Homebrew [Release] Miiverse Custom Image Tool

  • Thread starter PF2M
  • Start date
  • Views 208,792
  • Replies 1,563
  • Likes 36
Status
Not open for further replies.

Tacosaregood

Well-Known Member
Member
Joined
Sep 30, 2015
Messages
147
Trophies
0
Location
SiIvaGunner's Youtube channel
XP
196
Country
United States
More (sorry for no cropping)
This is ALL that will be released, period. We can't have too many people getting into here out of control.
Ahm3U47.png
ZfgtJcc.png
Is that health and safety information community really there?
 

DeslotlCL

GBAtemp's scalie trash
Member
Joined
Oct 28, 2015
Messages
2,847
Trophies
0
XP
2,755
Country
United States
Miiverse is already ruinned, dont try to defend or protect it, it isn't worth it. Maybe this could lead to good things like:

  • Nintendo improves Miiverse.
  • Nintendo destroys Miiverse and works on a new and better community, less restricted and with a better design.
 
Last edited by DeslotlCL,
  • Like
Reactions: Quantumcat

PF2M

Ex-Miiverse Hacker
OP
Member
Joined
Sep 8, 2015
Messages
552
Trophies
0
Age
23
Location
Ohio
XP
1,000
Country
United States

I pwned U!

I am pleased to beat you!
Member
Joined
Jun 14, 2013
Messages
927
Trophies
3
Age
28
Website
gbatemp.net
XP
686
Country
United States
Was this done with DeviceID spoofing, or is there more to it than that?

Which steps would I have to take to do this with the Hyperban on my O3DS?

Between this, and the recent developments of creating NNIDs on non-Nintendo devices, and uploading custom images and black and white drawings from browsers into any supported community, there is so much to look forward to! :hrth:
 
  • Like
Reactions: The Cringe

Deleted member 355359

Well-Known Member
Member
Joined
Oct 25, 2014
Messages
392
Trophies
0
XP
334
Country
Mongolia
Hyperbans are only tracked via the DeviceID in this situation. He edited RAM in the ACT process (ACT is for network accounts) that could edit the DeviceID to something else, I'm not really exact on that.

--------------------- MERGED ---------------------------

I might as well mention that I've circumvented a hyperban on my 2DS as well. Yes, it is hyperbanned.
I redirected all account.nintendo.net requests to my PC so I could modify the requests and send them back to the server.
This is a more 'controllable' method as you can spoof everything in the request and response.
YVCww5I.png
xYylsJq.jpg

And proof, since I wasn't hyperbanned too long ago:
vicp0Gr.jpg

PF2M is louder than me in a lot of ways, so I didn't really release this info when I first achieved this a few days ago.
 
Last edited by Deleted member 355359,

PF2M

Ex-Miiverse Hacker
OP
Member
Joined
Sep 8, 2015
Messages
552
Trophies
0
Age
23
Location
Ohio
XP
1,000
Country
United States
Alright, so I should admit that I didn't really find a way to fully bypass a hyperban. Well, I did... but it's very temporary, and you'd have to do it every time you reboot. This will also only work for Nintendo Network ID-related services, no online stuff until some other day. It's otherwise pretty simple though, so here's how I did it, I guess.

EDIT: Nintendo patched this, you can no longer use a modified DeviceID without a matching certificate. RIP.
  1. Download the latest NTR CFW, and get this plugin.
  2. Start up your 3DS, and launch NTR CFW.
  3. Hit X+Y on the home menu, go down to 'Process explorer', and get to PID 21. Edit: PID 22 for New 3DS users
  4. Use the touch screen scrollbar (or anything else) to get to 0x00117636.
    Here, you should see "X-Nintendo-Device-ID". Use the editor to change that to literally anything else, like "X-Nintendo-Dedede-ID". (X/Y is up/down when changing bytes)
  5. Scroll down a bit more to find "X-Nintendo-FPD-Version", it was at 0x0011776E for me. Change that to "X-Nintendo-Device-ID; this is how you're going to actually make a difference. (Nintendo's servers don't actually care about your FPD version or Dedede ID; they track bans by the Device ID, and this is how we're changing it, since the actual device ID is nowhere to be found in the RAM.)
  6. There's four ASCII zeroes right before X-Nintendo-FPD-Version; this is where it comes from. Change this to whatever you want, it really doesn't matter as long as everyone isn't using "0000" as a deviceID.
  7. Do whatever until you reboot or close System Settings.
This isn't really the best method, and is only a proof-of-concept really. But hey, I had a Sunday deadline, and I had to show something. Maybe this could be made easier using an NTR plugin that does this directly, or maybe even something that could spoof the deviceID itself? Who knows?

