Xbox 360 Homebrew Hacks - JTAG/RGH/RGH2/R-JTAG

Discussion in 'Xbox 360' started by Jordan, Nov 28, 2011 with 152 replies and 142,544 views.

  1. Jordan

    Jordan Numero Uno Retired

    Messages:
    16,452
    Likes Received:
    10,365
    In general, the understanding of unsigned code is extremely skewed, and is not truly understood. Basically, most people know that if you turn the Xbox on, go to game demos, you can start XeX menu. Well after reading a post where someone said that the RGH on a console was "cheaper" than a JTAG, I got frustrated because they don't understand that they are essentially the same. If anything, the RGH is better than a JTAG because there is no re-boot necessary to run the unsigned code. But lets get down to basics. If you would like a high detail explanation of each, go to free60.org and read through the explanations.

    Last Update : 5/29/2013 (RGH2 and R-JTAG Added)

    JTAG : Dashboard 7371 and Earlier
    What the online gaming community has come to know as a "JTAG" is an Xbox that utilizes the SMC exploit. This exploit causes a re-boot into the 4532 kernel. This kernel was made famous by the KK exploit (King Kong), where a bug in the hypervisor was utilized to run unsigned code. The SMC exploit is a faster version of the KK exploit (as in, it boots faster), and allows for the running of unsigned code. The SMC exploit is limited to consoles running kernels prior to the summer 09 update (7371). It is also true that there are several patched CBs, which prevent the exploit. Due to the need for a console which has not been updated, they are naturally scarce and once demanded a high price. Credits go to robinsod, tmbinc, SeventhSon, Martin_sw, and Tiros.

    RGH : Dashboard 14699 and Earlier
    The Reset Glitch Hack is a new type of method which allows the running of unsigned code. Explained by free60: "We found that by sending a tiny reset pulse to the processor while it is slowed down does not reset it but instead changes the way the code runs, it seems it's very efficient at making bootloaders memcmp functions always return "no differences". memcmp is often used to check the next bootloader SHA hash against a stored one, allowing it to run if they are the same. So we can put a bootloader that would fail hash check in NAND, glitch the previous one and that bootloader will run, allowing almost any code to run." This hack requires a "glitch chip", which will send the signal. These range from the original Coolrunner-II made by Digilent, the Matrix by Infinity Mod, Team-Xecuter Coolrunner, X360Glitch Chip by SoulHaven, and the Stinger by Maximus. These chips have an Xilink chip which is capable of sending the signal fast enough for the glitch to properly function. The benefits of the RGH is that it doesn't require a non-updated dashboard to run unsigned code, meaning you could run 2 or more NANDs, which allows you to run it as a retail with one, and run unsigned code with the other. It is also able to work on the Trinity motherboard (original slim motherboard), which the SMC exploit is not. This hack runs on almost any Xbox, which means that the only limiting factor is the number of Xboxs produced by Microsoft. Credits go to GliGli, Tiros, cOz, Razkar, tuxuser, and Ced2911

    RGH2 : All Dashboards
    Known as Reset Glitch Hack V2. This has always been used for Slim consoles, but was updated for use with Phat consoles after the 14717 dashboard update. It runs exactly the same as the Slim hack, but does boot slower since it was not created around that Phat console. The wiring is slightly different compared to RGH1. Since the release of R-JTAG, this hack is not recommended for Phat consoles. The major contributor to this hack is Team Xecuter.

    R-JTAG : Phat Consoles & Dashboard Minimum of 15572
    This is an update to the JTAG exploit. This exploit gives great boot times and allows for Dual NANDs, which the original JTAG did not (due to the efuses being blown). There is very little known about how this exploit works, as Team Xecuter did not release details about the exploit. They are currently the only manufacturer of the components required for the hack. All we know is that it works fantastic and is the best choice to use for Dual NAND or an Xbox that is unable to use RGH1.
     
    Last edited: May 29, 2013
  2. x Icewater101 x

    x Icewater101 x H2 Legend

    Messages:
    3,439
    Likes Received:
    876
    nice explanation
    I own a JTAG and a RGH and personally I favor the RGH more because it can be done on a slim. Reliability makes me not care about the 20 sec boot time. Slim>Jasper
     
  3. Niall47

    Niall47 Fire and Blood!

    Messages:
    3,954
    Likes Received:
    1,287
    Forgive my ignorance.
    So you can connect to live (as a retail) without a Cygnos chip on a RGH console?
     
