View source for How to JTAG XBOX 360

<meta name="keywords" content="TIAOWIKI,JTAG,TJTAG,FTA,JTAG,WRT54G,DD-WRT,debrick,tomato,router,wireless router,motorola modem,sb5100,wiggler,arm,mips,avr,buffered jtag,unbuffered jtag,10 pin,20 pin, 12 pin,xbox,xbox 360,modchip mod-chip,mod chip,liteon,lite-on,samsung,hitachi,lg,dvd rom,sata,dvd key,usb probe,cable modem, usb spear,serial spear, serial probe, extract dvd key,mod xbox 360,video games"></meta>
<meta name="description" content="TIAOWIKI tutorials on how to fix your fta receiver, debrick your wireless router, fix you cable modem, mod your xbox 360, extract the xbox 360 dvd key, flash xbox 360 dvd firmware, flash ixtreme firmware"></meta>

__TOC__

<span class="plainlinks">
<include nopre noesc src="/home/tiao/public_html/tiaowiki/wiki/extensions/include/360.inc"/>
Buy Game Console Adapters from [http://www.easymg.com/game-console-adapters.html http://www.easymg.com] or [http://www.diygadget.com/store/game-console-adapters/cat_6.html http://www.diygadget.com]

</span>

== Why you want to JTAG your XBOX 360? ==

If you want to run homebrew... simple enough!

In this tutorial I am going to show you how to modify your XBOX 360 to run Xell Homebrew or xbox rebooter kernel.

== Tools needed == 

In order to finish this task, you need to prepare the following tools/components:

#A ‘hackable’ XBOX 360
#Buffered XBOX 360 JTAG bundle (buy it from here)
#Solder iron, solder and solder paste.

Software needed:
#NANDPro ( current Version 2.0 d)
#Infectus NAND Checker (currently Version 1.1)
#MD5 Comparison Tool (hex editors can do this)
#360 Flash Tool ( currently Version 0.91)
#CD Info (currently Version 1b)

The benefit of using this buffered jtag board is, the data is <font color=red><b>buffered</b></font> so it is much reliable then the unbuffered one.  The parallel port is TTL data, which is 5V, but your NAND uses 3.3v, so a homemade unbuffered cable could damage your NAND.  This buffered JTAG board is a <font color=red><b>native 3.3v device</b></font>, so it is much safer.
 
OK, let’s start!

== How do I know my XBOX 360 is hackable? ==

This is relatively easy, check the power connector:

[[Image:360jtag-power.jpg|none|thumb|XBOX 360 power connectors]]

Differences between Xenon/Zephyr: Zephyr has HDMI, Xenon does not.

Difference between Falcon/Opus: Falcon has HDMI, Opus does not.

If you have a Jasper box, you should also check which NAND size it has.

Unplug all storage devices (HDD, Memory Unit etc.) and navigate to "System Settings", "Memory".  If you don't see a storage device listed there you have a Jasper without an integrated Memory Unit, so you have a 16MB NAND.  If a storage device is listed (with a symbol of an Xbox console in front) press the Y-Button and a summary from the storage device will appear.

[[Image:360jtag-memory-jasper.jpg|none|thumb|Jasper memory]]

Identification:

<pre>
Capacity: 214MB = 256MB NAND
Capacity: 451MB = 512MB
</pre>

== Which Dashboard-Version does my console have? ==

At first you have to find out which dashboard version your Xbox console has. Go to "System Settings", "Console Settings" and choose "System Info". The dashboard should show something like "2.0.7371.0".

[[Image:360jtag-version.jpg|none|thumb|check the dashboard version]]

It is possible to use the hack up to Version 7371, but starting with Dashboard-Version 8xxx it isn't possible anymore.  

With Jasper, beginning MFR July 2009, you have to read out the NAND first anyway to know for sure that the Hack will work. (The NAND should be read out anyway, doesn't matter which Mainboard-Revision you have).


== Preparation ==

You first need to disassemble your XBOX 360, there are tons of instructions on the internet, so I am not going to cover it here.

We need to prepare the wires which will be soldered on to your XBOX 360 motherboard.

Open the buffered JTAG bundle, you will see a PCB board with chips on it, this is the JTAG board.  You will also see a few female to female jumper wires, put them aside, we will use them later on.  We will be soldering the grey flat cable on your mother board, so let’s prepare them.

