Playstation

Tonyhax International

The Ultimate Backup CD-R / Import Loader for PS1 & Early PS2

About

Tonyhax International is an advanced soft-mod loader for PlayStation 1 and early PlayStation 2 consoles. It is built on the original Tonyhax project and greatly expands its features, compatibility, and usability.

Developed by: Alex Free, MottZilla, Patchouli, SylverReZ

Key Features

  • Supports all PS1 models (SCPH-1000 → SCPH-103)
  • Supports early PS2 models (SCPH-10000 → SCPH-39004)
  • GameID support including early Japanese games
  • Advanced anti-piracy bypass system
  • Automatic console detection
  • GameShark cheat support via memory cards
  • Boot backup CD-Rs and import games
  • Memory card formatting inside loader
  • Supports FreePSXBoot exploit
  • Patch games directly to work with loader
  • Faster xStation boot support

Download

Version 1.6.0 Latest

tonyhax-international-v1.6.0

How To Start

  • Use FreePSXBoot memory card exploit
  • Flash cheat cartridge (GameShark / Action Replay)
  • Use Boot CD (CD-R)
  • Use game-specific save exploits
  • Patch game using TOCPerfect

FAQ

Why is my game not booting properly?

Your CD-R quality, burner, or optical drive may be the issue. Use high-quality discs and proper burn speeds.

Can it play protected games?

Yes. It automatically detects and bypasses protections.

Why remove FreePSXBoot memory card?

To prevent crashes and maximize compatibility.

Why aren’t newer PS2s supported?

Hardware limitations prevent proper functionality on newer models.

Relevant Tools

  • PlayStation Disc Burner
  • TOCPerfect
  • FreePSXBoot
  • NXFLASH
  • PSX80MP
  • PSEXE2ROM

Contribute

You can help by:

  • Improving code (C / MIPS)
  • Reporting unsupported games
  • Improving documentation
  • Donating to development

Made with ❤️ for the PlayStation modding community

PSX 80 Minute Patcher

Patch PS1/PS2 Games for 700MB CD-R Compatibility

About

PSX80MP is a tool by Alex Free that patches PlayStation game images to work on early PS2 models when burned to 80 minute / 700MB CD-Rs.

It fixes a hardware bug found in early PS2 consoles that causes crashes or boot failures when using higher capacity discs.

Download

Version 2.0.1 Stable

How It Works

Early PS2 consoles expect lower capacity discs. When using 700MB discs, the laser can overshoot data, causing read errors.

PSX80MP fixes this by adding dummy data (CDDA silence sectors), preventing the laser from reading invalid areas.

Usage

Drag & Drop Method

Drag your BIN file onto the executable.

Command Line

psx80mp <data_track.bin>

Note: Usually patch track 1. If it fails, try track 2.

Confirmed Sensitive Games

Game Track
Resident Evil 2 (All Versions)1
Final Fantasy IX (All Regions)1
Diablo (USA)1
MediEvil Series1
JoJo’s Bizarre Adventure1
Street Fighter Alpha 3 (USA)2

Why This Matters

Previously, users had to rely on smaller CD-Rs (650MB). This tool allows modern 700MB discs to work reliably on affected systems.

Build & Platform Support

  • Windows (32-bit & 64-bit)
  • Linux (Deb & Portable)
  • Supports very old systems (Pentium / 386 CPUs)

Made for PlayStation preservation & modding

PS3 HFW + HEN Guide

Install Hybrid Firmware & Enable Homebrew

Step 1: Check Firmware

  • Go to Settings → System Settings → System Information
  • If version ≤ 4.78 → update required
  • If 4.80–4.82 → continue
  • If 4.83–4.92 → install HFW
  • If > 4.92 → not supported

Step 2: Install HFW

  • Download latest HFW
  • Verify MD5 hash
  • Install like normal firmware update
  • DEX users → install Dual Boot HFW

Step 3: Prepare Browser

  • Open Internet Browser
  • Triangle → Tools
  • Clear cookies, cache, history
  • Set homepage to blank

Install PS3HEN

Method 1 (ps3xploit)
  • Open browser → go to ps3xploit.me
  • Add bookmark
  • Select PS3HEN → HEN Auto Installer
  • Wait for download & auto install
  • Restart console
  • Launch ★ Enable HEN
Method 2 (ps3addict)
  • Go to ps3addict.github.io
  • Select Alternate HEN Installer
  • Follow on-screen instructions
  • Use Remote Play trick
  • Install HEN
Method 3 (USB)
  • Download PS3HEN.BIN
  • Place on FAT32 USB
  • Insert into right USB port
  • Open browser → visit installer link
  • Install and reboot

After Installation

  • Use ★ Enable HEN every boot
  • Package Manager will appear
  • Install homebrew apps
  • Works offline after setup

Troubleshooting

Error 80710A06

Fix date & time via internet

Error 80029564

Retry installation

Crashes or fails?

