Xbox, PlayStation 3, Wii and the Modern Consoles — Three Data Guns, Three Locks, and the Adapters That Do Not Help

The original Xbox's light guns imitated on a real Xbox; the GunCon 3's encryption and why its open description has not yet become hardware; the Wii, where the remote already is the gun; why the Xbox 360, PlayStation 4 and 5 and Switch have nothing to plug a light gun into; and what Brook, Mayflash, Reflex Adapt and RetroZord adapters actually convert

4.1 The later consoles in one picture

Figure 1 — The later consoles side by side. Xbox, 2001: the controller port is USB in a different plug; a gun is controller subtype 0x50, reports its aim on the left stick with 0, 0 at the screen centre and p… — Figure 1 — The later consoles side by side. Xbox, 2001: the controller port is USB in a different plug; a gun is controller subtype 0x50, reports its aim on the left stick with 0, 0 at the screen centre and plus or minus 32767 at the edges, reports 0, 0 with a cleared bit when off the screen, and takes a ten-byte calibration report; real guns need video sync to enumerate, an imitation does not; no lock, and imitated on a real Xbox in 2023. PlayStation 3 GunCon 3, 2007: USB 0B9A:0800, a camera gun with two marker units; the console writes an eight-byte key and the gun answers fifteen-byte reports encoded with a 256-byte table; each gun contains its own one-port hub; the lock is encryption, the device side is described in RPCS3's source, and no hardware imitation was found. Wii, 2006: the Wii Remote is the gun, a Bluetooth device whose camera sees the sensor bar; it already works on any display; a Linux Wiimote emulator can pair with a real Wii and synthesise the pointer; the lock is Bluetooth pairing, not encryption. Own-work diagram from the sources named in each panel.

Every gun after the PlayStation 2 reports its position as data, so all of these consoles are in the easier family of Volume 1, §1.4. What separates them is what stands between a modern gun and the console: nothing on the Xbox, encryption on the PlayStation 3, Bluetooth pairing on the Wii, and on everything after them, the absence of any light-gun device at all.

4.2 The original Xbox

Third-party guns played the Xbox’s handful of gun games, The House of the Dead III and Silent Scope Complete among them. Ben Ryves added the Xbox to Light Gun Commando in January 2023 and wrote down what the guns are, which is the only device-side description found:

The port. The Xbox controller port is USB electrically, in a different plug; he cut an Xbox extension cable in half and found its colours did not follow the usual convention, so he checked each wire with a meter.
Identity. An Xbox controller reports a subtype; the light gun is 0x50, against 0x01 for the original “Duke” pad and 0x02 for the Controller S.
Position. On the left stick: “(0, 0) being the centre of the screen”, with −32768 at the bottom-left and +32767 at the top-right. When the gun cannot see the screen it reports 0, 0 and clears bit 5 of byte 2. A further bit, 0x20 in byte 3, says whether the gun sees light in the current frame.
Calibration. A ten-byte SET_REPORT with wValue 0x0201 carries inner and outer X and Y offsets; the game zeroes them, shows a centre target and a top-left target at (−25000, +25000), and sends the corrections to the gun, which applies them. His adaptor accepts the report and ignores the values, “since the Wii remote is already calibrated”, and that was enough to get The House of the Dead III past its calibration screen.
Video. Real Xbox guns need a sync signal on the controller cable’s fourth pin: “the guns would not enumerate properly if they were not fed with a video sync signal”. An imitation, which already knows its position, does not.
Speed. A V-USB device on an ATmega328P failed, which he put down to V-USB being low-speed only (8-byte endpoints, 10 ms polling) against the Xbox’s 20-byte reports every 4 ms; an ATmega32U4 (Arduino Pro Micro) running LUFA worked.

He played The House of the Dead III and Silent Scope on a real Xbox with a Wii Remote as the gun (January 2023). So the Xbox is solved in principle and has no lock; what it lacks is a published design.

One practical difference from the PlayStations: the Xbox’s off-screen state is a flag as well as a position. An imitation for the project’s gun would set position 0, 0 and clear the flag whenever the gun’s camera loses the emitters, which is what OpenFIRE’s off-screen detection provides (Open-Source Firmware, Volume 6, §6.3).

4.3 The PlayStation 3 and the GunCon 3

The GunCon 3 is a camera gun with two infrared marker units at the screen, the PlayStation 3 gun for Time Crisis 4 and its successors (Console Light Guns, Volume 6). It works on any display already. The difficulty is not the display but the protocol.

RPCS3, the PlayStation 3 emulator, imitates the gun to the emulated console, and its source (rpcs3/Emu/Io/GunCon3.cpp, project licence GPL-2.0) is the clearest description of what a real console expects:

Identity. Vendor 0x0B9A, product 0x0800, two interrupt endpoints, 0x02 OUT and 0x82 IN.
A key from the console. The console writes eight bytes to the OUT endpoint. RPCS3 stores them as the key.
Encoded reports. Each IN report is fifteen bytes: three bytes of buttons, X, Y and Z as signed 16-bit values, four stick bytes, a checksum and a key index. RPCS3 builds it in clear and then runs guncon3_encode over it, which walks a fixed 256-byte table (KEY_TABLE) with an offset derived from the key and the report, adding, subtracting or XORing each byte according to the table entry. X and Y span −32767 to +32767 across the screen.

