How to hack Orange box - Team Fortress 2

Discussion in 'Misc. Games Modding' started by wan5, Dec 21, 2008 with 986 replies and 100,019 views.

  1. wan5

    wan5 Seasoned Member

    Messages:
    497
    Likes Received:
    402
    How to hack Team Fortress 2 for xbox 360.

    What you will need,

    xplorer360 - To extract and inject the save file to and from the hdd or mu.
    wxPirs 1.1 - To extract contents of the usersettings file.
    Winhex - Or your prefered hex editor.
    Con Resigner - To rehash and resign your modified usersettings.

    First off this guide presumes you have transfered save files to and from your pc before, its not that complicated,
    there are hundreds of guides on conectivity on the net so i wont go into that in this tutorial.

    1, Open your mu or hdd in xplorer360 and browse to the orange box folder under your profile wich is called 4541080F,
    and extract your usersettings file.

    2, Open wxPirs 1.1 and extract the tf_config.cfg from your usersettings file, when your mouse hovers over the file
    the hex offset for the location will be shown, use windows calculators scietific mode to convert this to Decimal.

    3, Open tf_config.cfg with notepad, it should look like this,

    unbindall
    bind "A_BUTTON" "jump"
    bind "B_BUTTON" "reload"
    bind "X_BUTTON" "tuant"
    bind "Y_BUTTON" "togglescores"
    bind "L_SHOULDER" "invprev"
    bind "R_SHOULDER" "invnext"
    bind "BACK" "changeclass"
    bind "STICK1" "+duck"
    bind "STICK2" "voicemenu 0 0"
    bind "UP" "slot1"
    bind "RIGHT" "slot2"
    bind "DOWN" "slot3"
    bind "LEFT" "slot4"
    bind "S1_UP" "xmove"
    bind "L_TRIGGER" "+attack2"
    bind "R_TRIGGER" "+attack"
    bind "S2_UP" "xlook"
    cl_rumblescale "1"
    cc_subtitles "0"
    joy_pitchsensitivity "-1.0"
    joy_yawsensitivity "-1.25"
    joy_inverty "0"
    joy_inverty_default "0"
    joy_movement_stick_default "0"
    joy_movement_stick "0"
    hud_fastswitch "2"
    commentary "0"
    closecaption "0"
    skill "2"
    sv_unlockedchapters "99"
    volume "1.0"
    sn

    And here is a hacked example with noclip and god mode enabled for online use.

    unbindall
    bind "A_BUTTON" "sv_cheats 1"
    bind "B_BUTTON" "noclip"
    bind "X_BUTTON" "hurtme -100000"
    bind "Y_BUTTON" "togglescores"
    bind "L_SHOULDER" "invprev"
    bind "R_SHOULDER" "invnext"
    bind "BACK" "changeclass"
    bind "STICK1" "+duck"
    bind "STICK2" "voicemenu 0 0"
    bind "UP" "slot1"
    bind "RIGHT" "slot2"
    bind "DOWN" "slot3"
    bind "LEFT" "slot4"
    bind "S1_UP" "xmove"
    bind "L_TRIGGER" "+attack2"
    bind "R_TRIGGER" "+attack"
    bind "S2_UP" "xlook"
    cl_rumblescale "1"
    cc_subtitles "0"
    joy_pitchsensitivity "-1.0"
    joy_yawsensitivity "-1.25"
    joy_inverty "0"
    joy_inverty_default "0"
    joy_movement_stick_default "0"
    joy_movement_stick "0"
    hud_fastswitch "2"
    commentary "0"
    closecaption "0"
    skill "2"
    sv_unlockedchapters "99"
    volume "1.0"
    sn

    Make any changes you would like and save it. You can find new commands on google, they are the same as the pc server commands.
    sv_cheats 1 MUST be bound to a button, if you dont turn it on at the start of a match then no other hack will work.

    4, Open your usersettings file in winhex and goto the decimal offset you converted earlier, you will see in the ASCI code the cfg
    file. Open your saved tf_config.cfg in winhex press ctrl+a to highlight the file press ctrl+c to copy it to clipboard, switch back
    usersettings and press ctrl+b to write the data at the offset you found earlier. Save and close.

    5, Open up your con resigner and rehash and resign the usersettings file and transfer it back to your hdd or mu.

    Yes you can also modify the save file to unlock all achievments, simply use the command achievement_unlock_all and bind it to your desired button.
    Half life 2, episode 2, portal etc all have seperate .cfg file to edit, you can find and edit them the same way you did tf_config.cfg for
    Team Fortress 2. Only Team Fortress 2 requires sv_cheats 1 to be bound to a button.

    Enjoy and happy hacking!:biggrin:
     
    27 people like this.
  2. UKmonkey

    UKmonkey Enthusiast

    Messages:
    641
    Likes Received:
    32
    Sweet! THANK YOU very much joined a hacked server ages ago, was fun with low grav like the PC but my friends where there.
     
  3. 360Modder

    360Modder Enthusiast

    Messages:
    399
    Likes Received:
    19
    [the hex offset for the location will be shown, use windows calculators scietific mode to convert this to Decimal.]

    Ok can you explain this more i dont know how to convert it.
     