I'm sorry if this isn't what you wanted. I'll go back into hibernation now.
 
Last edited by PF2M, , Reason: Mentioned that this was patched, this happened a week ago and I should have edited it earlier.

N1N

Well-Known Member
Member
Joined
Jul 20, 2016
Messages
105
Trophies
0
Age
22
Location
Rainbow Cruise
XP
143
Country
United States
I'm sorry if this isn't what you wanted. I'll go back into hibernation now.

"It's better than nothing."

Also, you actually posted in the Miiverse Announcements. You have reached the highest plane of Miiverse ascension. You and Arian are true Miiverse gods.
 
Last edited by N1N,

I pwned U!

I am pleased to beat you!
Member
Joined
Jun 14, 2013
Messages
927
Trophies
3
Age
28
Website
gbatemp.net
XP
686
Country
United States
  • Like
Reactions: The Cringe

Deleted member 355359

Well-Known Member
Member
Joined
Oct 25, 2014
Messages
392
Trophies
0
XP
334
Country
Mongolia
I did a stupid thing and spammed "FUCK THE ADMINS!" there as a """test""". I made 185 posts of that in the Miiverse Announcements community in just 5 minutes before I was permabanned on that account. I think it was disabled since all the posts are there, but I don't know anyway.

This was all via the API. If you have the right title ID and everything, you could post in any community ever. There's no post or time limit.

Just this 185 times. Stupid idea I know, but I'm surprised the admins would do so big of an action as to disable Miiverse Announcements, even after this was over and everything was gone on the account.
be8P8KI.png
 
Last edited by Deleted member 355359,

I pwned U!

I am pleased to beat you!
Member
Joined
Jun 14, 2013
Messages
927
Trophies
3
Age
28
Website
gbatemp.net
XP
686
Country
United States
I did a stupid thing and spammed "FUCK THE ADMINS!" there as a """test""". I made 185 posts of that in the Miiverse Announcements community in just 5 minutes before I was permabanned on that account. I think it was disabled since all the posts are there, but I don't know anyway.

This was all via the API. If you have the right title ID and everything, you could post in any community ever. There's no post or time limit.

Just this 185 times. Stupid idea I know, but I'm surprised the admins would do so big of an action as to disable Miiverse Announcements, even after this was over and everything was gone on the account.
be8P8KI.png
Would you be okay with discussing the details of how I can do this in a PM? I really want to try these things out! Also, when you make NNIDs on a PC with the recent developments, how does it handle not having Miis to choose from? Will the NNID just not have a Mii picture tied to it?
 

Deleted member 355359

Well-Known Member
Member
Joined
Oct 25, 2014
Messages
392
Trophies
0
XP
334
Country
Mongolia
If anyone can easily go and post in announcement communities... it goes to show how poorly protected Miiverse is.
Surprisingly, there's no NNID restriction or anything, it's just protected from the main site and not something like the API.

Would you be okay with discussing the details of how I can do this in a PM? I really want to try these things out! Also, when you make NNIDs on a PC with the recent developments, how does it handle not having Miis to choose from? Will the NNID just not have a Mii picture tied to it?
The POST form to the NNID server has all the info regarding the account, including the Mii encoded in Base64 and the Mii nickname. The rest like the Device ID, country, region are in the headers.
I don't have time right now to talk about this, so make a conversation with me and PF2M at the moment. PF2M knows it, so he'll teach you.
 
  • Like
Reactions: I pwned U!
Status
Not open for further replies.

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    K3Nv2 @ K3Nv2: https://youtu.be/PYUKEiLGHpQ?si=UosLAHElVkjIKfxN