Homebrew Would no-browser Ninjhax be feasible?

[Jiro2]

Because this keeps turning up in cases where people have low browser versions. You have to update using a cart, either to 4.x/6.x and use mset, or to 9.3-10.7 and use a game entry point. But if you do that, you may have no browser or a very low browser, which means Ninjhax won't work. Would it be at all feasible for Ninjhax to be updated to run without using a browser? (And would it then be possible to cart update to 9.2 with no browser, and use Ninjhax to finish the a9lh/CFW process?)

 

[Swiftloke]

Because this keeps turning up in cases where people have low browser versions. You have to update using a cart, either to 4.x/6.x and use mset, or to 9.3-10.7 and use a game entry point. But if you do that, you may have no browser or a very low browser, which means Ninjhax won't work. Would it be at all feasible for Ninjhax to be updated to run without using a browser? (And would it then be possible to cart update to 9.2 with no browser, and use Ninjhax to finish the a9lh/CFW process?)

OK, this is a legit question. Unfortunately, no, any exploit at all needs a browser to run, as it needs to take it over to gain more permissions, the biggest one being SD card access to get to our boot.3dsx.

--------------------- MERGED ---------------------------

You can find the ninjhax writeup, explaining this in more detail, here: http://smealum.net/?p=517

 

[FenrirWolf]

Only ninjhax 1.0 and 1.1 require a browser. *hax 2.0 and above (such as ninjhax 2.0, oothax, menuhax, etc) have no need for a browser. With the natural exception of browserhax, of course.

 

[Jiro2]

I was pretty sure that even Ninjhax 2 required *some* browser, and this turned up when I was suggesting additions to the guide, but I can't find a reference.

 

[Swiftloke]

Only ninjhax 1.0 and 1.1 require a browser. *hax 2.0 and above (such as ninjhax 2.0, oothax, menuhax, etc) have no need for a browser. With the natural exception of browserhax, of course.

Where did you get that?

 

[Jiro2]

I am confused at this point.

Ninjhax 2 is said by most people to not need a browser. However, the download page for it does not let you select a browser version less than -7, and Plailect's guide for updating to 9.2 does not contain the possibility "update to a cart using a 9.2 game like some versions of Smash Brothers, and then use Ninjhax for homebrew for the rest of this guide". I could swear the subject came up at some point in a discussion about the guide.

https://github.com/Plailect/Guide/issues/131#issuecomment-222423646 mentions that 9.2 with a -4 browser cannot run Ninjhax (although he apparently could run it on 9.9 with a -4).

 

[Garro]

I made a similar question not too long ago, the guy who replied also said only old Ninjhax relied on Browser and newer didn't.

http://gbatemp.net/threads/question-about-current-available-exploits.429146/

 

[Jiro2]

Mod, please close this; I emailed Smealum and Ninjhax 2 doesn't use a browser at all (despite the -7 on the Ninjhax 2 page)

 

[Logan Pockrus]

Mod, please close this; I emailed Smealum and Ninjhax 2 doesn't use a browser at all (despite the -7 on the Ninjhax 2 page)

Smealum said that to you? I could have sworn it required a browser. Anyway, to answer the OP (even though I guess I don't need to at this point), an exploit that doesn't require the browser is always a possibility, but *hax already works fine, and there just aren't enough people with the interest, time, or skill to get the job done.

 

[Jiro2]

Smealum said that to you? I could have sworn it required a browser. Anyway, to answer the OP (even though I guess I don't need to at this point), an exploit that doesn't require the browser is always a possibility, but *hax already works fine, and there just aren't enough people with the interest, time, or skill to get the job done.

I'm the OP. I assumed it requires a browser for the reasons I gave:
-- Ninjhax download page seems to require -7
-- report of inability to run Ninjhax on -4
But if it doesn't, it doesn't.

 

[zoogie]

Mod, please close this; I emailed Smealum and Ninjhax 2 doesn't use a browser at all (despite the -7 on the Ninjhax 2 page)

Don't know why he doesn't just X out the NVER then to clarify things. One line of code to fix.

 

[Ricken]

Just clearing this out of the way; That writeup Smealum made was of Ninjhax1. He hasn't written up 2 yet

EDIT; Also, if someone wants me to, I don't mind using my 9.2 EmuNand to test Ninjhax 1 and 2 with Spider deleted from that Nand, just for proof

 

[Logan Pockrus]

I'm the OP. I assumed it requires a browser for the reasons I gave:
-- Ninjhax download page seems to require -7
-- report of inability to run Ninjhax on -4
But if it doesn't, it doesn't.

