Hacking AutoRCM Implementation by Reisyukaku

[Reisyukaku]

Ah so is this how we will boot ReinandNX?

(I will never give up!)

y̶e̶s̶

 

[Lacius]

Reisyukaku's AutoRCM implementation works perfectly, by the way.

 

[Don Jon]

Always love Rei's work

the switch is getting love from all these talented devs

 

[YugamiSekai]

Yet another RCM hack that requires some kind of USB-C connection or some type of jig.

 

[ItsKipz]

Yet another RCM hack that requires some kind of USB-C connection or some type of jig.

That's how all current known exploits work. We're not gonna see usb-free exploits on any FW other than 1.0.0 for a while.

 

[Lacius]

Yet another RCM hack that requires some kind of USB-C connection or some type of jig.

AutoRCM requires a USB-C connection, but it only requires a jig one time to install AutoRCM. After it's installed, you don't need a jig anymore, and you don't have to press Volume+.

 

[xXDungeon_CrawlerXx]

AutoRCM requires a USB-C connection, but it only requires a jig one time to install AutoRCM. After it's installed, you don't need a jig anymore, and you don't have to press Volume+.

but theres no release of it yes, is it?
would like to test this on one of my switches

 

[Lacius]

but theres no release of it yes, is it?
would like to test this on one of my switches

It has been released.
https://github.com/Reisyukaku/hekate/blob/master/ipl.bin?raw=true

 

[djricekcn]

It has been released.
https://github.com/Reisyukaku/hekate/blob/master/ipl.bin?raw=true

?? Hekate = Auto RCM?

If so, I can't figure out how to get Auto RCM or use it...doesn't seem to be mentioned on the page either.

 

[Lacius]

?? Hekate = Auto RCM?

It has been forked with an option to install AutoRCM. Keep in mind that this effectively "bricks" the Switch so it always boots into RCM. Your Switch OS cannot be booted unless it is done through an RCM payload.

Edit: To be clear, this also includes an option to uninstall AutoRCM and return your Switch to normal.

 

[djricekcn]

It has been forked with an option to install AutoRCM. Keep in mind that this effectively "bricks" the Switch so it always boots into RCM. Your Switch OS cannot be booted unless it is done through an RCM payload.

Edit: To be clear, this also includes an option to uninstall AutoRCM and return your Switch to normal.

are people making it sound like a risk because there may be a chance that disable may not work and your switch may be forever perma bricked?

 

[Lacius]

are people making it sound like a risk because there may be a chance that disable may not work and your switch may be forever perma bricked?

For what it does, it's a relatively safe process. If something happens to your USB-C port after the installation of AutoRCM though, I don't see any easy way to recover. Any risk is yours to take.

 

[xXDungeon_CrawlerXx]

AutoRCM would be so awesome if you could boot directly into the payload without using your PC or another hardware for it (to boot OFW or CFW by selecting it via boot).
But AutoRCM is not worth rn I think.
When I'm outside for a longer time and my Switch crashes, I would be unable to even boot it without a USB C Cable and a PC (my Smartphone isn't able to do that stuff).

I won't use it until we get a preboot-Option without needing any other hardware

 

[djricekcn]

For what it does, it's a relatively safe process. If something happens to your USB-C port after the installation of AutoRCM though, I don't see any easy way to recover. Any risk is yours to take.

thanks...for whatever reason, I still dont' see (un)install AUTORCM on Hekate (i overwrite and even delete / transfered the files from today's download) but even then, I guess there's really no (C)OS or a a working payload for emulators yet that there's still not much for majority of end-users yet.

 

[Lacius]

thanks...for whatever reason, I still dont' see (un)install AUTORCM on Hekate (i overwrite and even delete / transfered the files from today's download) but even then, I guess there's really no (C)OS or a a working payload for emulators yet that there's still not much for majority of end-users yet.

If you didn't download the fork I linked to, you're not going to see the AutoRCM option.

 

[rajkosto]

Oh, i was making one since you guys couldnt wait for my whole toolset to be available (its not as dirty as this one, i took some time)
if you want it, get briccmii from https://switchtools.sshnuke.net (source code at https://github.com/rajkosto/briccmii)

 

[Lacius]

Oh, i was making one since you guys couldnt wait for my whole toolset to be available
if you want it, get briccmii from https://switchtools.sshnuke.net (source code at https://github.com/rajkosto/briccmii)

Is there any difference between this and Reisyukaku's?

 

[rajkosto]

I just read their code after publishing mine and Rei did exactly what i suggested in that other thread yesterday, all the offsets are hardcoded while mine tries to do it more properly by detecting how many BCTs are used, trying bytes until the SHA256 matches, etc... but in practice it should be the same, except with mine you are SURE it got corrupted or fixed, it checks everything.

 

[Sonicbrawler]

oh lit

 

[Reisyukaku]

I just read their code after publishing mine and Rei did exactly what i suggested in that other thread yesterday, all the offsets are hardcoded while mine tries to do it more properly by detecting how many BCTs are used, trying bytes until the SHA256 matches, etc... but in practice it should be the same, except with mine you are SURE it got corrupted or fixed, it checks everything.

There's only so many ways to change an RSA modulus, family. I've mentioned all kinds of ideas in my private group so it's hard to say 1 person thought of it and everyone else copied.