Hacking SWITCH NOOB PARADISE - Ask questions here

[Hayato213]

Hello. I need some help to use rekado with my samsung j6 plus. When I touch hekate .bin the switch stays black and it doesn't wake up hejate on switch. I have to force power off and try again and it never works. How can I fix it and use rekado with otg (mini usb). I used it with a Type C port and it works. Thanks

I mean use the Typce C port then if that work.

 

[binkinator]

How do I open this SWITCH Blade Knife I found in the street?

What version is it? Check on handle. You should see an embossed serial number. If the serial number starts with XAW you’re all set and you can just press down on the side and it should open. If it starts with XKJ the you will need to order an adapter from Aliexpress that will fit over the top of it but allow it to open automatically after that. They cost more than the knife and sometimes don’t work but everyone seems to want them. If there’s nothing writte at all it’s probably a V1 and in that case you just grip the back side of the blade with your fingernail and pull. Regardless make sure the police aren’t around when you open it or you might get banned to jail.

Post automatically merged: Nov 18, 2022

Done. I selected FAT32 rather than FAT32/EXFAT

Current version: 15.0.1/AMS 1.4.0/E

Nice! We now have some decisions to make.

1) we can just recover the saves and reinstall the games from a clean start and then copy the game saves over from the old emunand afterwards (this is the cleanest way that won’t carry over any corruption)

2) We can try to recover your games and Emunand (with game saves) from your other card along with any home brew, configs, etc, etc. (this will still require moving a lot of data but the end goal is to have everything just like you left it.)

 

[AncientBoi]

What version is it? Check on handle. You should see an embossed serial number. If the serial number starts with XAW you’re all set and you can just press down on the side and it should open. If it starts with XKJ the you will need to order an adapter from Aliexpress that will fit over the top of it but allow it to open automatically after that. They cost more than the knife and sometimes don’t work but everyone seems to want them. If there’s nothing writte at all it’s probably a V1 and in that case you just grip the back side of the blade with your fingernail and pull. Regardless make sure the police aren’t around when you open it or you might get banned to jail.

Post automatically merged: Nov 18, 2022

Nice! We now have some decisions to make.

1) we can just recover the saves and reinstall the games from a clean start and then copy the game saves over from the old emunand afterwards (this is the cleanest way that won’t carry over any corruption)

2) We can try to recover your games and Emunand (with game saves) from your other card along with any home brew, configs, etc, etc. (this will still require moving a lot of data but the end goal is to have everything just like you left it.)

I threw it away. It knicked me when I accidently got it open. Damn thing.

 

[Ricetomeetyou]

What version is it? Check on handle. You should see an embossed serial number. If the serial number starts with XAW you’re all set and you can just press down on the side and it should open. If it starts with XKJ the you will need to order an adapter from Aliexpress that will fit over the top of it but allow it to open automatically after that. They cost more than the knife and sometimes don’t work but everyone seems to want them. If there’s nothing writte at all it’s probably a V1 and in that case you just grip the back side of the blade with your fingernail and pull. Regardless make sure the police aren’t around when you open it or you might get banned to jail.

Post automatically merged: Nov 18, 2022

Nice! We now have some decisions to make.

1) we can just recover the saves and reinstall the games from a clean start and then copy the game saves over from the old emunand afterwards (this is the cleanest way that won’t carry over any corruption)

2) We can try to recover your games and Emunand (with game saves) from your other card along with any home brew, configs, etc, etc. (this will still require moving a lot of data but the end goal is to have everything just like you left it.)

I'd rather do everything the right way. Recovering the saves and reinstalling the games sounds right. Will we be doing this on the 256GB card I'm testing with at this point or the 512GB card that we will have to reformat? My games took up more space than 256GB which is why I jumped to the 512.

 

[binkinator]

I'd rather do everything the right way. Recovering the saves and reinstalling the games sounds right. Will we be doing this on the 256GB card I'm testing with at this point or the 512GB card that we will have to reformat? My games took up more space than 256GB which is why I jumped to the 512.

That’s fine. I agree that clean games is where it’s at. Let’s get a copy of yiur game saves set aside and installed on your new card so we can check they came over and then you can set it aside, format your 512 with rufus and get that one to the same state we’re in. You can pull your game saves using NXNandManager.

Here’s a quick tut on how that will work:

https://gbatemp.net/threads/recovering-games-saves-from-nand-using-nxnandmanager-and-jksv.620758/

This way you can test a couple games are working correctly before we wipe your 512G and start from scratch. Peace of mind is priceless.

 

[Ricetomeetyou]

That’s fine. I agree that clean games is where it’s at. Let’s get a copy of yiur game saves set aside and installed on your new card so we can check they came over and then you can set it aside, format your 512 with rufus and get that one to the same state we’re in. You can pull your game saves using NXNandManager.

Here’s a quick tut on how that will work:

https://gbatemp.net/threads/recovering-games-saves-from-nand-using-nxnandmanager-and-jksv.620758/

This way you can test a couple games are working correctly before we wipe your 512G and start from scratch. Peace of mind is priceless.

