Tutorial  Updated

Using "smashhax" with Linux

If you can use the browser, I suggest that you use the new browserhax (up to 11.0.0-33!) in the meantime.

Try out Ubuntu 15.04: http://old-releases.ubuntu.com/releases/15.04/

This requires a New 3DS. The demo version doesn't work and is patched. If you have 1.1.3 or newer delete/disable the update data.

officially called smashbroshax sometimes smashax
Here is a new tool I call smashbroshax-helper. It is a graphical interface for the exploit which simplifies most of the process of broadcasting the packet. It requires almost no setup outside of creating a bootable Linux USB/DVD.

Important notes:
  • This does not work on Fedora or Red Hat-based distributions because aircrack-ng needs to be compiled on it (and I can't figure out how to install the needed things).
  • Don't use a virtual machine!
  • This probably will never work on Old 3DS.
Download smashbroshax-helper beta

It is recommended that you use a live Ubuntu 15.04 image. Versions 15.10+ have issues. http://old-releases.ubuntu.com/releases/15.04/
  1. Create a bootable USB/DVD with a Linux distribution (there are various guides online).
  2. If possible, get a second USB/SD card/storage device, download and save the above .zip to it.
    • Don't extract the contents of it to the USB device, as it might cause problems. Just save the .zip file to it.
    • If you can't do this, you'll have to connect to the Internet while in Linux to download it.
    • If using a bootable USB, make sure you can use two ports at a time. Don't take out the Linux USB while it is being used!
  3. Restart your computer and run the bootable USB/DVD you created.
  4. Extract the contents of the .zip to the Desktop.
  5. Open the smashbroshax-helper folder and double click "smashbroshax.sh".
  6. Follow the on-screen prompts.
  7. If everything goes well, you should now have homebrew!
Video demonstration, from boot to shutdown:

from https://gbatemp.net/threads/tutorial-using-smashhax-with-linux.397194/page-9#post-5842512


If you would like the full tutorial, involving terminal usage and compiling:
To reverse the changes to your wireless interface and remove issues connecting to networks after, rebooting your system or changing it to "Managed" instead of "monitor" should fix it. How to do that is in the second to last section.



@Cydget made a script that condenses most of this into a script. I have not tried it myself yet but it seems to work for others.
So, I made a little script for this. If anybody wants it, then unzip this file and read the readme. And yes, I like to pipe things. http://www.mediafire.com/download/oulnubnzkk9g3i0/smashhaxEZ.zip

