I was just wondering what the easiest way to do the JTAG hack on the the falcon motherboard is. I'm in college and dont really have the time to study all the documents and instructions regarding the hack itself since I have to focus on my school work. Before the semester started and right around the time the hack was released (late july/early august?) I read up on how to do it and it seemed pretty damn complex and took awhile to do.

Dont get me wrong Im not technologically illiterate since I hacked my own and my friends original xboxes, hacked my dvd drive on my 360, and have been messing around with PCs for the past 14 years, its just that I dont have the time to do this hack if it still requires a lot of time and reading.

Will the Infectus2 or cygnos360 v2 make the hacking go any easier?

if you can solder then add the ltp cable like in the xenon diagram
and bridge the points for the falcon then read the nand 2 or 3 time to make shore u have a good dump
then flash the hack just like every one is doing
its very easy and very easly lade out so that people that dont know any thing bout electronics can do it


infectus will make it so u have to do harder and more soldering but will speed up the dump

the cygnos2 will let u have 2 bios at one this will help if u are going to be switching between the to a lot it will also let u read/write with usb (faster) plus u dont need to mess with the onboard nand so all u do is solder write the hacked bios to the cygnos nand and ur done


i found all this out when in college did it wile in college and had spare time to tell u how to do it so i dont see why u couldn't

If you can't dedicate an hour to read on how to make the JTAG port and then solder it all together, you may as well not even bother doing it. This is a very simple hack. In 30 minutes I had the port thrown together. Took longer to dump the nand than it did to build the port. A Falcon board would most likely add 10 minutes to the overall time.

First and foremost, you will NOT BE ABLE TO USE THIS BOX TO PLAY GAMES IF YOU HAVE XELL FLASHED! It is recommended that you be sure you have a good dump to flash back to the xbox if you ever want it to play normal games again. One day we may not have to juggle flashes around but at this point we do.

This is the initial build that is universal for all boxes. Match the colors, disregard the numbers.




This picture here is for Falcon boards. This step HAS to be done for your board. Think of it as an extra key to unlock the door. You have to use a diode for these extra steps where you see the >| in the picture. Make sure you have the diodes facing the right direction.




Just solder it up using both pictures. If you have problems, you may need to add the diode that is mentioned in the first picture. I didn't need a diode. Using 10-12 inches of kynar wire per pin is sufficient and you want to try and keep the parallel cable as short as possible. If you have an old laptop like I did, you won't need the cable but you will find it wise to use the 100ohm resistors on the mentioned pins. If you do use a cable, the 100ohm resistors may cause a dumping issue. Don't be surprised if you're using an old computer and it takes forever to dump. It took me about an hour to make each dump, but the laptop I was using was an ancient Toshiba laptop with 64mb of ram and a Pentium MMX. Ancient stuff.

After this, get nandpro from the usual places and be sure that your parallel port on the computer is set to standard mode. Also install the drivers that came with nandpro. If that don't work after you tried all the steps, try a different mode. I had success with standard. I should also mention that on my very first try I had it working and was able to make two perfect identical dumps, so sometimes it may not even be necessary to change it.

Be sure to put Nandpro on the root of a drive. Use the command "nandpro lpt: -r16 'name of dump'.bin" and be sure to get two dumps. Use Winhex to compare both dumps. If both match, you're golden. If not, keep dumping till you get two that's identical. If you really don't care to have the 360 functioning like a normal 360 again, you can skip this. The 360's mainboard has to be plugged into power for this to work, but it does not have to be powered on.

To flash, use the command "nandpro lpt: -w16 'name of file'.bin" and that's all there is too it. If for some reason you STILL have a problem dumping the nand, try a different computer. Not all motherboards handle parallel ports the same. Some even have the pins reversed for some silly reason. It seems like a daunting task, but if you can use a soldering iron you can make this simple hack.

The only thing I'm not sure of is what Xell you need to flash it with. There are versions for the Falcon board. Don't worry about botching a flash or flashing the wrong file. The jtag port is meant to recover a flash if all else failed. If you can get it to be picked up by a computer, that nand can be flashed so long as it's not physically damaged.

Thanks for the info guys, I might go the cygnus route since I still want to be able to play games on my xbox.

You realise you will never be able to update to 849x even with a cygnus? You can keep playing current games but you won't be able to play on Live and you won't be able to play new games once they start coming with the 849x dash on the disc. The update blows efuses in the CPU, after which the exploit will no longer work.

Even now that the cygnus supports two NANDs?

http://www.xbox-scene.com/xbox1data/sep/Ek...pFEfTTyIXQw.php

I dont go on live anyway and it looks like my prayers for a simple JTAG hack have just been answered by cygnus since theyre integrating the JTAG hack into the cygnus360 V2

it dosnet have 2 nands

it has one and then u have one on the xbox the 1st cygnos was the same and if u have xell on one then update the other it will still update the bootloader and stop the kk exploit kernel from booting (witch is basically what the xell kernel is)

you can not update till there is a software salutation like a homebrew bootloader that will let both kk kernel and the new summer kernel run

See "efuses in the CPU". The cygnus doesn't support two CPUs

Thanks alot for your tut , I have recently done this to my Falcon and all worked out well . Thanks again

I spend a good day trying to get a good dump for the falcon. I keeped on getting Error: 250 reading block 3bf. I did 8 dumps with the same error.

I tried a xenon. With the same wires but had to do the 330 resistor as said, and I got 4 good nand dumps. Flashed it without a problem....

Can anyone shad some light on why the falcon will not dump right?

Yes I did the falcon way with the diodes and everything....

I got error 250 on line 119 every time I dumped .

So I dumped until 2 matched and went ahead .

I reflashed with one of the two identical nand and all is well .

ALL my dumps had the same error including the one i reflashed .

I read that a couple of errors are common .

This might be a dumb question but I do want to go on live. I just need to get my dvd key cause i fried my drive and here is my question there are 8 spots on the motherboard but only 7 on the port(missing brown 330hm resister) and how do you get the key once all this is connected? and do you have to have the 100ohm resistors?

You need nanpro20 to dump the nand and flash xell . Nanpro has a driver that you need to install make sure you install it before you hook up the lpt .

when you boot the xbox with the xell flashed the CPU key will show up on the boot screen . You can use a camera to take a snap of it .

then you use 360 flash tool 0.88 and load up the nand.bin and insert your CPU key and the DVD key will be extracted .

where does the other end of the diode go? i get the pin header hole part but the other end the blue dot covers two points

The other end of the diode doesnt go to the motherboard, it goes to pin 11 on the lpt connector (its colour coded, same as all the other points).

Cheers for that couldn't see it for looking also does anyone know how you do this via USB?

I have done it via usb. You'll need an Arm USB dev board (Olimex LPC-H2148) which you'll need to program 1st with an rs232 level shifter and the xspiflash.hex file included with nandpro.
Then wire up according to the nandpro readme file. The command is then NandPro usb: -r16 nand.bin to dump your nand.

this is doing my head in

got it wired right done2 dumps booth read ok and are compared the same

but

when flashed with falcon hack.bin i get 3 red lights as soon as i turn it on
is it because its not the right bin file i looked up my board and i identified it as falcon but which are the others with hdmi its possible i identified the board wrong

Did you remove power completely after flashing? (pull the power lead for a few seconds)

I have made several dumps and I can't get degraded to open any of them. it says can't read file. do you think I should continue dumping until degraded can open one before I flash xell. by the way my board is a zephyr.

Will a PCi lpt card work?