Hacking SWITCH NOOB PARADISE - Ask questions here

[allthingsfresh]

Firmware 5.1 has been around since the end of May and as far as I know, there's been no word on a new system update. There's actually been a revision to the updating without burning fuses guide that automates 99% of the process with a tool known as ChoidujourNX. All you need to do is find the firmware update that you want to update. For that, try googling xbins and see what happens. That way, you can control what firmware you want to update to in case Nintendo does decide to drop a new system update.

Thanks for that! I will. In the alternate sense, if I just straight up update to 5.1.0 officially, I should be ok just fuse burning right? I was going to take it out of the box, update, go offline, wait till SXPro gets here.

 

[Draxzelex]

Thanks for that! I will. In the alternate sense, if I just straight up update to 5.1.0 officially, I should be ok just fuse burning right? I was going to take it out of the box, update, go offline, wait till SXPro gets here.

You can do that. If you update to 5.1 officially which will burn fuses, you will be stuck with the SX Pro/jig and USB cable as your only way of loading hacks until the community finds another exploit on 5.X firmwares.

 

[Sabregod]

What's the general size of most game updates? I have 128GB Card, do you guys think it's necessary to leave a lot of free space if I need to update my games?

 

[PT333]

Tinfoil can install games, DLC, and updates as well as bypass the firmware requirement in the latest build.

So on 5.1.0 it basically doesn't matter which one I'm using since I don't need FW version check bypass?

 

[Draxzelex]

So on 5.1.0 it basically doesn't matter which one I'm using since I don't need FW version check bypass?

There's no downsides to pressing yes. And there are no advantages to pressing no. Make that of what you will

 

[Ranshiro]

I'm on 4.1.0 and i'd like to get an sdcard and format it as exfat. i just want to double check that the easiest way would be to use ChoiDuJourNX and change my firmware to 4.1.0 with exfat?

Also i'm curious if i used ChoiDuJourNX to upgrade to 5.1.0 could i then later go back down to 4.1.0 and boot into Horizon and it wouldn't

 

[ZaMaster]

Just some quick questions about the Switch ticket db file. Is it really just one file named 'ticket.db' located on the nand? Or are there a couple of files that make up all titles stored on your Switch?
Just asking because I want to make a backup before I try to install any titles.

I couldn't find a lot about the ticket db info regarding the Switch (3ds shows plenty).
Thanks for any info.

 

[YourDachsund]

Hello guys and girls, I wasn't paying attention to the whole Switch hacking scene for past two months, and as i see now, everything has changed. So there is my question - what to do now, to play .nsp backups on my 5.1 "old" Switch? As i understand the easiest way is to install ReiNX and then install games using Tinfoil?

 

[Draxzelex]

I'm on 4.1.0 and i'd like to get an sdcard and format it as exfat. i just want to double check that the easiest way would be to use ChoiDuJourNX and change my firmware to 4.1.0 with exfat?

Also i'm curious if i used ChoiDuJourNX to upgrade to 5.1.0 could i then later go back down to 4.1.0 and boot into Horizon and it wouldn't

ChoidujourNX is the easiest way to get exFAT offline but there are other, more detailed methods under Tutorials. ChoidujourNX also allows you to go to any firmware you want, but you must use RCM at all times when you do otherwise you will risk burning fuses which is what prevents downgrades in the first place. To combat this, when you change firmwares with ChoidujourNX, it installs AutoRCM for you so you will not risk burning fuses. So as long as you boot into RCM using AutoRCM (or a really good jig), you can return back to your original firmware at any time.

Just some quick questions about the Switch ticket db file. Is it really just one file named 'ticket.db' located on the nand? Or are there a couple of files that make up all titles stored on your Switch?
Just asking because I want to make a backup before I try to install any titles.

I couldn't find a lot about the ticket db info regarding the Switch (3ds shows plenty).
Thanks for any info.

Hmm, info on this is scanty but not really sure why. As long as you have a full NAND backup, you can recover from just about anything (except a dead battery). I don't believe the ticket database is split into multiple files but there are databases that can get corrupted like the master key one.

