Hacking Pasta CFW - A CFW that allows unsigned CIA to be installed on Old and New 3DS! (required ninjhax)

Status
Not open for further replies.

nop90

Well-Known Member
Member
Joined
Jan 11, 2014
Messages
1,556
Trophies
0
Location
Rome
XP
3,136
Country
Italy
I'm only searching technical evidences to do not waste time. AFAIK reading the code it should work for every firmware. The only variable is spider version (once linked to the FW version, now independent because everyone can downgrade/upgrade freely)

Well, after a wonderful day on the beach I back home and disassembled some memory dumps.

If some developers are interested, the results are that the ROP gadget in the file spider_rop.h of spider sources are valid for the respective spider version. Thats why rop chains loaded with the loadrop html work on my 4.X with the browser from 7.1.

The offset for the functions used in the source file code.c aren't independent from the FW version (they have no meanings on my 4.x dumps). So it's normal that the code loaded with loadcode html work only with 9.X FW.

Next steps is define custom c funcs interfaces for the GPSGPU rop gadgets in spider_rop.h. using such functions in code.c the program will run on every FW, not only 9.X.

Sorry to go so slow, that's what I can give to the community.
 

Shadowtrance

Well-Known Member
Member
Joined
May 9, 2014
Messages
2,493
Trophies
0
Location
Hervey Bay, Queensland
XP
1,807
Country
Well, after a wonderful day on the beach I back home and disassembled some memory dumps.

If some developers are interested, the results are that the ROP gadget in the file spider_rop.h of spider sources are valid for the respective spider version. Thats why rop chains loaded with the loadrop html work on my 4.X with the browser from 7.1.

The offset for the functions used in the source file code.c aren't independent from the FW version (they have no meanings on my 4.x dumps). So it's normal that the code loaded with loadcode html work only with 9.X FW.

Next steps is define custom c funcs interfaces for the GPSGPU rop gadgets in spider_rop.h. using such functions in code.c the program will run on every FW, not only 9.X.

Sorry to go so slow, that's what I can give to the community.

Take your time and ignore everyone whining "where's the spider version waaaaaahhh"... Real life > other shit. :)
 

pakrett

Well-Known Member
Member
Joined
Apr 6, 2015
Messages
1,519
Trophies
0
Age
34
XP
1,351
Country
France

sgtkwol

Well-Known Member
Member
Joined
Oct 29, 2008
Messages
222
Trophies
0
XP
270
Country
United States
Well, after a wonderful day on the beach I back home and disassembled some memory dumps.

If some developers are interested, the results are that the ROP gadget in the file spider_rop.h of spider sources are valid for the respective spider version. Thats why rop chains loaded with the loadrop html work on my 4.X with the browser from 7.1.

The offset for the functions used in the source file code.c aren't independent from the FW version (they have no meanings on my 4.x dumps). So it's normal that the code loaded with loadcode html work only with 9.X FW.

Next steps is define custom c funcs interfaces for the GPSGPU rop gadgets in spider_rop.h. using such functions in code.c the program will run on every FW, not only 9.X.

Sorry to go so slow, that's what I can give to the community.

You're not supposed to be enjoying the day, you're supposed to be giving us moar pasta!!! In all seriousness, if your weather is anything like ours, take the time to enjoy it while it's here. I'm sure we could all use a bit of time outdoors.
 

AHP_person

Well-Known Member
Member
Joined
Nov 2, 2014
Messages
364
Trophies
0
XP
518
Country
United States
don't want this thread to overflow with unrelated things but quick question, how do i rebuild the exefs?
Well you can either build a cxi with makerom, or use a hex editor to replace files. Usually the latter is faster, just remember to fix the sha256 hashes.
To build a cxi you can use:
Code:
makerom -f cxi -rsf rsf.txt -o out.cxi -exheader exh.bin -exefslogo -code .code.bin -icon icon.bin -banner banner.bin
Then you can either extract the exefs or use the output cxi. Remember to use "-romfs" to specify a pre-built romfs if you need it.
 
  • Like
Reactions: Margen67

Myth

Well-Known Member
Newcomer
Joined
Jun 3, 2015
Messages
86
Trophies
0
XP
128
Country
United States
Iv had a bit of a problem with Pasta working recently, I was orignally on 6.3 firmware and could not get pasta to work. Then I upgrade to 8.1 and found that pasta worked fine, however since Iv downgraded to 4.2 firmware pasta is having the same problem it did on 6.3, however from what I'm aware of Pasta supports 4.2 and it should be working, I have all the files in the correct folders etc and have already replaced them since the downgrade though however many times I try pasta fails to work.
 

Sizednochi

Well-Known Member
Member
Joined
Dec 16, 2012
Messages
697
Trophies
1
XP
867
Country
Brazil
Sorry for asking, but if I'm getting this right, firmlauch means a 4.x console running MSET Pasta will be able to access eShop and play >7.x games?
 

EmceeKerser

Well-Known Member
Member
Joined
Jun 3, 2014
Messages
1,374
Trophies
0
Age
34
Location
The fuckin' Blue Mountains brah
XP
658
Country
Hey guys, super curious. What's stopping us from injecting cubic ninja or OoT into a legit cia and using that for exploits? I mean obviously its not possible because otherwise it would have been done by now, but why? Is the legit cia's key still game specific, but not console specific?
 
Status
Not open for further replies.

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    Sicklyboy @ Sicklyboy: Welp I'm off to best buy because I figured out how to shove another 14tb hard drive in this server 😂