Hacking Post your ideas regarding how to hack the 3DS, here

  • Thread starter Thread starter Vulpes Abnocto
  • Start date Start date
  • Views Views 456,895
  • Replies Replies 1,786
  • Likes Likes 1
I don't know if this has been mentioned before, but you could probably make an exploit through a picture. You can save pictures on your browser, and open them later in the camera app.
You can't do anything with it in picture format.
You also can't download it unless it's a picture.
And even if you could do something with a picture, why would you download the picture from the browser instead of putting it on your SD card from the computer? >_>
 
I don't know if this has been mentioned before, but you could probably make an exploit through a picture. You can save pictures on your browser, and open them later in the camera app.
You can't do anything with it in picture format.
You also can't download it unless it's a picture.
And even if you could do something with a picture, why would you download the picture from the browser instead of putting it on your SD card from the computer? >_>
You can bind files just like you can with images. People do that with viruses, they just bind it with am image so it looks legit.
 
I don't know if this has been mentioned before, but you could probably make an exploit through a picture. You can save pictures on your browser, and open them later in the camera app.
You can't do anything with it in picture format.
You also can't download it unless it's a picture.
And even if you could do something with a picture, why would you download the picture from the browser instead of putting it on your SD card from the computer? >_>
You can bind files just like you can with images. People do that with viruses, they just bind it with am image so it looks legit.
what does that have to do with 3ds?
 
I don't know if this has been mentioned before, but you could probably make an exploit through a picture. You can save pictures on your browser, and open them later in the camera app.
You can't do anything with it in picture format.
You also can't download it unless it's a picture.
And even if you could do something with a picture, why would you download the picture from the browser instead of putting it on your SD card from the computer? >_>
You can bind files just like you can with images. People do that with viruses, they just bind it with am image so it looks legit.
what does that have to do with 3ds?
Nothing.
 
And it's like peeling off the skin of a banana and still having to chew, then swallow it.
1) You add a file inside an image file. Say, by simply appending the code to the end since the image library will ignore it. (PNG for example) This is super easy.
2) You still need a buffer-overrun style of exploit to get the browser to overwrite program code and then run your appended code.
3) You still need a privilege-escalation style of exploit to break out of the sandbox that the browser runs in. They are probably doing some kind of bounds checking to prevent not only this but the 2nd step as well...
4) You then need to figure out how the raw hardware works in order to create a launch tool or something like a 3D nav home brew example. Luckily, we already have a lot of documentation on the previous iterations of this hardware family.

Anyone who finds these exploits and gets them working isn't going to release it since they can use it to learn about the system's undocumented (to us non-NDA noobs) differences between it and the DSi even if Nintendo releases a patch for other ones. It would be nice to have something to fall back on in order to map/figure out how new patches work.
 
  • Like
Reactions: 2 people
Anyone who finds these exploits and gets them working isn't going to release it since they can use it to learn about the system's undocumented (to us non-NDA noobs) differences between it and the DSi even if Nintendo releases a patch for other ones. It would be nice to have something to fall back on in order to map/figure out how new patches work.
Indeed, it would be a terrible mistake to release an exploit for a vulnerability this early into the console's life when no others have been found. With the Wii, Team Twiizers have always had hacks to spare, but after they found the first vulnerability they spent all their time using that one to look for a different one.

A great lesson can be learned from the PS3, the vulnerability exposed by fail0verflow was fixed within months and many of us had to make the difficult choice between games and homebrew. I bit the bullet and upgraded when Arkham City came out and I got bored of playing all the RB songs I already had. That kind of total pwnage should always be kept secret until (near) the end of the console's life.
 