The supplied flat cable is 4-conductor and 50cm in length.  Use a scissor or utility knife to cut it in half (25 cm x 2).  So we now have 8 pieces of wires, and each has 25cm in length.  We need to solder 7 wires to the mother board.  Strip one wire off the flat cable, now you have a bundle of 4 wires, a bundle of 3 wires and one alone.

First, strip the insulation like this, and dip some solder paste on each wire:

[[image:360jtag-wire1.jpg|none|thumb|prepare wires]]

Then apply some solder on it, so it will be must easier to solder the wires later on.

Repeat this step to all wires.

Now cut 7 pieces of the heat shrink tube (2.5-3cm long each), and use pliers to strip 7 pin headers from the 40-pin IDC header, insert the wires to one heat shrink tube, then solder the pin header on the wire:

[[Image:360jtag-wires2.jpg|none|thumb|prepare wires]]

Repeat this step to all 7 wires.  These are the sides will be connected to the JTAG board.  The other side of the wires will be directly soldered to the mother board, so don’t solder the header on the other end of the wires.  Then move the heat shrink tube to cover the solder point and use the outside of the solder iron to give some heat to the shrink tube.  The tube will shrink and they look like:

[[Image:360jtag-wires3.jpg|none|thumb|prepare wires]]
[[Image:360jtag-wires4.jpg|none|thumb|prepare wires]]

The other end will be soldered to the mother board, so we need to prepare them as well.  Strip 1.5mm insulation off.  Dip some solder paste and give some solders on it so it will be easier to solder them later on:

[[Image:360jtag-wires5.jpg|none|thumb|prepare wires]]
[[Image:360jtag-wires6.jpg|none|thumb|prepare wires]]


If you want to leave the JTAG cable soldered on the mother board after you have read/write the flash, you need to do the following, otherwise you can skip next step.

Insert both cables through the bottom hole on the case.  This is what it looks like:

[[Image:360jtag-wires7.jpg|none|thumb|prepare wires]]
[[Image:360jtag-wires8.jpg|none|thumb|prepare wires]]

== Solder the JTAG Wires ==

Now, let see where we need to solder the wires:

[[Image:360jtag-wires9.jpg|none|thumb|Where to solder]]

In the above picture, I have 2 red circles.  There are the POI.  We need to solder wires on 1,2,3,4,6 in the top circle and 5,6 in to the bottom circle.

Before we solder the wires on them, use a q-tip to apply some solder paste on these pads, and then use your solder iron to apply little bit solder on these pads.

Since you have 2 flat cables, one is 4-conductor and another one is 3-conductor, it is good idea to make a mark on the pin 1 of each flat cable so you won’t mess them up later on.

This is what I did:

Use a marker so something to identify pin 1 on each flat cable, then use the following configure to solder the wires:

<pre>
Point on map			Pin number

Top circle 1			pin 1 of 4 conductor cable
Top circle 2			pin 2 of 4 conductor cable
Top circle 3			pin 3 of 4 conductor cable
Top circle 4			pin 4 of 4 conductor cable
Top circle 6			pin 1 of 3 conductor cable
Bottom circle 5			pin 2 of 3 conductor cable
Bottom circle 6			pin 3 of 3 conductor cable
</pre>

I started with point 6 in the top circle:

[[Image:360jtag-10.jpg|none|thumb|Soldering the wires]]

Then solder the other wires:

[[Image:360jtag-11.jpg|none|thumb|Soldering the wires]]
[[Image:360jtag-12.jpg|none|thumb|Soldering the wires]]

And the bottom circle (sorry forgot to take a picture)

== Prepare the JTAG connection ==

Now insert the 50 cm long female wires to the headers as shown in the photo:

[[Image:360jtag-13.jpg|none|thumb|Insert the female to female wires]]

<pre>
Red        wire 1      J1D2 Pin 1 (top circle)
Blue       wire 2      J1D2 Pin 2 (top circle)
Orange     wire 3      J1D2 Pin 3 (top circle)
Yellow     wire 4      J1D2 Pin 4 (top circle)
Black      wire 5      J1D2 Pin 6 (top circle)
White      wire 6      J2B1 Pin 5 (bottom circle)
Green      wire 7      J2B1 Pin 6 (bottom circle)
</pre>

