What's Changed
This version incorporates additional stage 3 improvements from @kmx360, new hypervisor overwrite detection logic, and a rewrite of the stage 2 ROP chain. The exploit now executes instantaneously with (theoretically) 100% reliability. The source code for these changes can be found in the v1.3 branch. They will not compile as-is and will require tweaking as the changes were pulled from another source tree. When I have time I'll look into making this repo build cleanly again.
I have also added a "boot animation recovery mode" you can use to restore the boot animation xex file in flash if you are one of the people who tried to replace it with an unsigned xex only to find yourself locked out from using BadUpdate again. You can find instructions on how to use it here.
Support for Tony Hawk's American Wasteland has been dropped in favor of using Rock Band Blitz.
Change Log
- Added stage 3 improvements from @kmx360.
- Added new hv overwrite detection logic.
- Rewrote stage 2 ROP chain to use a cipher text look up table.
- Added boot animation recovery mode for people who replaced their stock boot animation with an unsigned file.