Hello guys and girls, I wasn't paying attention to the whole Switch hacking scene for past two months, and as i see now, everything has changed. So there is my question - what to do now, to play .nsp backups on my 5.1 "old" Switch? As i understand the easiest way is to install ReiNX and then install games using Tinfoil?

I'll just leave this here for you: https://gbatemp.net/threads/guide-reinx-installation-and-use.512342/

 

[Dmafra]

There's any txt editor homebrew for switch?

 

[ZaMaster]

Hmm, info on this is scanty but not really sure why. As long as you have a full NAND backup, you can recover from just about anything (except a dead battery). I don't believe the ticket database is split into multiple files but there are databases that can get corrupted like the master key one.

I think I found some info about it on gbatemp itself and by searching for the files on the Switch nand. See below post:

To decrypt these, you need to dump your titlekeys or find them online.

To dump them, extract these files from SYSTEM:
80000000000000e0 = Ticket Certs
80000000000000e1 = Update Ticket DB (CETK)
80000000000000e2 = Console Unique Ticket DB
80000000000000e3 = Pre-order ticket placeholders

There are currently no public tools to mount saves, so try to find a script or use a hex editor to extract them.
For the Console Unique Ticket DB, they need to be decrypted first with your consoles rsa key to get generic keys, the rsa key is in PRODINFO.

I found the first 3 entries (80000000000000e0,80000000000000e1,80000000000000e2) in the 'save' folder on the 'SYSTEM' partition of the Switch nand. I already got a RawNand backup, but I think it would be wise to backup those files regularly (or maybe the 80000000000000e2 is enough?) if you're going to install random titles from the internet .

 

[OfficialFBomb]

I had to purchase a new Switch, long story short my Switch is MIA. I was lucky, it's a XAW1006 which means in theory it's not patched, it's also 4.1.0 even though my last one was 3.0 I'll take it. Now I need a way to play games without having to update right, if I go SXOS I will have to update or find a dump with no updates / dlc / etc right. I can't very well just take my cards and dump them or even my digital games, so I see a few posts about using Devmenu, with this and that to install nsp's updated or not on 4.1.0 without having to go to 5.0.2, so first step is to send a payload, load hetak (Yea it's spelled wrong, can't brain, should I use and modded version of it), backup everything under the sun, (can't use my 200gb micro sd tho??) then I can boot stuff like ti foil and devmenu to install nsp's?

 

[OleguerPique]

Hi everyone,

I'm trying to ask anyone here on this forum if it's possible to dump/rip all the files from the FIFA18 DLC for 2018 World Cup. I am after the game files from the main .nca - to use for a patch on PC for FIFA16. Thanks!

 

[Falo]

I found the first 3 entries (80000000000000e0,80000000000000e1,80000000000000e2) in the 'save' folder on the 'SYSTEM' partition of the Switch nand. I already got a RawNand backup, but I think it would be wise to backup those files regularly (or maybe the 80000000000000e2 is enough?) if you're going to install random titles from the internet .

80000000000000e0 is never going to change, it will always contain the same certificates (CA, XS20 and XS21).
The reason why certs never change is very simple: ES Sysmodule verifies CA Cert, CA cert verifies XS20 and XS21, XS20 verifies Update Tickets, XS21 verifies Game and DLC Tickets.

Depending on how the nsp ticket was created, it will be saved in 80000000000000e1 or 80000000000000e2.
All tickets created by cdnsp.py use the X20 Certificate and will be installed into 80000000000000e1. (which is technically wrong, but not a big problem)

 

[daijobu]

The eMMC raw GPP is around 29.1 GB so if that is too big, you can risk losing your saves by dumping eMMC SYS..

What if I backed up all my saves with Checkpoint? Would I still lose my saves if I only backed up the SYS Nand?

 

[Draxzelex]

What if I backed up all my saves with Checkpoint? Would I still lose my saves if I only backed up the SYS Nand?

Then that's fine. USER also stores update and DLC data so keep that in mind if you don't restore it.

Hi everyone,

I'm trying to ask anyone here on this forum if it's possible to dump/rip all the files from the FIFA18 DLC for 2018 World Cup. I am after the game files from the main .nca - to use for a patch on PC for FIFA16. Thanks!

