Hacking Cubic Ninja on SKY3DS...

[Falo]

That's definitely a weakness of sky3ds that for a game to work it needs to be in the template file first

It's not a weakness, it's better than without support for it.

And you can't edit the template with the required information?

The template data can be edited, but you need some values from a real cart, it contains "cartridge id", "unique id" and other values + checksums.
Most of the data can be generated from a normal rom file, but unique id can only be dumped from a real cart, it's the same id that .3DZ uses for online play.

 

[Huntereb]

The template data can be edited, but you need some values from a real cart, it contains "cartridge id", "unique id" and other values + checksums.
Most of the data can be generated from a normal rom file, but unique id can only be dumped from a real cart, it's the same id that .3DZ uses for online play.

Then just use one from a real cart. Sounds like an easy fix.

Someone send me the template file and I'll fix it for you guys.

 

[Celebrimbor360]

Then just use one from a real cart. Sounds like an easy fix.

Someone send me the template file and I'll fix it for you guys.

Given Cubic Ninja is No.1 selling 3DS game today, that might prove harder for them...

 

[Huntereb]

Given Cubic Ninja is No.1 selling 3DS game today, that might prove harder for them...

You can use any retail cartridge to obtain the header data. Hell, you could use one of the headers already on that list.

I found the template. They're just copy-pasta-ing the header data from a legitimate game to your rom when you write it to your card. Let me get a USA Entry set up and paste it here.

Actually, that's against the rules. I'll tell you when you can PM me for the data.

 

[Falo]

If someone is interested in how the template works, here some info, most of this was easy to understand from decompiling diskwritter, but there is one 16 byte value that diskwritter doesn't use.

Sha1 hash: from 0x1000 - 0x11FF of rom
 
template structure: (convert from hex-string to byte array first, simply use HxD and copy/paste it...)
 
4 byte = Cartridge Crypto //always 0x0 ?
4 byte = Cartridge ID
4 byte = EEPROM ID //0xFFFFFFFF on nand save, most cards use 0xC22211, 0xC22212, 0xC22213
2 byte = crc16 xor 0xFFFF // from 0x1000 - 0x11FF of rom
2 byte = crc16 // from 0x1000 - 0x11FF of rom
16 byte = "CTRIMAGE" + zeroes
16 byte = ??? hash or id // is not used by disk writter directly, so unknown for now
16 byte = zeroes
16 byte = unique id // used for online play
48 byte = 0xFF
256 byte = Game Serial + zeroes //the updated disk writter allows real name instead of serial
126 byte = zeroes/reserved
2 byte = crc16 from 0x0 - 0x1FD //from this template structure, not rom
 
//Cartridge ID:
example1: C2 FE 00 90
example2: C2 F8 00 98
this value tells us some stuff about the cartrige, like nand saving (id & 0x8 == nand save)

 

[Huntereb]

For some reason they don't have Pokemon X/Y USA copies in their template list.

 

[petspeed]

Falo: I still consider it a weakness compared to Gateway where we are not depending on Gateway team to offer support for every game before they can be used.

 

[The Real Jdbye]

Falo: I still consider it a weakness compared to Gateway where we are not depending on Gateway team to offer support for every game before they can be used.

Don't worry. Sky3DS probably won't work with new games anyway, Nintendo will patch it and the games won't be able to run without updating.

 

[RachelB]

Smealum posted on twitter that it only works specifically on retail carts and JP eshop (because that's the only region that has eshop version)

No, he said it would work with those. he did not say only. It would not make any sense for it to not work with a flashcard. It will work for sure.

 

[JimBonza]

Only reason it won't work is due to the saves not being stored on the 3DS' sdcard nor the cart itself which is the same reason Powersaves doesn't work with Sky3DS.

I'll wait for someone else to attempt this.

 

[Zidapi]

Only reason it won't work is due to the saves not being stored on the 3DS' sdcard nor the cart itself which is the same reason Powersaves doesn't work with Sky3DS.

I'll wait for someone else to attempt this.

What are you talking about?

The exploit has nothing to do with "saves", it uses a file on the SD card which is launched by scanning a corrupted QR code.
Unless you need to have progressed through the game somewhat before you have access to custom levels and QR scanning.