A little of A and B. If you somehow made a cart that had the same encrypted contents of Mask ROM and interface logic to the DS slot, then yes, it would work. This is however not what people normally mean. They don't want just pirated copies from some Asian knockoff plant, but to be able to run whatever code they want. Ironically, the methods (signing) that companies like Nintendo and Sony use mostly prevent home brew (at least in theory). For now, their methods on the PSP Vita and 3DS are preventing both home brew and casual (noncommercial) copying. I doubt they'll prevent piracy of actual Nintendo cartridges simply because there are IC factories in a ton of countries that can illegally make Mask ROMs and copy the unique Nintendo interface logic. Pirates win, home brewers don't. :/

You will likely not be seeing Vita exploits for a long time due to lessons learned by Sony and the fact that no one wants to tell Sony their only exploit - they'll wait until #2 like I said above!
 
A little of A and B. If you somehow made a cart that had the same encrypted contents of Mask ROM and interface logic to the DS slot, then yes, it would work. This is however not what people normally mean. They don't want just pirated copies from some Asian knockoff plant, but to be able to run whatever code they want. Ironically, the methods (signing) that companies like Nintendo and Sony use mostly prevent home brew (at least in theory). For now, their methods on the PSP Vita and 3DS are preventing both home brew and casual (noncommercial) copying. I doubt they'll prevent piracy of actual Nintendo cartridges simply because there are IC factories in a ton of countries that can illegally make Mask ROMs and copy the unique Nintendo interface logic. Pirates win, home brewers don't. :/

You will likely not be seeing Vita exploits for a long time due to lessons learned by Sony and the fact that no one wants to tell Sony their only exploit - they'll wait until #2 like I said above!
After reading this, I had this thought of using an actual 3ds game as your "signature" and have some wires that comes out of the game to connect onto something, then run the code off of there.
 
A little of A and B. If you somehow made a cart that had the same encrypted contents of Mask ROM and interface logic to the DS slot, then yes, it would work. This is however not what people normally mean. They don't want just pirated copies from some Asian knockoff plant, but to be able to run whatever code they want. Ironically, the methods (signing) that companies like Nintendo and Sony use mostly prevent home brew (at least in theory). For now, their methods on the PSP Vita and 3DS are preventing both home brew and casual (noncommercial) copying. I doubt they'll prevent piracy of actual Nintendo cartridges simply because there are IC factories in a ton of countries that can illegally make Mask ROMs and copy the unique Nintendo interface logic. Pirates win, home brewers don't. :/

You will likely not be seeing Vita exploits for a long time due to lessons learned by Sony and the fact that no one wants to tell Sony their only exploit - they'll wait until #2 like I said above!
After reading this, I had this thought of using an actual 3ds game as your "signature" and have some wires that comes out of the game to connect onto something, then run the code off of there.
WHAT?!?!?!
 
  • Like
Reactions: 1 person
A little of A and B. If you somehow made a cart that had the same encrypted contents of Mask ROM and interface logic to the DS slot, then yes, it would work. This is however not what people normally mean. They don't want just pirated copies from some Asian knockoff plant, but to be able to run whatever code they want. Ironically, the methods (signing) that companies like Nintendo and Sony use mostly prevent home brew (at least in theory). For now, their methods on the PSP Vita and 3DS are preventing both home brew and casual (noncommercial) copying. I doubt they'll prevent piracy of actual Nintendo cartridges simply because there are IC factories in a ton of countries that can illegally make Mask ROMs and copy the unique Nintendo interface logic. Pirates win, home brewers don't. :/

You will likely not be seeing Vita exploits for a long time due to lessons learned by Sony and the fact that no one wants to tell Sony their only exploit - they'll wait until #2 like I said above!
After reading this, I had this thought of using an actual 3ds game as your "signature" and have some wires that comes out of the game to connect onto something, then run the code off of there.
WHAT?!?!?!
Sorry if it sounds confusing and stupid.
I meant something like the crown 3ds (3ds flashcart) but have your own code instead of the game.
 
