Tutorial  Updated

Using "smashhax" with Linux

If you can use the browser, I suggest that you use the new browserhax (up to 11.0.0-33!) in the meantime.

Try out Ubuntu 15.04: http://old-releases.ubuntu.com/releases/15.04/

This requires a New 3DS. The demo version doesn't work and is patched. If you have 1.1.3 or newer delete/disable the update data.

officially called smashbroshax sometimes smashax
Here is a new tool I call smashbroshax-helper. It is a graphical interface for the exploit which simplifies most of the process of broadcasting the packet. It requires almost no setup outside of creating a bootable Linux USB/DVD.

Important notes:
  • This does not work on Fedora or Red Hat-based distributions because aircrack-ng needs to be compiled on it (and I can't figure out how to install the needed things).
  • Don't use a virtual machine!
  • This probably will never work on Old 3DS.
Download smashbroshax-helper beta

It is recommended that you use a live Ubuntu 15.04 image. Versions 15.10+ have issues. http://old-releases.ubuntu.com/releases/15.04/
  1. Create a bootable USB/DVD with a Linux distribution (there are various guides online).
  2. If possible, get a second USB/SD card/storage device, download and save the above .zip to it.
    • Don't extract the contents of it to the USB device, as it might cause problems. Just save the .zip file to it.
    • If you can't do this, you'll have to connect to the Internet while in Linux to download it.
    • If using a bootable USB, make sure you can use two ports at a time. Don't take out the Linux USB while it is being used!
  3. Restart your computer and run the bootable USB/DVD you created.
  4. Extract the contents of the .zip to the Desktop.
  5. Open the smashbroshax-helper folder and double click "smashbroshax.sh".
  6. Follow the on-screen prompts.
  7. If everything goes well, you should now have homebrew!
Video demonstration, from boot to shutdown:

from https://gbatemp.net/threads/tutorial-using-smashhax-with-linux.397194/page-9#post-5842512


If you would like the full tutorial, involving terminal usage and compiling:
To reverse the changes to your wireless interface and remove issues connecting to networks after, rebooting your system or changing it to "Managed" instead of "monitor" should fix it. How to do that is in the second to last section.



@Cydget made a script that condenses most of this into a script. I have not tried it myself yet but it seems to work for others.
So, I made a little script for this. If anybody wants it, then unzip this file and read the readme. And yes, I like to pipe things. http://www.mediafire.com/download/oulnubnzkk9g3i0/smashhaxEZ.zip

