob)

-did i mess up by deleting fonts from C or was i supposed to rename the xft extention (if so that should be cleared up)

-cant think of anything else as i fallowed ur directions (not sure how the one 3KB font works to load anyhing casue i aint getting anyhing (should it be bigger)

-also i was using a fresh 4920 dash no changes (did ur testers modify exploited setups)

- Im not sure how i screwed up as other ppl have had success (and this is the first time ive ever messed up on an exploit) and the instructions are so simple

renamed fonts folder to f0nts folder, erased fonts in c, put in the bert ate ernie font i extracted, and put a signed PBL 1.35i with a bios set to load unleashX from e (but it doesnt even get to PBL so the bios dont really matter)


PLEASE PLEASE PLEASE help me figure where i went wrong (((DAMN DAMN DAMN HOT-SWAP)))

Did you put the bert_ate_ernie file in c: or c:fonts?

GOD DAMMIT i just read the instructions for the fifth time b4 i saw that default xbe goes in E (what the hell is my prob, no more exploits when im dead tired)


ok I see where i went wrong (that other dude with the hanging screen probably did the same thing

MY BAD (i did it to myself) gotta learn to read

just a thought u might wanna emphazise the E deafult load derectory as ppl like me who are too damn comfortable with previuso exploits dont make dumb ass mistake (not ur fault just cant hurt)


anyway im sure the exploit is kick ass, but now I wont know till i rip my xbox open and fix this damn thing

(can anyone reccomend a good guide for hotswapping to get one file moved not even created, just curious)

Violent Bong IM pretty sure u put ur default.xbe in the C folder not the E folder


(thats the mistake I made and am in the same situation as u) and mad as hell at myslef about it

I use the best of both worlds mod, I take it the evox file I use to boot from there is the signed habibi evox file..... if so this is a damn fine and damn easy mod!

So am I ok to use this or do I have to sign it myself?

Genius.

Only just tried it but got it booting to MXM no problem.

Will now try leaving it unplugged for a while to check for clock loop.

d: 4920
k: 5101

Nope, i have a habbi signed pbl named default.xbe in E. But i will try deleting the unneccessary font files from my C partition.

Found something interesting

in my earlier post u can see that i put the signed default PBL exe in the C folder instead of E

I was furious at myself cause it wouldnt even load a retail game it would just sit at the boot logo (I though id have to hot-swap for sure)

but i had a hunch to leave it unpluged and let the clock die for some reason just to see (I never thought it could make a difference since the dash is never really loaded, so the clock.xip is never loaded

But nonetheless i plugged it back in an hour later and whala, retail games boot again (im saved from nasty swap)

I just though this was rather interesting and is crutial for anyone like me that doesent know how to read intstructions (lol)

wonder what could cause the loss of a set clock to allow booting when it wouldnt before (hmmm)

Fugget ignore all my posts for the days i guess (cause im tired as hell and probably crazy and who knows maybe i didnt boot it back on with a game in the drive already before cause i was freaking out, but im 99 percent sure i tried a retail game 3 times before i unplugged it at first)

Its jsut kinda weird cause every other time ive let my clock die it would do the loop (a few times at least anyway) and couldnt boot retail till it came out of the loop, but now with the loss of the clock it still seems to be able to boot since the dash isnt trying to load or set the time. but it is true that i cant imagine how letting the clock die would allow retail booting when it wouldnt when it was set. (thats why im doubting myself when i say it wouldnt boot the games at first) But i truley am almost certain i tried and it wouldnt boot (thats what caused me to freak out)

Anyway Keep up the good work with this thing (and ppl please dont be diswaded from this exploit cause of my mistakes) the thing does work good and proper.

and is easily recovered even if u do what i did.

all we need now is a good package.


...devzer0....

heheehhehehe

thanks

OK you all twisted my arm enough so I'm going to try it

Anyway, it's a pretty exploitable xbox, K:4034 D:4920. Just need to find my old update.xbe file. I get a feeling it was replaced with a new one when Rainbow Six decided it would update my dash for me (and screw my exploits up )

Note to self, always delete update.xbe and dashupdate.xbe from game discs from now on before playing.

i have the original ms dash shipped with xbox v1.0 and if i try update it using a live-enabled game it says 'Update failed' and so can't get my dash up to 4920! any suggestions? i already got a modded xbox, just wanna get rid of my temperamental chip!

damn, can't get this to work.

I started with my standard dash, then I put in splinter cell (normal version) and I goto download levels. It updated my dashboard to 4920.

Then I copy the update.xbe file from c:\xodash to c:\ and delete the xboxdash.xbe file that is there. Then I rename the update.xbe file to xboxdash.xbe.

Then I turn my xbox off and on to see what happens. And yes, it loads the update.xbe file. It says: 'update done...' or something like that.

Then I copy bert_ate_ernie.xtf to C:\ and my xbox hangs at the xbox logo with the white MS letters. Then I put the bert_ate_ernie.xtf also in c:\fonts and still it hangs

Anyone can help? I have a 100% good signed default.xbe file in e:\ but it seems like I have the wrong update.xbe file :S

you need to rename the fonts folder to f0nts (zero instead of the letter o) and you need to rename the fonts in the root of c to something else like .xft or .bak so it is forced to load the bert ate ernie font. And you don't need to delete the xboxdash.xbe. just renaming it will work just ass well and it's much easier to recover later.

*edit* too late

ive been setting all the files up to install when i get out of bed i know im lazy
but when it come to hex edit the MODxbox.xbe or what ever its called i cant seem to find the 2 fonts sections to chance this make me worry about loading it to my xbox as it might not boot up yes its the right dash and i only load 1 xtf file which is a hell of a lot smaller then the old font files?

ok, here's my index of C:\

folder: 'Audio'
folder: 'f0nts'
folder: 'xboxdashdata.10027100'
folder: 'xodash'
file: 'bert_ate_ernie.xtf'
file: 'settings_adoc.xip'
file: 'xboxdash.xbe' (is the update.xbe file from c:\xodash)

So there are no fonts anywhere except in C:\ I just deleted the other font files.

And still this does not work Every other exploit worked perfect for me...