A little of A and B. If you somehow made a cart that had the same encrypted contents of Mask ROM and interface logic to the DS slot, then yes, it would work. This is however not what people normally mean. They don't want just pirated copies from some Asian knockoff plant, but to be able to run whatever code they want. Ironically, the methods (signing) that companies like Nintendo and Sony use mostly prevent home brew (at least in theory). For now, their methods on the PSP Vita and 3DS are preventing both home brew and casual (noncommercial) copying. I doubt they'll prevent piracy of actual Nintendo cartridges simply because there are IC factories in a ton of countries that can illegally make Mask ROMs and copy the unique Nintendo interface logic. Pirates win, home brewers don't. :/

You will likely not be seeing Vita exploits for a long time due to lessons learned by Sony and the fact that no one wants to tell Sony their only exploit - they'll wait until #2 like I said above!
After reading this, I had this thought of using an actual 3ds game as your "signature" and have some wires that comes out of the game to connect onto something, then run the code off of there.
WHAT?!?!?!
Sorry if it sounds confusing and stupid.
I meant something like the crown 3ds (3ds flashcart) but have your own code instead of the game.
the word crown 3ds is not allowed here. and plus its fake
 
  • Like
Reactions: 2 people
A little of A and B. If you somehow made a cart that had the same encrypted contents of Mask ROM and interface logic to the DS slot, then yes, it would work. This is however not what people normally mean. They don't want just pirated copies from some Asian knockoff plant, but to be able to run whatever code they want. Ironically, the methods (signing) that companies like Nintendo and Sony use mostly prevent home brew (at least in theory). For now, their methods on the PSP Vita and 3DS are preventing both home brew and casual (noncommercial) copying. I doubt they'll prevent piracy of actual Nintendo cartridges simply because there are IC factories in a ton of countries that can illegally make Mask ROMs and copy the unique Nintendo interface logic. Pirates win, home brewers don't. :/

You will likely not be seeing Vita exploits for a long time due to lessons learned by Sony and the fact that no one wants to tell Sony their only exploit - they'll wait until #2 like I said above!
After reading this, I had this thought of using an actual 3ds game as your "signature" and have some wires that comes out of the game to connect onto something, then run the code off of there.
WHAT?!?!?!
Sorry if it sounds confusing and stupid.
I meant something like the crown 3ds (3ds flashcart) but have your own code instead of the game.
the word crown 3ds is not allowed here. and plus its fake
I didn't know it wasn't allowed. But I was just using as an example because you didn't understand.
It could be fake, but I was meaning like one of those except the game is different code.
 
You could just get 2 unused (e.g. no save files) from different 3DSs and use a program (I don't know which 1, if you do please tell me) to find the coding. If you use Microsoft Word to merge them it will show the differences, the differences will be each 3DSs eshop account code. Just do this to find your own. Remove your code and put "Insert eshop code here" and upload it here, all people have to do is paste their code there and it will work.
 
You could just get 2 unused (e.g. no save files) from different 3DSs and use a program (I don't know which 1, if you do please tell me) to find the coding. If you use Microsoft Word to merge them it will show the differences, the differences will be each 3DSs eshop account code. Just do this to find your own. Remove your code and put "Insert eshop code here" and upload it here, all people have to do is paste their code there and it will work.
lol
You could just get a map and dig in a certain spot (I don't know which 1, if you do please tell me) to get all the treasure.
 
  • Like
Reactions: 2 people
You could just get 2 unused (e.g. no save files) from different 3DSs and use a program (I don't know which 1, if you do please tell me) to find the coding. If you use Microsoft Word to merge them it will show the differences, the differences will be each 3DSs eshop account code. Just do this to find your own. Remove your code and put "Insert eshop code here" and upload it here, all people have to do is paste their code there and it will work.


This isn't a bad idea, however... the saves would have to be at the same place in the game, started at the same time, with the same settings, etc... Otherwise, the difference could be something like different names...
 
you might want to read up on how encryption works

I don't deny that such known relations make decryption it easier,
but at the moment thats like argueing that having a rope makes climbing Olympus Mons easier.
 
  • Like
Reactions: 1 person
you might want to read up on how encryption works

And then, I re-read the post...

---------------------------------------
Ever tried opening a Multiple-megabyte file in a text editor? Usually, It becomes unresponsive... Oh yeah, and the encryption... where 2 different keys are going to give you 2 completely different files...
 

Site & Scene News

Popular threads in this forum