Requirements
  • Any Linux distribution should do (this has only been tested with Debian-based distributions). Windows and OS X users should wait or find a method for now, sorry!
    • Please do not use Linux in a virtual machine, it likely won't give direct access to your wireless card. Dual boot or use a live USB/disk.
    • The recommended distro to use is Ubuntu 15.04 (link to Ubuntu MATE 15.04).
  • A Wi-Fi-capable wireless card.
  • Super Smash Bros. for Nintendo 3DS Full or Demo.
  • New 3DS. This does not work on Old 3DS.
  • Patience. The hax is sort-of unreliable so your game will most likely crash a few times.
  • Recommended: Another device to access the internet (phone, tablet, computer, console).
Preparing
  • Install these packages using your package manager. For example, "apt-get" for Debian-based distributions (including Ubuntu).
    Code:
    openssl libssl-dev libnl-genl-3-200 libnl-genl-3-dev libnl-3-200 libnl-3-dev pkg-config
  • Find your wireless card's interface by opening a terminal and using the command "ip link". It would be something like wlan0 or wlp3s0.
    Code:
    ian@ian-VPCEG34FX:~/Desktop/aircrack-ng-1.2-rc2/src$ ip link
    1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default 
        link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    2: eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN mode DEFAULT group default qlen 1000
        link/ether xx:xx:xx:xx:xx:xx brd ff:ff:ff:ff:ff:ff
    3: wlan0: <NO-CARRIER,BROADCAST,ALLMULTI,PROMISC,NOTRAILERS,UP,LOWER_UP> mtu 1500 qdisc mq state DORMANT mode DORMANT group default qlen 1000
        link/ieee802.11/radiotap xx:xx:xx:xx:xx:xx brd ff:ff:ff:ff:ff:ff
  • You probably already have it, but get the homebrew starter kit and place it on your SD card.
  • Download the smashhax .pcap files from the releases section of the smashbroshax repository.
  • Determine the .pcap file to use. This should be straightforward using the file names.
    The built beacon-hax pcaps are located under "pcap_out/". In the filenames, "vXYZ" means game-version "vX.Y.Z". Full-game filenames for USA include "gameusa", while the other regions filenames include "gameother".
  • Get the "Otherapp payload" from the Homebrew Launcher site and save it to "smashpayload.bin" at the root of your SD card.
  • Download and extract aircrack-ng's latest release source.
  • Save aireplay-ng.patch from the smashbroshax repository in the folder "aircrack-ng-1.2-rc2".
Compiling aircrack-ng/aireplay-ng
  • Open a terminal and go to the "aircrack-ng-1.2-rc2" folder.
  • Use the command "patch src/aireplay-ng.c < aireplay-ng.patch". If you get the following then it has succeeded.
    Code:
    patching file src/aireplay-ng.c
    Hunk #1 succeeded at 560 (offset 1 line).
    Hunk #2 succeeded at 573 (offset 1 line).
  • Run "make" and wait. The program should be compiled with the patch now. If you get the following as the last line then it has succeeded.
    Code:
    make[1]: Leaving directory '/path/to/aircrack-ng-1.2-rc2/src'
The moment of truth
  • Run these 3 terminal commands in order, using the wireless interface (from "ip link") you found earlier.
    sudo ifconfig wireless_interface down
    sudo iwconfig wireless_interface mode monitor
    sudo ifconfig wireless_interface up
    sudo iwconfig wireless_interface channel 6​
    (the last line was suggested by @difool. and might make the payload trigger faster)
  • Enter the "src" folder in your terminal.
  • Run the following command to start broadcasting the packet: "sudo ./aireplay-ng --interactive -r /path/to/smashbros_version_beaconhax.pcap -h 59:ee:3f:2a:37:e0 -x 10 wireless_interface"
    Use the .pcap file and wireless interface you found out earlier.
  • On the 3DS system, start the game, then choose Smash and Group. Wait for the magic to happen.
Encountering errors? Something confusing?
  • Does running aireplay-ng end with "End of file"? You might be running your installed version of aircrack-ng. Don't forget the ./ for "sudo ./aireplay-ng ..."!
  • Please tell me the distribution you are using and the error you've encountered. This will help me fix your issue faster.
  • If you don't get something, don't hesitate to point it out! I want to help anyone I can.
  • Did you spot an inaccuracy or mistake I made? It would be great if you can tell me that too.
  • This was before the Otherapp payload selector was added to the HBL site. This is kept here for legacy reasons or something.
    • Determine what file you need to get from the Homebrew Launcher Payload section:
      With the release builds, the hax loads the payload from SD "/smashpayload.bin". This should contain the hb-launcher(https://smealum.github.io/3ds/) otherapp payload. Until there's a proper otherapp payload selector on the hb-launcher site, the payload can be downloaded from the following URL(see also https://github.com/smealum/sploit_installer):
      FIRMVER values(without quotes):
      • "POST5" = non-New3DS
      • "N3DS" = New3DS
      REGION values(without quotes):
      • "U" = USA
      • "E" = EUR
      • "J" = JPN
      MENUVER values(without quotes):
      • "11272": Non-JPN, system-version v9.0.
      • "12288": System-version v9.2.
      • "13330": System-version v9.3.
      • "14336": System-version v9.4.
      • "15360": System-version v9.5.
      • "16404": System-version v9.6.
      • "17415": System-version v9.7.
      • "20480_usa": USA, system-versions v9.9-v10.0.
      • "19456": Non-USA, system-versions v9.8-v10.0.
      MSETVER values(without quotes):
      • "8203": System-versions below v9.6.
      • "9221": System-versions starting with v9.6.
      For example, the payload URL for New3DS USA 9.9.0-X - 10.0.0-X is:https://smealum.github.io/ninjhax2/Pvl9iD2Im5/otherapp/N3DS_U_20480_usa_9221.bin
      The end result is a file named "smashpayload.bin" at the root of your SD card.

You are allowed to reproduce/reprint this tutorial, as long as a link back to this page (https://gbatemp.net/threads/tutorial-using-smashhax-with-linux.397194/) is included.
 
Last edited by ihaveahax,

Whack

New Member
Newbie
Joined
Jun 17, 2008
Messages
3
Trophies
0
XP
182
Country
Canada
Hi everyone,

Was following steps listed in the article, but my SSB version is 1.0.1 (US version). This is without any update data. Stuck where it asks me to pick a version in smashbroshax-helper, it goes from USA 1.0.0 and skips to 1.0.2. What should I do to get passed this? Any help would be appreciated!
 
