Homebrew [Custom Launcher] Spider3DSTools released

[Shubshub]

It will be great, in that case it will be easy to patch code.bin content in javascript to change a parameter data, because I don't see the way to easily pass the data now through gspwn execution besides SD card.
BTW actual code.bin data can be loaded into javascript with XMLHTTPRequest, just like I did with the actual ROP data, so there will be no need to inject escaped string into html with each update, only bianary file updating will be needed.

I don't suppose its possible to have code.bin and LodeCode part of the webpage so we don't have to put anything on the SD Card?

 

[duke_srg]

I don't suppose its possible to have code.bin and LodeCode part of the webpage so we don't have to put anything on the SD Card?

Actually we're limited to 768 bytes of ROP code on browser part now. I'm not sure why exactly, but if there was no really need for this limitation, there was no LoadROP exploit, which just loads additional ROP code from SD with no such size limitation.

 

[Shubshub]

Actually we're limited to 768 bytes of ROP code on browser part now. I'm not sure why exactly, but if there was no really need for this limitation, there was no LoadROP exploit, which just loads additional ROP code from SD with no such size limitation.

Hmmmm. My next question is, can you make a code.bin (for 9.4) that would essentially be a homebrew game or is that not possible on 9.4?

 

[duke_srg]

Hmmmm. My next question is, can you make a code.bin (for 9.4) that would essentially be a homebrew game or is that not possible on 9.4?

AFAIK that is not possible, because exploit needed to run homebrew was fixed 9.3+. Some ARM code just can't be run on 9.3+ yet.
BTW, I even don't have a toolchain installed to build a ROP
Upd: installed toolchain, started to make a custom ROP loader. It is soooo little space. Can anyone point me to the InitData structure, maybe some space from zero padding can be utilized for code?

 

[Slushie3DS]

It'd be nice if we were able to load .HTML documents from our browser locally at something like "file:///sdmc/spider3DStools/multiloader"

 

[duke_srg]

It'd be nice if we were able to load .HTML documents from our browser locally at something like "file:///sdmc/spider3DStools/multiloader"

This is not possible at all.

 

[Slushie3DS]

This is not possible at all.

I understand the browser is based off of one that is older than most of our members, but it still seems that would have been a feature. v.v

 

[Duo8]

I understand the browser is based off of one that is older than most of our members, but it still seems that would have been a feature. v.v

I see no reason to program something like that in. Hence the browser doesn't support it.

 

[yifan_lu]

Actually we're limited to 768 bytes of ROP code on browser part now. I'm not sure why exactly, but if there was no really need for this limitation, there was no LoadROP exploit, which just loads additional ROP code from SD with no such size limitation.

Btw I'm not sure either. I just never tested it with larger payloads. Feel free to see what happens.

 

[Slushie3DS]

I see no reason to program something like that in. Hence the browser doesn't support it.

I'm pretty sure most browsers have that feature built in to the base. Chrome does, and I think Firefox does too. It is so that browsers can be used to test HTML indexes locally without having to transfer to a server. It can all be used for photos and other files. You're right, though. There is no need for spider to have it, so it's unlikely it would have been implemented.

 

[duke_srg]

Btw I'm not sure either. I just never tested it with larger payloads. Feel free to see what happens.

Gateway code was made not for fixed length, but have 768 bytes ROP code + 2 tail bytes according to HTML/JS. Can you briefly describe InitDate and Self values? Are they both not moveable? I managed to modify LoadCode with parameter passing to code.bin inside file on SD, it took some time to place initdata values inside dummy stack values, but it works. Maybe you also have a clue which memory area is accessible both in ROP and ARM code, because passing data parameters with files on SD is not a good idea.

 

[SnorlaxSquad]

I noticed someone made a .bin of Mario Kart 7 cheats which would unlock everything, and of course there's all the Pokemon hacks going around now.

I wonder, would it be possible to inject cheats through the browser method into other games? How would I go about even starting such a process?

 

[Shubshub]

Can we get a code.bin that can inject themes maybe? or one that can temporarily change the region of the 3ds? seeing as regionthree doesn't have 100% compatibility

 

[DarkFlare69]

I noticed someone made a .bin of Mario Kart 7 cheats which would unlock everything, and of course there's all the Pokemon hacks going around now.

I wonder, would it be possible to inject cheats through the browser method into other games? How would I go about even starting such a process?

Yes, they work for any game, as long as you knos the offsets and stuff.

 

[Thatnoobakaice35000vr]

We don't know the offsets of the mk7 game or the 3ds yet. So maybe don't do stuff before you cause a brick because the ram vaules is so scattered around

 

[Shubshub]

We don't know the offsets of the mk7 game or the 3ds yet. So maybe don't do stuff before you cause a brick because the ram vaules is so scattered around

the RAM wouldn't save anything permanantly though so unless the game was saved it should be fine, if anything bad goes wrong just eject the game cartridge without saving

 

[Thatnoobakaice35000vr]

the RAM wouldn't save anything permanantly though so unless the game was saved it should be fine, if anything bad goes wrong just eject the game cartridge without saving

Well depending on what exploit were doing. things could be Unforgiven

 

[Shubshub]

Well depending on what exploit were doing. things could be Unforgiven

Spider Exploit uses the web browser :/
Not sure what your talking about currently only able to inject things into RAM to make things permanant you'd have to save the game

 

[KaleoOmega]

It would be nice if a Gold Pants Mii could be used through this exploit, surely I could help many friends in our meet-ups. Someone mentioned this should be possible, yesterday, at this same thread, iirc...

 

[Thatnoobakaice35000vr]

Spider Exploit uses the web browser :/
Not sure what your talking about currently only able to inject things into RAM to make things permanant you'd have to save the game

Seems good.