Retry multiple times or reinstall HFW

Final Notes

PS3HEN allows homebrew similar to CFW, but some features like CCAPI are not supported. You must enable HEN every time you boot your PS3.

PS3 Modding Guide • Stay Safe & Follow Steps Carefully

PS4 Standard Jailbreak

Enable Homebrew (FW 5.05 → 9.60)

Overview

This guide shows how to jailbreak a PS4 using the built-in browser for firmware versions 5.05 to 9.60.

Note: Firmware above 9.60 is not supported by this method.

Internet Settings

Some ISPs block custom DNS. If it doesn’t work, use alternative methods.

  • Go to Settings → Network → Set Up Internet
  • Setup: Custom
  • IP: Automatic
  • DHCP: Do Not Specify
  • DNS: Manual
  • Primary DNS: 62.210.38.117
  • MTU: Automatic
  • Proxy: Do Not Use

This blocks Sony servers and redirects to jailbreak pages.

Method 1: Karo218

Steps
  • Go to User Guide (via Settings)
  • Or open browser → https://karo218.ir
  • Select exploit site
  • Choose:
    • GoldHEN (5.05 / 6.72)
    • G2All (7.00 → 9.60)
  • Wait for exploit
  • If successful → "GoldHEN Loaded"

Method 2: ArabPixel (Recommended)

Steps
  • Open browser
  • Go to https://arabpixel.github.io/PSFree-Enhanced
  • Wait for caching (✔️ appears)
  • Refresh page
  • Select GoldHEN / HEN
  • Press Start
  • Wait for success message

Works offline after first run.

Troubleshooting

Not enough memory

Press OK and try again. Very common.

Console rebooted

Normal. Just retry the exploit.

Apps won’t open after reboot

You must jailbreak again after every reboot.

Black screen / freeze

Hold power button to shut down and retry.

Important Notes

  • Jailbreak is not permanent
  • Use Rest Mode to avoid redoing it
  • Completely safe — won’t damage your PS4
  • Blocks updates (with DNS)

PS4 Modding Guide • Use Responsibly

PS5 Jailbreak Guide

Current Status & Exploits (FW ≤ 5.50)

Overview

PS5 jailbreak is currently available for firmware 5.50 and below using kernel exploits.

Lower firmware versions (especially ≤ 4.51) have the best support including homebrew and backups.

Supported Firmware

  • 1.00 → 4.51 Best Support
  • 5.10 → 5.50 Partial support
  • Above 5.50 Not supported

Kernel Exploits

UMTX Exploit (1.00 → 5.50)
  • Based on FreeBSD vulnerability (2024)
  • Supports firmware 1.00 → 5.50
  • Full jailbreak via etaHEN on ≤ 4.51
  • 5.00+ still improving
IPV6 Exploit (3.00 → 4.51)
  • Released in 2022
  • Gives full kernel access
  • Works best on 4.03 / 4.50 / 4.51

Other Exploits (Not Full Jailbreak)

BD-JB Exploit (≤ 7.61)

Allows limited native code execution via Blu-ray vulnerability.

Mast1c0re Exploit (≤ 7.60)

Runs PS2 ISOs and homebrew via PS2 emulator.

Entry Points

  • WebKit exploit (browser-based)
  • Blu-ray exploit (disc-based)
  • ESP8266 host method

⚠️ Scam Warning

If a website claims a jailbreak for the latest PS5 firmware — it is almost always fake.

  • Real exploits are publicly known in the scene
  • Fake sites use ads or malware
  • If it sounds too good → it’s a scam

Known Vulnerabilities Timeline

  • 2024 – UMTX Kernel Vulnerability
  • 2023 – Hypervisor exploit
  • 2022 – Mast1c0re exploit
  • 2022 – Kernel + WebKit exploit
  • 2022 – IPv6 exploit
  • 2021 – WebKit font exploit
  • 2020 – SMAP bypass

Buying a Hackable PS5

Look for consoles with firmware ≤ 4.51 for best compatibility.

