Homebrew [Release] 3DS-SSL-Patch: Disable Root CA verification for SSL requests.

SciresM

Developer
OP
Developer
Joined
Mar 21, 2014
Messages
973
Trophies
3
Age
33
XP
8,294
Country
United States
Github repository is here.

Anyway, this is a patch to disable root CA verification for SSL requests...in other words, it makes it so that you can trivially man-in-the-middle any network request sent from your console.

This'll be really useful for devs, I imagine, since it means you can just fire up fiddler or whatever and start inspecting network traffic if you want to reverse engineer how a game's network protocols work.

As a test, I used it and successfully dumped every request in a complete login to eshop -> navigate to title -> buy title sequence, and got the plaintext requests where my console downloaded the ticket for the title I bought etc etc.

I'd caution that it's really only for devs, though...your 3DS's network requests are necessarily completely insecure when this is installed, so you'll want to turn it off or uninstall it except when doing reverse engineering work.

Still, I'm hoping this'll lead to a lot more documentation/reverse engineering of 3DS games's networking protocols.
 
D

Deleted User

Guest
i can't believe this.

This morning I woke up and wanted to experiment with this stuff, but had no where to start. Thank you!
 
D

Deleted User

Guest
I would prefer if people didn't upload the modified luma...this is really, really unsafe for end users/non-devs to be using, so minimizing the risk by forcing the user to compile is good.
Fair enough.

I'll figure out my problems then. I was just being lazy like usual
 

NexoCube

Well-Known Member
Member
Joined
Nov 3, 2015
Messages
1,222
Trophies
0
Age
29
Location
France
XP
1,340
Country
France
I would prefer if people didn't upload the modified luma...this is really, really unsafe for end users/non-devs to be using, so minimizing the risk by forcing the user to compile is good.

Mhhmm, it's not working, when connecting to the Nintendo Network in MK7, the request sent and received are "TLS_RSA_AES_256_SHA" encrypted :/
I'm using Fiddler 4 (and a proxy to intercept network traffic)
 

SciresM

Developer
OP
Developer
Joined
Mar 21, 2014
Messages
973
Trophies
3
Age
33
XP
8,294
Country
United States
Mhhmm, it's not working, when connecting to the Nintendo Network in MK7, the request sent and received are "TLS_RSA_AES_256_SHA" encrypted :/
I'm using Fiddler 4 (and a proxy to intercept network traffic)

I got the SSL module titleid wrong when I originally posted the repo...may wanna make sure you've got that right.

Also, you may need to be sending ClCertA as a client cert. Not 100% sure on that.
 
Last edited by SciresM,
D

Deleted User

Guest
@SciresM I am trying to compile it but i keeps saying

Code:
make: armips: Command not found
make: *** [all] Error 127
 

Ryccardo

Penguin accelerator
Member
Joined
Feb 13, 2015
Messages
7,690
Trophies
1
Age
28
Location
Imola
XP
6,911
Country
Italy
Thank you SciresM and PoryHack!

The instructions need a little interpretation (ie, the code.bin must be decompressed before patching), but I really appreciate this tool that gives you great power and great responsibility!
IMG_20170501_223958.jpg
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    Psionic Roshambo @ Psionic Roshambo: https://www.youtube.com/watch?v=pkYA4rALqEE