Hacking Bought a bricked Nintendo Switch

[SanderJ]

Hello,

I bought a Nintendo Switch from a charity shop, it was listed as broken/faulty for only around £20 with the joycons, dock and charger. So I decided to grab it, it's an unpatched Switch. Doesn't appear to be opened, there's slight teeth marking on the controllers. I'm guessing a child owned it before their parents donated it. Is there anything I could do to repair this?

I've opened it, it isn't water damaged, no corrosion, M92T36 seems completely fine from what I can tell, I may be wrong. Maybe give me some advice to check if i'm right of wrong. I checked for continuity around the nearby caps

Is there anything I could do?

 

[Kafluke]

Does it boot?

 

[SanderJ]

Does it boot?

Ah yes, sorry forgot to mention. Blue Screen

 

[Kafluke]

You should be able to manually build a new clean nand with choidejour PC version and fix it.

 

[SanderJ]

I just used gptrestore.bin and it boots to a text in horizontal style and it says in text what I appear to be important, FAIL!

But blue screen is gone

--------------------- MERGED ---------------------------

But when I turn it back on, there's a blue screen though. But when I inject that via TegraRCM, it displays white text and seems functioning

--------------------- MERGED ---------------------------

You should be able to manually build a new clean nand with choidejour PC version and fix it.

Alright, I will give that a go

 

[SanderJ]

im following this guide:

1 worked, i'm trying to do 2 now

injecting hekate just shows a black screen, so i can't get boot 0/1

--------------------- MERGED ---------------------------

Can't post links

--------------------- MERGED ---------------------------

This is the thread title

How to get Switch Keys for Hactool/XCI Decrypting

--------------------- MERGED ---------------------------

I managed to get my device keys is all so far

 

[The Real Jdbye]

I just used gptrestore.bin and it boots to a text in horizontal style and it says in text what I appear to be important, FAIL!

But blue screen is gone

--------------------- MERGED ---------------------------

But when I turn it back on, there's a blue screen though. But when I inject that via TegraRCM, it displays white text and seems functioning

--------------------- MERGED ---------------------------



Alright, I will give that a go

If PRODINFO isn't intact you won't be able to create a working NAND but that is literally the only thing that needs to be intact to create a new NAND from scratch and even that might change with time (using a donor PRODINFO is in theory possible by changing or removing the console unique info, well it's a bit more complex than that but still possible, even generating a PRODINFO may be possible although it would never work online that way)

 

[SanderJ]

If PRODINFO isn't intact you won't be able to create a working NAND but that is literally the only thing that needs to be intact to create a new NAND from scratch and even that might change with time (using a donor PRODINFO is in theory possible by changing or removing the console unique info, well it's a bit more complex than that but still possible, even generating a PRODINFO may be possible although it would never work online that way)

Hi,

Yeah I moved past that bit now. I'm trying to get my boot 0/1. I got my device keys now. Thanks for reply though

 

[The Real Jdbye]

Hi,

Yeah I moved past that bit now. I'm trying to get my boot 0/1. I got my device keys now. Thanks for reply though

Your keys (well most of them) are not in PRODINFO, PRODINFO mostly contains other things.

 

[SanderJ]

Your keys (well most of them) are not in PRODINFO, PRODINFO mostly contains other things.

I'm following this, i'm trying to do part 2:

https://gbatemp.net/threads/how-to-get-switch-keys-for-hactool-xci-decrypting.506978/

but i can't inject hekate it's just a black screen is what i meant. i was able to do part 1 and saw the smiley face, etc

 

[The Real Jdbye]

I'm following this, i'm trying to do part 2:

https://gbatemp.net/threads/how-to-get-switch-keys-for-hactool-xci-decrypting.506978/

but i can't inject hekate it's just a black screen is what i meant. i was able to do part 1 and saw the smiley face, etc

Did you miss the part at the top that says that guide is outdated?

 

[SanderJ]

Did you miss the part at the top that says that guide is outdated?

I tried lockpick, but nothing came on my SD card. Then I read the git and it said something about not working i believe after 7.00+ I assumed the switch was higher fw

--------------------- MERGED ---------------------------

will try it again

 

[The Real Jdbye]

I tried lockpick, but nothing came on my SD card. Then I read the git and it said something about not working i believe after 7.00+ I assumed the switch was higher fw

--------------------- MERGED ---------------------------

will try it again

Sept is needed to dump 7.0+ keys. It's included with Atmosphere.
But it can still get lower FW keys on 7.0+.

 

[SanderJ]

I've got this on my SD card, but nothing is showing in Switch.

 

[Hardline]

or i should bue it from you

 

[SanderJ]

Im going to reseat my sd reader and see if that's the issue

 

[SanderJ]

Sept is needed to dump 7.0+ keys. It's included with Atmosphere.
But it can still get lower FW keys on 7.0+.

Ah alright, I've just seen what lockpick rcm looks like on the switch and I don't get that showing at all, all I've got is a black screen when i inject it, the same thing happens when i inject hekate. However, injecting biskeydump.bin brings up the UI with the barcode and the smiley face with a UI

--------------------- MERGED ---------------------------

If this is too much of a headace to fix for you guys, let me know as like i mentioned before it didn't cost much and I'm just trying to see if i can get this up and running again, but i dont want to waste everyone's time here

 

[laramie]

@OP It's a long shot but you could also try making an emunand from hekate/oxos and then build your new nand from that. Make sure emunand boots first before you use it as your base though.

 

[SanderJ]

@OP It's a long shot but you could also try making an emunand from hekate/oxos and then build your new nand from that. Make sure emunand boots first before you use it as your base though.

only problem is hekate launches a black screen for me, same with lockpickrcm.bin

 

[The Real Jdbye]

only problem is hekate launches a black screen for me, same with lockpickrcm.bin

I am guessing something is failing when they try to read the NAND, causing the console to crash. Or it might be some other hardware that it's trying to access. Anyway, you might have a hardware failure on your hands. Guess there's a reason it was so cheap...