Homebrew Would no-browser Ninjhax be feasible?

Jiro2

Well-Known Member
OP
Member
Joined
Mar 28, 2011
Messages
781
Trophies
1
XP
729
Country
United States
Because this keeps turning up in cases where people have low browser versions. You have to update using a cart, either to 4.x/6.x and use mset, or to 9.3-10.7 and use a game entry point. But if you do that, you may have no browser or a very low browser, which means Ninjhax won't work. Would it be at all feasible for Ninjhax to be updated to run without using a browser? (And would it then be possible to cart update to 9.2 with no browser, and use Ninjhax to finish the a9lh/CFW process?)
 

Swiftloke

Hwaaaa!
Member
Joined
Jan 26, 2015
Messages
1,770
Trophies
1
Location
Nowhere
XP
1,467
Country
United States
Because this keeps turning up in cases where people have low browser versions. You have to update using a cart, either to 4.x/6.x and use mset, or to 9.3-10.7 and use a game entry point. But if you do that, you may have no browser or a very low browser, which means Ninjhax won't work. Would it be at all feasible for Ninjhax to be updated to run without using a browser? (And would it then be possible to cart update to 9.2 with no browser, and use Ninjhax to finish the a9lh/CFW process?)
OK, this is a legit question. Unfortunately, no, any exploit at all needs a browser to run, as it needs to take it over to gain more permissions, the biggest one being SD card access to get to our boot.3dsx.

--------------------- MERGED ---------------------------

You can find the ninjhax writeup, explaining this in more detail, here: http://smealum.net/?p=517
 

FenrirWolf

Well-Known Member
Member
Joined
Nov 19, 2008
Messages
4,347
Trophies
1
Location
Sandy, UT
XP
615
Country
United States
Only ninjhax 1.0 and 1.1 require a browser. *hax 2.0 and above (such as ninjhax 2.0, oothax, menuhax, etc) have no need for a browser. With the natural exception of browserhax, of course.
 

Jiro2

Well-Known Member
OP
Member
Joined
Mar 28, 2011
Messages
781
Trophies
1
XP
729
Country
United States
I was pretty sure that even Ninjhax 2 required *some* browser, and this turned up when I was suggesting additions to the guide, but I can't find a reference.
 
Last edited by Jiro2,

Jiro2

Well-Known Member
OP
Member
Joined
Mar 28, 2011
Messages
781
Trophies
1
XP
729
Country
United States
I am confused at this point.

Ninjhax 2 is said by most people to not need a browser. However, the download page for it does not let you select a browser version less than -7, and Plailect's guide for updating to 9.2 does not contain the possibility "update to a cart using a 9.2 game like some versions of Smash Brothers, and then use Ninjhax for homebrew for the rest of this guide". I could swear the subject came up at some point in a discussion about the guide.

https://github.com/Plailect/Guide/issues/131#issuecomment-222423646 mentions that 9.2 with a -4 browser cannot run Ninjhax (although he apparently could run it on 9.9 with a -4).
 
Last edited by Jiro2,

Jiro2

Well-Known Member
OP
Member
Joined
Mar 28, 2011
Messages
781
Trophies
1
XP
729
Country
United States
Mod, please close this; I emailed Smealum and Ninjhax 2 doesn't use a browser at all (despite the -7 on the Ninjhax 2 page)
 

Logan Pockrus

Knawledge is key.
Member
Joined
Jan 1, 2016
Messages
1,338
Trophies
0
XP
1,062
Country
United States
Mod, please close this; I emailed Smealum and Ninjhax 2 doesn't use a browser at all (despite the -7 on the Ninjhax 2 page)
Smealum said that to you? I could have sworn it required a browser. Anyway, to answer the OP (even though I guess I don't need to at this point), an exploit that doesn't require the browser is always a possibility, but *hax already works fine, and there just aren't enough people with the interest, time, or skill to get the job done.
 

Jiro2

Well-Known Member
OP
Member
Joined
Mar 28, 2011
Messages
781
Trophies
1
XP
729
Country
United States
Smealum said that to you? I could have sworn it required a browser. Anyway, to answer the OP (even though I guess I don't need to at this point), an exploit that doesn't require the browser is always a possibility, but *hax already works fine, and there just aren't enough people with the interest, time, or skill to get the job done.