I plan on trying to follow your guide below

https://gbatemp.net/threads/recovering-games-saves-from-nand-using-nxnandmanager-and-jksv.620758/

Looking through it though, I'm confused about the part with the prodkeys. When I set up my new testing card, I did lockpickrcm as it was part of the instructions, but never actually wrote anything down.

edit* I was able to select them from the switch folder of the sd card and complete the process all the way till the saves were converted into the "out" folder. At this point, should I hold off until the 512GB card is formatted with atmosphere the same way. I assume we will be moving these saves using JKSV (never used it before) onto the new card...

 

[LittleChip]

We had a discussion on this the other day:

snip

Thanks - very clear. I think this is about where I was at. Problem is that his post is from Nov 2021, but the last build on his git appears to be from Sept 2021 and doesn't appear to have that feature implemented.

I'm on mac so not sure if I could build the current source files that are there on git - and frankly when I click through to dev kit pro and lib nx I start getting a bit lost.

Does anyone have a more recent build on hand?

 

[Draxzelex]

Hi all!

Absolute novice here. Only posting because I have been trying to get things working for 5 days and searched exhaustively and found no solution so far, please be kind!

I had been happily using CFW for a long time but was recently having troubles with my setup so decided to do a clean SD reset from SDSetup. An important thing to note however, is that AutoRCM was turned ON, which in retrospect, I should have turned off before doing anything (I know) >_<

I downloaded the latest hekate, put the newest fusee.bin in the bootloader folder, used Zadig to make sure libusb was up to date, and booted up TegraRCM GUI (Tegra shows the green RCM OK icon).

For reference, SD Root looks like this:
View attachment 338549

bootloader folder looks like this:
View attachment 338548

When injecting hekate_ctcaer_5.9.0.bin via TegraRCM GUI, the icon goes orange and the programme stalls. Nothing happens until I turn off the Switch by holding the power button, after which the programme comes back with the icon turned to the normal red 'No RCM' one, and I can read the following in Tegra's log box:

RCM Device detected
Invoking TegraRcmSmash.exe with args : "C:\Users\[User]\Downloads\hekate_ctcaer_5.9.0_Nyx_1.4.0\hekate_ctcaer_5.9.0.bin"
TegraRcmSmash (32bit) 1.2.1-3 by rajkosto
Opened USB device path \\?\usb#vid_0955&pid_7321#6&32a08772&0&4#{965a8257-c792-4f26-82be-1fdf4455a28d}
RCM Device with id [ID] initialized successfully!
Uploading payload (mezzo size: 92, user size: 105953, total size: 172169, total padded size: 176128)...
Win32 error 31 happened trying to write payload buffer to RCM
Error while injecting payload (RC=-8)
RCM device disconnected


Would anybody have any thoughts that could help? I may have put myself in a nasty position if I can't even boot into hekate and am stuck in AutoRCM, so I could really use a hand!

Thanks in advance!!

I highly recommend using TegraRCMSmash instead. Its what TegraRCMGUI is based off of and actually works better.

 

[Osam0]

Hi all ! ,
i got a problem with the nintendo switch lite , i update the nintendo switch and in the system shows this
15.0.0| AMS 1.4.0|E , before the upgrade i change some file like this (attached image), then i boot the nintendo switch with emuMMC and try to load a game but it says everytime that "Unable to start software return to the home menu", i tried to reinstall tinfoil cause is faster than a game and i can't install it , how i can fix this problem? thanks for reading and sorry for my bad english

 

[Draxzelex]

Hi all ! ,
i got a problem with the nintendo switch lite , i update the nintendo switch and in the system shows this
15.0.0| AMS 1.4.0|E , before the upgrade i change some file like this (attached image), then i boot the nintendo switch with emuMMC and try to load a game but it says everytime that "Unable to start software return to the home menu", i tried to reinstall tinfoil cause is faster than a game and i can't install it , how i can fix this problem? thanks for reading and sorry for my bad english

View attachment 338553

Whenever you update your firmware or CFW, you also have to update your ES, FS, & Loader patches as well. You can download the latest ES, FS, & Loader patches from this thread.

Post automatically merged: Nov 18, 2022

@Shadow147 I already told you to use this thread instead. Anyways, do you know how to properly use TegraRCMSmash? You don't double click it to use the program.

 

[binkinator]

I plan on trying to follow your guide below

https://gbatemp.net/threads/recovering-games-saves-from-nand-using-nxnandmanager-and-jksv.620758/

Looking through it though, I'm confused about the part with the prodkeys. When I set up my new testing card, I did lockpickrcm as it was part of the instructions, but never actually wrote anything down.

edit* I was able to select them from the switch folder of the sd card and complete the process all the way till the saves were converted into the "out" folder. At this point, should I hold off until the 512GB card is formatted with atmosphere the same way. I assume we will be moving these saves using JKSV (never used it before) onto the new card...

Cool!

One question before we move forward, we’re you using anything like Incognito that we need to backup? Losing this could render your Switch self banned forever is why I ask. Incognito changes your serial number to all 0000s. Let me know if we need to consider this.

