Homebrew HTTPwn - Bypass system update blocks

Blundermann

Well-Known Member
OP
Member
Joined
Oct 15, 2013
Messages
174
Trophies
0
XP
410
Country
United States
Yellows8 just released this an hour ago.
https://github.com/yellows8/ctr-httpwn

This is an userland-only exploit for the 3DS HTTP-sysmodule. The configuration downloaded from the server then allows you to bypass required-sysupdate errors. This applies to the following: NetUpdateSOAP, friends-server(nasc), and NNID. In other words, this allows you to access everything(as of March 22, 2016) that's known to throw sysupdate-required errors on outdated system-versions(the only known exception is browser-version-check since this can't target web-browser httpc currently).

This also results in sysupdates being blocked from downloading normally(the system handles it the same way as if no sysupdate is available).

This can additionally be used for other things as well via the user_config optionally loaded from SD.

Once run successfully, ctr-httpwn will persist under the sysmodule until the sysmodule is terminated(shutdown/reboot/firm-boot).

The inital exploitation method was theorized in late 2015. The initial exploit was implemented on February 12-13, 2016.

The server config is downloaded with HTTPS from the yls8.mtheall.com site, likewise with the new_url for NetUpdateSOAP.
 
Last edited by Blundermann,

D.Loro5

Well-Known Member
Newcomer
Joined
Jan 5, 2016
Messages
59
Trophies
0
Age
26
XP
71
Country
Im not new to the hacking stuff so how do I install that HTTPwn. Im on version 10.5 with homebrew already installed.

Download the starter kit from the website of the Homebrew Launcher and hence extract the .3dsx of this application. Then start it from the Homebrew Launcher and you press the buttons tell you, you return to the Home menu by pressing Start and X (to not restart, since I believe that changes or something deleted) and you can already access the eShop and anything you ask update the console.
 

regnad

Button Masher
Member
Joined
May 19, 2008
Messages
2,515
Trophies
1
Age
53
XP
3,675
Country
Japan
Regarding this part:

Once run successfully, ctr-httpwn will persist under the sysmodule until the sysmodule is terminated(shutdown/reboot/firm-boot).

This means it's not a permanent installed solution, right? Although it blocks sysupdates, it could well download/nag about a sysupdate the next time you turn on the unit, right?
 

D.Loro5

Well-Known Member
Newcomer
Joined
Jan 5, 2016
Messages
59
Trophies
0
Age
26
XP
71
Country
Im pressing Start+X but it does nothing it just pops up the Reboot option with A: Proceed and B: Cancel

Do you have the latest version of the Homebrew Launcher? The option to return to the Home menu without restarting the console is available from version 2.6 of the Homebrew Launcher. You should update the boot.3dsx
 

urherenow

Well-Known Member
Member
Joined
Mar 8, 2009
Messages
4,763
Trophies
2
Age
48
Location
Japan
XP
3,661
Country
United States
Some people simply refuse to read the docs...
Usage

Do not use this from Old3DS-browserhax. Do not use this when the system date is not set correctly(like with the browser-version-check bypass). Do not run this app more than once when ctr-httpwn is already active under the sysmodule.

Just run the app, then if successful return to hbmenu. For using the system eShop application on <10.0.0-X, you must use HANS-eShop included with the homebrew starter-kit(this should be the one updated on March 20, 2016, or later). For everything else, and for using system-eShop-app on >=v10.0.0-X, you can just return to Home Menu from hbmenu. This can be done by pressing the START button, then use the option for returning to Home Menu without rebooting(you can use HANS if you really want to, except for eShop on >=10.4.0-X, returning to Home Menu is not required).

When using HANS-eShop on a very old system-version such as 9.6.0-X, eShop-app may display an error the first time. Returning to hbmenu then running HANS-eShop again fixes this issue caused(?) by friends-service. You'll have to repeat this every time you boot into *hax payloads for using HANS-eShop.

In some rare(?) cases, during eShop startup it may unexpectedly start some sort of NNID-related(?) setup(unknown, NNID was mentioned in the Japanese text on a JPN New3DS at least) even though a NNID has been linked a long while. There's no known way to definitely reproduce this. There doesn't appear to be any other affects(eShop/elsewhere) once fully loaded into eShop however.
 
Last edited by urherenow,

alphanator

Well-Known Member
Newcomer
Joined
Mar 13, 2016
Messages
56
Trophies
0
Age
25
XP
97
Country
United States
Do you have the latest version of the Homebrew Launcher? The option to return to the Home menu without restarting the console is available from version 2.6 of the Homebrew Launcher. You should update the boot.3dsx

Can ya ink me to the 2.6 version, please
 

Hikkis

Member
Newcomer
Joined
Jan 4, 2016
Messages
16
Trophies
0
XP
47
Country
France
Saw this few minutes after he tweeted about it and gotta say that's exactly what I was waiting for, updating/online play seems to be working perfectly but on the other hand, eShop freeze right after it's done loading on n3DS 10.3
 

Pikm

Well-Known Member
Member
Joined
Jan 24, 2016
Messages
687
Trophies
0
XP
2,006
Country
United States
Download the starter kit from the website of the Homebrew Launcher and hence extract the .3dsx of this application. Then start it from the Homebrew Launcher and you press the buttons tell you, you return to the Home menu by pressing Start and X (to not restart, since I believe that changes or something deleted) and you can already access the eShop and anything you ask update the console.
You need the .xml too.

--------------------- MERGED ---------------------------

Saw this few minutes after he tweeted about it and gotta say that's exactly what I was waiting for, updating/online play seems to be working perfectly but on the other hand, eShop freeze right after it's done loading on n3DS 10.3
Do you have the .xml file?
 

democracy

Well-Known Member
Member
Joined
Jul 3, 2009
Messages
910
Trophies
0
XP
730
Country
United States
Wow, been waiting for this my whole 3ds life, thanks. So I guess this means I can remove my DNS block to Nintendo server now and not worry about an update being downloaded?

And if I understand correctly this once run does not survive reboots. Possible to load this on boot automatically?
 
Last edited by democracy,

Pikm

Well-Known Member
Member
Joined
Jan 24, 2016
Messages
687
Trophies
0
XP
2,006
Country
United States
Can ya ink me to the 2.6 version, please
http://smealum.github.io/3ds/

click on "download the starter kit" or "the executable"

--------------------- MERGED ---------------------------

Wow, been waiting for this my whole 3ds life, thanks. So I guess this means I can remove my DNS block to Nintendo server now and not worry about an update being downloaded?
If an update gets downloaded, you can just boot into recovery to remove the nags.
 

hudhair

Well-Known Member
Member
Joined
Apr 23, 2013
Messages
691
Trophies
1
XP
369
Country
United States
Can someone help? I downloaded the zip but cant find the .3dsx homebrew file. Also, what else do i put on my sd card besides the 3dsx? xml files? I'm on O3ds xl.
 

Blundermann

Well-Known Member
OP
Member
Joined
Oct 15, 2013
Messages
174
Trophies
0
XP
410
Country
United States
Can someone help? I downloaded the zip but cant find the .3dsx homebrew file. Also, what else do i put on my sd card besides the 3dsx? xml files? I'm on O3ds xl.
Download this.

Then, merge the '3ds' folder from that zip with the '3ds' folder on the root of your SD card. Then you can run it from the Homebrew Launcher like normal.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    Xdqwerty @ Xdqwerty: good night