  4. wan5

    wan5 Seasoned Member

    Messages:
    497
    Likes Received:
    402
    1 person likes this.
  5. 360Modder

    360Modder Enthusiast

    Messages:
    399
    Likes Received:
    19
    when you actvate it what do you do just hit A and when? :thumbup:
    o and thanks for the conversion
     
  6. wan5

    wan5 Seasoned Member

    Messages:
    497
    Likes Received:
    402
    Once you spawn into your game press A to activate
     
    1 person likes this.
  7. 360Modder

    360Modder Enthusiast

    Messages:
    399
    Likes Received:
    19
    Its not activating it just makes him jump
    If you or some one could make a vid tut on how to do this that would be great
    Here are my settings is there somthing wrong


    unbindall
    bind "A_BUTTON" "sv_cheats 1"
    bind "B_BUTTON" "+reload"
    bind "X_BUTTON" "achievement_unlock_all"
    bind "Y_BUTTON" "togglescores"
    bind "L_SHOULDER" "invprev"
    bind "R_SHOULDER" "invnext"
    bind "BACK" "changeclass"
    bind "STICK1" "+DUCK"
    bind "STICK2" "voicemenu 0 0"
    bind "UP" "slot1"
    bind "RIGHT" "slot2"
    bind "DOWN" "slot3"
    bind "LEFT" "slot4"
    bind "S1_UP" "xmove"
    bind "L_TRIGGER" "+attack2"
    bind "R_TRIGGER" "+attack"
    bind "S2_UP" "xlook"
    cl_rumblescale "0"
    cc_subtitles "0"
    joy_pitchsensitivity "-1.0"
    joy_yawsensitivity "-1.25"
    joy_inverty "1"
    joy_inverty_default "0"
    joy_movement_stick_default "0"
    joy_movement_stick "0"
    hud_fastswitch "2"
    closecaption "0"
    skill "2"
    mm_hosted_games "0"
    mm_hosted_games_dropped "0"
    sv_unlockedchapters "99"
    volume "1.0"
    snd_musicvolume "1.0"

    Sorry for all the trouble i just want to get this to work.
     
  8. lovexbox

    lovexbox Newbie

    Messages:
    67
    Likes Received:
    3
    I love tut like this! keeping me busy :thumbup:
     
  9. ManBearPig06

    ManBearPig06 The Shiroyasha Retired

    Messages:
    3,493
    Likes Received:
    930
    nothing wrong with your settings, you must be putting it back in wrong. Highlight the cfg file in wxPIRS, and that's the offset you go to. Select all of your cfg file in a hex editor, copy, and select the same size in the usersettings file starting at that offset. paste, rehash, resign ect. I also change the cfg size listing, but that isn't necessary.

    To Wan, the only reason you don't need a bind for sv_cheats in portal is because you can just activate the in-game cheat codes to activate it for you :smile: Also, what kinda ****ty hex editor doesn't list the offsets in hex? Why else would you convert it to decimal? (also, do it manually, hex to decimal in my head mother****er, basic algebra):tongue:

    Here's a code for you guys that doesn't need sv_cheats to be activated in any of the orange box games :tongue: ' ent_teleport player'
    figure out what that does :tongue:
     
  10. wan5

    wan5 Seasoned Member

    Messages:
    497
    Likes Received:
    402
    I use winhex as my defualt hex editor, it does kinda suck but um used to it... it kinda feels like my spare room after all these years.
    As for working it out in my head... You obviously dont pound as much bud as i do!

    Merry Christmas folks!
     
  11. ManBearPig06

    ManBearPig06 The Shiroyasha Retired

    Messages:
    3,493
    Likes Received:
    930
    I probably smoke more bud :tongue:
    Math is fun for me, idk lol. And, if it works, it works, I was just wondering.
     
  12. lovexbox

    lovexbox Newbie

    Messages:
    67
    Likes Received:
    3
    In Winhex, when you click the offset panel, it change from decimal to hexadecimal and back.
     
  13. Dion

    Dion Banned

    Messages:
    12
    Likes Received:
    0
    Really need help on the winhex part.
    I got 0x00015000 and converted to 86016 but what am I meant to do on WinHex I do not see 86016 anywhere :S?

    Do highlight it from 00015000 in winhex down to where the text end at the side and replace it with the data from tf_config?
     
  14. bubblebuddyi

    bubblebuddyi Enthusiast

    Messages:
    238
    Likes Received:
    27
    I dont think you type the "x" letter. I did it myself for Left 4 Dead and first typed the x, but didnt find anything. Then i didnt type the x, and it worked fine.
     
  15. Lost4468

    Lost4468 Senior Member

    Messages:
    2,201
    Likes Received:
    1,727
    Did I brake all my resigners, because they where working like 20 mins ago and now there broke :O.
     
  16. Otaku Se7en

    Otaku Se7en Se7enVeteran

    Messages:
    5,298
    Likes Received:
    1,175
    As in no longer working?

    EDIT

    They may have simply changed it online to where you can no longer mod user settings.
     
  17. Lost4468

    Lost4468 Senior Member

    Messages:
    2,201
    Likes Received:
    1,727
    No it was all ok then the file suddenly went corrupted, I tried deleting it and getting the game to make a new file, then modify that file, but even if I resign and rehash then put it back without modifying anything in it then its still corrupted. It was workign like 30 mins ago, now its not WTF.
     
  18. Otaku Se7en

    Otaku Se7en Se7enVeteran

    Messages:
    5,298
    Likes Received:
    1,175
    Maybe someone else will post something.
     
  19. Lost4468

    Lost4468 Senior Member

    Messages:
    2,201
    Likes Received:
    1,727
    I now have another problem, the game crashes after i load user settings.
     
  20. dschu012

    dschu012 Senior Member

    Messages:
    758
    Likes Received:
    380
    Well wan5 I don't wanna steal your thunder or anything but I made a program to do most of the steps for you. Just unzip open the program and select your UserSettings file. It will then have a box which has the names of all of the files in the UserSettings file. Select tf_config.cfg and edit away. When done click the button to save and then rehash and resign the file. I haven't really tested it thoroughly but it has worked for me the couple of times I have used it. If you find any bugs let me know.

    Link: MEGAUPLOAD - The leading online storage and file delivery service


    [​IMG]

    Wan5 feel free to use this in your tut at the top if you like it.
     
    18 people like this.