Toggle sidebar

Homebrew [Release] Miiverse Custom Image Tool

  • Thread starter Thread starter PF2M
  • Start date Start date
  • Views Views 237,373
  • Replies Replies 1,563
  • Likes Likes 36
Status
Not open for further replies.
ariankordi said:
More (sorry for no cropping)
This is ALL that will be released, period. We can't have too many people getting into here out of control.
Ahm3U47.png
ZfgtJcc.png
Click to expand...
Is that health and safety information community really there?
 
Miiverse is already ruinned, dont try to defend or protect it, it isn't worth it. Maybe this could lead to good things like:

  • Nintendo improves Miiverse.
  • Nintendo destroys Miiverse and works on a new and better community, less restricted and with a better design.
 
Last edited by DeslotlCL,
  • Like
Reactions: Quantumcat
  • Like
Reactions: I pwned U! and xtheman
PF2M said:
View attachment 67220
Sunday.
Click to expand...
Was this done with DeviceID spoofing, or is there more to it than that?

Which steps would I have to take to do this with the Hyperban on my O3DS?

Between this, and the recent developments of creating NNIDs on non-Nintendo devices, and uploading custom images and black and white drawings from browsers into any supported community, there is so much to look forward to! :hrth:
 
  • Like
Reactions: The Cringe
N1N said:
HOW
Click to expand...
Hyperbans are only tracked via the DeviceID in this situation. He edited RAM in the ACT process (ACT is for network accounts) that could edit the DeviceID to something else, I'm not really exact on that.

--------------------- MERGED ---------------------------

I might as well mention that I've circumvented a hyperban on my 2DS as well. Yes, it is hyperbanned.
I redirected all account.nintendo.net requests to my PC so I could modify the requests and send them back to the server.
This is a more 'controllable' method as you can spoof everything in the request and response.
YVCww5I.png
xYylsJq.jpg

And proof, since I wasn't hyperbanned too long ago:
vicp0Gr.jpg

PF2M is louder than me in a lot of ways, so I didn't really release this info when I first achieved this a few days ago.
 
Last edited by Deleted member 355359,
  • Like
Reactions: EnergeticBark, I pwned U! and Quantumcat
Alright, so I should admit that I didn't really find a way to fully bypass a hyperban. Well, I did... but it's very temporary, and you'd have to do it every time you reboot. This will also only work for Nintendo Network ID-related services, no online stuff until some other day. It's otherwise pretty simple though, so here's how I did it, I guess.

EDIT: Nintendo patched this, you can no longer use a modified DeviceID without a matching certificate. RIP.
  1. Download the latest NTR CFW, and get this plugin.
  2. Start up your 3DS, and launch NTR CFW.
  3. Hit X+Y on the home menu, go down to 'Process explorer', and get to PID 21. Edit: PID 22 for New 3DS users
  4. Use the touch screen scrollbar (or anything else) to get to 0x00117636.
    Here, you should see "X-Nintendo-Device-ID". Use the editor to change that to literally anything else, like "X-Nintendo-Dedede-ID". (X/Y is up/down when changing bytes)
  5. Scroll down a bit more to find "X-Nintendo-FPD-Version", it was at 0x0011776E for me. Change that to "X-Nintendo-Device-ID; this is how you're going to actually make a difference. (Nintendo's servers don't actually care about your FPD version or Dedede ID; they track bans by the Device ID, and this is how we're changing it, since the actual device ID is nowhere to be found in the RAM.)
  6. There's four ASCII zeroes right before X-Nintendo-FPD-Version; this is where it comes from. Change this to whatever you want, it really doesn't matter as long as everyone isn't using "0000" as a deviceID.
  7. Do whatever until you reboot or close System Settings.
This isn't really the best method, and is only a proof-of-concept really. But hey, I had a Sunday deadline, and I had to show something. Maybe this could be made easier using an NTR plugin that does this directly, or maybe even something that could spoof the deviceID itself? Who knows?

I'm sorry if this isn't what you wanted. I'll go back into hibernation now.
 
Last edited by PF2M, , Reason: Mentioned that this was patched, this happened a week ago and I should have edited it earlier.
  • Like
Reactions: Cuphat, KytuzuEX, Decorations and 15 others
PF2M said:
I'm sorry if this isn't what you wanted. I'll go back into hibernation now.
Click to expand...

"It's better than nothing."

Also, you actually posted in the Miiverse Announcements. You have reached the highest plane of Miiverse ascension. You and Arian are true Miiverse gods.
 
Last edited by N1N,
  • Like
Reactions: PF2M, I pwned U! and uyjulian
  • Like
Reactions: The Cringe
I did a stupid thing and spammed "FUCK THE ADMINS!" there as a """test""". I made 185 posts of that in the Miiverse Announcements community in just 5 minutes before I was permabanned on that account. I think it was disabled since all the posts are there, but I don't know anyway.

This was all via the API. If you have the right title ID and everything, you could post in any community ever. There's no post or time limit.

Just this 185 times. Stupid idea I know, but I'm surprised the admins would do so big of an action as to disable Miiverse Announcements, even after this was over and everything was gone on the account.
be8P8KI.png
 
Last edited by Deleted member 355359,
  • Like
Reactions: Deleted User, consumeroffood, uyjulian and 1 other person
ariankordi said:
I did a stupid thing and spammed "FUCK THE ADMINS!" there as a """test""". I made 185 posts of that in the Miiverse Announcements community in just 5 minutes before I was permabanned on that account. I think it was disabled since all the posts are there, but I don't know anyway.

This was all via the API. If you have the right title ID and everything, you could post in any community ever. There's no post or time limit.

Just this 185 times. Stupid idea I know, but I'm surprised the admins would do so big of an action as to disable Miiverse Announcements, even after this was over and everything was gone on the account.
be8P8KI.png
Click to expand...
Would you be okay with discussing the details of how I can do this in a PM? I really want to try these things out! Also, when you make NNIDs on a PC with the recent developments, how does it handle not having Miis to choose from? Will the NNID just not have a Mii picture tied to it?
 
  • Like
Reactions: The Cringe and Deleted member 355359
CeeDee said:
If anyone can easily go and post in announcement communities... it goes to show how poorly protected Miiverse is.
Click to expand...
Surprisingly, there's no NNID restriction or anything, it's just protected from the main site and not something like the API.

I pwned U! said:
Would you be okay with discussing the details of how I can do this in a PM? I really want to try these things out! Also, when you make NNIDs on a PC with the recent developments, how does it handle not having Miis to choose from? Will the NNID just not have a Mii picture tied to it?
Click to expand...
The POST form to the NNID server has all the info regarding the account, including the Mii encoded in Base64 and the Mii nickname. The rest like the Device ID, country, region are in the headers.
I don't have time right now to talk about this, so make a conversation with me and PF2M at the moment. PF2M knows it, so he'll teach you.
 
  • Like
Reactions: I pwned U!
Status
Not open for further replies.

Site & Scene News

Go to forum More news

Popular threads in this forum

Why did the price of 3ds shoot up ?

Hacking Homebrew Project  BlazerTube - a YouTube 3DS revival using the REAL app!

Problems getting Homebrew to appear outside of the Homebrew Launcher (homebrew won't appear on the HOME menu)

Homebrew app Emulator  [Release] 3DS-CLI - Run a real RISC-V Linux environment on the Nintendo 3DS

Website for finding alternative games for 3DS

Hardware  2 Broken 3DSes, need help

Gaming  any good rpgs on 3ds?

Hacking  Modding Reassurance