Hacking OFW 6.x ram dumper

[st4rk]

Hello Everyone !
So how some of you know, we can use DS Profile exploit in 3DS 4.x-6.x, A friend and i found a interesting thing, a way to DUMP memory of 3DS 4.x-6.x(and a possible way to load homebrews !).

To it you will need(this is for OFW 6.0-6.3 only):
https://anonfiles.com/file/3ca8de2b50bb1f32aedd390a6a0b7b59

After downloading it, execute the ROPLoader.nds and Trigger the Profile Exploit, wait a moment, 3DS Error and reboot, open your SD Card and you will see the .bin with memory DUMP.
Now we need to find a good ROP Gadget and and make the dream happen !

Ps: C/ARM Code doesn't work, just ROP Code, It may be useless to no-dev users.

Thanks To:
WinterMute
https://github.com/WinterMute/ROPInstaller
https://github.com/Drienn/3DS-ROPLoader
Me and my anon friend find this. **

Regards, St4rk.

 

[smealum]

am i missing something or does your discovery just amount to finding wintermute's github ?

 

[Warft]

And this is only the start of...

 

[Bond697]

And this is only the start of...

not a damn thing.

 

[bartimeaus91]

am i missing something or does your discovery just amount to finding wintermute's github ?

Am I missing something? Or did he not mention that he discovered the github?

Thanks To:
WinterMute
https://github.com/WinterMute/ROPInstaller
https://github.com/Drienn/3DS-ROPLoader
Me and my anon friend to discovery it.

Regards, St4rk.

 

[smealum]

Am I missing something? Or did he not mention that he discovered the github?

i just wasn't sure whether he was claiming ownership over any of the work. if not, i think a better way of phrasing this would be like "hey this is new wintermute posted a ROP chain that lets you dump stuff on 6.x", rather than "hey me and my friend made this huge discovery [...] special thanks to wintermute".
but maybe that's just me, idk.

 

[st4rk]

am i missing something or does your discovery just amount to finding wintermute's github ?

And Yeah, the wintermutes loader code won't compile so i use drenns loader had to work

 

[smealum]

And Yeah, the wintermutes loader code won't compile so i use drenns loader had to work

way to read my post. whatever.

 

[loco365]

st4rk Basically what smealum is saying is that your "discovery" is what was on Wintermute's Github.

 

[st4rk]

st4rk Basically what smealum is saying is that your "discovery" is what was on Wintermute's Github.

I understand it, have any problem in release it ?

 

[Snailface]

st4rk Basically what smealum is saying is that your "discovery" is what was on Wintermute's Github.

I don't think he was trying to take credit for anything. English is not his first language.

 

[loco365]

I understand it, have any problem in release it ?

I don't, but I think smealum does, based on his tone.

 

[Abcdfv]

I don't, but I think smealum does, based on his tone.

Which can only mean its a good thing to have found, and even better to have released.

 

[Bond697]

there was nothing to find, this has been sitting on wintermute's github. it does the equivalent of that 4.1-4.5 arm11 userland ram dumper. that's it. no one is loading anything with this.

 

[Duo8]

So a ROP RAM Dumper? In userland only?

 

[Bond697]

yes

 

[Coto]

i'm absolutely NOT into any 3ds stuff method. But I think people should either team up and keep such stuff private til something really useful comes out. Otherwise you'd piss off other devs who are trying to do something equally helpful and not too risky to leave the system open wide , right when it's starting to have good support from 1st/3rd parties.

 

[GorTesK]

you should really rewrite your first post, it makes it sound like you and your friend discovered how to do this, but the only thing you discovered was a link to the guy's github, who actually did the work...

also, don't say, you released it, you didn't release it, Wintermute released it on his github, you just, posted a link to it

I think, that's what smea meant, you make it sound like this was your doing, probably just because english isn't your first language and you didn't mean to make it sound like that

 

[st4rk]

I never say "I MADE IT", re-read the first post, all i and my friend do is: take code from winter/drienn and find a way to compile.

about discovery, i changed it to "found" some time ago, please re-read the first post.

Anyway, i think the 3DS Dev Scene is dead, i found/share it to we find a way to execute homebrew in 6.x, not for fights or bláblá

 

[GorTesK]

and I never said, you said you MADE IT, re-read my post
I merely explained, what smea had to say
you took somebodys pre-existing code, compiled it and posted it and due to poor choice of wording made it sound like it was actually your work, that's all I'm saying

poor wording due to moderate english skills, now stop fighting or blabla, geez