Avoid updating firmware after purchase.

PS5 Modding Guide • Stay Updated & Avoid Scams

PS Vita HENkaku Guide

Unlock Homebrew & Custom Firmware

Overview

All PS Vita models can be hacked using HENkaku. This allows homebrew, plugins, and custom firmware features.

By default, the jailbreak is not permanent, but installing Ensō makes it persistent.

Check Firmware

  • Go to Settings → System → System Information
  • Check firmware version
Firmware Cases
  • 3.63 or older / 3.67 / 3.69–3.73 → Update to 3.74
  • 3.60 / 3.65 (Chinese text) → Already modded
  • 3.65 / 3.68 / 3.74 → Continue with HENlo

HENlo Jailbreak

Steps
  • Open browser → http://jailbreak.psp2.dev
  • Enable JavaScript
  • Clear cookies & history
  • Press Unlock My Vita
  • Install:
    • HENkaku
    • VitaDeploy
  • Exit to LiveArea

Special Cases

PCH-1xxx without Memory Card

Use "Replace NEAR with VitaDeploy" option.

South Korean Models

Use SD2Vita as internal storage.

Post Setup

  • Open Settings → HENkaku settings
  • Enable Unsafe Homebrew
  • Optional: Spoof firmware to 3.74

Internal Memory Setup

Create Internal Storage
  • Open VitaDeploy
  • Go to Miscellaneous
  • Select Create Internal Memory Card
  • Restart device

Install Ensō (Permanent Hack)

Steps
  • Open VitaDeploy
  • Select Install a different OS
  • Follow instructions
  • Do not let device sleep
  • System will downgrade to 3.65

Ensō makes the jailbreak permanent.

Important Notes

  • All Vita models are hackable
  • Ensō = permanent jailbreak
  • Without Ensō → must rerun exploit
  • Do not interrupt install process

PS Vita Modding Guide • Safe & Powerful Homebrew

PSP ARK-4 CFW Guide

Install Modern Custom Firmware

Overview

ARK-4 is the most modern custom firmware for PSP, offering enhanced compatibility, features, and performance.

It can be installed as temporary or permanent (recommended).

Requirements

  • Firmware 6.60 or 6.61
  • Memory Stick or internal storage
  • USB connection to PC

Install Temporary CFW

Steps
  • Download ARK-4
  • Connect PSP via USB
  • Extract:
    • ARK_01234 → PSP/SAVEDATA
    • ARK_Loader → PSP/GAME
  • Launch ARK Loader from Game menu
  • PSP will restart with CFW enabled

Note: Temporary CFW must be launched again after reboot.

ARK-4 Features

  • Supports PRO Online & XLink Kai
  • NoDRM engine for ISO games
  • PS1 game support with configs
  • Region-free UMD playback
  • Custom launcher included
  • Supports legacy homebrew
  • cIPL support on all PSP models

Install Permanent CFW (cIPL)

Steps
  • Copy ARK_cIPL to PSP
  • Launch cIPL installer
  • Select New cIPL
  • Done — CFW loads on boot

This method enables automatic CFW at startup.

Full Flash Installation

Steps
  • Copy ARK_Full_Installer
  • Run installer
  • Follow on-screen instructions

This installs ARK-4 directly to internal memory, removing reliance on save files.

Other CFW Options

PRO CFW

Popular, supports online play and plugins.

(L)ME CFW

Faster install, supports legacy homebrew via LEDA.

Important Notes

  • Temporary CFW resets after reboot
  • cIPL = best permanent option
  • Full flash removes dependency on save files
  • PSP Go has internal storage advantage

PSP Modding Guide • Modern CFW Made Easy

Nintendo

Applying ROM Patches

How to Patch Games Across Different Systems

Overview

Many consoles with interchangeable games support community-made ROM patches and hacks.

These patches modify games using different tools depending on the patch format.

Most ROM hacks can be found on ROMhacking.net.

IPS Patches

Steps
  • Download Lunar IPS and launch it
  • Extract the .ips file if compressed
  • Click Apply IPS Patch
  • Select the .ips file
  • Select your game ROM
  • Success message should appear

IPS patches are simple and do not verify if the correct ROM is used.

