Nintendo Switch V2 Jailbreak Theory

[CruzeForce]

There is a vulnerability with the Bluetooth as the 8bitdo takes advantage and allows any controller to connect so what if someone connects a microcontroller that contains a jailbreak script, as there was a video with a jailbreak using a microcontroller, but to do that you have to open up a switch, so cant you just buy a microcontroller with a 8bitdo, put the jailbreak command on the microcontroller and then run a script that will let the switch identify it as a joycon and then add the jailbreak script? as then the switch would run anything the microcontroller says as it will be known as an admin? this would work as the Nintendo switch (including the chip) follows any joycon command and you could buy a possible microcontroller with Bluetooth like a Pico w for cheap, this would be a simple process as someone would make the script, you would connect the microcontroller with Bluetooth to the 8bitdo and run the command on the switch. I hope someone reaches out to me as a response to my theory.

 

[Draxzelex]

im trying to find a vulnerability its because there is a vulnerability with the Bluetooth as the 8bitdo takes advantage and allows any controller to connect so what if someone connects a microcontroller that contains a jailbreak script, as there was a video with a jailbreak using a microcontroller, but to do that you have to open up a switch, so cant you just buy a microcontroller with a 8bitdo, put the jailbreak command on the microcontroller and then run a script that will let the switch identify it as a joycon and then add the jailbreak script? as then the switch would run anything the microcontroller says as it will be known as an admin? this would work as the Nintendo switch (including the chip) follows any joycon command and you could buy a possible microcontroller with Bluetooth like a Pico w for cheap, this would be a simple process as someone would make the script, you would connect the microcontroller with Bluetooth to the 8bitdo and run the command on the switch. I hope someone reaches out to me as a response to my theory.

Your post was responded to in this thread. For the second time, use that thread instead of cluttering the forum with useless new threads.

 

[CruzeForce]

Your post was responded to in this thread. For the second time, use that thread instead of cluttering the forum with useless new threads.

I'm pretty sure that somebody will use this to make something, please stop sending messages if you don't want to support the idea or use it

 

[hippy dave]

Controller input won't provide any kind of privileged system access. No go.

 

[linuxares]

https://switchbrew.org/wiki/Switch_System_Flaws

EDIT: Even if you manage to break in with Bluetooth. It isn't 100% you get kernel exploit.

 

[CruzeForce]

Controller input won't provide any kind of privileged system access. No go.

there were some flaws jailbreaking it through wifi or bluetooth but we could probably overcome those with a new script

Post automatically merged: Apr 22, 2023

https://switchbrew.org/wiki/Switch_System_Flaws

EDIT: Even if you manage to break in with Bluetooth. It isn't 100% you get kernel exploit.

true, but maybe we could overcome it with a new script as that was version 4

 

[linuxares]

there were some flaws jailbreaking it through wifi or bluetooth but we could probably overcome those with a new script
View attachment 366551

Post automatically merged: Apr 22, 2023

true, but maybe we could overcome it with a new script as that was version 4

This is probably to 99.9% patched or no need to care about since it have no meaningful application.
Else it would already be a exploit for it.

 

[BaamAlex]

Let's assume that your theory is correct. What then? You would still need a kernel exploit afterwards. Or TrustZone. Whatever. And those don't exist at all atm. And on top of that, Bluetooth is so low level (afaik) that nothing big can be done with it.

 

[linuxares]

Let's assume that your theory is correct. What then? You would still need a kernel exploit afterwards. Or TrustZone. Whatever. And those don't exist at all atm. And on top of that, Bluetooth is so low level (afaik) that nothing big can be done with it.

I think the idea is like with blue bomb. But I highly doubt it's as easy on the Switch as with the WIi.

 

[BaamAlex]

I think the idea is like with blue bomb. But I highly doubt it's as easy on the Switch as with the WIi.

Correct. I doubt that nintendo will make the same mistakes like on their old consoles.

