What's new

Tutorial [Guide/TuT] R-JTOP (open source R-JTAG) *Phat only*

J

JoinTheResistance

Dead to the world, alive for the journey...
Messages
4,670
Reaction score
1,082
Let's start off by saying that R-JTOP shouldn't be your first choice when exploiting/hacking your console. There are other better alternatives, like RGH1.2, for example. Now R-JTOP has it's uses, like an alternative for consoles that don't work well with RGH. The reason why I say that this shouldn't be your first option is that, R-JTOP isn't very popular and therefore has less support and less/no feedback. It also requires more hardware than something like RGH1.2 for example. That being said, if setup correctly it will give you the same functionality as the other, RGH based exploits.
I have one more piece of advice I can give you before I start this guide. If this is your first time hacking a console, please do yourself a favor and try RGH1.2 or RGH2 with an ACE board first.

Let's start! Keep in mind that this guide is meant for people that generally know what they are doing, and are familiar with the basic process of exploiting a console.

A list of compatible consoles:
Some Xenons* => 15572
*Canadian CPUs should work, but due to the lack of feedback there is no way of knowing without trying it.
Some Zephyrs* => 15572
*Canadian CPUs should work, but due to the lack of feedback there is no way of knowing without trying it.
All Falcons => 15572
All Opuses* => 15572
*There's no feedback saying that R-JTOP is compatible with Opus consoles, but in theory it should work, since the Opus is mostly a Falcon without an HDMI port.
All Jaspers => 15572

Hardware requirements
A compatible console
Soldering hardware
A few cables
2x 1n4148
A way to read and write to the nand*
A JR programmer or a Matrix nand flasher is recommended for this
A xc2c64a based glitch board (CR rev C/D, Matrix Glitcher V1/V3 etc.)*
You can also use a board with a different CPLD chip, like the x360 ACE and the DGX/RGX, but you will need to compile the files for that particular chip yourself.

Software
Jrunner
[Click here to view this link] (Old, lots of ads on the website)https://1fichier.com/?w7wfcnetit
R-JTOP source, if you want to compile your own files.

Step one: Getting matching nand dumps
Connect your nand reader to your console and your PC, open up Jrunner and do at least two nand reads. If the dumps are the same you can continue.

Step two: Creating and flashing Xell
Select JTAG, then R-JTAG and click on "Create Xell-Reloaded". After it creates Xell, write it onto the console by clicking on "Write Xell-Reloaded"

Step three: Programming the glitch chip
Connect your glitch chip to your programmer and your programmer to your PC. Open Jrunner, go to "Advanced", then "Custom Nand/CR functions", check "Xsvf", select the file you wish to flash and click on "RUN"

Step four: Installing the glitch board and the JTAG wiring
Below are the install diagrams for the CR rev C/D, the Matrix glitcher V1 and V3 and for the cr3 lite. If you have a different board, you need to connect your VCC, GND, POST, PLL_BYPASS, STBY_CLK* and CPU_RST points to the motherboard.
*Only connect the STBY_CLK, if your board doesn't have an onboard oscillator.
Coolrunner rev C and D
Zephyr, Falcon, Jasper


Xenon


Matrix Glitcher V1 and V3

Xenon


Zephyr, Falcon, Jasper


Step five: Getting the CPU key and building the hacked image
Power on the console and get the CPU key from Xell, enter it in Jrunner, make the hacked image and flash it onto the console.

Thank you fore reading! :smile: I hope you found this guide useful and helpful! If you find it confusing check out my RGH1.2 tutorial, which is more noob friendly. Also, keep in mind that this is a guide, meant for people who have experience with RGHing and JTAGing and just need a quick reference.
 
Last edited:
H

HuskerHeaven

when I took his glass of champagne...
Staff
Messages
8,251
Reaction score
3,379
Just tried it on a zephyr with canadian CPU. Didn't work. Also tried RGH1.2 and S-RGH. Guess it was just a stubborn one. I'm gonna give it a go on a suborn opus next and see how it goes. The Opus is just inconsistent on RGH1.2. It boots 3-4 time instant, then doesn't boot at all twice, then will boot again instant a couple times. Gonna see if R-JTOP settles it down a bit.
 