  4. x Icewater101 x

    x Icewater101 x H2 Legend

    Messages:
    3,439
    Likes Received:
    876
    if you flashed back to a retail nand then yes you can
    cygnos makes it alot easier than flashing a nand every time
     
    2 people like this.
  5. Jordan

    Jordan Numero Uno Retired

    Messages:
    16,452
    Likes Received:
    10,365
    No. If you read the entire RGH explanation, it says that a dual NAND setup can be utilized. I was simply pointing out that signing onto Xbox Live, using a retail NAND will not jeopardize the ability for the console to still be vulnerable to the reset glitch hack. Where as, trying to sign onto Xbox Live using an exploited kernel (fbBuild or ggBuild), will cause the console to be banned. By signing into live on a 7371 kernel, you will be forced to sign onto Xbox live, which will render the console no longer vulnerable to the SMC exploit. That is what I was trying to get at.
     
    iPirate, Mr Crush and Niall47 like this.
  6. Dr Death

    Dr Death Contributor

    Messages:
    1,549
    Likes Received:
    212
    This will help educate allot of people of the differences and similarities between the two. You should pin this as i have seen allot of people asking questions about the differences.
     
  7. Dont Trip Noob

    Dont Trip Noob Trusted Seller

    Messages:
    3,729
    Likes Received:
    397
    I own both and if I had to pick one i would pick a RGH slim cuz it's you don't have that loud 12v mod fan you have a nice smooth console I know the console can take some time to boot but all I did was take out the DVD drive and the console boots just like a jtag now.
     
    Venom evil likes this.
  8. x Icewater101 x

    x Icewater101 x H2 Legend

    Messages:
    3,439
    Likes Received:
    876
    really?
    I'll have to try that even tho the boot times don't bother me and I'm out of jtags (sold my xenon to canine0022 on here)
     
  9. xSkyy

    xSkyy Gray Hat <3

    Messages:
    1,827
    Likes Received:
    191
    I am a proud owner of a RGH and no complains yet. :tongue: I do have the loud fan but my seller was going to put a resistor but I couldn't wait, I dont really mind the loud fan, I like noise :biggrin:
     
    Venom evil likes this.
  10. x Icewater101 x

    x Icewater101 x H2 Legend

    Messages:
    3,439
    Likes Received:
    876
    I changed my fan to a 92mm blue led fan thats being held down with electrical tape atm because I f***ed up cutting it lol. Sturdy enough to probably hold forever but I'm getting a new fan to cut incase I wanna sell in the future. Its 12v with a toggle knob and all the way up it keeps my xex menu temps in between 38-45 on my slim. Can't even hear it either its quiet as hell on max
     
  11. Dont Trip Noob

    Dont Trip Noob Trusted Seller

    Messages:
    3,729
    Likes Received:
    397
    Yes but RGH boots better fast here is a video as you can see i have the drive on put its like on top of everything after the video i put it back togther with no dvd drive and it boots just like a JTAG
    http://www.youtube.com/watch?v=ctki53MIAmw&feature
     
  12. x Icewater101 x

    x Icewater101 x H2 Legend

    Messages:
    3,439
    Likes Received:
    876
    Mine boots in around 10 secs. My slim is my new baby thank god for ggbuild lol. Never buying another jtag/jtagable since this glitch
     
  13. ddxcb

    ddxcb Contributor

    Messages:
    1,464
    Likes Received:
    195
    The RGH uses the SMC exploit as well.
     
  14. Twisted Impulse

    Twisted Impulse Seasoned Member

    Messages:
    2,724
    Likes Received:
    559
    There are pros and cons to both exploits. Consoles exploited using the SMC exploit are of higher value in my opinion because they can run older dashboard versions and kernels and as a result are much rarer than RGH consoles.
     
    ProfessorXmodz likes this.
  15. Jordan

    Jordan Numero Uno Retired

    Messages:
    16,452
    Likes Received:
    10,365
    No. It uses a modified SMC to infinitely reboot the console until it boots properly.
     
    xXBeefyDjXx likes this.
  16. THE QBN BEAST

    THE QBN BEAST Engineering the Future

    Messages:
    1,145
    Likes Received:
    124
    An excellent explanation, well done.
    :thumbup:
     
  17. Comrade

    Comrade 1/30/2014 Retired

    Messages:
    11,746
    Likes Received:
    5,344
    Nice explanation, but if I were to ether to do the SMC exploit or RGH to a console I rather do the SMC because I know how to install/solder it up better then the RGH way. Thats just me though.
     
    The Nintendo 64 likes this.
  18. Jordan

    Jordan Numero Uno Retired

    Messages:
    16,452
    Likes Received:
    10,365
    The RGH has alternate points as well, which come in handy. It may be harder to solder, but I like the versatility of the RGH.
     
  19. x Icewater101 x

    x Icewater101 x H2 Legend

    Messages:
    3,439
    Likes Received:
    876
    I like it being able to be done on slims and not getting burnt buying "RRoD JTAG-ables" on ebay that are on NXE dash or have blown capacitors.
     
  20. Pray For Blood

    Pray For Blood Just like being a real QB but without all the pain Premium

    Messages:
    3,012
    Likes Received:
    861
    Can you connect to live with this without ban?