Alright, then. I do remember one unfortunate fellow who installed Old 3ds (I.E., not 2DS or N3DS) update CIAs to a 2DS. Obviously, the 2DS doesn't have a 3d slider (or 3d at all), so he was stuck. However, you can launch a cart at startup by holding certain keys (allegedly), so he tried using Ninjhax to get access to sysUpdater, but it wouldn't launch, as certain services (presumably including the browser) weren't available. However, the legitimacy of this story depends on whether or not you actually can launch game carts at startup - I'm not entirely sure.

 

[kje123]

Alright, then. I do remember one unfortunate fellow who installed Old 3ds (I.E., not 2DS or N3DS) update CIAs to a 2DS. Obviously, the 2DS doesn't have a 3d slider (or 3d at all), so he was stuck. However, you can launch a cart at startup by holding certain keys (allegedly), so he tried using Ninjhax to get access to sysUpdater, but it wouldn't launch, as certain services (presumably including the browser) weren't available. However, the legitimacy of this story depends on whether or not you actually can launch game carts at startup - I'm not entirely sure.

Sounds fake to me. If that were possible, then there would be no such thing as a hard brick.

 

[Logan Pockrus]

Sounds fake to me. If that were possible, then there would be no such thing as a hard brick.

Well, I'd assume your system would need to be in working order to launch the cart. ¯\_(ツ)_/¯

EDIT: It's like how recovery mode isn't accessible with a hard brick.

 

[kje123]

Well, I'd assume your system would need to be in working order to launch the cart. ¯\_(ツ)_/¯

EDIT: It's like how recovery mode isn't accessible with a hard brick.

Yeah in a way.

 

[Logan Pockrus]

Yeah in a way.

But like I said, I'm not sure how legitimate the story was.

 

[dark_samus3]

But like I said, I'm not sure how legitimate the story was.

It's perfectly legit, you have to factory reset from recovery mode or something, then you can run games with a keycombo (I'm leaving out details, but I assure you it IS possible) however, the home menu, and by extension, it's applets (browser, etc.) aren't running, which limits the permissions we have. Simply put, it IS possible to recover from this state, but it's not as easy, as we have less to work with here... Depending on the system version, though, it might not be too hard (the RSAVerify vuln, for example, is rather simple, can be done from any system 4.x or less and doesn't need a lot of code or permissions to exploit)

All that said, ninjhax 1.x needs browser running, *hax 2.x needs home menu running (which is the replacement for the browser requirement, essentially)

 

[Logan Pockrus]

It's perfectly legit, you have to factory reset from recovery mode or something, then you can run games with a keycombo (I'm leaving out details, but I assure you it IS possible) however, the home menu, and by extension, it's applets (browser, etc.) aren't running, which limits the permissions we have. Simply put, it IS possible to recover from this state, but it's not as easy, as we have less to work with here... Depending on the system version, though, it might not be too hard (the RSAVerify vuln, for example, is rather simple, can be done from any system 4.x or less and doesn't need a lot of code or permissions to exploit)

All that said, ninjhax 1.x needs browser running, *hax 2.x needs home menu running (which is the replacement for the browser requirement, essentially)

Glad to know I can rely on someone more knowledgeable than myself to swoop in and explain things!

 

[TheCyberQuake]

Alright, then. I do remember one unfortunate fellow who installed Old 3ds (I.E., not 2DS or N3DS) update CIAs to a 2DS. Obviously, the 2DS doesn't have a 3d slider (or 3d at all), so he was stuck. However, you can launch a cart at startup by holding certain keys (allegedly), so he tried using Ninjhax to get access to sysUpdater, but it wouldn't launch, as certain services (presumably including the browser) weren't available. However, the legitimacy of this story depends on whether or not you actually can launch game carts at startup - I'm not entirely sure.

As far as I'm aware the same CIA files are used on both the old 3ds and 2ds. Everytime I go to download an update/downgrade pack, the 2ds and 3ds are the same pack. I could be wrong and someone can correct me if so. But I'm fairly certain old 3ds and 2ds share the same update files. Unless they accidentally installed a CIA that isn't usually in an update, I'm going to claim it false. But again, I could be wrong so feel free to let me know if I am.