They are limited to 16MB patch size.

BPS Patches

Steps
  • Download Beat v1 and launch it
  • Extract the .bps or .bpm file
  • Click Apply Patch
  • Select the patch file
  • Select your ROM
  • Choose output location and name

BPS patches include safety checks to ensure correct ROM matching.

PPF Patches

Steps
  • Ensure you have a single .bin or .iso file
  • Make a backup of your game file
  • Extract the .ppf file
  • Download and open PPF-O-MATIC
  • Select your game file
  • Select the patch file
  • Click Apply

Used mainly for PlayStation and PS2 games, but also works on other systems.

Multi-track games must be merged using tools like Binmerge.

xdelta Patches

Steps
  • Extract the .xdelta file
  • Download and open Delta Patcher
  • Select your original ROM
  • Select the patch file
  • Click Apply patch

xdelta patches are widely used across many systems and support advanced patching.

Troubleshooting

  • Ensure you are using the correct ROM version
  • Check for multiple game revisions
  • Verify checksum or hash if provided
  • Wrong ROM = patch will fail

ROM Modding Guide • Patch Your Games Easily

Applying ROM Patches

How to Patch Games Across Different Systems

Overview

Many consoles with interchangeable games support community-made ROM patches and hacks.

These patches modify games using different tools depending on the patch format.

Most ROM hacks can be found on ROMhacking.net.

IPS Patches

Steps
  • Download Lunar IPS and launch it
  • Extract the .ips file if compressed
  • Click Apply IPS Patch
  • Select the .ips file
  • Select your game ROM
  • Success message should appear

IPS patches are simple and do not verify if the correct ROM is used.

They are limited to 16MB patch size.

BPS Patches

Steps
  • Download Beat v1 and launch it
  • Extract the .bps or .bpm file
  • Click Apply Patch
  • Select the patch file
  • Select your ROM
  • Choose output location and name

BPS patches include safety checks to ensure correct ROM matching.

PPF Patches

Steps
  • Ensure you have a single .bin or .iso file
  • Make a backup of your game file
  • Extract the .ppf file
  • Download and open PPF-O-MATIC
  • Select your game file
  • Select the patch file
  • Click Apply

Used mainly for PlayStation and PS2 games, but also works on other systems.

Multi-track games must be merged using tools like Binmerge.

xdelta Patches

Steps
  • Extract the .xdelta file
  • Download and open Delta Patcher
  • Select your original ROM
  • Select the patch file
  • Click Apply patch

xdelta patches are widely used across many systems and support advanced patching.

Troubleshooting

  • Ensure you are using the correct ROM version
  • Check for multiple game revisions
  • Verify checksum or hash if provided
  • Wrong ROM = patch will fail

ROM Modding Guide • Patch Your Games Easily

Applying ROM Patches

How to Patch Games Across Different Systems

Overview

Many consoles with interchangeable games support community-made ROM patches and hacks.

These patches modify games using different tools depending on the patch format.

Most ROM hacks can be found on ROMhacking.net.

IPS Patches

Steps
  • Download Lunar IPS and launch it
  • Extract the .ips file if compressed
  • Click Apply IPS Patch
  • Select the .ips file
  • Select your game ROM
  • Success message should appear

IPS patches are simple and do not verify if the correct ROM is used.

They are limited to 16MB patch size.

BPS Patches

Steps
  • Download Beat v1 and launch it
  • Extract the .bps or .bpm file
  • Click Apply Patch
  • Select the patch file
  • Select your ROM
  • Choose output location and name

BPS patches include safety checks to ensure correct ROM matching.

PPF Patches

Steps
  • Ensure you have a single .bin or .iso file
  • Make a backup of your game file
  • Extract the .ppf file
  • Download and open PPF-O-MATIC
  • Select your game file
  • Select the patch file
  • Click Apply

Used mainly for PlayStation and PS2 games, but also works on other systems.

Multi-track games must be merged using tools like Binmerge.

xdelta Patches

Steps
  • Extract the .xdelta file
  • Download and open Delta Patcher
  • Select your original ROM
  • Select the patch file
  • Click Apply patch

xdelta patches are widely used across many systems and support advanced patching.

Troubleshooting

  • Ensure you are using the correct ROM version
  • Check for multiple game revisions
  • Verify checksum or hash if provided
  • Wrong ROM = patch will fail

ROM Modding Guide • Patch Your Games Easily

Swiss FTP

Transfer Files from PC to Console Using FTP

Overview

Swiss includes a built-in FTP client that allows you to download files directly from your PC to your console.