J

JoinTheResistance

Dead to the world, alive for the journey...
Messages
4,670
Reaction score
1,082
Just tried it on a zephyr with canadian CPU. Didn't work. Also tried RGH1.2 and S-RGH. Guess it was just a stubborn one. I'm gonna give it a go on a suborn opus next and see how it goes. The Opus is just inconsistent on RGH1.2. It boots 3-4 time instant, then doesn't boot at all twice, then will boot again instant a couple times. Gonna see if R-JTOP settles it down a bit.
Let me know how it goes! :wink:
 
A

alimadhi

Newbie
Messages
3
Reaction score
0
thank you sir
please how to compile files ?
 
J

JoinTheResistance

Dead to the world, alive for the journey...
Messages
4,670
Reaction score
1,082
thank you sir
please how to compile files ?
I've provided pre-compiled files, if you want to compile files for a different chip, then use google. I've never really bothered to figure it out, so I can't help you here.
 
A

alimadhi

Newbie
Messages
3
Reaction score
0
I've provided pre-compiled files, if you want to compile files for a different chip, then use google. I've never really bothered to figure it out, so I can't help you here.
Strange You've compiled files i give you the money if you want
 
J

JoinTheResistance

Dead to the world, alive for the journey...
Messages
4,670
Reaction score
1,082
Strange You've compiled files i give you the money if you want
No, I haven't compiled any files. The files posted here were compiled by someone else, which is why I can't help you with your issue, sorry!
 
X

XeFalcon RGH

Enthusiast
Messages
296
Reaction score
66
when we create the image do we tick JTAG? I have a feeling that's a yes, just need to make sure before i make this rjtop project a pain in the ***
 
X

XeFalcon RGH

Enthusiast
Messages
296
Reaction score
66
Nevermind, got it all working!
Worked well on my jasper, used the standard jtag wiring. Flashed the sex c 9199 freeboot image.
 
J

JoinTheResistance

Dead to the world, alive for the journey...
Messages
4,670
Reaction score
1,082
Nevermind, got it all working!
Worked well on my jasper, used the standard jtag wiring. Flashed the sex c 9199 freeboot image.
So, all is working?
 
X

XeFalcon RGH

Enthusiast
Messages
296
Reaction score
66
Ye works good, but i can say the jtag wiring sometimes causes the console not to boot. I just reboot it and it works
 
J

JoinTheResistance

Dead to the world, alive for the journey...
Messages
4,670
Reaction score
1,082
Ye works good, but i can say the jtag wiring sometimes causes the console not to boot. I just reboot it and it works
That may be fixable by switching to the aud_clamp method.
 
X

XeFalcon RGH

Enthusiast
Messages
296
Reaction score
66
DO NOT FLASH STOCK NAND IF THE CHIP/JTAG WIRING IS IN PLACE! My console got the 3 rrod (0022 error) so ye the cpu got rekt somehow. :mad::mad::frown:
 
H

HuskerHeaven

when I took his glass of champagne...
Staff
Messages
8,251
Reaction score
3,379
DO NOT FLASH STOCK NAND IF THE CHIP/JTAG WIRING IS IN PLACE! My console got the 3 rrod (0022 error) so ye the cpu got rekt somehow. :mad::mad::frown:
So flash freeboot back or remove the wiring.... That's normal.
 
C

Coxy 2K

Enthusiast
Messages
32
Reaction score
22
I did a console back in November with the RJTOP method. I never actually posted to say thanks, so thank you.

Worked brilliant on a Falcon on the 14xxx Kernal, as RGH 1.2 on it's own just wasn't having it.
Console still works to this day and I've probably only had one or two times where I've had to turn off and back on to boot.
 
J

JoinTheResistance

Dead to the world, alive for the journey...
Messages
4,670
Reaction score
1,082
I did a console back in November with the RJTOP method. I never actually posted to say thanks, so thank you.

Worked brilliant on a Falcon on the 14xxx Kernal, as RGH 1.2 on it's own just wasn't having it.
Console still works to this day and I've probably only had one or two times where I've had to turn off and back on to boot.
Do you have any photos of the install by any chance?
P.S. Awesome you got it working, thanks for sharing.
 
X

XeFalcon RGH

Enthusiast
Messages
296
Reaction score
66
Ye forgot to say i fixed my jasper. The CLK wire was ****ing up the boot process.
 
A

adroitful

Enthusiast
Messages
38
Reaction score
1
The image links are broken.. Does anyone happen to have a wiring diagram for this install? I can't seem to find one anywhere on the net. I have a stubborn Jasper and would like to r-jtop it. I have both a coolrunner and a Matrix, so either works for me although I prefer to use the coolrunner since I have more of those and it's already installed in rgh 1.2 form.
 
Top Bottom