Episode

EP 45 — XBox Underground (Part 1)

20 August 2019 Official episode · Official transcript

cybercrime black hat

The episode discusses the original Xbox being reverse-engineered, the Team Avalaunch console-hacking scene, Xbox 360 developer kits and PartnerNet, and the evolution of several hackers into the Xbox Underground group and intrusions into game-company networks.

Topics: Xbox hardware and firmware reverse engineering, Cryptographic key extraction from a boot-time hardware bus, Signed and encrypted firmware, Responsible disclosure and the DMCA, Custom Xbox dashboards and emulation, Xbox 360 development kits and PartnerNet, JTAG-based console modification, Game cheating and hacked online lobbies, Credential reuse and account takeover, VPN access to corporate networks, SMB file sharing, Virtualized server discovery and network pivoting, Password database dumping and MD5 cracking, Source-code theft and pre-release game leaks, Developer-network compromise

Official episode-page sources

Links published on the Darknet Diaries episode page. Not LLM output.

Entities (78)

Claims (36)

Qualified statements from this episode, not graph facts.

bunnie AUTHORED Hacking the Xbox

bunnie published the book Hacking the Xbox in 2003.

Explicit Confidence 99% · Jack Rhysider EP 45 Details

“Back in 2003 he published a book called Hacking the Xbox”

Jack Rhysider · offsets 187–243

bunnie MEMBER_OF MIT

bunnie was a graduate student at MIT while researching the Xbox.

Explicit Confidence 99% · bunnie EP 45 Details

“I was in MIT as a grad student at the time.”

bunnie · offsets 290–333

bunnie USES Reverse engineering

bunnie wrote about reverse-engineering the Xbox and used hardware research to analyze it.

Derived Confidence 93% · Jack Rhysider EP 45 Details

“writing about how to reverse engineer the Xbox”

Jack Rhysider · offsets 6137–6183

Xbox firmware image USES Xbox hidden key

The Xbox firmware image had to be signed and encrypted using a key that was initially unknown.

Explicit Confidence 99% · bunnie EP 45 Details

“The firmware image needed to be signed, encrypted to a key”

bunnie · offsets 2186–2244

Xbox hidden key DISCOVERED_BY bunnie

bunnie captured and validated the hidden Xbox key by monitoring data during boot.

Explicit Direction flagged Confidence 98% · bunnie EP 45 Details

“This is the key. I couldn’t believe it.”

bunnie · offsets 4336–4376

bunnie USES Linux

bunnie eventually got the Xbox to run Linux.

Explicit Confidence 99% · Jack Rhysider EP 45 Details

“eventually got the Xbox to run Linux”

Jack Rhysider · offsets 5252–5288

Xbox dashboard DEVELOPED_BY Team Avalaunch

Team Avalaunch wrote and released a custom dashboard for the Xbox; the transcript later describes a custom dashboard for the Xbox 360 as well.

Explicit Confidence 98% · Jack Rhysider EP 45 Details

“The dashboard that Team Avalaunch made was pretty popular”

Jack Rhysider · offsets 10561–10618

Team Avalaunch USES Xbox 360 dev kit

Team Avalaunch obtained and hacked Xbox 360 development kits.

Explicit Confidence 92% · Jack Rhysider EP 45 Details

“Team Avalaunch figured this out and built a custom dashboard for the 360”

Jack Rhysider · offsets 12152–12224

Skitzo MEMBER_OF Team Avalaunch

Skitzo was a member of Team Avalaunch.

Explicit Confidence 99% · Jack Rhysider EP 45 Details

“Skitzo was a member of the Xbox hacking crew called Team Avalaunch”

Jack Rhysider · offsets 8678–8744

Lantus MEMBER_OF Team Avalaunch

Lantus is described as an individual within Team Avalaunch.

Explicit Confidence 94% · Skitzo EP 45 Details

“You had individuals like Lantus”

Skitzo · offsets 9474–9505

Redline MEMBER_OF Team Avalaunch

Redline is described as an individual within Team Avalaunch.