Unlike most systems, Swiss connects to your PC instead of acting as a server.

Setup FTP Server

Steps
  • Create a folder on your PC to store files
  • Download and run xlight.exe
  • Allow firewall access on private network if prompted
  • Click New Virtual Server → OK
  • Open the server → go to Public Path
  • Add:
    • Virtual Path: /
    • Real Path: Your folder location
    • Permissions: Enable all

Create User

Steps
  • Click User List → Add
  • Set username & password (e.g. gamecube)
  • Set home directory to /
  • Enable all permissions
  • Click OK to save

Start Server

Steps
  • Select your server
  • Click Run Server
  • Right-click → Server Network Interfaces
  • Note your PC IP (e.g. 192.168.0.5)

Connect in Swiss

Steps
  • Open Swiss network settings
  • Set FTP Host IP to your PC IP
  • Enter username and password
  • Press B then A to change device
  • Select File Transfer Protocol
  • Connection should show your PC files

Important Notes

  • PC and console must be on same network
  • Firewall must allow FTP server
  • Correct IP is required for connection
  • Swiss acts as client, not server

GameCube Swiss Guide • Easy File Transfer via FTP

Playing Game Backups/Game ROM homebrews

Use Flash Carts to Run Your Game Boy ROMs

Overview

To play Game Boy backups, you need a compatible flash cartridge and an SD card.

The SD card must be formatted to FAT32.

Requirements

  • Flash cart (Everdrive GB or EZ-Flash Jr)
  • FAT32 formatted SD card
  • Game Boy console

Everdrive GB

Setup Steps
  • Download latest firmware from Krikzz website
  • Extract and copy GBCSYS folder to SD root
  • Insert SD into Everdrive and power on Game Boy
  • Wait until file manager appears
  • Turn off and reinsert SD into PC
  • Copy ROMs into folders (e.g. roms, GB, GBC)

Everdrive provides a simple file manager for launching games.

EZ-Flash Jr

Setup Steps
  • Download kernel and firmware from EZ-Flash website
  • Extract ezgb.dat and Update_FWx.gb to SD root
  • Copy ROMs into folders (e.g. roms, GB, GBC)
  • Insert SD into EZ-Flash Jr and power on Game Boy
  • Launch Update_FWx.gb
  • Press A to start update
  • Restart system after update completes
  • Select and play your games

Firmware update is required before first use.

Important Notes

  • SD card must be FAT32 formatted
  • Organize ROMs into folders for easy access
  • Always safely eject SD card from PC
  • Firmware updates may improve compatibility

Game Boy Guide • Play Your Backups Easily

Applying ROM Patches

How to Patch Games Across Different Systems

Overview

Many consoles with interchangeable games support community-made ROM patches and hacks.

These patches modify games using different tools depending on the patch format.

Most ROM hacks can be found on ROMhacking.net.

IPS Patches

Steps
  • Download Lunar IPS and launch it
  • Extract the .ips file if compressed
  • Click Apply IPS Patch
  • Select the .ips file
  • Select your game ROM
  • Success message should appear

IPS patches are simple and do not verify if the correct ROM is used.

They are limited to 16MB patch size.

BPS Patches

Steps
  • Download Beat v1 and launch it
  • Extract the .bps or .bpm file
  • Click Apply Patch
  • Select the patch file
  • Select your ROM
  • Choose output location and name

BPS patches include safety checks to ensure correct ROM matching.

PPF Patches

Steps
  • Ensure you have a single .bin or .iso file
  • Make a backup of your game file
  • Extract the .ppf file
  • Download and open PPF-O-MATIC
  • Select your game file
  • Select the patch file
  • Click Apply

Used mainly for PlayStation and PS2 games, but also works on other systems.

Multi-track games must be merged using tools like Binmerge.

xdelta Patches

Steps
  • Extract the .xdelta file
  • Download and open Delta Patcher
  • Select your original ROM
  • Select the patch file
  • Click Apply patch

xdelta patches are widely used across many systems and support advanced patching.

