Xbox Kernel Code Execution In SystemOS POC Exploit Released

As posted in the Xbox One Research Wiki Kernel level code execution is possible on Xbox Consoles via the Game Script UWP App.

At the moment things are in their infancy, however given the Xbox One is over a decade old it this point its exciting to have a kernel exploit for the modern Xbox family of consoles that could lead to some good things in the near future.

This exploit is compatible with the Xbox One, Xbox One X, Xbox Series S and Xbox Series X, all Xbox consoles after the Xbox 360 share the same OS.

This will likely be patched in the next system update for Xbox consoles, so if you are interested in messing about with the Xbox you should prepare your console ASAP.

As posted by Xbox One Research to prepare, do the following:

1. Ensure your Xbox Live account Login-Type is configured as “No barriers” aka. auto-login with no password prompt
2. Set your console as “Home Console” for this account
3. Download the App Game Script
4. Start the app (to ensure license is downloaded/cached)
5. Optional: Download Notepad T' as you can copy + paste txt files from a USB drive with this app, meaning you don't need to type a lot of code manually in the future.
6. Take your console offline! To make extra sure it cannot reach the internet, set a manual primary DNS address of 127.0.0.1

Proof of concept exploit carrot_c4k3 has released on Github.

The Xbox OS version you should be on is 10.0.25398.4478, if you are currently higher than this your console could be enrolled in the inside preview. If you leave the preview program from the insider app you should currently end up on system update 10.0.25398.4478 as of the time of writing. This does factory reset the Xbox which is something to keep in mind.

It's certainly nice to see something happen with the Xbox One after been out in the wild for over a decade and even on the newer series Xbox consoles also. Hopefully this is the start of the Xbox Scene for more modern Xbox consoles.

 

This is fire

 

I have a question. I have on my old xos firmware from march 2021 do I need to update too?

 

I have a question. I have on my old xos firmware from march 2021 do I need to update too?

You need to download the Game Script app before this is patched, or the app is removed from the Microsoft Store. Which means you have a limited time to update the console, download the app, then keep the Xbox offline.

 

If you are currently higher than 10.0.25398.4478 at the time of posting you need to leave the Xbox insider program, this does factory reset the console when you reboot it which is something to keep in mind. However you will then be on 10.0.25398.4478.

Remember to load anything up after you wish to use offline so the Xbox has a licence for it.