This lineage comes from Beardypig’s 2016 reverse engineering, which found the decryption table inside the game and produced a Linux driver for the real gun with a fixed key; MiSTer uses that work to read real GunCon 3s (MiSTer FPGA, Volume 5, §5.3). A 2026 RP2040 project, MukiEX’s Guncon_3_USB (GPL-2.0), reads real GunCon 3s on a PC through a PIO USB host, and records that every GunCon 3 contains its own one-port hub (0C12:8801).

What has not been done is the reverse: a device that answers a real PlayStation 3 as a GunCon 3 from a modern gun’s position. Everything such a device needs is in RPCS3’s source, including the device side of the encoding, but no hardware project was found, and a GBAtemp forum thread (its date not shown in the listing read) quoted AimTrak’s makers saying their gun “cannot duplicate or crack the GunCon3 encryption” on a PlayStation 3. Two cautions for anyone attempting it:

RPCS3 answers the emulated console’s key with the emulator’s own encoding. That the real console accepts exactly that encoding is strongly implied, because the emulator runs the real games, but it has not been shown on hardware.
The gun appears behind its own hub. Whether the console cares about seeing the hub was not established.

The code is GPL-2.0, so a device built on it carries the GPL’s obligations, which matters only if it is sold (Our Firmware, Volume 6).

4.4 The PlayStation 3’s other routes

PlayStation Move. Many PlayStation 3 gun games of 2010 onwards use the Move controller, tracked by the PlayStation Eye camera through its lit sphere, in shells such as the Sharp Shooter (Console Light Guns, Volume 6). That pairing (camera on the console, light on the controller, plus the controller’s inertial sensors over Bluetooth) is not something a modern gun can imitate; a Move in the project’s shell would simply be a Move.
PlayStation 2 games on backward-compatible PlayStation 3s. The Time Breaker gun’s seller claims that PlayStation 2 games work on backward-compatible PlayStation 3s (Volume 2, §2.10). If so, a GunCon 2 imitation would work there too. Not verified.
Top Shot Elite. Activision’s PlayStation 3 and Xbox 360 gun with its own dongle and sensor bar, for its own games. No protocol description was found.

4.5 The Wii

Figure 2 — The Wii Zapper with a Wii Remote fitted in the front and a Nunchuk in the rear grip. The Zapper is a plastic shell; the Wii Remote's camera does the aiming. On the Wii, the remote already is a ligh… — Figure 2 — The Wii Zapper with a Wii Remote fitted in the front and a Nunchuk in the rear grip. The Zapper is a plastic shell; the Wii Remote's camera does the aiming. On the Wii, the remote already is a light gun that works on any display, so the question for a modern gun is not timing but whether it can be a Wii Remote. Photo: Michael Greiner, Wikimedia Commons, CC BY-SA 3.0.

On the Wii the remote already is the gun: its camera sees the sensor bar’s two infrared clusters, and the console computes the pointer from the dots. It works on any display. That is why every Wii “light gun” is a shell for a remote (Console Light Guns, Volume 6), and why both timing boxes in Volume 3 used Wii Remotes as their aim sensors in the first place.

For a modern gun there are two routes, neither ready:

Carry a Wii Remote. A shell built for the project could hold a Wii Remote as the Zapper does, and the gun’s own electronics would play no part. Modding Classic Light Guns, Volume 3 treats the Wii Zapper as a host shell going the other way.
Be a Wii Remote. A Wii Remote is a Bluetooth HID device with its own report formats, and it reports the positions of the infrared dots its camera sees, not a pointer. rnconrad/WiimoteEmulator (2016 to 2023) emulates a remote in software on Linux with a custom Bluetooth stack, pairs with a real Wii, and synthesises the infrared dot reports from a pointer position, taken from a keyboard or a socket. Feeding it from a modern gun’s position, on a Raspberry Pi, is a plausible route. No light-gun project using it was found, and it needs a Bluetooth adapter whose address the stack can control.

The Wii’s lock is therefore Bluetooth and pairing rather than encryption, and the payoff is small: Wii gun games already play on any television with a remote that costs a few dollars.

4.6 Xbox 360, PlayStation 4 and 5, Switch

None of these consoles has a light-gun device in the sense of this dive: no protocol in which a gun tells the console where on the screen it points. Their gun-shaped accessories are shells for motion controllers (the Move on the PlayStation 4’s virtual-reality games, Joy-Con shells on the Switch) or third-party guns with their own dongles for particular games. A modern light gun can reach them only as a gamepad, and then only through an adapter (§4.7), where its absolute aim becomes stick deflection.

So for these consoles the answer is short: not as a light gun. Their light-gun-style games that matter to this project (the Time Crisis and House of the Dead remasters and arcade ports) are better played on a PC, where the project’s gun is an absolute pointer (PC (Windows)).