Troubleshooting

  • Ensure you are using the correct ROM version
  • Check for multiple game revisions
  • Verify checksum or hash if provided
  • Wrong ROM = patch will fail

ROM Modding Guide • Patch Your Games Easily

Get started

Prepare Your DSi for Homebrew & Exploits

Overview

This guide helps you prepare your DSi by setting up required tools before running exploits.

You will download homebrew tools and copy them to your SD card.

Requirements

  • SD card and a way to connect it to your PC
  • Archive extractor:
    • 7-Zip (Windows)
    • The Unarchiver (macOS)
    • ZArchiver (Chromebook)
  • Avoid using WinRAR (can break files)
  • Avoid Windows 11 built-in extractor (can cause errors)

Section I - Prep Work

Steps
  • Insert SD card into your PC
  • Ensure SD card is properly formatted
  • Download latest dumpTool as boot.nds
  • Copy boot.nds to the root of your SD card

The SD card root is the main directory (not inside any folder).

Section II - Check Unlaunch

Steps
  • Turn on DSi while holding A + B
  • If Unlaunch menu appears → already installed
  • If normal DSi Menu appears → continue to next section

Unlaunch is a boot-level exploit that gives full control of the console.

Some used/refurbished DSi systems may already have it installed.

Section III - Memory Pit

Details
  • Uses DSi Camera as an exploit
  • Works on all firmware versions
  • No need to install Unlaunch

Memory Pit is simple but may have limited compatibility with some homebrew.

If issues occur, consider installing Unlaunch instead.

Next Step

Continue to Launching the Exploit to proceed with the setup.

DSi Modding Guide • Start Your Homebrew Journey

Installing Custom Firmware (CFW)

Extend Your Nintendo Switch Functionality

Overview

This guide covers setting up Custom Firmware (CFW) on the Nintendo Switch to enable homebrew and advanced features.

CFW is not permanently installed and must be launched each time depending on your console type.

Section I - Check Exploit Compatibility

Details
  • Check model number on the back of the console
  • Patched models (require modchip):
    • HAC-001(-01) (Switch v2)
    • HDH-001 (Switch Lite)
    • HEG-001 (Switch OLED)
  • Unpatched model: HAC-001 (2017–2019)
  • Serial number can help determine exploitability
  • Modchipped consoles show "No SD card" screen without SD card

Section II - Requirements

What You Need
  • Latest version of Atmosphere (CFW)
  • fusee.bin payload file
  • Latest version of Hekate
  • microSD card (minimum 8GB, recommended 64GB+)
  • USB SD card reader

Atmosphere enables homebrew, while Hekate provides tools like NAND backup and boot management.

Section III - File Setup

Steps
  • Insert microSD card into PC using reader
  • Extract files to SD card root:
    • atmosphere
    • bootloader
    • switch
    • hekate_ctcaer_x.x.x.bin
  • Place fusee.bin into bootloader/payloads
  • Modchipped: Rename hekate file to payload.bin
  • Unpatched: Delete hekate file after use
  • Safely eject SD card and insert into Switch

Section IV - Finalizing Setup

Steps
  • Boot into Hekate (auto for modchip, manual for unpatched)
  • Go to Tools → Backup eMMC
  • Backup:
    • BOOT0 & BOOT1
    • RAW GPP (full NAND)
  • Transfer backup to a safe location
  • Delete NAND backup from SD card to free space

Section V - Optional Setup

Recommended
  • Format SD card to FAT32 (reduces corruption risk)
  • Go to Tools → Partition SD Card
  • Create emuMMC if desired

Final Step

Go to Home → Payloads → select fusee.bin to launch Atmosphere.

You are now running Custom Firmware on your Switch.

Important Notes

  • CFW is not permanently installed
  • Must be reloaded after shutdown (especially on unpatched consoles)
  • Always keep NAND backups safe to prevent bricking

Nintendo Switch Modding Guide • Custom Firmware Setup

Xbox

XBHDM

Softmod Your Xbox & Enable Homebrew

Overview

XBHDM is a process used to softmod your Xbox console, allowing you to run homebrew software and game backups.

This method works by unlocking the Xbox hard drive, connecting it to a PC, modifying its files directly, and then re-locking it using the console’s HDD key or user password.

