Hacking Fusee Gelee: All the payloads

  • Thread starter Deleted-442439
  • Start date
  • Views 188,197
  • Replies 68
  • Likes 37
D

Deleted-442439

Guest
OP
Thought it would be useful to have a thread with a collection of everything that can be used on Fusee Gelee / RCM exploits

message edited by a moderator.

The payload injectors and binaries are now listed on Wikitemp.
https://wiki.gbatemp.net/wiki/List_of_Switch_payloads



If you know any missing payload or tool, you can add it or post here and someone with wiki access will update the list.


Launchers:

Fusee Launcher:
https://t.co/UGqtMeHR13


Payloads:


Sample payload: https://t.co/d5nCLNa7E5

shofEL2: https://github.com/fail0verflow/shofel2

Fuse Dump https://github.com/moriczgergo/fusedump

GRAnimated's info payload: https://github.com/GRAnimated/FG-CustomPayload/


Key dumper: https://github.com/rajkosto/biskeydump

hekate_ipl source: https://github.com/nwert/hekate (binaries: https://github.com/rajkosto/hekate/releases)

Custom Firmware (CFW)

Atmosphere: https://github.com/Atmosphere-NX/Atmosphere
Note: Only for devs


Other resources:

Linux resources: https://fail0verflow.com/blog/2018/shofel2/
Note: This is also NOT for the end user.

The thread will be updated as more payloads are released.
 
Last edited by Cyan,

ShroomKing

Somebody
Member
Joined
Mar 3, 2017
Messages
470
Trophies
0
Age
29
Location
in bed
XP
1,947
Country
United States
The bootrom is read-only, you can't write anything to it.

Without access to NAND/eMMC drivers(with write abilities) you can't write anything to it.
 
D

Deleted User

Guest
OP
The bootrom is read-only, you can't write anything to it.

Without access to NAND/eMMC drivers(with write abilities) you can't write anything to it.

i think on rcm we could with linux write to the consoles emmc but that would be dangerous
 
D

Deleted-442439

Guest
OP
i think on rcm we could with linux write to the consoles emmc but that would be dangerous

Why do that anyways, emunand is much better and less risky, the tools we have now are to unstable, would not risk it.
 
D

Deleted-442439

Guest
OP
Update: Added a NAND dump payload, and a Animated version of the test payload.
 
  • Like
Reactions: Jayro

Crazy-S

Pessimist
Member
Joined
Jun 18, 2007
Messages
232
Trophies
1
Location
Ask NSA, FSB, or BND
Website
dasbutterschnitzel.com
XP
1,587
Country
Germany
Last edited by Crazy-S,

kombos

Well-Known Member
Member
Joined
Apr 24, 2018
Messages
140
Trophies
0
Location
Universe
XP
167
Country
Ukraine
We need a payload to dump and restore our saves
How to do that?

  1. Place your own tsec fw as a C hex array or escaped string into the file src/hwinit/tsecfw.inl

You have to dump your TSEC (Tegra Security Co-processor) firmware with total size 3840 bytes (get it from your pkg1ldr.bin (at offset 0x00001900) or boot0.bin (at offset 0x00101900), and place it as a C hex array in src/hwinit/tsecfw.inl :unsure:
 

nWo

The Game Master
Member
Joined
Oct 20, 2016
Messages
990
Trophies
0
Website
www.facebook.com
XP
2,855
Country
Mexico
Great. Thank you. Keep ´em coming. All I want is to reach the end of the tunnel and, have a CFW, and a decent, great list of apps / payloads. I want one to dump / inject saves, and maybe convert the ones from Wii U games to their Switch counterpart the easy way. (Apart from emulating my favorite consoles) Waiting patiently.... Very... very insanely... but patiently...
 

Stoned

Well-Known Member
Member
Joined
Mar 26, 2014
Messages
2,762
Trophies
2
Age
45
XP
4,340
Country
Germany
You have to dump your TSEC (Tegra Security Co-processor) firmware with total size 3840 bytes (get it from your pkg1ldr.bin (at offset 0x00001900) or boot0.bin (at offset 0x00101900), and place it as a C hex array in src/hwinit/tsecfw.inl :unsure:

Who can i find pkg1ldr.bin or boot0bin?
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • SylverReZ @ SylverReZ:
    So true
  • BigOnYa @ BigOnYa:
    @K3Nv2 Snow Day is pretty fun. My only bitch would be the camera controls, when you move around, say down, you have to move the right stick left or right to get camera to turn and get your view, other than that I like it so far.
  • K3Nv2 @ K3Nv2:
    From what people say pvp isn't even worth it
  • BigOnYa @ BigOnYa:
    I just been playing offline, and they give you a few bots here n there on your team to help battle. I don't think it's as funny as the other games tho, more battle oriented than humor, which kinda sucks, but I'm still early in it
  • Xdqwerty @ Xdqwerty:
    @BigOnYa, doesnt the game have a campaign mode?
  • BigOnYa @ BigOnYa:
    Yea, and co-op, but you can also start a pvp session and battle just with friends. You get special skill cards (powers) the more you play. And higher value cards, but you can only enable so many cards at a time.
  • K3Nv2 @ K3Nv2:
    If you can find enough for it
  • BigOnYa @ BigOnYa:
    Toilet paper is considered the money, you collect and buy stuff with TP, kinda funny. Graphics are def better than the other games tho, I think they used Unity 5 engine.
  • Psionic Roshambo @ Psionic Roshambo:
    Look if I zoom in enough I can see the herpes!!!
    +1
  • BigOnYa @ BigOnYa:
    In fact I'm gonna go make a drink, roll a fatty n play some, good night to all!
    +2
  • Xdqwerty @ Xdqwerty:
    I bet most people at the time still watched it in black and white
  • SylverReZ @ SylverReZ:
    @Xdqwerty, Many of them did before colour television was common.
  • SylverReZ @ SylverReZ:
    Likely because black and white TV was in-expensive.
    +1
  • K3Nv2 @ K3Nv2:
    It certainly wasn't inexpensive it cost the same as a new car back then
  • K3Nv2 @ K3Nv2:
    How much did a 1965 color TV cost?

    For example, a 21-inch (diagonal) GE color television in 1965 had an advertised price of $499, which is equal to $4,724 in today's dollars, according to the federal government's inflation calculator.
    +1
  • Xdqwerty @ Xdqwerty:
    @K3Nv2, take into consideration how economy was back then
  • K3Nv2 @ K3Nv2:
    Yeah that's why they listed inflation rates
  • Xdqwerty @ Xdqwerty:
    Sorry didnt read that part
  • BakerMan @ BakerMan:
    @LeoTCK don't worry i knew he was joking
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    My first color TV was like 1984 or something lol
  • Psionic Roshambo @ Psionic Roshambo:
    19 inches it was glorious lol
    Psionic Roshambo @ Psionic Roshambo: 19 inches it was glorious lol