Explicit Confidence 94% · Skitzo EP 45 Details

“People like Redline, who could do wonders with networking”

Skitzo · offsets 9572–9629

JTAG hack EXPLOITS JTAG vulnerability

The JTAG hack exploited the Xbox 360 JTAG vulnerability.

Explicit Confidence 99% · Jack Rhysider EP 45 Details

“Someone found a vulnerability on the Xbox 360s”

Jack Rhysider · offsets 29448–29494

“these JTAG hacks which would allow them to cheat”

Jack Rhysider · offsets 29831–29879

JTAG hack AFFECTS Xbox 360

The JTAG hack enabled cheats on Xbox 360 systems.

Explicit Confidence 98% · Jack Rhysider EP 45 Details

“it would enable you to do various cheats in the game”

Jack Rhysider · offsets 29716–29768

mod chip USES JTAG

The described modification placed a mod chip on the Xbox 360 JTAG pins.

Explicit Confidence 99% · Jack Rhysider EP 45 Details

“if you put a mod chip on these JTAG pins”

Jack Rhysider · offsets 29674–29714

Dylan USES password reuse

Dylan tested credentials from a database dump against other services and found reused passwords.

Explicit Confidence 99% · Dylan EP 45 Details

“Let’s see if they reuse passwords.”

Dylan · offsets 34157–34191

Dylan USES credential dumping

Dylan used a database dump containing usernames, email addresses, and plaintext passwords.

Explicit Confidence 99% · Dylan EP 45 Details

“One day he gave me this list”

Dylan · offsets 33465–33493

“usernames, e-mails, and plain text passwords”

Jack Rhysider · offsets 33629–33673

Dylan USES network pivoting

Dylan pivoted from compromised systems to other servers and machines inside Epic's network.

Explicit Confidence 99% · Sanad Nesheiwat EP 45 Details

“I was just pivoting to different servers”

Sanad Nesheiwat · offsets 57400–57441

Dylan USES SMB

Dylan accessed a machine through an open SMB service to find additional credentials.

Explicit Confidence 99% · Dylan EP 45 Details

“I stumbled across one machine which had an SMB open.”

Dylan · offsets 50568–50620

Dylan USES VMware

Dylan encountered Epic's virtualized infrastructure running on VMware and ESX.

Explicit Confidence 99% · Dylan EP 45 Details

“they had a ESX kind of host, so they were VMware for everything”

Dylan · offsets 50092–50155

Sanad Nesheiwat USES hacked cable modem

Sanad used a hacked cable modem to connect to Epic's network and download data.

Explicit Confidence 99% · Sanad Nesheiwat EP 45 Details

“I had a hacked cable modem on Comcast.”

Sanad Nesheiwat · offsets 37561–37599

Gears of War 3 leak INVOLVES Gears of War 3

The incident involved theft and public leakage of pre-release Gears of War 3 material.

Explicit Confidence 99% · Jack Rhysider EP 45 Details

“they stole from Epic's network and stealing source code for pre-released games”

Jack Rhysider · offsets 46000–46075

“it showed up on The Pirate Bay for anyone in the world to download”

Jack Rhysider · offsets 43271–43337

Gears of War 3 leak COMPROMISES Epic Games

The Gears of War 3 leak incident involved unauthorized access to and theft from Epic Games' network.

Explicit Confidence 99% · Jack Rhysider EP 45 Details

“this group is actively hacking into Epic’s network and stealing source code”

Jack Rhysider · offsets 39810–39885

Passwords Pro USES MD5

Passwords Pro was used to crack hashes identified as MD5 with salt.

Explicit Confidence 99% · Dylan EP 45 Details

“they realized that it was just the MD5 and salt”

Dylan · offsets 64500–64548

“They were able to use Passwords Pro to just de-hash everything”

Sanad Nesheiwat · offsets 56345–56407

Justin May ASSOCIATED_WITH PAX arrest

Justin May was arrested at PAX while attempting to download a pre-release game from a development kit.