I'm the OP. I assumed it requires a browser for the reasons I gave:
-- Ninjhax download page seems to require -7
-- report of inability to run Ninjhax on -4
But if it doesn't, it doesn't.
 

zoogie

playing around in the end of life
Developer
Joined
Nov 30, 2014
Messages
8,560
Trophies
2
XP
14,998
Country
Micronesia, Federated States of
Mod, please close this; I emailed Smealum and Ninjhax 2 doesn't use a browser at all (despite the -7 on the Ninjhax 2 page)
Don't know why he doesn't just X out the NVER then to clarify things. One line of code to fix.
 

Ricken

Oh Pretty Angel... Did None Teach You?
Member
Joined
Jan 19, 2016
Messages
2,658
Trophies
1
Age
21
Location
Mid-Michigan
XP
2,939
Country
United States
Just clearing this out of the way; That writeup Smealum made was of Ninjhax1. He hasn't written up 2 yet

EDIT; Also, if someone wants me to, I don't mind using my 9.2 EmuNand to test Ninjhax 1 and 2 with Spider deleted from that Nand, just for proof
 
Last edited by Ricken,

Logan Pockrus

Knawledge is key.
Member
Joined
Jan 1, 2016
Messages
1,338
Trophies
0
XP
1,062
Country
United States
I'm the OP. I assumed it requires a browser for the reasons I gave:
-- Ninjhax download page seems to require -7
-- report of inability to run Ninjhax on -4
But if it doesn't, it doesn't.
Alright, then. I do remember one unfortunate fellow who installed Old 3ds (I.E., not 2DS or N3DS) update CIAs to a 2DS. Obviously, the 2DS doesn't have a 3d slider (or 3d at all), so he was stuck. However, you can launch a cart at startup by holding certain keys (allegedly), so he tried using Ninjhax to get access to sysUpdater, but it wouldn't launch, as certain services (presumably including the browser) weren't available. However, the legitimacy of this story depends on whether or not you actually can launch game carts at startup - I'm not entirely sure.
 

kje123

this title is false
Member
Joined
Aug 9, 2015
Messages
421
Trophies
0
Age
24
Location
Seattle
Website
kje123.github.io
XP
524
Country
United States
Alright, then. I do remember one unfortunate fellow who installed Old 3ds (I.E., not 2DS or N3DS) update CIAs to a 2DS. Obviously, the 2DS doesn't have a 3d slider (or 3d at all), so he was stuck. However, you can launch a cart at startup by holding certain keys (allegedly), so he tried using Ninjhax to get access to sysUpdater, but it wouldn't launch, as certain services (presumably including the browser) weren't available. However, the legitimacy of this story depends on whether or not you actually can launch game carts at startup - I'm not entirely sure.

Sounds fake to me. If that were possible, then there would be no such thing as a hard brick.
 
  • Like
Reactions: Ricken

dark_samus3

Well-Known Member
Member
Joined
May 30, 2015
Messages
2,372
Trophies
0
XP
2,042
Country
United States
But like I said, I'm not sure how legitimate the story was.
It's perfectly legit, you have to factory reset from recovery mode or something, then you can run games with a keycombo (I'm leaving out details, but I assure you it IS possible) however, the home menu, and by extension, it's applets (browser, etc.) aren't running, which limits the permissions we have. Simply put, it IS possible to recover from this state, but it's not as easy, as we have less to work with here... Depending on the system version, though, it might not be too hard (the RSAVerify vuln, for example, is rather simple, can be done from any system 4.x or less and doesn't need a lot of code or permissions to exploit)

All that said, ninjhax 1.x needs browser running, *hax 2.x needs home menu running (which is the replacement for the browser requirement, essentially)
 