D

Deleted User

Guest
Hi everyone,

Was following steps listed in the article, but my SSB version is 1.0.1 (US version). This is without any update data. Stuck where it asks me to pick a version in smashbroshax-helper, it goes from USA 1.0.0 and skips to 1.0.2. What should I do to get passed this? Any help would be appreciated!

ok go to this page and look for a download link for pcap 1.0.1

https://github.com/yellows8/3ds_smashbroshax/issues/8


it should be a onedrive source (if usa)
 
D

Deleted User

Guest
HELP, ok i made i stupid mistake screwing up my computer so i had to reinstall ubtunu, and now im getting a new error., and it is constantly preventing me from even hosting the hack!

ioctl(SIOCSIWMODE) failed: Device or resource busy

ARP linktype is set to 1 (Ethernet) - expected ARPHRD_IEEE80211,
ARPHRD_IEEE80211_FULL or ARPHRD_IEEE80211_PRISM instead. Make
sure RFMON is enabled: run 'airmon-ng start wlan0 <#>'
Sysfs injection support was not found either.

-------------------
Press any key to continue...


I continue to get this error, i tried disconecting before running the hack, i tried serveral things, how do i get it unbusy!
 

TechGamer86

Member
Newcomer
Joined
Oct 23, 2016
Messages
14
Trophies
0
Location
Everywhere
XP
53
Country
United States
Hey, I finally got my wireless working on my ubuntu live "cd", and your program seemed to work fine, but it kept hitting 93 packets and stopping there.
I'm unsure of what info you would need, so I'll post outputs from the terminal when requested.
I'm using
- Intel Dual Band Wireless 3165
-New 3ds XL
-Full version of Super Smash Bros for 3DS
I'm new to both linux and homebrew so I do not know what to post right off the bat.Edit
 

chompita239

Active Member
Newcomer
Joined
Sep 20, 2016
Messages
37
Trophies
0
Age
29
XP
71
Country
Argentina
HELP, ok i made i stupid mistake screwing up my computer so i had to reinstall ubtunu, and now im getting a new error., and it is constantly preventing me from even hosting the hack!

ioctl(SIOCSIWMODE) failed: Device or resource busy

ARP linktype is set to 1 (Ethernet) - expected ARPHRD_IEEE80211,
ARPHRD_IEEE80211_FULL or ARPHRD_IEEE80211_PRISM instead. Make
sure RFMON is enabled: run 'airmon-ng start wlan0 <#>'
Sysfs injection support was not found either.

-------------------
Press any key to continue...


I continue to get this error, i tried disconecting before running the hack, i tried serveral things, how do i get it unbusy!
The problem is that your network card cant INJECT packets "Sysfs injection support was not found either."
 
D

Deleted User

Guest
The problem is that your network card cant INJECT packets "Sysfs injection support was not found either."

ok, but how do i fix it? because if i could do it before why not now? because i had it work pre screw up, so therefor my network card can, but clearly a program, or something in ubtunu is preventing it (which i must of managed to stop it before) and before you say that it was false, if the 3ds picked it up ran it then again clearly its a program, some device or program might be taking it
 
Last edited by ,
D

Deleted User

Guest
Hey, I finally got my wireless working on my ubuntu live "cd", and your program seemed to work fine, but it kept hitting 93 packets and stopping there.
I'm unsure of what info you would need, so I'll post outputs from the terminal when requested.
I'm using
- Intel Dual Band Wireless 3165
-New 3ds XL
-Full version of Super Smash Bros for 3DS
I'm new to both linux and homebrew so I do not know what to post right off the bat.Edit
It appears that your network card is not compatible with the hack, try booting onto another laptop or consider getting a usb wireless card.

ok, but how do i fix it? because if i could do it before why not now? because i had it work pre screw up, so therefor my network card can, but clearly a program, or something in ubtunu is preventing it (which i must of managed to stop it before) and before you say that it was false, if the 3ds picked it up ran it then again clearly its a program, some device or program might be taking it
Would you mind telling us if you used a pre-built hax (smashhax-helper or the one i've provided) or re-compiled it from scratch and what steps you've done to get that error? please be as descriptive as possible.
 
  • Like
Reactions: TechGamer86

TechGamer86

Member
Newcomer
Joined
Oct 23, 2016
Messages
14
Trophies
0
Location
Everywhere
XP
53
Country
United States
It appears that your network card is not compatible with the hack, try booting onto another laptop or consider getting a usb wireless card.