Requirements
  • Any Linux distribution should do (this has only been tested with Debian-based distributions). Windows and OS X users should wait or find a method for now, sorry!
    • Please do not use Linux in a virtual machine, it likely won't give direct access to your wireless card. Dual boot or use a live USB/disk.
    • The recommended distro to use is Ubuntu 15.04 (link to Ubuntu MATE 15.04).
  • A Wi-Fi-capable wireless card.
  • Super Smash Bros. for Nintendo 3DS Full or Demo.
  • New 3DS. This does not work on Old 3DS.
  • Patience. The hax is sort-of unreliable so your game will most likely crash a few times.
  • Recommended: Another device to access the internet (phone, tablet, computer, console).
Preparing
  • Install these packages using your package manager. For example, "apt-get" for Debian-based distributions (including Ubuntu).
    Code:
    openssl libssl-dev libnl-genl-3-200 libnl-genl-3-dev libnl-3-200 libnl-3-dev pkg-config
  • Find your wireless card's interface by opening a terminal and using the command "ip link". It would be something like wlan0 or wlp3s0.
    Code:
    ian@ian-VPCEG34FX:~/Desktop/aircrack-ng-1.2-rc2/src$ ip link
    1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default 
        link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    2: eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN mode DEFAULT group default qlen 1000
        link/ether xx:xx:xx:xx:xx:xx brd ff:ff:ff:ff:ff:ff
    3: wlan0: <NO-CARRIER,BROADCAST,ALLMULTI,PROMISC,NOTRAILERS,UP,LOWER_UP> mtu 1500 qdisc mq state DORMANT mode DORMANT group default qlen 1000
        link/ieee802.11/radiotap xx:xx:xx:xx:xx:xx brd ff:ff:ff:ff:ff:ff
  • You probably already have it, but get the homebrew starter kit and place it on your SD card.
  • Download the smashhax .pcap files from the releases section of the smashbroshax repository.
  • Determine the .pcap file to use. This should be straightforward using the file names.
    The built beacon-hax pcaps are located under "pcap_out/". In the filenames, "vXYZ" means game-version "vX.Y.Z". Full-game filenames for USA include "gameusa", while the other regions filenames include "gameother".
  • Get the "Otherapp payload" from the Homebrew Launcher site and save it to "smashpayload.bin" at the root of your SD card.
  • Download and extract aircrack-ng's latest release source.
  • Save aireplay-ng.patch from the smashbroshax repository in the folder "aircrack-ng-1.2-rc2".
Compiling aircrack-ng/aireplay-ng
  • Open a terminal and go to the "aircrack-ng-1.2-rc2" folder.
  • Use the command "patch src/aireplay-ng.c < aireplay-ng.patch". If you get the following then it has succeeded.
    Code:
    patching file src/aireplay-ng.c
    Hunk #1 succeeded at 560 (offset 1 line).
    Hunk #2 succeeded at 573 (offset 1 line).
  • Run "make" and wait. The program should be compiled with the patch now. If you get the following as the last line then it has succeeded.
    Code:
    make[1]: Leaving directory '/path/to/aircrack-ng-1.2-rc2/src'
The moment of truth
  • Run these 3 terminal commands in order, using the wireless interface (from "ip link") you found earlier.
    sudo ifconfig wireless_interface down
    sudo iwconfig wireless_interface mode monitor
    sudo ifconfig wireless_interface up
    sudo iwconfig wireless_interface channel 6​
    (the last line was suggested by @difool. and might make the payload trigger faster)
  • Enter the "src" folder in your terminal.
  • Run the following command to start broadcasting the packet: "sudo ./aireplay-ng --interactive -r /path/to/smashbros_version_beaconhax.pcap -h 59:ee:3f:2a:37:e0 -x 10 wireless_interface"
    Use the .pcap file and wireless interface you found out earlier.
  • On the 3DS system, start the game, then choose Smash and Group. Wait for the magic to happen.
Encountering errors? Something confusing?
  • Does running aireplay-ng end with "End of file"? You might be running your installed version of aircrack-ng. Don't forget the ./ for "sudo ./aireplay-ng ..."!
  • Please tell me the distribution you are using and the error you've encountered. This will help me fix your issue faster.
  • If you don't get something, don't hesitate to point it out! I want to help anyone I can.
  • Did you spot an inaccuracy or mistake I made? It would be great if you can tell me that too.
  • This was before the Otherapp payload selector was added to the HBL site. This is kept here for legacy reasons or something.
    • Determine what file you need to get from the Homebrew Launcher Payload section:
      With the release builds, the hax loads the payload from SD "/smashpayload.bin". This should contain the hb-launcher(https://smealum.github.io/3ds/) otherapp payload. Until there's a proper otherapp payload selector on the hb-launcher site, the payload can be downloaded from the following URL(see also https://github.com/smealum/sploit_installer):
      FIRMVER values(without quotes):
      • "POST5" = non-New3DS
      • "N3DS" = New3DS
      REGION values(without quotes):
      • "U" = USA
      • "E" = EUR
      • "J" = JPN
      MENUVER values(without quotes):
      • "11272": Non-JPN, system-version v9.0.
      • "12288": System-version v9.2.
      • "13330": System-version v9.3.
      • "14336": System-version v9.4.
      • "15360": System-version v9.5.
      • "16404": System-version v9.6.
      • "17415": System-version v9.7.
      • "20480_usa": USA, system-versions v9.9-v10.0.
      • "19456": Non-USA, system-versions v9.8-v10.0.
      MSETVER values(without quotes):
      • "8203": System-versions below v9.6.
      • "9221": System-versions starting with v9.6.
      For example, the payload URL for New3DS USA 9.9.0-X - 10.0.0-X is:https://smealum.github.io/ninjhax2/Pvl9iD2Im5/otherapp/N3DS_U_20480_usa_9221.bin
      The end result is a file named "smashpayload.bin" at the root of your SD card.

You are allowed to reproduce/reprint this tutorial, as long as a link back to this page (https://gbatemp.net/threads/tutorial-using-smashhax-with-linux.397194/) is included.
 
Last edited by ihaveahax,

Shigure

Member
Newcomer
Joined
Jun 29, 2016
Messages
13
Trophies
0
Age
43
XP
51
Country
United States
When the packages are sending, the network disconnects, this always happens, why does this happen and how can I fix it?
 

