The GlitchMod knowledge base

Exploit Chart

The following chart shows all compatible hacks for each console. 1 Barracuda (Winchester) consoles cannot be RGH'd or JTAG'd 2 Must check CB via NAND dump to see if it is JTAGable. Most - but not all - consoles below 7371 and some on 7371 …

2 min readUpdated Oct 9, 2026
Other languages:

The following chart shows all compatible hacks for each console.

Exploit Xenon Elpis Zephyr Opus Falcon Jasper Tonasket Trinity Corona Waitsburg Stingray Barracuda / Winchester
JTAG ✔️2 ✔️2 ✔️2 ✔️2 ✔️2 ✔️2 ❌10 ❌ ❌ ❌ ❌ ❌1
R-JTAG ➖3 ➖3 ➖3 ✔️ ✔️ ✔️ ✔️ ❌ ❌ ❌ ❌ ❌1
R-JTOP ➖3 ➖3 ➖3 ✔️ ✔️ ✔️ ✔️ ❌ ❌ ❌ ❌ ❌1
RGH1 ❌ ❌ ➖3 ✔️ ✔️ ✔️ ✔️ ❌ ❌ ❌ ❌ ❌1
RGH1.2 ➖3 ➖3 ➖3 ✔️ ✔️ ✔️ ✔️ ✔️7 ✔️7 ✔️7 ✔️7 ❌1
RGH2 ❌5 ❌5 ➖6 ➖6 ➖6 ➖6 ➖6 ✔️ ✔️ ✔️ ✔️ ❌1
S-RGH ❌5 ❌5 ❌4 ❌4 ❌4 ➖6 ➖6 ✔️ ✔️ ✔️ ✔️ ❌1
Mufas ❌5 ❌5 ❌4 ❌4 ❌4 ❓12 ❓12 ✔️ ✔️ ✔️ ✔️ ❌1
EXT_CLK ✔️ ✔️ ✔️ ❓12 ❓12 ❓12 ❓12 ❌11 ❌11 ❌11 ❌11 ❌1
RGH3 ❌ ❌ ❌ ✔️8 ✔️8 ✔️8 ✔️8 ✔️7 ✔️7 ✔️7 ✔️7 ❌1
Bad Update ✔️9 ✔️9 ✔️9 ✔️9 ✔️9 ✔️9 ✔️9 ✔️9 ✔️9 ✔️9 ✔️9 ✔️9

1 Barracuda (Winchester) consoles cannot be RGH'd or JTAG'd

2 Must check CB via NAND dump to see if it is JTAGable. Most - but not all - consoles below 7371 and some on 7371 have an unpatched CB.

3 Only works on some boards and can take minutes to boot if at all - some randomly crash on PLL de-assertion. R-JTAG requires dashboard 14719, and R-JTOP requires dashboard 15572.

4 Hangs due to lack of CLKREF fix and poor acceleration support in bootloaders, use RGH2 instead.

5 RGH2, S-RGH, and Mufas requires the HANA chip, which is not present on Xenon/Elpis.

6 Unreliable due to requirement of long wires.

7 Requires scraping solder mask off of PLL point (more difficult).

8 Often works, but is more likely to have issues compared to if it's done on Trinity/Corona. On the other hand, RGH 1.2 has a much more guaranteed success rate on these motherboards.

9 Bad Update is a software-only hypervisor exploit that can be used on the latest dashboard version to execute unsigned code, such as homebrew. It works on all console revisions, but the exploit is not permanent, as arbitrary code execution will be lost when you reboot.

10 No Tonasket motherboards were manufactured with JTAGable CB. Only a CPU-swapped Tonasket can be JTAG'd.

11 Technically possible but won't work with standard XC2C-based glitch chips.

12 Octal450 has it working, but has not been optimized/released.

Legend

Status Color & Symbol
Reliable ✔️
Unreliable ➖
Not working ❌
To be determined ❓