Would you mind telling us if you used a pre-built hax (smashhax-helper or the one i've provided) or re-compiled it from scratch and what steps you've done to get that error? please be as descriptive as possible.

Alright, thanks. I'll use the wireless card from my desktop and see if it works, when I get the chance.

EDIT: Also, has anyone tested to see if this will work on the new system update 11.2.0-35?
 
Last edited by TechGamer86,
D

Deleted User

Guest
Alright, thanks. I'll use the wireless card from my desktop and see if it works, when I get the chance.

EDIT: Also, has anyone tested to see if this will work on the new system update 11.2.0-35?
I can confirm that Smashhax works on 11.2.0.35
 
Last edited by ,

Grokitach

Member
Newcomer
Joined
Aug 15, 2016
Messages
12
Trophies
0
Age
33
XP
47
Country
France
I can confirm that Smashhax works on 11.2.0.35

Hi, which payload are you using for this firmware ? The homebrew launcher site does not have any "otherapp" for firmware 11.2.0-35.

I tried it on my computer, got stuck at 93 packets sent (got an internal Gigabyte PCI-E WiFi / Bluetooth card).

I tried it on my Macbook Pro, my WiFi card is not recognized and I need to install ubuntu to make it work... And I already have windows installed and not much space on my hard drive.
 
Last edited by Grokitach,

Grokitach

Member
Newcomer
Joined
Aug 15, 2016
Messages
12
Trophies
0
Age
33
XP
47
Country
France
I tried it on an old Macbook (2008 or so) and it worked like a charm on 11.2.0-35E using 11.1.0-35E payload and Ubuntu 15.04. I made little shell automated script to do all the work faster than the helper.

Macbook Pro have issues with their wifi card under Ubuntu, you need to install it on a given partition and load some drivers.
 
Last edited by Grokitach,

alirezay

Well-Known Member
Member
Joined
Oct 14, 2012
Messages
224
Trophies
1
XP
316
Country
United States
after hours of despair i finally made my labtop send packets.the problem now is that every time i go in "group" my game crashes!
any suggestions?
10.7.0.32u
sm4sh 1.0.4 full
 

FreshFrech

New Member
Newbie
Joined
Oct 30, 2016
Messages
1
Trophies
0
Age
26
XP
42
Country
Mexico
Hey i'm trying to access HBL from smashbroshax on n3dsXL with 11.1. I have the beacon working but my game crashes every time it tries to load the payload. Anyone has a fix?

I have made sure i have the right payload and homebrew starter kit on the micro sd.

Smash is running 1.0.4
 

Cydget

Well-Known Member
Member
Joined
Oct 1, 2015
Messages
493
Trophies
0
Age
27
XP
260
Country
United States
my version is the pcap 1.0.4 USA but I get an error and the nd3ds have to restart. I read in other post that I have to use another version of pcap but I don't know which one. Can you help?
keep trying the 1.0.4 pcap. it might take 3 times or even 1000. Its very unreliable, so thats most likely your problem.
 
  • Like
Reactions: goldroger45

Grokitach

Member
Newcomer
Joined
Aug 15, 2016
Messages
12
Trophies
0
Age
33
XP
47
Country
France
keep trying the 1.0.4 pcap. it might take 3 times or even 1000. Its very unreliable, so thats most likely your problem.

I have a success rate of 70% in 11.2.0-35E with 11.1.0-35E payload using Ubuntu 15.04 with smash EUR smash cartridge in 1.0 (Nintendo Network logo on the game's box ).

If your game crashes without the HBL launching, make sur you use the right pcap and make sure the HBL starter kit is correctly extracted on your sd card. Also check that the payload is correctly named. Remove updates or data on the sd card concerning Smash Bros (the 3DS should ask you to update the game when you launch it ) and make sure you don't have the amibo logo on your game's box. If you have it, then your game is updated and smash hax will NOT work.
 
Last edited by Grokitach,

goldroger45

Member
Newcomer
Joined
Oct 31, 2016
Messages
5
Trophies
0
Age
69
XP
51
Country
United States
I have a success rate of 70% in 11.2.0-35E with 11.1.0-35E payload using Ubuntu 15.04 with smash EUR smash cartridge in 1.0 (Nintendo Network logo on the game's box ).

If your game crashes without the HBL launching, make sur you use the right pcap and make sure the HBL starter kit is correctly extracted on your sd card. Also check that the payload is correctly named. Remove updates or data on the sd card concerning Smash Bros (the 3DS should ask you to update the game when you launch it ) and make sure you don't have the amibo logo on your game's box. If you have it, then your game is updated and smash hax will NOT work.

