Homebrew [Tutorial] DsWiFiPWN

[I_AM_L_FORCE]

DsWiFiPWN is a way of having a backup NAND dump/restore function on your console!
​

DsWiFiPWN is basically a way of having DSIwareHAX installed over your consoles DS wifi settings.
What this can achieve is rather basic: the ability to dump/restore NAND backups of any console that this exploit(?) may be installed on.

Yes, while A9LH is essentially invincible, there are cases where A9LH has been worked around by Nintendo. When A9LH first came out, consoles that updated had A9LH overwritten, however most custom firmwares have fixed this issue in the form of FIRM protection or sustained use of emunand. However recently Gateway users had an issue that if they used Gateway CFW with 11.3 Sysnand, A9LH was overwritten, even if they didn't update whilst using Gateway. If you ever find yourself in that situation for whatever reason, but you have DsWiFiPWN installed you can just simply restore an earlier NAND backup.

Method:

• First of all, acquire your favourite exploitable DSI game.
• Download the exploitable public.sav save file for your game, refer here
• Copy your exploited save file to your SD card
• Open FBI or Godmode9 on your 3DS, and navigate to these file locations:
  Spoiler: File locations

  • Fieldrunners USA Region: TWLNAND-> title-> 00030004-> 4b464445 -> content
  • Fieldrunners EUR Region: TWLNAND-> title-> 00030004-> 4b464456 -> content
  • Legends of Exidia USA Region: TWLNAND-> title-> 00030004-> 4b4c4545 ->content
  • Legends of Exidia EUR Region: TWLNAND-> title-> 00030004-> 4b4c4556 -> content
  • Guitar Rock Tour EUR Region: TWLNAND-> title-> 00030004-> 4b475256 -> content
• There should be a .app file in this folder, copy that to your SD card and rename it to "00000002.app"
• Copy your new 00000002.app and paste it in this location: TWLNAND-> title-> 00030005-> 42383841-> content (overwriting the .app already there, though please back it up first!)
• Create a new folder with the filename "data" in this location: TWLNAND-> title-> 00030005-> 42383841
• Paste the public.sav you downloaded earlier into the folder you just created
• Download fwTool and paste it to the root of your SD card.
• Reboot your 3DS
• Open the Settings application, then go into internet settings, then into "Nintendo DS Connections"
• If you have followed this guide correctly, you should boot into your DSI game. Launch the exploit of the game you installed and it should boot into whatever "boot.nds" you have on your SD card root, it should be fwTool.

I AM NOT RESPONSIBLE FOR ANY BRICKS THAT MAY OR MAY NOT OCCUR AS A RESULT OF YOUR ERROR​

 

[The Catboy]

I love the project already and such. But two things.
The whole, "But A9LH..." not sure what you are trying to imply with that little spoiler and it just seems like a weirdly worded half-thought.
The second being that this still requires one to already have a backup and one of the long removed DSiware games. If they don't have one or the other, than they are still SOL.
This is helpful for those who updated and just happen to fall into those two spots, but it is something worth noting.

 

[I_AM_L_FORCE]

I love the project already and such. But two things.
The whole, "But A9LH..." not sure what you are trying to imply with that little spoiler and it just seems like a weirdly worded half-thought.
The second being that this still requires one to already have a backup and one of the long removed DSiware games. If they don't have one or the other, than they are still SOL.
This is helpful for those who updated and just happen to fall into those two spots, but it is something worth noting.

True, I was not trying to undermine A9LH in any way at all, just rather mention that it is not unpatchable

EDIT: Also, the DSI game does not have to be "legit"

 

[The Catboy]

True, I was not trying to undermine A9LH in any way at all, just rather mention that it is not unpatchable

It's just weirdly worded and kind of confusing to what you are trying to get at. I like the idea, any means of restoring one's NAND if they happen to have both the game(s) and a NAND backup.

 

[I_AM_L_FORCE]

It's just weirdly worded and kind of confusing to what you are trying to get at. I like the idea, any means of restoring one's NAND if they happen to have both the game(s) and a NAND backup.

I rewrote that bit like 4 times damnit . Let me try again

 

[zoogie]

This is basically a rehash of this:
https://gbatemp.net/threads/tutorial-new-installing-sudokuhax-on-3ds-4-x-9-2.388621/
Only difference is that this method installs to ds wifi app instead of ds download play. I guess it's up to the user to decide whether dswifi or dsdlp should be sacrificed. However, do know that sudokuhax can also be installed in any purchased or free dsiware app as well (US and JPN have free dsiware titles).

But, all told, the more people that know about this the better. It's especially useful for those that are <= 11.2 and haven't installed a9lh. It's like a get-out-of-jail-free card if you accidentily update. (and a good installation vector for sighax).

 

[BoujNoob]

This is basically a rehash of this:
https://gbatemp.net/threads/tutorial-new-installing-sudokuhax-on-3ds-4-x-9-2.388621/
Only difference is that this method installs to ds wifi app instead of ds download play. I guess it's up to the user to decide whether dswifi or dsdlp should be sacrificed. However, do know that sudokuhax can also be installed in any purchased or free dsiware app as well (US and JPN have free dsiware titles).