Snazzler

New Member
Newbie
Joined
Jun 29, 2016
Messages
4
Trophies
0
Age
26
XP
73
Country
United States
Hello, everytime i double click the .sh file it brings me to a page that says:
# IF YOU ARE READING THIS
# YOU PROBABLY DID SOMETHING WRONG
#
# https://gbatemp.net/threads/tutorial-using-smashhax-with-linux.397194/page-9#post-5842512

# ----------------------------------------------

# this probably could be done entirely in bash
# but I couldn't figure out how to do everything
# so I just went with what I was most comfortable with

cd resources
gksudo ./lua53-$(getconf LONG_BIT) run.lua
 

mrgameandwatch09

Member
Newcomer
Joined
Aug 18, 2015
Messages
20
Trophies
0
Age
43
XP
103
Country
United States
Hello, everytime i double click the .sh file it brings me to a page that says:
# IF YOU ARE READING THIS
# YOU PROBABLY DID SOMETHING WRONG
#
# https://gbatemp.net/threads/tutorial-using-smashhax-with-linux.397194/page-9#post-5842512

# ----------------------------------------------

# this probably could be done entirely in bash
# but I couldn't figure out how to do everything
# so I just went with what I was most comfortable with

cd resources
gksudo ./lua53-$(getconf LONG_BIT) run.lua



Make sure you are using ubuntu mate 15.04
 

Shigure

Member
Newcomer
Joined
Jun 29, 2016
Messages
13
Trophies
0
Age
43
XP
51
Country
United States
It says...
Saving chosen packet in replay_src-0925-193249.cap
You should also start airodump-ng to capture replies.

write failed: Network is down
wi_write(): Network is down
When I try to use it... Why does this happen and how can I fix it?
 

xdeadxpoolx

Well-Known Member
Newcomer
Joined
Apr 27, 2008
Messages
76
Trophies
0
XP
225
Country
United States
Sys: N3DSXL 10.7.0-32U
Game: Smash US Cart (no updates)

I have both the smashpayload.bin and starter pack (unzipped) on the root of my SD card. Load the helper, broadcasts packets fine, N3DS boots me to home screen with an error and a reset. Been at this all day now. Im goinng fucking Nuts. Any help would be greatly appreciated!
 

ZargaLykos

New Member
Newbie
Joined
Jul 6, 2016
Messages
2
Trophies
0
Age
35
XP
41
Country
Jamaica
Thanks so much for your help I got it working perfectly :)
Noticed a few things doing this:

I tried 5 different Broadcom wireless cards and none of them worked/broadcasted
I tried 2 different Intel wireless cards and both worked/broadcasted
Seems Broadcom cards have a problem on a whole

My Smash version was 1.0.1, found the pcap for 1.0.1 online and it works perfectly

https://onedrive.live.com/redir?resid=A30F7E100D513D7D!10427&authkey=!AE_QvKI6-RIaBQE&ithint=file,pcap

If anyone else needs some help with this, Im no expert but maybe I can help a bit
 
Last edited by ZargaLykos,

KingOfTaurus

Well-Known Member
Member
Joined
Feb 19, 2016
Messages
174
Trophies
0
Age
40
Location
Las Vegas
XP
220
Country
United States
HELLO EVERYONE, I figured everything out so I'm happy to help with noob linx users. so you installed the ubunutu after that your going to do a little more setup besides downloading the file and running it. first make sure that your admin if not well this isn't going to work, next make sure the .sh file is exutable or is allowed to. do the following right click on .sh find the permissions tab (should be on top-ish close to the right a little) next click Execute:Allow executing file as program (you need admin to do so) next open your terminal now before we get in the hack it self we actully need some recources that are missing by defult.

type in root you should get
(yournamehere):~$ root
The program 'root' is currently not installed. You can install it by typing:
sudo apt-get install root-system-bin

type in that and its going to ask for your password ( don't worry if the curser doesn't move it is actually typed in windows users) it going to ask do you want to continue type:y or yes

now im going to give a little explanation for why we need to do this (don't worry it won't be uber comlicated) we need to do this because the gksudo command requires root which also gksudo needs to be installed so in the end the program can't run since we don't have the proper stuff to run with. thats my explanation, told you it wouldn't be complicated.

