Hacking [WIP] KARL3DS - Kernel access on N3DS via Ninjhax + Loadcode

[Oishikatta]

... So then what should we 8.1 users do? Wait around for a cart with a 9.x update on it? Makes me wish I would've gone with a EUR N3DS instead of JPN.

I don't believe there will be any JP carts with an exploitable 9.x. JP MM comes with 9.4 already. Besides that, cart updates don't include a browser.

Personally I'll wait another few weeks for gateway and see if they decide to support 8.1 (which they definitely could, but again economically it wouldn't make sense for them to do so -- remember in the 4.x days they were clear that there were plenty of 4.x consoles available and users should sell theirs and buy one of those).

And regarding KARL3DS... I feel it would be rude to ask them to put the required time into it to rewrite the exploits specifically for 8.1. It's up to them if they want to do that.

If they don't then I'll sell my 8.1J and buy an U/E 9.0~9.2.

 

[boomie0123]

I'll try to personally handle this case if no one beats me to it.

You are a hero. If there was a donate button somewhere, you'd be earning my donations like no other.

 

[Idaho]

Will you guys get things working with the browser exploit too? I personally have a 3DS with a Gateway and an n3DS with CN but I have some friends that are too poor or too lazy to buy the game, I think it might help increase the user base...

 

[WulfyStylez]

Will you guys get thins working with the browser exploit too? I personally have a 3DS with a Gateway and an n3DS with CN but I have some friends that are too poor or too lazy to buy the game, I think it might help increase the user base...

We plan on supporting at least MSET, CN, and spider afaik.

 

[Idaho]

Well seems like all is great then, just have to wait for a release

 

[-LuCas-]

what's this ?

http://pastebin.com/tbhEQgXx

 

[Death78793]

what's this ?

http://pastebin.com/tbhEQgXx

Not trying to start any conspiracy theories, but dang that looks really interesting...
EDIT: proven to not be anything that important xD

 

[Dazzozo]

what's this ?

http://pastebin.com/tbhEQgXx

Wrong. As of step 1.

That's what it is.

Edit: to clarify, ARM9 NATIVE_FIRM sets REG_SYSPROT9 on boot which prevents further access to that region. If you had access to the raw data just like that, it would be a minor annoyance and completely pointless.

 

[williamcesar2]

what's this ?

http://pastebin.com/tbhEQgXx

Dazzozo, Did you leaked it?

 

[shinyquagsire23]

Dazzozo, Did you leaked it?

It's literally all on 3dbrew, it doesn't even change a thing really.

 

[ShadowOne333]

This is starting to turn into a "Paste any suspicious PasteBins" kind of thread instead of hacking.
Reminds me of the "exploiters" in the Wii U Scene.

But hey, at least they're trying to help.

 

[Intronaut]

https://twitter.com/smealum/status/572559430694281216

I am in 9.2, but for curiosity:
If someday Smealum releases a new entrypoint for Ninjhax, this means we can get KARL3DS on latest firmwares?

 

[Psi-hate]

https://twitter.com/smealum/status/572559430694281216

I am in 9.2, but for curiosity:
If someday Smealum releases a new entrypoint for Ninjhax, this means we can get KARL3DS on latest firmwares?

It all depends if there are still vulnerabilities on the required exploits to run it. :V

 

[TheZander]

Alright I made an entry, I tried it 3 times. the first time it hanged at executing the next 2 times I got the success part. When you click buttons it says exiting but doesn't exit.

 

[Intronaut]

It all depends if there are still vulnerabilities on the required exploits to run it. :V

Another good reason for closed-source

 

[Technicmaster0]

Another good reason for closed-source

Nope. All exploits which get used by this are aleady out. They were either in NINJHAX (and very well documented for everyone) or in the GW launcher which Nintendo should be able to decrypt on their own.

 

[WulfyStylez]

https://twitter.com/smealum/status/572559430694281216

I am in 9.2, but for curiosity:
If someday Smealum releases a new entrypoint for Ninjhax, this means we can get KARL3DS on latest firmwares?

I think he's just getting at that the userspace stuff in ninjhax isn't patched on the newest fw. He seems to have forgotten that regionthree needs NS to work though.

 

[Dazzozo]

I think he's just getting at that the userspace stuff in ninjhax isn't patched on the newest fw. He seems to have forgotten that regionthree needs NS to work though.

I don't think he was originally planning to use NS, he had something a bit more elaborate planned.

 

[Monado_III]

Wow, this whole project looks really good, I remember first seeing this post and just hoping it'd catch on, which it most evidently has. Great job.

 

[shinyquagsire23]

Ugh, that took way too long.

Spoiler

Big thanks to Archshift, Normatt, and sm for this one.