But, all told, the more people that know about this the better. It's especially useful for those that are <= 11.2 and haven't installed a9lh. It's like a get-out-of-jail-free card if you accidentily update. (and a good installation vector for sighax).

How does that work, by the way?

 

[McWhiters9511]

so its another layer of security in case a9lh is removed for some reason. cool!

 

[I_AM_L_FORCE]

How does that work, by the way?

Essentially the same way as replacing the DS WiFi settings, just with a different .app file

 

[metroid maniac]

It's funny how OP has suddenly dubbed this DSWiFiPWN as if it's a new discovery from him or something.

Oh well, the more people who know about this the better.

This is basically a rehash of this:
https://gbatemp.net/threads/tutorial-new-installing-sudokuhax-on-3ds-4-x-9-2.388621/
Only difference is that this method installs to ds wifi app instead of ds download play. I guess it's up to the user to decide whether dswifi or dsdlp should be sacrificed.

The DS wifi settings are included in any DS game that uses wifi functionality. The copy in System Settings is just a redundancy.
There's also the fact that DS online connectivity hasn't worked in years...
Sacrificing wifi settings seems like the obvious choice.

 

[BoujNoob]

Essentially the same way as replacing the DS WiFi settings, just with a different .app file

Oh, alright.

 

[Deleted member 414991]

DsWiFiPWN is a way of having a backup NAND dump/restore function on your console!
​

DsWiFiPWN is basically a way of having DSIwareHAX installed over your consoles DS wifi settings.
What this can achieve is rather basic: the ability to dump/restore NAND backups of any console that this exploit(?) may be installed on.

Yes, while A9LH is essentially invincible, there are cases where A9LH has been worked around by Nintendo. When A9LH first came out, consoles that updated had A9LH overwritten, however most custom firmwares have fixed this issue in the form of FIRM protection or sustained use of emunand. However recently Gateway users had an issue that if they used Gateway CFW with 11.3 Sysnand, A9LH was overwritten, even if they didn't update whilst using Gateway. If you ever find yourself in that situation for whatever reason, but you have DsWiFiPWN installed you can just simply restore an earlier NAND backup.

Method:

• First of all, acquire your favourite exploitable DSI game.
• Download the exploitable public.sav save file for your game, refer here
• Copy your exploited save file to your SD card
• Open FBI or Godmode9 on your 3DS, and navigate to these file locations:
  Spoiler: File locations

  • Fieldrunners USA Region: TWLNAND-> title-> 00030004-> 4b464445 -> data-> content
  • Fieldrunners EUR Region: TWLNAND-> title-> 00030004-> 4b464456 -> data-> content
  • Legends of Exidia USA Region: TWLNAND-> title-> 00030004-> 4b4c4545 -> data-> content
  • Legends of Exidia EUR Region: TWLNAND-> title-> 00030004-> 4b4c4556 -> data-> content
  • Guitar Rock Tour EUR Region: TWLNAND-> title-> 00030004-> 4b475256 -> data-> content
• There should be a .app file in this folder, copy that to your SD card and rename it to "00000002.app"
• Copy your new 00000002.app and paste it in this location: TWLNAND-> title-> 00030005-> 42383841-> content (overwriting the .app already there, though please back it up first!)
• Create a new folder with the filename "data" in this location: TWLNAND-> title-> 00030005-> 42383841
• Paste the public.sav you downloaded earlier into the folder you just created
• Download fwTool and paste it to the root of your SD card.
• Reboot your 3DS
• Open the Settings application, then go into internet settings, then into "Nintendo DS Connections"
• If you have followed this guide correctly, you should boot into your DSI game. Launch the exploit of the game you installed and it should boot into whatever "boot.nds" you have on your SD card root, it should be fwTool.

I AM NOT RESPONSIBLE FOR ANY BRICKS THAT MAY OR MAY NOT OCCUR AS A RESULT OF YOUR ERROR​

Pretty cool concept!

 

[Deleted User]

hey does this work for legend of zelda four swords adventure for dsi ware. I mean the dsi exploit works. but can it be used with dsWifispwn

 

[I_AM_L_FORCE]

hey does this work for legend of zelda four swords adventure for dsi ware. I mean the dsi exploit works. but can it be used with dsWifispwn

Yeah, it works in the exact same way. You just have to find the haxxed save

 

[koffieleut]

But this is only for 3ds what I read? I'd love to see some kind of real dsi hack sometime, so I can play four swords with friends

 

[I_AM_L_FORCE]

But this is only for 3ds what I read? I'd love to see some kind of real dsi hack sometime, so I can play four swords with friends

I mean, if you have means to dump and decrypt the DSi NAND, replace a .app file such as the sound app, then re encrypt and reflash the NAND, it'd work I guess.

 

[TheGreek Boy]

i'm did that 1 week ago without any tutorial

 

[I_AM_L_FORCE]

i'm did that 1 week ago without any tutorial

Good for you.
This is here for those who may not necessarily know this is a thing.

 

[DavidRO99]

I have a question, can we get the .app from just a normal ds rom?

 

[I_AM_L_FORCE]

I have a question, can we get the .app from just a normal ds rom?

Not a normal DS ROM. A DSiware game though? Go for it.