now let terminal do its crap which will take a while, so don't expect it to end very quickly, and if it appears frozen just don't click ANYTHING. once you see (yournamehere):~$ root you can do the next step. after that type in gksudo and its going to similar things to what happend with root, password...yes... ok, after that is done we need to make the program run in terminal at this point I just close the terminal and open a new one just to get that crap off. now we can actully run the program. so open terminal and put in the following cd ~/Desktop now I know what your thinking what does this do, well we are giving the computer a main directory to look at so basically we are guiding the computer to where the files are at so if I wanted to run it in a folder in the desktop I would do this instead: cd ~/Desktop/foldername. so for me its cd ~/Desktop/smashbroshax-helper

then type the following: sh ./smashbroshax.sh. once done its going to ask for your password enter it and there you go its all set, now there was a issue I came acrosses there is no 1.0.1 pcap file:
so you have to get that yourself but I will give some guidince, first you will need to replace (once you downloaded your pcap file if needed) replace it with a existing one and when you get the sh file to run choose the file you replaced. in pcapout folder in smashhax helper : helpful link with somedownloads possible for pcaps https://github.com/yellows8/3ds_smashbroshax/issues/8

I had to follow this small fix tutorial here, but I still have an issue. When I "run" smashbroshax.sh in terminal, it asks for a password. I enter the password and then nothing at all happens.

What else could be the issue here?
 
D

Deleted User

Guest
Hello! I'm new here. Could you please help me, how to check my Super Smash Bros cartridge game version ? I looked through all game menus and could not find anything about version. I alsa googled a lot with no luck. Thanks in advance.
here is something funny, it actully saw it right off the bat, you know where it shows the tutorial and also does a quick pan of the chracters? or basicly the spot where it says click any button to continue, look on the bottom right you should see the version number. now if you have 1.0.1 be aware that this IS NOT the same as 1.0.0 meaning you need to find a pcap file on the internet, 1.3 doesn't work with this hack, if you have that version or higher, just go into your system settings-->data managment-> 3ds -> go to downloadable content tab now look for the super smash brothers update and delete that

--------------------- MERGED ---------------------------

Thanks so much for your help I got it working perfectly :)
Noticed a few things doing this:

I tried 5 different Broadcom wireless cards and none of them worked/broadcasted
I tried 2 different Intel wireless cards and both worked/broadcasted
Seems Broadcom cards have a problem on a whole

My Smash version was 1.0.1, found the pcap for 1.0.1 online and it works perfectly

https://onedrive.live.com/redir?resid=A30F7E100D513D7D!10427&authkey=!AE_QvKI6-RIaBQE&ithint=file,pcap

If anyone else needs some help with this, Im no expert but maybe I can help a bit
I had to follow this small fix tutorial here, but I still have an issue. When I "run" smashbroshax.sh in terminal, it asks for a password. I enter the password and then nothing at all happens.

What else could be the issue here?
I ran into that issue, the issue is (my way of fixing there might be another way) is to install linux, because what it is doing is requesting for a password that currently doesn't exist so the computer rejects you no matter what, what I mean is that if you click try linux/ubtunu or however it's spelled, its only going off data that exist on the disc which sadly, doesn't have data for passwords and all that because they do not exist, what I did was install linux/ubtunu, to fix that and I did work

--------------------- MERGED ---------------------------

here is something funny, it actully saw it right off the bat, you know where it shows the tutorial and also does a quick pan of the chracters? or basicly the spot where it says click any button to continue, look on the bottom right you should see the version number. now if you have 1.0.1 be aware that this IS NOT the same as 1.0.0 meaning you need to find a pcap file on the internet, 1.3 doesn't work with this hack, if you have that version or higher, just go into your system settings-->data managment-> 3ds -> go to downloadable content tab now look for the super smash brothers update and delete that

--------------------- MERGED ---------------------------



I ran into that issue, the issue is (my way of fixing there might be another way) is to install linux, because what it is doing is requesting for a password that currently doesn't exist so the computer rejects you no matter what, what I mean is that if you click try linux/ubtunu or however it's spelled, its only going off data that exist on the disc which sadly, doesn't have data for passwords and all that because they do not exist, what I did was install linux/ubtunu, to fix that and I did work
you don't need to get rid of your windows installation just get 32gb sd, with a sd card adapter or usb, and just install it to the usb. BUT I MUST WARN YOU, by doing so your losing access to the original boot settings, your computer has a vary special way of booting things, or os, which by installing ubtunu you will need to keep what ever device ON THE COMPUTER AT BOOT, or else, your going into grub rescue which is what ubtunu needs to install to make sure you can have windows and linux co exist, but your recovery settings and all that will still exist for windows, just will need to boot them some what more manully, I'll give some photos before you make that choice to show you what I mean, maybe a video to just to make sure
 