Anyway, I personally would test one or two by installing a game and checking the game save status just to be 100% sure.

My reasoning is the next part is destructive to the source (we format the 512G card)
That’s up to you.

If you’re comfortable with what we have, let’s continue forward.

1) format the 512 using rufus
2) use Hekate format and to create a hidden partition
3) cooy the data from the 256G FAT32 to the 512G FAT32
4) use Emutool to copy your 256G card’s hidden partition to the 512G hidden partition.
5) use Hekate to “fix” your new emummc
6) reboot on your new card
7) install games
8) restore game saves.

 

[Osam0]

now it works , thanks, if i got any problems i will return here

 

[binkinator]

Thanks - very clear. I think this is about where I was at. Problem is that his post is from Nov 2021, but the last build on his git appears to be from Sept 2021 and doesn't appear to have that feature implemented.

I'm on mac so not sure if I could build the current source files that are there on git - and frankly when I click through to dev kit pro and lib nx I start getting a bit lost.

Does anyone have a more recent build on hand?

Here’s one from the man himself:

https://github.com/J-D-K/JKSV/issues/161#issuecomment-1317214440

 

[Shadow147]

Whenever you update your firmware or CFW, you also have to update your ES, FS, & Loader patches as well. You can download the latest ES, FS, & Loader patches from this thread.

Post automatically merged: Nov 18, 2022

@Shadow147 I already told you to use this thread instead. Anyways, do you know how to properly use TegraRCMSmash? You don't double click it to use the program.

Apologies! Didn't see the discussion was continuing here.

Also the way the Smash readme is worded, didn't seem like dragging and dropping the payload was the only way to open it. When I do that though, I get the following, and it just stays there:

 

[Draxzelex]

Apologies! Didn't see the discussion was continuing here.

Also the way the Smash readme is worded, didn't seem like dragging and dropping the payload was the only way to open it. When I do that though, I get the following, and it just stays there:

View attachment 338558

Well, dragging and dropping is the correct way to use it. Make sure that you are also properly turning the console and rebooting back into RCM whenever the payload fails. In case you don't know, you must perform a manual shutdown to properly turn off the console in this instance (i.e. hold power for 15 seconds).

 

[lattechan]

What version is it? Check on handle. You should see an embossed serial number. If the serial number starts with XAW you’re all set and you can just press down on the side and it should open. If it starts with XKJ the you will need to order an adapter from Aliexpress that will fit over the top of it but allow it to open automatically after that. They cost more than the knife and sometimes don’t work but everyone seems to want them. If there’s nothing writte at all it’s probably a V1 and in that case you just grip the back side of the blade with your fingernail and pull. Regardless make sure the police aren’t around when you open it or you might get banned to jail.

This post is awesome lol

 

[Ricetomeetyou]

Cool!

One question before we move forward, we’re you using anything like Incognito that we need to backup? Losing this could render your Switch self banned forever is why I ask. Incognito changes your serial number to all 0000s. Let me know if we need to consider this.

Anyway, I personally would test one or two by installing a game and checking the game save status just to be 100% sure.

My reasoning is the next part is destructive to the source (we format the 512G card)
That’s up to you.

If you’re comfortable with what we have, let’s continue forward.

1) format the 512 using rufus
2) use Hekate format and to create a hidden partition
3) cooy the data from the 256G FAT32 to the 512G FAT32
4) use Emutool to copy your 256G card’s hidden partition to the 512G hidden partition.
5) use Hekate to “fix” your new emummc
6) reboot on your new card
7) install games
8) restore game saves.

I do remember doing the incognito part my first time

 

[Shadow147]

Well, dragging and dropping is the correct way to use it. Make sure that you are also properly turning the console and rebooting back into RCM whenever the payload fails. In case you don't know, you must perform a manual shutdown to properly turn off the console in this instance (i.e. hold power for 15 seconds).

Yep! Done and done.

Same result unfortunately. Maybe I'm missing something from my bootloader folder setup?

 

[binkinator]

I do remember doing the incognito part my first time

Stop the press! Let’s check your serial number in System Settings. If it looks something like XAW00000000000 then we need to ensure you have a backup and we put it somewhere safe (like on your PC) before we continue with wiping your SDCard. Without the backup you will forever be stuck with a blank serial number and thus not able to connect to Ninty ever again.

Here’s a write up on it:

https://github.com/jimzrt/Incognito_RCM

Writeup on the original version of Incognito, in case you used it:

https://github.com/blawar/incognito

IMO it would be best to restore to the normal serial number and then use exosphere and dns:mitm which are now built in to Atmosphere:

https://rentry.org/ExosphereDNSMITM

 

[Draxzelex]

Yep! Done and done.

Same result unfortunately. Maybe I'm missing something from my bootloader folder setup?

No, files on the SD card have no effect on payload injection. The only variables are your console, the USB cable, and the device sending payloads. If you haven't done so already, try swapping the USB cable and/or rebooting your computer (assuming you're using that to inject payloads).