Hacking Web-Browser POC

[Deleted User]

The method has been shared in case anyone wants to mess with this: https://www.se7ensins.com/forums/th...h-a-utility-to-hijack-the-webbrowser.1625475/

I have yet to see anything like this posted on this site other then a few images posted by smealum and others. So I figured Id share another PoC to show that there is in fact a full functioning web browser on the Nintendo Switch

If there was something posted like this already then Ill remove this thread ASAP. I also apologize for my horrid thread title lol



I can provide a higher quality video with a capture card if requested. I figured it would be best to record with an external camera at first

 

[loler55]

I have yet to see anything like this posted on this site other then a few images posted by smealum and others. So I figured Id share another PoC to show that there is in fact a full functioning web browser on the Nintendo Switch

If there was something posted like this already then Ill remove this thread ASAP. I also apologize for my horrid thread title lol



I can provide a higher quality video with a capture card if requested. I figured it would be best to record with an external camera at first

really bad quality canot see anything looks like matrix
tutorial to get them?
which browser is it?

 

[Deleted User]

really bad quality canot see anything looks like matrix
tutorial to get them?

Yea thats a downside of not using a capturcard and only having an iPhone camera...

 

[loler55]

Yea thats a downside of not using a capturcard and only having an iPhone camera...

tutorial to get them?
which browser is it?

 

[Deleted User]

tutorial to get them?
which browser is it?

No guide yet. However here are a few screenshots from my elgato so that you(and anyone else may see it better)

Got the top of gamecapture HD in this one lol

Spoiler: Bonus Screenshot

 

[loler55]

No guide yet. However here are a few screenshots from my elgato so that you(and anyone else may see it better)

Got the top of gamecapture HD in this one lol

plz make a guide if you wish how it work... thanks for the screenys

Spoiler: Bonus Screenshot

you can make a guide if you wish how it work.. plz
time to try some exploits already given

 

[Deleted User]

you can make a guide if you wish how it work.. plz

When/if a guide is made it will be on Se7enSins. We want to mess with a few more things and see the extent of this first

 

[loler55]

When/if a guide is made it will be on Se7enSins. We want to mess with a few more things and see the extent of this first

oh shame other people cannot try exploits reason: We want to mess with a few more things and see the extent of this first

one for all, all for one

 

[Xenon Hacks]

Just ordered one from walmart and will keep it boxed, have my eyes open for anything new that pops up. This *could* be the start of something.

 

[Zan']

Just ordered one from walmart and will keep it boxed, have my eyes open for anything new that pops up. This *could* be the start of something.

Well it's something really easy to achieve and will likely be limited in range.
Unless there are major flaws in the browser this won't get you more than what you can do in your PC browser.

It can allow for higher access and limited code exec.

 

[Xenon Hacks]

Well it's something really easy to achieve and will likely be limited in range.
Unless there are major flaws in the browser this won't get you more than what you can do in your PC browser.

Im aware of this, however this browser was supposed to be useless and it's clearly not the case atm.

 

[Zan']

Im aware of this, however this browser was supposed to be useless and it's clearly not the case atm.

I don't see how a browser can be "useless" in the first place

If it was "useless" it wouldn't be a browser.

 

[Xenon Hacks]

I don't see how a browser can be "useless" in the first place

If it was "useless" it wouldn't be a browser.

It was not intended for normal use that's what I mean

 

[Zan']

It was not intended for normal use that's what I mean

So you mean it isn't usable in the sense of accessibility.

Which it technically isn't. But Nintendo did a bad job managing that.
And there is a major flaw in "preventing" users to access it.

 

[Xenon Hacks]

So you mean it isn't usable in the sense of accessibility.

Which it technically isn't. But Nintendo did a bad job managing that.
And there is a major flaw in "preventing" users to access it.

Agree, lets just leave it at apples to apples at this point as we are cluttering the thread

 

[loler55]

time to try some browserexploidsites in it
i see the news in my eyes : ps4/vita browser exploit on the switch

 

[Xenon Hacks]

time to try some browserexploidsites in it
i see the news in my eyes : ps4/vita browser exploit on the switch

That's way more than a little optimistic

 

[loler55]

That's way more than a little optimistic

let me dream my dreams
worth a try
optimistic a cfw is on switch are available
we have a chance because We can open the apparently unfinished browser!!!!!!!!!!!!!
why ninty dosnt allow to use the browser???
reason: Probably it is too easy to exploit and
They learned from their mistakes on the wiiu But they do not get it safe without more time...
I can not imagine any other reason


i see nintypeople run and cry + a patch is incomming
10 people lost her jobs because of the mistake

 

[Deleted User]

Here is a small set of instructions I quickly typed up to access that hidden browser. It makes use of Charles Proxy and Apache, but I'm sure that when the thing they made in Visual Studio gets released, this won't be neccessary anymore...
If similar instructions were already posted, I do apologize in advance!

1) Set up and install Charles Proxy + Apache server if you haven't already, then open Charles proxy only.
2) Grab the index.html from the SwitchDNS repo that 'Temp member parrotgeek1 kindly set up for us. Place this html file into the "www" folder of your apache installation.
3) On your Switch, go to Settings -> Internet Settings -> YourConnectedRouter -> Change Settings, and turn Proxy Settings on. Use your PC's local IP address as the server, and use the port number configured in Apache (default is 80) as the port number. When done, you can open up apache on your PC.
(To change this port, if for some reason it doesn't work, change all instances of ":80" in 'httpd.conf' and 'httpd-vhosts.conf' to a different port number, such as ":1337".)
4) Now save your settings, and test your connection. If everything went smoothly, you should see that Charles will ask if your Switch's IP address should be allowed to connect. Click 'Yes/Allow', and you should see "http://conntest.nintendowifi.net" pop up on the left-hand side of the window. Right-click on it, and select "map remote".
5) In the 'map to' section of the window, type "http" in the protocol field, then your PC's local IP address in the host field, and the port number you configured for apache in the port field. Then click "OK".
6) Choose "test connection" again on the Switch. The connection should now fail, but when you click off the message, you should now be redirected to the index.html page hosted on your PC, through the hidden web browser!
7) Now enter a link to a page (such as https://google.co.uk or something; it can be anything really) and now it should take you to that page you requested!

 

[migles]

Navigate (or redirect) into one of those websites that detect the type of browser and its capabilities (there was a html5 tester website) so we know of its just a mini opera thing and how complete is it