Hacking RELEASE HACDN - Download game NCA files directly from Nintendo's CDN!

[SciresM]

TBH, I don't think people would be comfortable entering their device ID into the program, and if they're the wrong requests, why don't you tell me the right ones?

Official software sends a HEAD request to /<titleid>/<version> to get the NCA-ID from the X-Nintendo-Content-ID response header.

All actual content downloading proceeds through the /<ncaid> endpoint -- and the access pattern there is distinguishable.

And whether or not people would be comfortable, by not providing the option you guarantee their requests are distinguishable from those made by official software.

 

[subcon959]

It doesn't look like the source has been submitted yet https://github.com/simonmkwii/HACDN

Edit: Ok it is now.. cheers for making me look like I have dementia, Simon

Edit2: Btw, it would be nice if there was an alternative to the whole "not responding" zombie mode whilst downloading. Any chance of a progress bar or something along those lines?

 

[SimonMKWii]

Official software sends a HEAD request to /<titleid>/<version> to get the NCA-ID from the X-Nintendo-Content-ID response header.

All actual content downloading proceeds through the /<ncaid> endpoint -- and the access pattern there is distinguishable.

And whether or not people would be comfortable, by not providing the option you guarantee their requests are distinguishable from those made by official software.

Thanks! Patching that in right now.
Source code btw: https://github.com/simonmkwii/HACDN

 

[eliboa]

TBH, I don't think people would be comfortable entering their device ID into the program

Maybe you can implement it as an optional parameter then ?
Edit : Thx for source code

 

[SimonMKWii]

Official software sends a HEAD request to /<titleid>/<version> to get the NCA-ID from the X-Nintendo-Content-ID response header.

All actual content downloading proceeds through the /<ncaid> endpoint -- and the access pattern there is distinguishable.

And whether or not people would be comfortable, by not providing the option you guarantee their requests are distinguishable from those made by official software.

So if I'm understanding correctly, (using Super Mario Odyssey as an example), the order is:
hac_versionlist > HEAD > https://atumn.hac.lp1.d4c.nintendo.net/t/a/0100000000010000/0 > x-nintendo-content-id = c3c89de8b7652af2b185c07612423cd3
Then atumn /c/a/c3c89de8b7652af2b185c07612423cd3, get NCAIDs from CNMT, then atumn /c/c/0f26bd42cae0e4cefda4b5bbf7ae3d50, etc? (manual, controls...)

 

[thekarter104]

UPDATED TO v2, MASSIVE SECURITY UPDATE

Guess what the changelog will say

 

[SimonMKWii]

I just noticed, @Reisyukaku, CDNX has the same security flaw:
https://github.com/Reisyukaku/CDNX/blob/master/CDNX/Form1.cs
It doesn't retrieve the data the "correct" way...

 

[Xandroz]

your on fire today

thx alot bro

 

[punderino]

I suspect it's why he didn't release the rest of the conversation, but if he's truly an attorney, he should know that legally, he was supposed to get my consent prior to releasing the chatlogs.

he doesnt tho lol
not trying to start shit just thought u saying that was funny

 

[andijames]

If you're unsure what requests are sent and want to mimic them then use wireshark that should tell you what's being sent / received.

 

[Minox]

The discussion appears to have calmed down on its own (luckily), but further posts will be deleted if they're not related to the topic at hand.

 

[Klodeckel1990]

@SimonMKWii you have alrdy an idea how to load those backups on switch?

 

[Leonidas87]

UPDATED TO v2, MASSIVE SECURITY UPDATE, NOW 100% SAFE TO USE!

Wait... you thought I was done with the massive releases???
Here's one more!
This is HACDN, it's like ShogunTool, but on steroids!

Features:

• Everything ShogunTool did, plus game download capabilities!

Dependencies:

• Requires the ShopN cert and your personal cert (https://gbatemp.net/threads/certnxtractionpack-get-your-switch-cert-from-a-nand-dump.503844/), then fill in keys.txt file!
• hactool v1.1.0 (https://github.com/SciresM/hactool/releases)

But won't this allow piracy?

• No, as this application cannot download titlekeys, and you can only extract titlekeys from your Switch for games you have legitimately purchased.

Usage:

• Put in a title ID, get info and then click "Get the Game NCA!"

It will save the main NCA in a named folder (e.g. Super Mario Odyssey) in the "Games" folder.

Note: The application may go into "not responding" mode while downloading, this is normal.

Great work

 

[SimonMKWii]

Reading through the NIM binary, I forgot how much I love the libcurl humour:

 

[Leonidas87]

UPDATED TO v2, MASSIVE SECURITY UPDATE, NOW 100% SAFE TO USE!

Wait... you thought I was done with the massive releases???
Here's one more!
This is HACDN, it's like ShogunTool, but on steroids!

Features:

• Everything ShogunTool did, plus game download capabilities!

Dependencies:

• Requires the ShopN cert and your personal cert (https://gbatemp.net/threads/certnxtractionpack-get-your-switch-cert-from-a-nand-dump.503844/), then fill in keys.txt file!
• hactool v1.1.0 (https://github.com/SciresM/hactool/releases)

But won't this allow piracy?

• No, as this application cannot download titlekeys, and you can only extract titlekeys from your Switch for games you have legitimately purchased.

Usage:

• Put in a title ID, get info and then click "Get the Game NCA!"

It will save the main NCA in a named folder (e.g. Super Mario Odyssey) in the "Games" folder.

Note: The application may go into "not responding" mode while downloading, this is normal.

How and where do we place the our purchased/downloaded games?

As in how do we get our games on the switch itself?

 

[Believ3r]

Scene is on fire

 

[Risingdawn]

@SimonMKWii Great work! I shan't be using it but work like this getting put out there does nothing but help the scene and others improve, develop and refine.

I would say though, that abrasive as Scires may be it does look like he was actually trying to help you, on a personal level too, regarding legal repercussions that could potentially damage your life. So maybe you should not apologise in a passive-aggressie manner and simply accept the help as it was intended.

Good it all calmed down though and my thanks go to all the devs out there working on stuff (and the drama; love a bit of drama )

 

[coldbat]

Amazing work!

Sticky the thread you guys!

 

[Trademaster]

Does this mean that I can download games the I purchased on the eshop, but can't download because I didn't update to the latest firmware, and move them to my SD card and then play?

 

[Kilim]

didn't rei work on a similar cdn downloader? while I appreciate the effort id like to use a tool by one of the scene vets, mostly because of how sensitive this data/request is

however it's always good to have more devs on board - keep it up op :o)