You'll have to go spelunking through your NAND dump as we don't have a means to dump NSPs directly from our consoles. See here: https://gbatemp.net/threads/dumping-your-titles-from-sd-a-bit-advanced.507821/ Alternatively, you can download the DLC using CDNSP Bob or Doge which still involves knowing the title ID of the DLC.

 

[ShaytheStar]

Is there any reason hbmenu would just stop recognizing any homebrew added to it? It recognizes two homebrew I put there a while ago, but it doesn't recognize any of the new files I just added. It's an exFAT-formatted SD card, formatted using Disk Utility on Mac. I'm using a Mac to transfer files as I don't have an easily usable (i.e., it's not mine) Windows machine. Also, I've tried changing flags with Terminal in Mac and disabling archiving in Windows. Those methods actually stopped the console from letting it recognize the SD card at all and made me reformat it. I have lots of games on this SD card and would really prefer not to reformat it again...so help is appreciated!

 

[ZaMaster]

80000000000000e0 is never going to change, it will always contain the same certificates (CA, XS20 and XS21).
The reason why certs never change is very simple: ES Sysmodule verifies CA Cert, CA cert verifies XS20 and XS21, XS20 verifies Update Tickets, XS21 verifies Game and DLC Tickets.

Depending on how the nsp ticket was created, it will be saved in 80000000000000e1 or 80000000000000e2.
All tickets created by cdnsp.py use the X20 Certificate and will be installed into 80000000000000e1. (which is technically wrong, but not a big problem)

Hey Falo, thanks for the detailed information regarding Switch tickets. I'll make sure to remember this (write it down in my google keep ) and start making some backups of the *e1 and *e2 files. It's easier to replace these two files than needing to restore the whole nand if something goes wrong with tickets in the future.

 

[nero99]

How likely is it that there will be a payload to launch lakka from the sd card with SX pro or a different dongle?

 

[SonGoku78]

I am afraid of doing something wrong and i didn´t follow switch scene recently.
So i am overwhelmed with all the different information, guides, prerequisites, things to be carefull of, bricking risks, auto rcm risks, nand backups, file formats of backups etc etc etc

So i would like to kindly ask for putting me in the right direction please, not every single step of a guide, but maybe a small sumarry with an order what to do first and so on.
I will happily search for the information within the board, but the start is very complicated for me since too much information available.

My switch is on 3.02 unfortunately, was never connected to the internet and i plan on formatting my 64gb micro sd as exfat.
My goal is obviously to have a solution "like" xecuter functions which is easy to use and mostly install free of risks.
I will receive an original xecuter rcm jig the following days and want to give this a shot this weekend.

so i really don´t know if i should update and to which firmware and how (game card or internet) ?
Preferably without burning efuses if possible ? and i also read something about game card slot update should be prevented ? how do i achieve all this ?

and what about the exfat update ? which guide is preferable to use and somewhat safe to follow without or with minimum risk ?

do i really need to preserve efuses and game card slot firmware for being future proof ? or does it not matter at all for my goals ?
what about games requiring newer firmwares ?

or should i just wait until atmosphere is available with emunand ?

and after i have or have not updated, what do i have to do then ? there is raj, rei etc etc... which is the best, easiest to use and has least brick risk when following correctly ?
from what i have already read i would like to prefer not having autorcm, because i know myself and my battery will drain fully and i think this ist not good.
i want to shut my switch off fully and do mod it so it does not drain battery when switched off.

which cable is preferred ? is it really a must to have an usb 3 a to c cable which has the 56k ohm resistor inside ?
i would prefer a usb c female to usb c male cable which has that resistor, but it seems nearly impossible to find such a cable.
my phone has usb c and until maybe reswitched brings their dongle i want to use my phone for sending payloads.
also this would give me the possibility to attach the switch to the dock while being outside of the dock.

and also which backup file format is the best to use ? i guess i have to consider this too when choosing what to do ? i mean to choose which "cfw"

and in all of this, i want to stay as future proof as possible

so you see, i feel really lost in between all these things to pay attention too and really don´t know where to start and need a guideline which steps i need to do in which order.

Thanks for reading and help in advance.