4.7 Controller adapters, and what they actually convert

Four adapter families come up whenever “light gun on a console” is asked. None puts a modern light gun on an original console as a light gun.

Table 1 — 4.7 Controller adapters, and what they actually convert

Adapter	What it converts	What it does for a light gun	Source, read 2026-10-24
Brook Wingman family (P5, XB 3 and others)	Modern controllers to a console: the Wingman P5 “Supports over 100 official / licensed wired and wireless controllers” for PS5, PS4 and PC	Nothing: the input list is controllers only, no mouse and no gun	Brook, Wingman P5 page
Mayflash MAX Shooter One (MAX011) and similar mouse-and-keyboard converters	A mouse and keyboard to PS3, PS4, Xbox 360 and Xbox One (product title)	A gun’s absolute mouse becomes stick deflection: motion, not position. Aim drifts and nothing lines up with the screen. Useful for first-person shooters, not gun games	Mayflash product listing
Reflex Adapt (MiSTer Addons)	Classic controllers to USB, with dedicated modes including the PlayStation GunCon, “overclocked to support 1ms USB polling” for MiSTer	The reverse direction: an original GunCon to a USB host, still on a CRT (MiSTer FPGA, Volume 4, §4.6)	MiSTer Addons announcement (via search; page rate-limited)
RetroZord GunCon adapter	An original GunCon to USB (“RZordPsGun” to MiSTer)	Same reverse direction	MiSTer FPGA, Volume 4
Mayflash DolphinBar	Wii Remotes to a PC, as mice or as HID devices for the Dolphin emulator	The reverse direction again; Ben Ryves used its fourth mode to prototype Light Gun Commando on a PC	benryves.com, 13 December 2022

The pattern is that adapters exist for original guns to modern hosts (Reflex Adapt, RetroZord, GUN2CRT, the GunCon 2 drivers) and for modern controllers to modern consoles (Brook, Mayflash). The direction this dive needs, modern gun to original console, is served only by the translators and timing boxes of Volumes 2 and 3.

4.8 Why this, and why not the others

Table 2 — 4.8 Why this, and why not the others

Console	Worth doing for the project?	Why, and why not
Xbox	Later, if wanted	No lock and a device description exists; two notable games; needs a full-speed USB device (the RP2040 has one), and the Xbox’s own plug
PlayStation 3 (GunCon 3)	Not now	Possible from RPCS3’s description but unproven on hardware, GPL code, and only a few games; the GunCon 3 itself is cheap and works on any display (Console Light Guns, Volume 6)
Wii	No	The Wii Remote already works on any display; being a remote needs Bluetooth emulation for little gain
Xbox 360, PlayStation 4 and 5, Switch	No	No light-gun protocol to imitate; the PC versions of their gun games run with the project’s gun as an absolute pointer
Controller adapters	No	Wrong direction, or turn absolute aim into stick motion

4.9 What could not be verified

Nothing in this volume has been run.
Which Xbox games accept a gun, beyond the two Ben Ryves played; and how the Xbox gun’s off-screen flag is used by each.
Whether a real PlayStation 3 accepts RPCS3’s GunCon 3 encoding from a hardware device, and whether it needs to see the gun’s internal hub.
PlayStation 2 gun games on backward-compatible PlayStation 3s with a GunCon 2 or an imitation.
Top Shot Elite’s protocol.
WiimoteEmulator’s current state on modern Linux and whether its synthesised pointer is good enough for gun games.
Reflex Adapt’s own page (rate-limited when read); its GunCon mode is quoted from the maker’s announcement as a search returned it.

Sources

Ben Ryves, Light Gun Commando journal series, including the Xbox entry of 24 January 2023, read 2026-10-24. https://benryves.com/journal/tags/Light_Gun_Commando
RPCS3, rpcs3/Emu/Io/GunCon3.cpp and GunCon3.h, master, read 2026-10-24. https://github.com/RPCS3/rpcs3
Beardypig, “Guncon 3 Reversing and Linux Driver”, 6 January 2016 (via search listing), and beardypig/guncon3. https://www.beardypig.com/2016/01/06/guncon3/
MukiEX, Guncon_3_USB (GC3-XInput), README, created 2026-10-14, read 2026-10-24. https://github.com/MukiEX/Guncon_3_USB
GBAtemp, “PS3 CFW with aimtrack guns?”, thread 490431 (as quoted in a search listing). https://gbatemp.net/threads/ps3-cfw-with-aimtrack-guns.490431/
rnconrad, WiimoteEmulator, README and input.c, created 2016-02-29, last push 2023-05-13, read 2026-10-24. https://github.com/rnconrad/WiimoteEmulator
Brook Gaming, Wingman P5 product page, read 2026-10-24. https://www.brookaccessory.com/products/wingmanp5/index.html
Mayflash, MAX Shooter One (MAX011) product listing title, read via search 2026-10-24 (the product page returned 404). https://mayflash.com/product/MAX011.html
MiSTer Addons, “Reflex Adapt is here” (via search listing; the page returned HTTP 429 on 2026-10-24). https://misteraddons.com/blogs/news/reflex-adapt-is-here