Explicit Confidence 99% · Skitzo EP 45 Details

“this is a guy that went to fucking PAX and got arrested”

Skitzo · offsets 42016–42071

“they caught Justin and threw handcuffs on him”

Jack Rhysider · offsets 47451–47496

PAX arrest INVOLVES Justin May

The PAX arrest incident involved Justin May.

Explicit Confidence 99% · Jack Rhysider EP 45 Details

“they caught Justin and threw handcuffs on him”

Jack Rhysider · offsets 47451–47496

Rowdy Van Cleave USES Xbox 360 dev kit

Rowdy obtained Xbox 360 development kits from an electronics recycling facility and distributed or sold them to hackers.

Explicit Confidence 99% · Jack Rhysider EP 45 Details

“Rowdy grabbed all that he could and started passing them out to everyone in Team Avalaunch”

Jack Rhysider · offsets 15546–15636

Sanad Nesheiwat USES Xbox 360 dev kit

Sanad obtained and used an Xbox 360 development kit to run pre-release software.

Explicit Confidence 99% · Sanad Nesheiwat EP 45 Details

“I was actually able to get everybody on the team a dev kit through Rowdy”

Sanad Nesheiwat · offsets 25017–25089

Dave USES Xbox 360 dev kit

Dave bought and used Xbox 360 development kits for modding and access to unreleased games.

Explicit Confidence 99% · Jack Rhysider EP 45 Details

“Dave was an Xbox hacker and he had been buying dev kits from Rowdy”

Jack Rhysider · offsets 26804–26870

Dave USES PartnerNet

Dave created a program that parsed PartnerNet data and enabled access to hidden files.

Explicit Confidence 99% · Sanad Nesheiwat EP 45 Details

“it would actually parse the XML file for PartnerNet and allow us to download files that were hidden on PartnerNet”

Sanad Nesheiwat · offsets 26946–27059

Anthony USES Reverse engineering

Anthony reverse-engineered machine language to create Halo 3 modifications.

Explicit Confidence 99% · Jack Rhysider EP 45 Details

“Anthony was good at reverse-engineering things”

Jack Rhysider · offsets 28053–28099

Dylan MEMBER_OF Xbox Underground

Dylan was one of the participants in the group later referred to by the media as Xbox Underground.

Derived Confidence 90% · Jack Rhysider EP 45 Details

“this group didn’t really have a name that they called themselves, but the media would later refer to this group as the Xbox Underground”

Jack Rhysider · offsets 72781–72916

Sanad Nesheiwat MEMBER_OF Xbox Underground

Sanad is listed as one of the participants in the group later referred to as Xbox Underground.

Derived Confidence 90% · Jack Rhysider EP 45 Details

“Sanad who’s trying to reverse-engineer the Xbox and downloading a ton of stolen data”

Jack Rhysider · offsets 72344–72428

Dave MEMBER_OF Xbox Underground

Dave is described as organizing and participating in the group later referred to as Xbox Underground.

Derived Confidence 92% · Jack Rhysider EP 45 Details

“Dave who’s organizing a lot of this and modding, and hacking, and cracking passwords”

Jack Rhysider · offsets 72174–72258

Anthony MEMBER_OF Xbox Underground

Anthony is listed as participating in the group later referred to as Xbox Underground.

Derived Confidence 90% · Jack Rhysider EP 45 Details

“Anthony is also participating in a lot of this and doing some reverse-engineering”

Jack Rhysider · offsets 72261–72342

Austin Alcala MEMBER_OF Xbox Underground

Austin is identified as one of the newer members involved in the group's activity.

Derived Confidence 90% · Jack Rhysider EP 45 Details

“Austin and Nathan worked together to connect into Zombie Studio’s network”

Jack Rhysider · offsets 62386–62459

Nathan Leroux MEMBER_OF Xbox Underground

Nathan is identified as one of the newer members involved in the group's activity.

Derived Confidence 90% · Jack Rhysider EP 45 Details

“Austin and Nathan worked together to connect into Zombie Studio’s network”

Jack Rhysider · offsets 62386–62459

Transcript references

Works mentioned in the transcript. Distinct from show-note sources.

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T06:02:11.451526+00:00