  • Like
Reactions: Logan Pockrus

Logan Pockrus

Knawledge is key.
Member
Joined
Jan 1, 2016
Messages
1,338
Trophies
0
XP
1,062
Country
United States
It's perfectly legit, you have to factory reset from recovery mode or something, then you can run games with a keycombo (I'm leaving out details, but I assure you it IS possible) however, the home menu, and by extension, it's applets (browser, etc.) aren't running, which limits the permissions we have. Simply put, it IS possible to recover from this state, but it's not as easy, as we have less to work with here... Depending on the system version, though, it might not be too hard (the RSAVerify vuln, for example, is rather simple, can be done from any system 4.x or less and doesn't need a lot of code or permissions to exploit)

All that said, ninjhax 1.x needs browser running, *hax 2.x needs home menu running (which is the replacement for the browser requirement, essentially)
Glad to know I can rely on someone more knowledgeable than myself to swoop in and explain things! :rofl:
 

TheCyberQuake

Certified Geek
Member
Joined
Dec 2, 2014
Messages
5,012
Trophies
1
Age
28
Location
Las Vegas, Nevada
XP
4,407
Country
United States
Alright, then. I do remember one unfortunate fellow who installed Old 3ds (I.E., not 2DS or N3DS) update CIAs to a 2DS. Obviously, the 2DS doesn't have a 3d slider (or 3d at all), so he was stuck. However, you can launch a cart at startup by holding certain keys (allegedly), so he tried using Ninjhax to get access to sysUpdater, but it wouldn't launch, as certain services (presumably including the browser) weren't available. However, the legitimacy of this story depends on whether or not you actually can launch game carts at startup - I'm not entirely sure.
As far as I'm aware the same CIA files are used on both the old 3ds and 2ds. Everytime I go to download an update/downgrade pack, the 2ds and 3ds are the same pack. I could be wrong and someone can correct me if so. But I'm fairly certain old 3ds and 2ds share the same update files. Unless they accidentally installed a CIA that isn't usually in an update, I'm going to claim it false. But again, I could be wrong so feel free to let me know if I am.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • Sicklyboy @ Sicklyboy:
    I wanna grab a 360 Slim and a 360 E one of these days. Missed the boat of getting them at their lowest though, once they were discontinued. Could've got them for cheap back when I was a broke 20 something working at Target, but then again, I was a broke 20 something working at Target
  • Veho @ Veho:
    Being broke is no fun.
  • K3Nv2 @ K3Nv2:
    @Sicklyboy, $150 isn't that bad for a jtag slim on ebay
  • Veho @ Veho:
    I only wish it was actually playable.
  • Veho @ Veho:
    There's a guy on the Tube of You that makes playable mechanical arcade games out of Lego. This could work on the same principle.
  • Veho @ Veho:
    Just a couple of guys taking their manatee out for some fresh air, why you have to molest them?
  • Veho @ Veho:
    Stupid Chinese shop switched their shipping company and this one is slooooooow.
  • LeoTCK @ LeoTCK:
    STOP BUYING CHINESE CRAP THEN
  • LeoTCK @ LeoTCK:
    SUPPORT LOCAL PRODUCTS, MAKE REVOLUTION
  • LeoTCK @ LeoTCK:
    THEY KEEP REMOVING LOCAL SHIt AND REPLACING WItH INFERIOR CHINESE CRAP
  • LeoTCK @ LeoTCK:
    THATS WHY MY PARTNER CANT GET A GOOTWEAR HIS SIZE ANYMORE
  • LeoTCK @ LeoTCK:
    HE HAS BIG FOOT AND BIG DUCK
  • LeoTCK @ LeoTCK:
    d*ck i mean*
  • LeoTCK @ LeoTCK:
    lol
  • Veho @ Veho:
    Mkay.
  • Veho @ Veho:
    I just ordered another package from China just to spite you.
  • SylverReZ @ SylverReZ:
    Communism lol
  • SylverReZ @ SylverReZ:
    OUR products
  • The Real Jdbye @ The Real Jdbye:
    @LeoTCK actually good quality products are dying out because they can't compete with dropshipped chinese crap
    +2
  • BakerMan @ BakerMan:
    @LeoTCK is your partner the sascrotch or smth?
  • Xdqwerty @ Xdqwerty:
    Good morning
    Xdqwerty @ Xdqwerty: Good morning