I keep getting the error" An error has occurred, forcing the software to close. The system will now restart. (unsaved data may be lost.)", and this the loop I am in. My version is 10.7.0-32U. I downloaded the started files to the sd, with the payload and the pcap. I'm running ubuntu mate 15.04. The 3DS does ask me to update when I launch it. I don't have the amibo logo on the game. I'm getting to this point: hahaha
tales-from-the-crypt-fanart-1.png


Any other suggestions ? Thank you
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • K3Nv2 @ K3Nv2:
    How do you know if the night will be good when you're asleep
  • BakerMan @ BakerMan:
    because i didn't say i was asleep
  • BakerMan @ BakerMan:
    i said i was sleeping...
  • BakerMan @ BakerMan:
    sleeping with uremum
  • K3Nv2 @ K3Nv2:
    Even my mum slept on that uremum
  • TwoSpikedHands @ TwoSpikedHands:
    yall im torn... ive been hacking away at tales of phantasia GBA (the USA version) and have so many documents of reverse engineering i've done
  • TwoSpikedHands @ TwoSpikedHands:
    I just found out that the EU version is better in literally every way, better sound quality, better lighting, and there's even a patch someone made to make the text look nicer
  • TwoSpikedHands @ TwoSpikedHands:
    Do I restart now using what i've learned on the EU version since it's a better overall experience? or do I continue with the US version since that is what ive been using, and if someone decides to play my hack, it would most likely be that version?
  • Sicklyboy @ Sicklyboy:
    @TwoSpikedHands, I'll preface this with the fact that I know nothing about the game, but, I think it depends on what your goals are. Are you trying to make a definitive version of the game? You may want to refocus your efforts on the EU version then. Or, are you trying to make a better US version? In which case, the only way to make a better US version is to keep on plugging away at that one ;)
  • Sicklyboy @ Sicklyboy:
    I'm not familiar with the technicalities of the differences between the two versions, but I'm wondering if at least some of those differences are things that you could port over to the US version in your patch without having to include copyrighted assets from the EU version
  • TwoSpikedHands @ TwoSpikedHands:
    @Sicklyboy I am wanting to fully change the game and bend it to my will lol. I would like to eventually have the ability to add more characters, enemies, even have a completely different story if i wanted. I already have the ability to change the tilemaps in the US version, so I can basically make my own map and warp to it in game - so I'm pretty far into it!
  • TwoSpikedHands @ TwoSpikedHands:
    I really would like to make a hack that I would enjoy playing, and maybe other people would too. swapping to the EU version would also mean my US friends could not legally play it
  • TwoSpikedHands @ TwoSpikedHands:
    I am definitely considering porting over some of the EU features without using the actual ROM itself, tbh that would probably be the best way to go about it... but i'm sad that the voice acting is so.... not good on the US version. May not be a way around that though
  • TwoSpikedHands @ TwoSpikedHands:
    I appreciate the insight!
  • The Real Jdbye @ The Real Jdbye:
    @TwoSpikedHands just switch, all the knowledge you learned still applies and most of the code and assets should be the same anyway
  • The Real Jdbye @ The Real Jdbye:
    and realistically they wouldn't

    be able to play it legally anyway since they need a ROM and they probably don't have the means to dump it themselves
  • The Real Jdbye @ The Real Jdbye:
    why the shit does the shitbox randomly insert newlines in my messages
  • Veho @ Veho:
    It does that when I edit a post.
  • Veho @ Veho:
    It inserts a newline in a random spot.
  • The Real Jdbye @ The Real Jdbye:
    never had that i don't think
  • Karma177 @ Karma177:
    do y'all think having an sd card that has a write speed of 700kb/s is a bad idea?
    trying to restore emunand rn but it's taking ages... (also when I finished the first time hekate decided to delete all my fucking files :wacko:)
  • The Real Jdbye @ The Real Jdbye:
    @Karma177 that sd card is 100% faulty so yes, its a bad idea
  • The Real Jdbye @ The Real Jdbye:
    even the slowest non-sdhc sd cards are a few MB/s
  • Karma177 @ Karma177:
    @The Real Jdbye it hasn't given me any error trying to write things on it so I don't really think it's faulty (pasted 40/50gb+ folders and no write errors)
    Karma177 @ Karma177: @The Real Jdbye it hasn't given me any error trying to write things on it so I don't really...