Hacking Found a 3DS crash? Post it here!

[jrk190]

Hm... I'm still thinking about an internal save exploit from the 3D Classics.

 

[Wizerzak]

Hm... I'm still thinking about an internal save exploit from the 3D Classics.

This should really go in the hacking theories thread, unless you've found an actual crash within that game?

Also, I've updated the first post.

Edit: Should I also remove the 2 current exploits on the list seeing as they do not produce errors?

 

[loco365]

basically if you get a screen simular to this

note it, take picture, explain how you got there

I once had the Error Has Occurred message on my 3DS using my Japanese Heart Gold. I think it was only because the system failed to read the card.

What about http://3dspwn.webs.com? That crashes the browser.

I also found something interesting when I crashed the browser. I discovered it does not save cookies and whatnot until you exit the browser. Want proof? Delete all your cookies, then crash your browser using the listed sites. Reboot the system and go back, it's as if your cookies weren't even deleted. Perhaps the fact that cookies are first stored in the ram, then in the system when it's properly exited can be the roots of some kind of exploit, but I don't think it'd be possible. Unless executable ARM code is injected into the cookie, then called somehow when the system is running.

 

[SifJar]

basically if you get a screen simular to this

note it, take picture, explain how you got there

--snip--

So anything that freezes without an error code (even if it is reproducible) is worthless?

Not necessarily. In fact, I'd go as far as to say that if that screen appears, it's NOT useful. Because that screen appearing means that the 3DS has recovered somewhat from the crash, so it's unlikely you'll be able to get custom code running. (This is a guess, but I'd say it's reasonably accurate - no other console has ever had error screens appear during exploitable crashes to the best of my knowledge).

Yes. That was the whole point of SifJar and everyone else in that other thread.

No at all what I was saying, see above.

 

[Wizerzak]

basically if you get a screen simular to this

note it, take picture, explain how you got there

--snip--

So anything that freezes without an error code (even if it is reproducible) is worthless?

Not necessarily. In fact, I'd go as far as to say that if that screen appears, it's NOT useful. Because that screen appearing means that the 3DS has recovered somewhat from the crash, so it's unlikely you'll be able to get custom code running.

OK, I'll remove that part then. Keep those crashes coming guys!

 

[RupeeClock]

I posted this before, but I may as well post it again.



Link's Awakening DX has a famous doghouse glitch where you can access a glitched map.
You need to kill exactly 2 enemies and enter the doghouse glitch, and then navigate to a certain area online like on the video.
The system will freeze without fail, the exact same thing will happen on a real Gameboy Color.
I have however heard that you can eject the SD card and the system will unfreeze afterwards, so it's probably not a true system freeze.

There's also the NES Metroid on virtual console, an ambassador title as well and available in some regions.
The password ENGAGE RIDLEY MOTHER FUCKER apparently causes the system to freeze up, since it would freeze a real NES. On emulators it loads a very buggy screen.
Again, ejecting the SD card would probably resolve that.

 

[SifJar]

Link's Awakening DX has a famous doghouse glitch where you can access a glitched map.
You need to kill exactly 2 enemies and enter the doghouse glitch, and then navigate to a certain area online like on the video.
The system will freeze without fail, the exact same thing will happen on a real Gameboy Color.
I have however heard that you can eject the SD card and the system will unfreeze afterwards, so it's probably not a true system freeze.

There's also the NES Metroid on virtual console, an ambassador title as well and available in some regions.
The password ENGAGE RIDLEY MOTHER FUCKER apparently causes the system to freeze up, since it would freeze a real NES. On emulators it loads a very buggy screen.
Again, ejecting the SD card would probably resolve that.

Emulator freeze = useless for hacking the actual system.

 

[RupeeClock]

Emulator freeze = useless for hacking the actual system.

I know, though it may be worth posting anyway.

Leave no stone unturned, rather just document everything. Knowing what doesn't work will lead to what does work.

 

[CollosalPokemon]

Link's Awakening DX has a famous doghouse glitch where you can access a glitched map.
You need to kill exactly 2 enemies and enter the doghouse glitch, and then navigate to a certain area online like on the video.
The system will freeze without fail, the exact same thing will happen on a real Gameboy Color.
I have however heard that you can eject the SD card and the system will unfreeze afterwards, so it's probably not a true system freeze.

There's also the NES Metroid on virtual console, an ambassador title as well and available in some regions.
The password ENGAGE RIDLEY MOTHER FUCKER apparently causes the system to freeze up, since it would freeze a real NES. On emulators it loads a very buggy screen.
Again, ejecting the SD card would probably resolve that.

Emulator freeze FREEZE FROM GLITCH = useless for hacking the actual system.