 

[Tomato123]

There is a vulnerability with the Bluetooth as the 8bitdo takes advantage and allows any controller to connect so what if someone connects a microcontroller that contains a jailbreak script, as there was a video with a jailbreak using a microcontroller, but to do that you have to open up a switch, so cant you just buy a microcontroller with a 8bitdo, put the jailbreak command on the microcontroller and then run a script that will let the switch identify it as a joycon and then add the jailbreak script? as then the switch would run anything the microcontroller says as it will be known as an admin? this would work as the Nintendo switch (including the chip) follows any joycon command and you could buy a possible microcontroller with Bluetooth like a Pico w for cheap, this would be a simple process as someone would make the script, you would connect the microcontroller with Bluetooth to the 8bitdo and run the command on the switch. I hope someone reaches out to me as a response to my theory.

There are threads like this posted pretty often and there's a reason that after so many of them that there are no more useful exploits. The Switch is a pretty tough console in terms of security. RCM was a fluke more than anything and I doubt we'd get anything as 'easy' as that again. It will take years of research to find anything that SciresM hasn't found already. They already reversed engineered basically the whole firmware and found nothing useful (Yes, there is a chance they missed something).

People are pretty desperate for something on V2 but there are still options (modchips) and that's the way it's going to stay for a while unfortunately. You have to either get a V1 or a modchip for a V2. As much as I hate to say stuff like "if you don't know what you're talking about then don't try" well... This is one of those cases as it's so much more complicated than vulnerability = jailbreak/CFW/etc.

 

[CruzeForce]

Correct. I doubt that nintendo will make the same mistakes like on their old consoles.

But then also, they did allow the OLED to have the same chip as the v2 but y'all are right, this might not work but I'm still testing it out, I will post a response after I make the script on a microcontroller and test it, if this works then I'll post it on gbatemp

 

[BigOnYa]

But then also, they did allow the OLED to have the same chip as the v2 but y'all are right, this might not work but I'm still testing it out, I will post a response after I make the script on a microcontroller and test it, if this works then I'll post it on gbatemp

"You Da Man! F the haters and do it!"

 

[CruzeForce]

"You Da Man! F the haters and do it!"

Thank you for the motivational response

Post automatically merged: Apr 23, 2023

I think the idea is like with blue bomb. But I highly doubt it's as easy on the Switch as with the WIi.

It actually is

Post automatically merged: Apr 23, 2023

Let's assume that your theory is correct. What then? You would still need a kernel exploit afterwards. Or TrustZone. Whatever. And those don't exist at all atm. And on top of that, Bluetooth is so low level (afaik) that nothing big can be done with it.

Using trustzone

 

[linuxares]

Thank you for the motivational response

Post automatically merged: Apr 23, 2023

It actually is

Post automatically merged: Apr 23, 2023

Using trustzone

Aight! Go for it!

 

[CruzeForce]

Controller input won't provide any kind of privileged system access. No go.

There was a wifi/Bluetooth jailbreak by yellows8 on switch firmware v4

Post automatically merged: Apr 23, 2023

Aight! Go for it!

Wow, thanks a lot, I will try to wrap this up by the end of summer
But then also if anyone wants to help I will post my discord right now

Post automatically merged: Apr 23, 2023

Cruze Force#4787

 

[Viri]

Ya'll doubted the guy who hacked the SXOS firmware, and look what happened!
https://gbatemp.net/threads/hack-sxos.582831/
Good luck hacking the Switch, you'll need it, lmao.

 

[M7L7NK7]

Ya'll doubted the guy who hacked the SXOS firmware, and look what happened!
https://gbatemp.net/threads/hack-sxos.582831/
Good luck hacking the Switch, you'll need it, lmao.

Are you really comparing Nintendo's security to TX's?

 

[Viri]

Are you really comparing Nintendo's security to TX's?

Yes.

 

[CruzeForce]

Ya'll doubted the guy who hacked the SXOS firmware, and look what happened!
https://gbatemp.net/threads/hack-sxos.582831/
Good luck hacking the Switch, you'll need it, lmao.

K