EDIT: Booted up the game, QR scanning is available immediately.

 

[Warft]

The team has updated the template, now the game works great

 

[T3GZdev]

i was told by smea the i could use my gateway to use cubic ninja for the exploit.
i have the actual game tho.

 

[Arnold0]

i was told by smea the i could use my gateway to use cubic ninja for the exploit.
i have the actual game tho.

That's a good news if it works with gateway, because this Cubic Ninja game just became so much expensive, we wont have to buy it to use 3dsx homebrew with gateway (Or maybe there is a way to run 3dsx homebrews on gateway natively, but I think not).

 

[T3GZdev]

That's a good news if it works with gateway, because this Cubic Ninja game just became so much expensive, we wont have to buy it to use 3dsx homebrew with gateway (Or maybe there is a way to run 3dsx homebrews on gateway natively, but I think not).

i can confirm it works.

 

[hamstrman]

So it felt right to bump this thread with the recent news of Ninjhax 2.0 working on v9.9.XX, specifically with SKY3DS, by writing Cubic Ninja to the SKY3DS and following the rest of the process as usual.

Only problem is: Cubic Ninja isn't in the template! Is there a custom template that was created that included it? It was suggested on this thread that someone would add it for others.

I don't believe I'm missing anything. If there exists no template with Cubic Ninja on it, I assume my next step is to email the main template people?

 

[vijankush]

So it felt right to bump this thread with the recent news of Ninjhax 2.0 working on v9.9.XX, specifically with SKY3DS, by writing Cubic Ninja to the SKY3DS and following the rest of the process as usual.

Only problem is: Cubic Ninja isn't in the template! Is there a custom template that was created that included it? It was suggested on this thread that someone would add it for others.

I don't believe I'm missing anything. If there exists no template with Cubic Ninja on it, I assume my next step is to email the main template people?

Are you using Cubic Ninja ROM from US? Do you have the latest template??? http://filetrip.net/dl?NrthCl79QP
It should work for you. I mean it worked for me

 

[hamstrman]

Are you using Cubic Ninja ROM from US? Do you have the latest template??? http://filetrip.net/dl?NrthCl79QP
It should work for you. I mean it worked for me

That sounds wonderful! And yes, I downloaded the 7/22 Template just now and nothing yet. I'm going to test something first, although I doubt it will work, only because it hasn't right off the bat.

Edit: A-HA! I'm a jackass. It's always the stupidly simple crap that gets you... or rather, me, every time!

Now onto actually testing it out.

Soooooooo, reallllly stupid, makes-a-n00b-look-like-a-blackhat question... With Homebrew (and I have this for my Wii, so I think I know the answer), will I be able to play eShop games? Or just other console carts?

 

[vijankush]

That sounds wonderful! And yes, I downloaded the 7/22 Template just now and nothing yet. I'm going to test something first, although I doubt it will work, only because it hasn't right off the bat.

Edit: A-HA! I'm a jackass. It's always the stupidly simple crap that gets you... or rather, me, every time!

Now onto actually testing it out.

Well, good luck

--------------------- MERGED ---------------------------

That sounds wonderful! And yes, I downloaded the 7/22 Template just now and nothing yet. I'm going to test something first, although I doubt it will work, only because it hasn't right off the bat.

Edit: A-HA! I'm a jackass. It's always the stupidly simple crap that gets you... or rather, me, every time!

Now onto actually testing it out.

Soooooooo, reallllly stupid, makes-a-n00b-look-like-a-blackhat question... With Homebrew (and I have this for my Wii, so I think I know the answer), will I be able to play eShop games? Or just other console carts?

No but you will have access to many emulators and other cool hombrews. Here is the list: https://gbatemp.net/threads/growing-ninjhax-2-0-compatible-homebrew.393217/
Just search the on google or gbatemp and you will probably get it. (Try out 3dsCraft, Exdata tool [Changes the theme of 3DS], blargSNES [SNES Emulator] and play coin setter (Increases play coins to max like 300])
Simply, Ninjhax 2 is awesome but 3DSCraft doesn't work for me

 

[hamstrman]

So the only way to play eShop games is still having a Gateway and v9.2 and below.

Oh and thanks so much for your explanation!