Fix'd.

 

[Janthran]

Link's Awakening DX has a famous doghouse glitch where you can access a glitched map.
You need to kill exactly 2 enemies and enter the doghouse glitch, and then navigate to a certain area online like on the video.
The system will freeze without fail, the exact same thing will happen on a real Gameboy Color.
I have however heard that you can eject the SD card and the system will unfreeze afterwards, so it's probably not a true system freeze.

There's also the NES Metroid on virtual console, an ambassador title as well and available in some regions.
The password ENGAGE RIDLEY MOTHER FUCKER apparently causes the system to freeze up, since it would freeze a real NES. On emulators it loads a very buggy screen.
Again, ejecting the SD card would probably resolve that.

Emulator freeze FREEZE FROM GLITCH ANY OF THIS = useless for hacking the actual system.

Fix'd.

 

[NipponRyan97]

Found something weird: When I do the KIU cart freeze thing and eject the SD card, nothing changes at all, it registers that the SD card gets ejected but it still freezes anyway. You sure this means nothing?

 

[SifJar]

Found something weird: When I do the KIU cart freeze thing and eject the SD card, nothing changes at all, it registers that the SD card gets ejected but it still freezes anyway. You sure this means nothing?

Yes

 

[RNorthex]

i like the idea of the topic
it should be stickied and could be used as a reason to delete individual topics about meaningless crashes/freezes

 

[Wizerzak]

Found something weird: When I do the KIU cart freeze thing and eject the SD card, nothing changes at all, it registers that the SD card gets ejected but it still freezes anyway. You sure this means nothing?

So, you can confirm this freeze works? It wasn't just a one off?

 

[marcel1mac]

I have two dood story for you...
few week ago, i change my contry, for Bahamas (originaly canada) while a was playing MK7, i go see my friend code list. (to see who was playing mk7) i gat a screen who saying, your mii is corupted, please change your mii and restart your 3ds and bla,bla,bla!,
after the restart, hi lost all my mii spotpass (1814 mii, the most was from mk7, but i lose my goldpaint to) they let me only 171mii streetpass, ??? they erase all my mii i made to, i have two 3ds my other one was o.k.
my second strory was 2 days ago, with swapnote, that one happen on bolth 3ds, and the 3ds of my friend
we lost all our letter-anwser from swapnote, but inside my blue (i have that one from day one) they erase all my game, (the ambasadors to)
yes i gat some back from e-shop( y have 69 games by the way)
when i say all, i mean all; swapnote, netflick, pokedex,,, my 3ds was empty like day one

 

[loco365]

@marcel1mac That's because you changed your region. And that's not even a crash of the system.

Another crash you can add and point out that may not lead to an exploit: the Metroid Password crash.

 

[Wizerzak]

I have two dood story for you...
few week ago, i change my contry, for Bahamas (originaly canada) while a was playing MK7, i go see my friend code list. (to see who was playing mk7) i gat a screen who saying, your mii is corupted, please change your mii and restart your 3ds and bla,bla,bla!,
after the restart, hi lost all my mii spotpass (1814 mii, the most was from mk7, but i lose my goldpaint to) they let me only 171mii streetpass, ??? they erase all my mii i made to, i have two 3ds my other one was o.k.
my second strory was 2 days ago, with swapnote, that one happen on bolth 3ds, and the 3ds of my friend
we lost all our letter-anwser from swapnote, but inside my blue (i have that one from day one) they erase all my game, (the ambasadors to)
yes i gat some back from e-shop( y have 69 games by the way)
when i say all, i mean all; swapnote, netflick, pokedex,,, my 3ds was empty like day one

Yeah sorry that's not a crash.

 

[marcel1mac]

O.k. sorry,
the first one i know, but for the second?
i never change country after... either for my friend?
i was sure it could be is modem.... but it's computer have no problem. ?

 

[NipponRyan97]

No, it wasn't a one-off. You can easily recreate it with any 3DS cart that's compatible with your 3DS and its region. Even after the bottom screen freezes, pulling the SD card does NOT stop it. It doesn't register that you ejected and re-inserted the SD card. So, it's unlike any crash so far. I'm afraid to do it again. I don't want corrupted data, but I think some hardware was affected, not just they hypervisor. That's never happened. Usually taking out the SD card fixed any crash documented. With this, nothing. I'm pretty sure it's
more than just a crash, that's a vulnerability in the system, all we need to know is if it's exploitable or not.

 

[NipponRyan97]

I also noticed that sometimes when it "loads/finds" the cartridge data, it will sometimes just have an Open action on the bottom with no Manual option. Just Open. That's another weird thing I noticed. Sometimes it does that. Hmm...