Homebrew Trying to hack DSi Webbrowser (with PoC)

[ChampionLeake]

You guys can talk to other people too other than just Apache

 

[DRAGONBALLVINTAGE]

Also dpad billy acuna pokeacer...

 

[Apache Thunder]

Yeah StuckPixel/Shutterbug2000 might look at it. Ahezard has a dev TWL unit so he may also try this on that to debug and see what is happening. I'm probably not going to look at this myself. I don't have much experience with Web browser/HTML stuff.

 

[ChampionLeake]

I just want to know how to debug browsers with NO$GBA because there's stuff I have for the browser I want to take a look at.

 

[huntertron1]

neet (suddenly remembers the guy that lied about the same exploit) wait are you lieing to?

 

[ChampionLeake]

neet (suddenly remembers the guy that lied about the same exploit) wait are you lieing to?

Lying about what?

 

[huntertron1]

Lying about what?

i remember one post telling about the same exploit then found out the guy was lying

 

[ChampionLeake]

i remember one post telling about the same exploit then found out the guy was lying

If he was lying, why did he post a PoC then?

 

[huntertron1]

If he was lying, why did he post a PoC then?

just remember one guy lieing about the same exploit

 

[incidentallyscribble]

Close up shop everyone, confirmed that it has no potential for hax. No point to keep reading the thread.

 

[huntertron1]

It kills me inside every time you spell lying like that

sorry

 

[Valery0p]

So i've played a bit with the DSi Opera Webbrowser, and found an exploit i guess.

For now it only crashes/hangs the complete system. (Missing Payload)
Maybe it's useful for someone here.

How to use: Very simple! Just open this link on your DSi Webbrowser.
goo(.)gl/o47S4Q
Ignore the certificate warning and press ok.

Remember: soft-reset will not work temporarily.
To hard-reset the DSi just hold the Power button 5-10 seconds.
I've tested it only on 1.4E Firmware. Report back with others in this thread if you want

Source Code:
github(.)com/derplayer/DSiBrowserHax

Sorry, can't post links because of my rank... just remove the parentheses and you're fine...

Video:

Seems to be a promising crash
A little remark: the DSI browser should be based on the opera presto engine, and the source code for that is around ( ͡° ͜ʖ ͡°) so if you want to go deeper...

I just want to know how to debug browsers with NO$GBA because there's stuff I have for the browser I want to take a look at.

IIRC there's very little network support on no$GBA

 

[huntertron1]

so far still trying to get same effect

 

[Vieela]

This sounds good! Excited for what can possibly come out of it.

 

[incidentallyscribble]

@ChampionLeake there is no reason to close source this. Why do all work behind closed doors? I know that's how it is for RL but that can change for this.

 

[ChampionLeake]

@ChampionLeake there is no reason to close source this. Why do all work behind closed doors? I know that's how it is for RL but that can change for this.

There is one main one but I don't really want to bring it up really or enlighten an idea of it neither. But it's their choice really though too.
I'm just suggesting

 

[MrCatFace]

So does this work on non-US consoles?

 

[ChampionLeake]

yes

 

[huntertron1]

well got the page to show but no frezeing

 

[ChampionLeake]

well got the page to show but no freezeing

It takes awhile to produce the crash. After 30 seconds, just reload the page