Homebrew Trying to hack DSi Webbrowser (with PoC)

[derplayer]

So i've played a bit with the DSi Opera Webbrowser, and found an exploit i guess.

For now it only crashes/hangs the complete system. (Missing Payload)
Maybe it's useful for someone here.

How to use: Very simple! Just open this link on your DSi Webbrowser.
goo(.)gl/o47S4Q
Ignore the certificate warning and press ok.

Remember: soft-reset will not work temporarily.
To hard-reset the DSi just hold the Power button 5-10 seconds.
I've tested it only on 1.4E Firmware. Report back with others in this thread if you want

Source Code:
github(.)com/derplayer/DSiBrowserHax

Sorry, can't post links because of my rank... just remove the parentheses and you're fine...

EDIT: seems that the expolit is an dead-end.

But: nothing is over yet, i've an another one that looks very promising.
That one is capable of causing corruptions (look at the loading symbol in imgur picture bellow). Result is general application instability that leads then to an final crash.
PoC will come when its "stable" enough i guess it's a very fresh one.

Preview:
imgur(.)com/vPCf1T4.jpg

Video:

 

[DRAGONBALLVINTAGE]

@Apache Thunder ?

 

[Clyde_271]

It works on 1.4.5 E.

 

[DRAGONBALLVINTAGE]

IT WORKS!

 

[ThisIsDaAccount]

Damn this is amazing! Thank you so much!

 

[ChampionLeake]

You should really close source this. It may be turned into good use

 

[Thunder Hawk]

You should really close source this. It may be turned into good use

You mean open source?

 

[VinsCool]

I like to see interest in this stuff

However, I hate to be the negative nanny, but a crash != an exploit
Good luck for further exploitation!

 

[bennyman123abc]

Testing on 1.4/1.4.5(U) (Failed downgrade, now a hybrid system)

 

[ThisIsDaAccount]

Testing on 1.4/1.4.5(U) (Failed downgrade, now a hybrid system)

What part of the downgrade failed? If you still have access to ugopwn, it's more likely than not repairable.

 

[bennyman123abc]

What part of the downgrade failed? If you still have access to ugopwn, it's more likely than not repairable.

I do. I even have access to Grtpwn. Also, I can confirm this crashes my DSi

 

[AL_16]

Grtpwn??

 

[bennyman123abc]

Grtpwn??

Google it

 

[RocketRobz]

Grtpwn??

An exploit for Guitar Rock Tour.

 

[AL_16]

An exploit for Guitar Rock Tour.

thank U

 

[ThisIsDaAccount]

I do. I even have access to Grtpwn. Also, I can confirm this crashes my DSi

Try this:

https://gbatemp.net/threads/release...ade-any-dsi-to-1-4.482243/page-6#post-7867130

It should work even with a partial downgrade.

 

[Oleboy555]

awesome!

 

[Mnecraft368]

Not sure im gonna be getting my hopes up until I see something working.

--------------------- MERGED ---------------------------

Does crash though. (1.4E)

 

[Billy Acuña]

I like to see interest in this stuff

However, I hate to be the negative nanny, but a crash != an exploit
Good luck for further exploitation!

This ^
Also, there is an actual ROP on your code or is just the crash?

 

[Boured]

Well if this is legit then good job mah dude, get in touch with our boy @Apache Thunder and have a talk about stuff.