Homebrew New Super Mario Bros 2 crash. Could an exploit would be possible

Ordim3n

Well-Known Member
OP
Member
Joined
Dec 14, 2015
Messages
413
Trophies
0
Location
Planet earth
XP
257
Country
Canada
So i was messing with NSMB2's save and i encountered a crash.
Things that i know:
There is no checksums in the save
I changed the streetpass tags to get the crash
The game will still accept the save even if the Streetpass section of the save is filled with FF and will look like this
IMG_20160706_243023181.jpg

Video of the crash happening on both a N3ds and a O3ds

I know that a crash doesn't always lead to an exploit
 

Swiftloke

Hwaaaa!
Member
Joined
Jan 26, 2015
Messages
1,770
Trophies
1
Location
Nowhere
XP
1,467
Country
United States
I don't see a way to get any code execution through this
Well, clearly there are no checks whatsoever in the actual Streetpass data. First we need to find out what we can potentially overflow into, and if the game checks for overflows.

--------------------- MERGED ---------------------------

Well, the game has access to the shell
What shell? NS? Isn't that an extremely interesting target, enough to be in the 32c3 conference?
Either way, it doesn't help with code execution. It just gives us access to a very nice service if we do get code execution.
 
  • Like
Reactions: DarkFlare69

Ordim3n

Well-Known Member
OP
Member
Joined
Dec 14, 2015
Messages
413
Trophies
0
Location
Planet earth
XP
257
Country
Canada
What shell? NS? Isn't that an extremely interesting target, enough to be in the 32c3 conference?
Either way, it doesn't help with code execution. It just gives us access to a very nice service if we do get code execution.
Yeah, i think the NS. Because when i did the rsf gen, it had - shell iirc
 

Swiftloke

Hwaaaa!
Member
Joined
Jan 26, 2015
Messages
1,770
Trophies
1
Location
Nowhere
XP
1,467
Country
United States
Yep a cool crash, but hey people are not going to create a thread everytime a crash occurs.
Please investigate that before posting anything, a bunch of games are crashing when fuzzing the save file.
He did, actually. He found out the Streetpass data content isn't checked.
Your fears are well founded, however. Things like Fateshax understandably erode trust in potentially legitimate hacks. Checking the early pages of BasicSploit are full of skeptical users crying out 'Fateshaxx 2.0'.
 
Last edited by Swiftloke,

DarkFlare69

Well-Known Member
Member
Joined
Dec 8, 2014
Messages
5,147
Trophies
2
Location
Chicago
XP
4,736
Country
United States
He did, actually. He found out the Streetpass data content isn't checked.
Your fears are well founded, however. Things like Fateshax understandably erode trust in potentially legitimate hacks. Checking the early pages of BasicSploit are full of skeptical users crying out 'Fateshaxx 2.0'.
But this one's actually real.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • A @ anotherthing:
    Online was free on the 3DS as well, and it worked well.
    +1
  • S @ salazarcosplay:
    I can't help but think nintendo switch online is the reason we did not get a gameboy/n64/gamecube
    mini classic edition
    +1
  • Xdqwerty @ Xdqwerty:
    @salazarcosplay, i think it would have been impossible to see anything in a gameboy mini
  • S @ salazarcosplay:
    well I meant that as a figure of speech
  • S @ salazarcosplay:
    they could just rerelease a modern gameboy
  • S @ salazarcosplay:
    like the pocket analogue
  • S @ salazarcosplay:
    but nintendo licensed
  • LeoTCK @ LeoTCK:
    dammit that thread got moved from offtopic to edge, well since that happened
  • Xdqwerty @ Xdqwerty:
    @LeoTCK, atleast it's still avaliable
  • LeoTCK @ LeoTCK:
    yes but it wasn't meant to be a comedy thread
  • LeoTCK @ LeoTCK:
    and edge of the forum is mostly comedy and games
  • LeoTCK @ LeoTCK:
    so I don't get why it got moved at all
  • Xdqwerty @ Xdqwerty:
    @LeoTCK, mods are probably hating you
  • LeoTCK @ LeoTCK:
    on most sites mods hated me, sooner or later, but usually over time I get either banned or the mods get used to me
  • LeoTCK @ LeoTCK:
    sometimes to the point of thanking me for my quick actions etc against spam and other stuff, but yea...its either they come to respect me or outright hate me
    +1
  • BigOnYa @ BigOnYa:
    If it's not game related, it will be moved to the Egde of the forum. Mods have moved a few of my threads also.
  • Xdqwerty @ Xdqwerty:
    @BigOnYa, it was in the off topic chat forum
  • BigOnYa @ BigOnYa:
    Well atleast they didn't delete it completely.
  • LeoTCK @ LeoTCK:
    hmm
  • Xdqwerty @ Xdqwerty:
    uoiea
  • LeoTCK @ LeoTCK:
    huh?
  • Xdqwerty @ Xdqwerty:
    Aeiou backwards
    Xdqwerty @ Xdqwerty: Aeiou backwards