Homebrew RAM editing glitch on any 3DS, might lead to an exploit?

[Deleted User]

my head hurts so much now

 

[Deleted User]

I think I can do something good with that game.

 

[Roboman]

I think we can acess arbitrary ram well outside what.this glitch directly allows. What if you change a variable pointer to ram outside the area 0x087E8CECto 0x0CAF8D20 in process 0x29? Arbitrarily writing any data anywhere in rw data is extremely powerful and I think should almost always be able to lead to rop.

 

[Deleted User]

I think I am now able to ROP.

 

[Aletron9000]

So, a program used to help people learn code, could be exploited to actually run homebrew code. lol

 

[Seriel]

So, a program used to help people learn code, could be exploited to actually run homebrew code. lol

To be fair this was inevitable, they give you the power to run custom code, you just need to break out of those restrictions.

 

[12Me21]

http://lumage.smilebasicsource.com/special/dhlptx/

 

[TuxSH]

It's not a bug, it's a feature!

 

[zoogie]

It's not a bug, it's a feature!

It is an actual feature! PEEK and POKE

 

[Xenon Hacks]

shaking -> *watching intensifies* <- shaking

 

[Pokéidiot]

It is an actual feature! PEEK and POKE

QuickBASIC on 3DS!

 

[MartinDocNewland]

I have a EUR N3DS on Luma3DS with A9HL on latest firmware running smileBASIC 3.3.1 and it doesn't work. All I get is ok afterwards and that's it

Edit:

Here is a photo

 

[zoogie]

I have a EUR N3DS on Luma3DS with A9HL on latest firmware running smileBASIC 3.3.1and doesn't work. All I get is ok afterwards and that's it

You need to enter CLEAR and return to trigger it.

 

[Deleted User]

-snip-

 

[Trinitro21]

I have a EUR N3DS on Luma3DS with A9HL on latest firmware running smileBASIC 3.3.1 and it doesn't work. All I get is ok afterwards and that's it

Edit:

Here is a photo

It did work, but you can't see what it did because you didn't offset the layer.
Try these inputs:

XSCREEN 2
BGSCREEN 0,134217728,16
BGOFS 0,6400*16,0

That sets the screen up, sets the glitch up, and then shows you an interesting bit. You can try other offsets in the third command if you want to explore.

 

[seijinshu]

It did work, but you can't see what it did because you didn't offset the layer.
Try these inputs:

XSCREEN 2
BGSCREEN 0,134217728,16
BGOFS 0,6400*16,0

That sets the screen up, sets the glitch up, and then shows you an interesting bit. You can try other offsets in the third command if you want to explore.

Definitely look promising.

 

[Deleted User]

At least we have a functional ram viewer if it doesn't lead to exploit

 

[zoogie]

At least we have a functional ram viewer if it doesn't lead to exploit

It's exploitable. "got rop" means they have control.

now lets just hope all this goes unnoticed by the powers that be until something is released

 

[Deleted User]

It's exploitable.

 

[BurningDesire]

I laughed harder than i should have watching that video.