Hacking [WIP] KARL3DS - Kernel access on N3DS via Ninjhax + Loadcode

[WulfyStylez]

Probably a dumb question. But where is the source?

https://github.com/shinyquagsire23/bootstrap
Also holy crap, this thread became really negative really quickly. A lot of you could benefit from reading through the thread, we explain quite a few things and show progress as we go. We're making it a fairly public affair for the benefit of everyone who's interested.

 

[Henning B]

https://github.com/shinyquagsire23/bootstrap
Also holy crap, this thread became really negative really quickly. A lot of you could benefit from reading through the thread, we explain quite a few things and show progress as we go. We're making it a fairly public affair for the benefit of everyone who's interested.

I'm loving the thread, a lot of ontopic stuff, pretty rare to be gbatemp

 

[128bit_benny]

https://github.com/shinyquagsire23/bootstrap
Also holy crap, this thread became really negative really quickly. A lot of you could benefit from reading through the thread, we explain quite a few things and show progress as we go. We're making it a fairly public affair for the benefit of everyone who's interested.

Haters gonna hate Prove them wrong. Dont let it discourage you. Thanks for the source link. Did some assembler before tho im realy unfimiliar with the 3ds but will be interesting to see.

 

[shinyquagsire23]

I think it's worthwhile to mention that given the current exploits this will easily work on any N3DS or 3DS (or 2DS) system, provided you have ninjhax. Our main goal first is to get a stable ARM11 kernel entry point which works on almost all devices, and from there work our way into ARM9 and get that stable on all devices. Supporting 8.1.0-0J devices is not an issue, it just complicates things a bit. I also want to make sure that our usermode end of things is stable as well, so we can see emulators taking advantage of the MUCH faster icache and dcache flushing and invalidation which ARM11 kernel provides. I've gotten this far, and I'm confident that as a team we can go much further.

 

[tony_2018]

https://github.com/shinyquagsire23/bootstrap
Also holy crap, this thread became really negative really quickly. A lot of you could benefit from reading through the thread, we explain quite a few things and show progress as we go. We're making it a fairly public affair for the benefit of everyone who's interested.

They need to read, I'm reporting to get things cleaned up in here.

 

[TehLexinator]

https://github.com/shinyquagsire23/bootstrap
Also holy crap, this thread became really negative really quickly. A lot of you could benefit from reading through the thread, we explain quite a few things and show progress as we go. We're making it a fairly public affair for the benefit of everyone who's interested.

Yeah, tempers have a temper.... And like to talk nonsense.

Keep up the good work guys and don't let aholes bring you down.

 

[Jhyrachy]

If i understood how things works, roadmap is:

Adapt yfanlu entry point for ninjhaxk (Done)
Get ARM 11 kernel access trough ninjhax (Done)
Get ARM 9 kernel access trough ninjhax

When all this points are reached we can start devoloping the software for emunand, dumping, restore an, eventually, CFW

Right?

 

[Idaho]

I still don't understand if this project will allow launching .3dsx files though... :/

 

[WulfyStylez]

If i understood how things works, roadmap is:

Adapt yfanlu entry point for ninjhaxk (Done)
Get ARM 11 kernel access trough ninjhax (Done)
Get ARM 9 kernel access trough ninjhax

When all this points are reached we can start devoloping the software for emunand, dumping, restore an, eventually, CFW

Right?

Pretty much.

I still don't understand if this project will allow launching .3dsx files though... :/

...but ninjhax already allows that, unless I'm missing what you mean.

 

[Idaho]

Pretty much.



...but ninjhax already allows that, unless I'm missing what you mean.

Yeah well I have a new3DS and .3dsx files with kernel access seem interesting to me as I understood it could allow sound, game hacking and few other interesting things...

 

[shinyquagsire23]

Yeah well I have a new3DS and .3dsx files with kernel access seem interesting to me as I understood it could allow sound and, game hacking and few interesting things...

That's definitely part of the plan, as of now I have the SVC handler patched to give homebrew access to SVC 0x7B, which let's apps gain kernel access with ease. I might try to see what can be done with services, but for now we at least have the ability to invalidate icache and dcache direct from usermode. The only issue is getting it to not corrupt memory as badly and the fact that once you set up ARM11 kernel access the system kinda does this weird partial crash where you can remove the cart but you cannot exit ninjhax.

 

[BurningDesire]

I forgot to ask. Will this support N3DS 9..5.0?

 

[MeisterFenster]

No, 9.2 is the latest supported firmware at the moment since 9.3 patched one of the used exploits.

 

[Lucifer666]

If this is gonna support 8.1.0 N3DS consoles that would be GREAT because I'm one of the unlucky souls with an 8.1J N3DS and literally can't do jack **** with it until Gateway releases their N3DS exploit. Pretty sure I'll celebrate my 80th birthday before that happens.

All I want is region free. I play all my games retail

So yeah, great work everyone!

 

[kiryu1]

Hope it will lead to something not needing a cubic ninja cart or any retail cart of some sort..

 

[Myria]

That's definitely part of the plan, as of now I have the SVC handler patched to give homebrew access to SVC 0x7B, which let's apps gain kernel access with ease. I might try to see what can be done with services, but for now we at least have the ability to invalidate icache and dcache direct from usermode. The only issue is getting it to not corrupt memory as badly and the fact that once you set up ARM11 kernel access the system kinda does this weird partial crash where you can remove the cart but you cannot exit ninjhax.

I feel that we can use the svcBackdoor access to fix the damage memchunkhax has done to the heap, especially if we use an inverted gspwn (read instead of write) beforehand to know what the heap should look like.

 

[tony_2018]

That's definitely part of the plan, as of now I have the SVC handler patched to give homebrew access to SVC 0x7B, which let's apps gain kernel access with ease. I might try to see what can be done with services, but for now we at least have the ability to invalidate icache and dcache direct from usermode. The only issue is getting it to not corrupt memory as badly and the fact that once you set up ARM11 kernel access the system kinda does this weird partial crash where you can remove the cart but you cannot exit ninjhax.

Where the fuck can I send team funds for food and drinks. You guys gotta eat some time.....

 

[ShadowOne333]

Where the fuck can I send team funds for food and drinks. You guys gotta eat some time.....

Or at least a good set of drinks to take while they are coding.

 

[AtlanticBit]

KARLMARX3DS!

Sorry.


Anyway, that is the kind of thing that make me hesitate between buying that €20 european Cubic Ninja or waiting to use the Gateway I already own...
Good luck!

UGH

 

[mid-kid]

Why couldn't the web browser be used as entry point?
Not enough permissions/knowledge about it?

Sorry if it's already been answered.