Hacking Pasta CFW - A CFW that allows unsigned CIA to be installed on Old and New 3DS! (required ninjhax)

[megazero1x1]

What exactly is a "gadget" ?

I believe that the spider exploit is done though the spider tools utility, which has many different tools.

I am assuming that 'gadgets' refers to those tools.

 

[FirstLady]

Hi, I'm sooooo happy with this, thanks again all of you. exactly what I've been waiting for xD

Btw. How many CIA's can I install, because I've installed 2 at the moment? Over 1GB.
Surely, I'll run out of space eventually. What happens then?

 

[coolfuze]

Hi, I'm sooooo happy with this, thanks again all of you. exactly what I've been waiting for xD

Btw. How many CIA's can I install, because I've installed 2 at the moment? Over 1GB.
Surely, I'll run out of space eventually. What happens then?

If you run out of space you won't be able to install anymore games until you put in a bigger card

 

[nop90]

I believe that the spider exploit is done though the spider tools utility, which has many different tools.

I am assuming that 'gadgets' refers to those tools.

Gadgets are small pieces of code already loaded in ram. ROP (Return Oriented Programming) put a sequences of addresses on the stack and create program made of this small chunks of code (ROP chain). They are like LEGO bricks used to build what you want.

Executing this kind of code the program jumps on different locations of the memory instead of following a linear path.

This is used because on modern systems if you write something in memory you can't execute it untill a kenell process marks it as executable.

If you don't have kernel access (like in a Hack) with this kind of programming you can execute complex code joining instruction already in RAM.

The bad thing is that at every change of memory (i.e. for differtent FW) there are different things in RAM. So you have to collect different sets of gadget for every possible memory configuration.

Hope it's clear enough, this is a complex matter and I explained it in a very simplified (and not complete) way.

 

[FirstLady]

If you run out of space you won't be able to install anymore games until you put in a bigger card

Ok thanks, so the CIA's install on the removable SD card then and not on the 3DS itself? I assumed it installed on the 3DS memory.

 

[nop90]

Ok thanks, so the CIA's install on the removable SD card then and not on the 3DS itself? I assumed it installed on the 3DS memory.

Only the ticket is in the NAND (or Emunand).

But there are also CIAs that installs completely in NAND, like system CIAs and 3dsWare.

 

[FirstLady]

Only the ticket is in the NAND (or Emunand).

But there are also CIAs that installs completely in NAND, like system CIAs and 3dsWare.

I see, thanks for the info. that's good news for me then, w00t!

 

[pakrett]

Only the ticket is in the NAND (or Emunand).

But there are also CIAs that installs completely in NAND, like system CIAs and 3dsWare.

Are you still trying to load brahma through mset ?

 

[Testo90]

For me still not working with the 1.1.1 offset fix for 7.X.. Freezes after Ninjahax boot to Pasta CFW

 

[pakrett]

For me still not working with the 1.1.1 offset fix for 7.X.. Freezes after Ninjahax boot to Pasta CFW

There are some prblm with 7.X... If you are on old 3ds it's better to downgrade to 4.X then upgrade to 9.2. On 2ds you have to wait for a new fix.

 

[kactusss]

For me still not working with the 1.1.1 offset fix for 7.X.. Freezes after Ninjahax boot to Pasta CFW

Have you tried to reinstall Ninjhax?

 

[irumi]

For me still not working with the 1.1.1 offset fix for 7.X.. Freezes after Ninjahax boot to Pasta CFW

Mine's a 2DS with 7.1 fw, when i tried this out, it's not working, can't install fbi and assume that it must have been my firmware, i updated to 8.1 via smash bros and afterward, it worked.

 

[nop90]

Are you still trying to load brahma through mset ?

I tryed to port it to 4.x (for test purposes) and 9.X with some ROP gadget from spider hax. The code is finished but it doesn't work, probably because the ROP are from the spider code loaded in RAM.

So at the moment I miss the right ROP gadget to make it work on 9.x or others FW. I should dump memory from 4.x, get the code of the existing gadgets and search the equivalent code in the dump of memory from other FW.

It's very time consuming. I'm switching on Spider ROP to give out a CFW to people on 9.2 without CN, and in the first stage of the code.bin I'm tring to insert a simple CIA install function (so one can first install sign check patch and then run again the CFW with some key pressed to install devmenu). This would be a great step behind.

After this I would like to go back to MSET, where probably I will have to rewrite the rop installe too.

Please understand, I'm making experience on 3DS while working, I'm not a super expert dev like the 3DBrew guys.

 

[dkabot]

(so opne can first install sign check patch and then run again the CFW with some key pressed to install devmenu).

If you're going to do that, I'd suggest BRM or FBI. DevMen/BBM aren't exactly legal to distribute and trying to bundle them would ruin any ability to freely link them.

 

[nop90]

If you're going to do that, I'd suggest BRM or FBI. DevMen/BBM aren't exactly legal to distribute and trying to bundle them would ruin any ability to freely link them.

With this you could install whatever you want as long as it's targeted for SD install and has a reasonable small size (so no legit CIA dierctly) because I'm not going to use malloc functions or SD read - CIA write cycles. I'll keep it easy and small.

I'm not going to bundle anything at all.

 

[dkabot]

With it you could install whatever you want as lon as it's targeted for SD install and has a reasonable small size (so no legit CIA dierctly) because I'm not going to use malloc functions or SD read - CIA write cycles. I'll keep it easy and small.

Of course, I just meant if you went and bundled one yourself, don't need The Rules™ to get in the way if you get something working.

 

[Enaske]

Just noticed the 3D Function ot work with PastaCFW is this intended?

 

[Arcanuskun]

Just noticed the 3D Function ot work with PastaCFW is this intended?

Did you backread, just close the lid and open it. The 3d will now work

 

[kactusss]

Just noticed the 3D Function ot work with PastaCFW is this intended?

Close and reopen the lid

 

[kheldar]

Quick question would this break my GW functionality? I want to check out dsiware and stuff.