MercuryCoughDrops

Member
Newcomer
Joined
Jul 9, 2016
Messages
6
Trophies
0
Age
32
XP
52
Country
United States
Hello I'm a pretty big noob with this so I need some help. Every time I run the smashbroshax.sh file from the smashbroshax helper a window pops up with the following.
Hello, everytime i double click the .sh file it brings me to a page that says:

# IF YOU ARE READING THIS
# YOU PROBABLY DID SOMETHING WRONG
#
# https://gbatemp.net/threads/tutorial-using-smashhax-with-linux.397194/page-9#post-5842512

# ----------------------------------------------

# this probably could be done entirely in bash
# but I couldn't figure out how to do everything
# so I just went with what I was most comfortable with

cd resources
gksudo ./lua53-$(getconf LONG_BIT) run.lua

I'm running a live USB of Ubuntu 15.04 like the tutorial suggested, but I still get this error. Any help would be greatly appreciated.
 
D

Deleted User

Guest
Hello I'm a pretty big noob with this so I need some help. Every time I run the smashbroshax.sh file from the smashbroshax helper a window pops up with the following.
Hello, everytime i double click the .sh file it brings me to a page that says:

# IF YOU ARE READING THIS
# YOU PROBABLY DID SOMETHING WRONG
#
# https://gbatemp.net/threads/tutorial-using-smashhax-with-linux.397194/page-9#post-5842512

# ----------------------------------------------

# this probably could be done entirely in bash
# but I couldn't figure out how to do everything
# so I just went with what I was most comfortable with

cd resources
gksudo ./lua53-$(getconf LONG_BIT) run.lua

I'm running a live USB of Ubuntu 15.04 like the tutorial suggested, but I still get this error. Any help would be greatly appreciated.

seriously, have you not looked at my guide, go to page 21 and scroll down, its noob friendly, I figured it out myself (noob alert ---->this guy was noob < ----)
 
Last edited by ,

MercuryCoughDrops

Member
Newcomer
Joined
Jul 9, 2016
Messages
6
Trophies
0
Age
32
XP
52
Country
United States
Ok I followed your guide you wrote and I'm still getting a few errors. After I type the command sh ./smashbroshax.sh I get the following error.

/usr/share/themes/Yuyo-Dark/gtk-2.0/Apps/libreoffice.rc:40: Unable to locate image file in pixmap_path: "Entry/entry-border-bg-solid.png"
/usr/share/themes/Yuyo-Dark/gtk-2.0/Apps/libreoffice.rc:43: Background image options specified without filename
/usr/share/themes/Yuyo-Dark/gtk-2.0/Apps/libreoffice.rc:49: Unable to locate image file in pixmap_path: "Entry/entry-border-active-bg-solid.png"
/usr/share/themes/Yuyo-Dark/gtk-2.0/Apps/libreoffice.rc:52: Background image options specified without filename

Edit: Also typing in gksudo brings up a small menu used to run a program instead of doing what you described.
 
Last edited by MercuryCoughDrops,
D

Deleted User

Guest
(i don't know what happened there but I think I can help with your gksudo issue) sudo apt-get gksu (im pretty sure that is the right command) which since you couldn't get the command to install gksudo that might be the problem, possible having due to not being updated (the package NOT the os)
 
D

Deleted User

Guest
I don't know then, I'm going to make a video of the tutorial, maybe there is something you missed, or maybe its on my part. I don't know what to tell you
 

MercuryCoughDrops

Member
Newcomer
Joined
Jul 9, 2016
Messages
6
Trophies
0
Age
32
XP
52
Country
United States
Yeah I decided to give up for the time being. I'm just going to go ahead and buy OoT and use OoThax as an entry point. I have a modded first model 3DS so making it should be trivial compared to what I've been trying to do.
 

Schoolya

New Member
Newbie
Joined
Jul 13, 2016
Messages
1
Trophies
0
Age
42
XP
44
Country
United States
My script is getting stuck at 73 packets. Any fix to this? Also, what about a cartridge that is out of the box 1.1.4?
 

zpoyusa

Member
Newcomer
Joined
Sep 29, 2013
Messages
9
Trophies
0
Age
31
XP
105
Country
United States
I bought a used smash cart and it shows no version number on the title screen. When I start it it wants me to update to be able to save the game but I chose not to. Does anyone know how I can find the version number? Thanks.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    AncientBoi @ AncientBoi: [goes back to 🛌 ] zzzzzzzzzzzzzz +1