Hacking [Release] Ticket.db DUMPER! - Fantastic tool to dump ticket.db from sys and emunand

[cearp]

For people who prefer the MsetForBoss exploit

is it easy to convert? thanks.
and any reason one would prefer the msetforboss? i forget the differences really

why no <clickable>link?

yeah i was in a rush, you did just as your username suggests

 

[einstein95]

is it easy to convert? thanks.
and any reason one would prefer the msetforboss? i forget the differences really

It's easy to convert, just need to decrypt the first 0x9000 bytes with openssl. No reason anyone would prefer one over the other, I just have it so I'm not continuously swapping Launcher.dat, only MsetForBoss.dat. The main difference is that MsetForBoss.dat isn't encrypted (and so compresses better).

 

[MelonGx]

It still requires a console which is able to run Launcher.....

That means we are still unable to dump 9.4 consoles without System Transfer.

 

[cearp]

It still requires a console which is able to run Launcher.....

That means we are still unable to dump 9.4 consoles without System Transfer.

sure, naturally, i take that as a given, there is no way to get stuff from a 3ds that is not exploitable - unless yes, you do a system transfer to an exploitable one.
just like every hack on 3ds, right?

 

[peter14ji]

I wonder if it can be made into ninjhax 3dsx files to dump new 3DS sysnand tickets.db.Do common 3DS card games have direct access to the file?

 

[cearp]

I wonder if it can be made into ninjhax 3dsx files to dump new 3DS sysnand tickets.db.Do common 3DS card games have direct access to the file?

no i'm pretty sure ninjhax has no nand access, which is why it's only for usermode homebrew stuff.
when gw release the new update, if anyone reverses that and let's us load programs that have access to nand (like what we do not with launcher.dat stuff) - maybe someone will port it for 9.x
if it never happens, at the very least, if it is possible, we could system transfer to an exploitable old 3ds, and dump the ticket.db with that, and then access the n3ds exclusive tickets there

 

[peter14ji]

But AFAIK,system transfer from new 3DS to older model is disabled by Nintendo.Do all ARM11 processes have no system NAND access?NTR CFWhttp://gbatemp.net/threads/look-this-ntr-cfw.374954/ shows us a new way to make ARM11-based plugins,such as ingame subtitles,memory hacks and more.Hopefully Gateway may adopt this idea.

 

[Vappy]

Now that it's possible to run ARM9 control from higher firmwares, wonder if he'll port it to the new launcher format?

 

[cearp]

Now that it's possible to run ARM9 control from higher firmwares, wonder if he'll port it to the new launcher format?

very possible, i have the code myself so i can attempt it too


-edit. the nand code doesn't seem to work, i will see what can be done (i hope that the problem is not because the code is unstable and coincidently not working 7 times in a row... but it's possible)

 

[Vappy]

-edit. the nand code doesn't seem to work, i will see what can be done (i hope that the problem is not because the code is unstable and coincidently not working 7 times in a row... but it's possible)

Decrypt9 was recently updated for generating NAND FAT16 partition xorpads, any chance the code from that might help with this?

 

[cearp]

Decrypt9 was recently updated for generating NAND FAT16 partition xorpads, any chance the code from that might help with this?

well now you can decrypt your nand so you can get the ticket.db yourself, but decrypt9 does not read dump a file from nand (it could, sure) - and even then, it would be from sysnand and not emunand

 

[Vappy]

well now you can decrypt your nand so you can get the ticket.db yourself, but decrypt9 does not read dump a file from nand (it could, sure) - and even then, it would be from sysnand and not emunand

Sure, you can, it's just a little excessive for the sole purpose of extracting ticket.db, and I assumed you'd prefer a more efficient process to go with FunkyCIA

 

[cearp]

Sure, you can, it's just a little excessive for the sole purpose of extracting ticket.db, and I assumed you'd prefer a more efficient process to go with FunkyCIA

sure, but i don't have the ability to make an app like that! i will see if i can help with code to switch to emunand though

 

[laramie]

can I use this for my new 3ds? It's on 9.0.0-20U, I'm using ntr CFW

 

[cearp]

can I use this for my new 3ds? It's on 9.0.0-20U, I'm using ntr CFW

this is old now, you would use rxtools to do the same thing
but rxtools (and the tool in this thread) does not work on n3ds.

you will need to get the file 'manually'. get cubic ninja, use decrypt9, generate fat16 xorpads and dump your nand, extract the fat16 partition, xor it, and get the ticket.db

 

[laramie]

this is old now, you would use rxtools to do the same thing
but rxtools (and the tool in this thread) does not work on n3ds.

you will need to get the file 'manually'. get cubic ninja, use decrypt9, generate fat16 xorpads and dump your nand, extract the fat16 partition, xor it, and get the ticket.db

I have no idea how to do that, could you help me please? I can PM you if that helps.

 

[cearp]

I have no idea how to do that, could you help me please? I can PM you if that helps.

if you have cubic ninja (or sky3ds) there will be some threads/posts you can follow somewhere, i can point them out maybe
i don't really have time to help individual people, sorry

 

[laramie]

if you have cubic ninja (or sky3ds) there will be some threads/posts you can follow somewhere, i can point them out maybe
i don't really have time to help individual people, sorry

that's okay, I have cn, you you point me in that direction please?

 

[cearp]

that's okay, I have cn, you you point me in that direction please?

do this - https://gbatemp.net/threads/creating-a-north-american-non-xl-new-3ds.381775/page-9#post-5426381
then do this, you need python - gbatemp.net/threads/release-3dsfat16tool-dump-inject-the-fat16-partition-from-nand-dumps.380101 - some people edited my tool later in the thread, to add xorpad support, makes it easier
then use something like winimage to open the resulting file. (or just rename the image to .iso if you are on mac and mount it)
go into the dbs folder and get your ticket.db

 

[weetbix]

Hi, does this allow cia that are installed on a CFW to work and install in emunand? If so can I use rxtools dump/decrypt and inject the ticket.db? Thanks.