Firmware hack

PhunkMaster · 11-22-2006, 05:18 PM

I don't know much about modding, but I noticed that on the firmware there is a cab folder with .bin's inside of it. You might be able to change the firmware before it gets put on the device? Just an idea.

lpxxfaintxx · 11-22-2006, 05:22 PM

I looked inside... it was way too confusing for me

We need a pro..

PhunkMaster · 11-22-2006, 05:24 PM

Mys? I also found a link with some tool names maybe it will help?
http://zunerama.com/forum/index.php?topic=599.0

11-22-2006, 06:04 PM

I need a copy of the stuff inside the folder, at least to be able to tell you what it does.

PhunkMaster · 11-22-2006, 06:06 PM

You want a copy of what inside the .cab file? I can e-mail it to you. Or you can probly DL from the firmware thread.

PhunkMaster · 11-22-2006, 06:27 PM

It might not be much but I notced that you can see the Zune in device manager. You acctualy have to view hidden devices but there is alot of hardware information in there. Does that help anyone?

lpxxfaintxx · 11-22-2006, 06:30 PM

Here you go: http://www.yourfilehost.com/media.ph...e=FIRMWARE.zip

BTW, if I give you virtual access to my computer, will you have access to ALL files, or is there a way to limit your usage?

PhunkMaster · 11-22-2006, 06:41 PM

If you have true remote desktop I think you have complete comtrol of all files. I use server 2003 so I know I have more settings then a normal XP.

DUI_ · 11-22-2006, 10:24 PM

Quote:

Originally Posted by lpxxfaintxx

Here you go: http://www.yourfilehost.com/media.ph...e=FIRMWARE.zip

BTW, if I give you virtual access to my computer, will you have access to ALL files, or is there a way to limit your usage?

all files, but you can set time limit of how long they have access to your comp

thefinalprophecy · 11-23-2006, 12:02 AM

is that for someone who wants to hack the zune but doesnt actually have a zune?

PhunkMaster · 11-23-2006, 12:06 AM

Yea pretty much. Some people don't have the money to acctualy hack it but are willing to try.

putis · 11-23-2006, 09:36 AM

Videl has the money and resources, she's just a lazy sh*t.

PhunkMaster · 11-23-2006, 09:38 AM

markiempje · 11-24-2006, 03:58 AM

i want to hack it but my zune is still somewhere in a plane to holland where i live... ordered it on the 13th... hmm i want my zunnnneeeeeee so badly

Mark

BiGbrother13 · 11-24-2006, 05:18 AM

Quote:

Originally Posted by Mys Videl

I need a copy of the stuff inside the folder, at least to be able to tell you what it does.

There are three files, probably assembled with Platform Builder.
EBoot.bin - Bootloader
nk.bin - OS Image file (IMO Windows Pocket Media Center template with custom Shell and drivers for WiFi)
Recovery.bin - probably need to restore device with dead bootloader or maybe for "hard reset", cant say for sure now

Dominomask · 11-28-2006, 09:51 PM

A firmware hack might be difficult. Take a look at Freescale's whitepaper on the security features in the micro.

http://www.freescale.com/files/32bit...SECURITYWP.pdf

Summary: It has a ROM boot loader that can verify the signature on the external "main" boot loader before passing execution to it. It also has a mechanism for disabling or restricting access to JTAG on production units. If Microsoft is using these features, before you could even think about using your own patched firmware, you'd need to find a flaw in their security implementation that could be exploited.

On a side note, take a look at the strings in the boot loader firmware. It looks like there's some code in there that was used during development for loading kernel images into RAM via TFTP. I doubt this would help get around any security implementation, but it's interesting none the less.

PhunkMaster · 11-28-2006, 09:53 PM

Good find

11-29-2006, 09:48 AM

Quote:

Originally Posted by putis616

Videl has the money and resources, she's just a lazy sh*t.

True that. What have we found out on this? I'm going to start the work with Phunk again tonight, if he is online.

PhunkMaster · 11-29-2006, 01:40 PM

Quote:

Originally Posted by Mys Videl

Quote:

Originally Posted by putis616

Videl has the money and resources, she's just a lazy sh*t.

True that. What have we found out on this? I'm going to start the work with Phunk again tonight, if he is online.

I get off at 11pm central time. Should be home NLT 11:30pm (Stupid Mandatory overtime)

11-22-2006, 05:22 PM	#2 (permalink)
lpxxfaintxx Administrator Ultimate Zuner Join Date: Jul 2006 Location: Fullerton, CA Posts: 5,832 Reputation: 247	RE: Firmware hack I looked inside... it was way too confusing for me We need a pro.. __________________ To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts. To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts.

11-22-2006, 06:04 PM	#4 (permalink)
Mys Videl Posts: n/a	RE: Firmware hack I need a copy of the stuff inside the folder, at least to be able to tell you what it does.

11-22-2006, 06:30 PM	#7 (permalink)
lpxxfaintxx Administrator Ultimate Zuner Join Date: Jul 2006 Location: Fullerton, CA Posts: 5,832 Reputation: 247	RE: Firmware hack Here you go: http://www.yourfilehost.com/media.ph...e=FIRMWARE.zip BTW, if I give you virtual access to my computer, will you have access to ALL files, or is there a way to limit your usage? __________________ To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts. To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts.

11-23-2006, 12:02 AM	#10 (permalink)
thefinalprophecy Experienced Zuner Join Date: Nov 2006 Posts: 159 Reputation: 10	RE: Firmware hack is that for someone who wants to hack the zune but doesnt actually have a zune? __________________ To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts.

11-24-2006, 03:58 AM	#14 (permalink)
markiempje Squirt Join Date: Nov 2006 Posts: 13 Reputation: 10	RE: Firmware hack i want to hack it but my zune is still somewhere in a plane to holland where i live... ordered it on the 13th... hmm i want my zunnnneeeeeee so badly Mark

11-28-2006, 09:51 PM	#16 (permalink)
Dominomask Zewbie Join Date: Dec 2006 Posts: 2 Reputation: 10	RE: Firmware hack A firmware hack might be difficult. Take a look at Freescale's whitepaper on the security features in the micro. http://www.freescale.com/files/32bit...SECURITYWP.pdf Summary: It has a ROM boot loader that can verify the signature on the external "main" boot loader before passing execution to it. It also has a mechanism for disabling or restricting access to JTAG on production units. If Microsoft is using these features, before you could even think about using your own patched firmware, you'd need to find a flaw in their security implementation that could be exploited. On a side note, take a look at the strings in the boot loader firmware. It looks like there's some code in there that was used during development for loading kernel images into RAM via TFTP. I doubt this would help get around any security implementation, but it's interesting none the less.

Advertisement