Now on the JTAG board, connect the 10cm female to female wires as below:

<pre>
Blue		D1 to A1
Orange		D2 to A2
Red		D14 to A4
Green		D16 to A6
White		D17 to A7
Yellow		D11 to Y8
</pre>

Then connect the other end of the 50 cm wires (one end are already connected to the mother board via the soldered wires) as below:

<pre>
Blue		Y1
Orange		Y2
Red		Y4
Green		Y6
White 		Y7
Yellow		A8
Black		GND
</pre>

[[Image:360jtag-14.jpg|none|thumb|get ready to jtag]]
[[Image:360jtag-15.jpg|none|thumb|get ready to jtag]]

OK, now check and recheck all the connections and make sure there are no errors.

If you believe you have done everything right, then connect the power adapter to you XBOX 360 but <b>DO NOT</b> turn on it.  Just plug the power plug to the wall outlet and power connector to your xbox 360.  Then connect a mini USB cable to the JTAG board, and connect the other end of the JTAG usb cable to your PC’s USB port.  The USB cable is to provide power to the buffered jtag chip, the communication is still done by parallel port.  The mini USB does not come with the bundle but you should have it, because most digital camera use this kind of cable.

Then insert the JTAG board to your PC’s parallel port, and tune on your PC.

[[Image:360jtag-16.jpg|none|thumb|Connect everything]]

So all the cable connections are ready, you can then following the instruction mentioned in [[http://www.tiaowiki.com/download//file.php?id=27 here]] (start from page 7, 4.Reading out the NAND to page 13)  to read the nand and write the NAND.

== Soldering the SMC-JTAG connection ==

You will have to make 3 more connections in order to run homebrew.

This is our target:

[[Image:360jtag-18.jpg|none|thumb|SMC-JTAG]]

Cut a 3 cm of the left over flat wire, strip the insulation, and dip some solder paste on it and solder the wire on J2D2’s pin 4 and pin 7 (to make a connection between these two pins)

[[Image:360jtag-17.jpg|none|thumb|SMC-JTAG]]

For the connections from J1F1, we need to prepare the diodes and wires.

Cut the wire in half, and solder the 1N4148 diodes on them as shown in the picture below:

[[Image:360jtag-19.jpg|none|thumb|SMC-JTAG]]

Then, put the heat shrink tube on it and shrink it by your solder iron:

[[Image:360jtag-20.jpg|none|thumb|SMC-JTAG]]

Cut the leg of diode to 2 mm long, solder one diode to pin 3 of  J1F1, and other end to Pin 1 of J2D2:

[[Image:360jtag-21.jpg|none|thumb|SMC-JTAG]]

Solder the other wire: diode side to J1F1’s Pin 4 and the other end to J2D2’s Pin 2:

[[Image:360jtag-22.jpg|none|thumb|SMC-JTAG]]

Now you have done all the soldering work.

== Reassemble XBOX 360 Case ==

If you want to remove the JTAG wires (7 wires you soldered earlier), you can do it now, or you can leave them there and have the headers stick outside of your xbox 360, so in the future if you want to go back to factory NAND you can do that without open the case again.

Now let’s re-assemble the box back.  Replace the DVD drive in the case, and put the top and bottom case together, you will see the wires are sticking outside:

[[Image:360jtag-23.jpg|none|thumb|reassemble xbox 360 case]]

Now, carefully insert the wires into the side hole on the case one by one:

[[Image:360jtag-24.jpg|none|thumb|reassemble xbox 360 case]]

Now replace the side panels:

[[Image:360jtag-25.jpg|none|thumb|reassemble xbox 360 case]]
[[Image:360jtag-26.jpg|none|thumb|reassemble xbox 360 case]]

Make sure to use tapes to insulate the headers to prevent short circuit .  Now you are done!


<span class="plainlinks">

<include nopre noesc src="/home/tiao/public_html/tiaowiki/wiki/extensions/include/adsense.inc"/>
Buy Game Console Adapters from [http://www.easymg.com/game-console-adapters.html http://www.easymg.com] or [http://www.diygadget.com/store/game-console-adapters/cat_6.html http://www.diygadget.com]

</span>