Important Notes

  • Requires unlocking and re-locking the Xbox hard drive
  • Uses HDD key or EEPROM backup for security
  • Can be used on new drives if correct key/password is available
  • Avoid hotswapping (unsafe and outdated method)

Section I - Requirements

What You Need
  • Windows PC
  • FATXplorer 3.0 Beta
  • XBHDM Build.zip
  • Way to access Xbox HDD key (EEPROM backup or HDD password)
  • Tools to open/disassemble the Xbox

Section II - Preparation

Steps
  • Download and extract FATXplorer and XBHDM to separate folders
  • Disassemble the Xbox to access the hard drive
  • Connect the hard drive to your PC

Section III - Unlock & Backup

Steps
  • Open FATXplorer and go to HDD Security Tools
  • Select the Xbox hard drive
  • Unlock it using the HDD password or EEPROM backup
  • Mount the C partition and back it up
  • Also back up the E partition (contains saves & DLC)

Section IV - Install Softmod

Steps
  • Drag and drop XBHDM softmod files onto the hard drive
  • Replace any existing files if prompted

Section V - Re-lock & Reinstall

Steps
  • Use FATXplorer to re-lock the hard drive
  • Safely unmount the drive from your PC
  • Disconnect and reinstall it into the Xbox

Final Step

Power on the Xbox. If done correctly, it will boot into a softmod installer.

Complete the installer, then proceed to upgrading your hard drive for more storage.

Xbox Modding Guide • XBHDM Softmod Method

Bad Update

Xbox 360 Hypervisor Exploit (17559)

Overview

Bad Update is a non-persistent, software-only hypervisor exploit for all Xbox 360 models running dashboard version 17559.

It allows running unsigned code when combined with tools like XeUnshackle or FreeMyXe.

The exploit is temporary and will reset after the console is powered off.

Supported Entry Points

  • Exploited Xbox Avatar (ABadAvatar)
  • Rock Band Blitz (trial or full)
  • Tony Hawk's American Wasteland (NTSC/PAL/RF)

This exploit has around an 80% success rate and may require multiple attempts.

Section I - Required Items

Requirements
  • Xbox 360 (dashboard 17559)
  • Supported game OR ABadAvatar
  • Xbox360BadUpdate (if using a game)
  • Extra avatar data (required for ABadAvatar if avatars appear gray)
  • USB drive (minimum 64MB, FAT32 formatted)
  • 512MB+ USB (required for Rock Band Blitz)
  • XeUnshackle (recommended) or FreeMyXe
  • XeXMenu and additional homebrew (Aurora, FreeStyle 3, etc.)

Section II - Preparing USB Drive

Steps
  • Format USB drive to FAT32 (use Xbox dashboard if needed)
  • Extract exploit files to the root of the USB drive
  • Replace default.xex in payload folder with XeUnshackle or FreeMyXe
  • If using ABadAvatar, no payload replacement is required
  • Add any extra homebrew to the USB drive

Section III - Disable Auto Sign-In (ABadAvatar)

Steps
  • Press Xbox Guide button
  • Go to Settings → Profile
  • Select Sign-in Preferences
  • Turn off Auto Sign-In

This allows the exploit to run automatically on boot.

Section IV - Running the Exploit

Steps
  • Disconnect from the Internet (avoid Xbox Live bans)
  • Sign into a local profile
  • Insert USB drive
  • Tony Hawk's American Wasteland:
    • Launch game → High Score/Free Skate
    • Select "No" if prompted
    • Go to level select → Created Park → Load Park
    • Select "Hack Xbox"
    • Start park to trigger exploit
  • Rock Band Blitz:
    • Launch game and press A
    • Select USB storage
    • Wait for "Running exploit"
  • ABadAvatar:
    • Open sign-in screen
    • Wait for avatars to load
    • Exploit runs automatically if configured correctly

Section V - After Exploit

What Happens
  • CPU key will be displayed — save it!
  • Press A to continue through prompts
  • Console is now capable of running unsigned code
  • Use XeXMenu to launch homebrew

It is highly recommended to create a NAND backup to prevent permanent damage.

Section VI - Notes & Safety

  • Do NOT connect to Xbox Live during exploit
  • Exploit resets after shutdown
  • Newer versions remove need to patch XEX files
  • LAN features like FTP/System Link can be used safely
  • Disable Auto Power-Off for better control

Section VII - LED Indicators

The Xbox 360 LEDs indicate exploit progress. Different patterns show different states.

Section VIII - Error Codes

Errors may appear due to corrupted files or failed attempts.

Check official documentation to understand specific error codes.

Xbox 360 Modding Guide • Bad Update Exploit