CivSwitch offers a new offline entrypoint for Switch 2 homebrew

A new entrypoint for Switch 2 homebrew has just been released, though you should probably move quickly if you want to pick it up for yourself.

212 replies Share
  • Like
  • Love
  • Haha
CivSwitch offers a new offline entrypoint for Switch 2 homebrew

May the good times continue in the Switch 2 homebrew scene! Released today by developer Gezine, CivSwitch offers a new entrypoint for homebrew on the system, this time making use of a physical Switch game in Civilization VII.

CivSwitch Readme said:
XSS toolchain for the Switch 1 edition of Civilization 7.
Only the 1.0.0 version of the game in physical cartridge is supported.

Two components:
  • PicoSwitch — clean, compilable Pico firmware (RP2040 + RP2350) that types a chat-XSS payload into the Switch (USB HID macro).

    Default payload = the Remote JS Loader bootstrap (exploit core + TCP loader).

    Ships with compress.js (chat transport: terser -> deflateRaw -> base-25 chunked img/onerror lines with censor armor).

  • installer-creator — given any JavaScript payload, produces the boot-persistent installer (XSTRIG.Civ7Save trigger written to savedata) to send through the Remote JS Loader

Gezine shows the exploit running in a tweet shared alongside the download.

​

Those interested should move quickly if previous exploits relying on physical games are anything to go by. At the time of writing the game remains fairly readily available in the UK around the £30 mark.

:arrow: GitHub Repo
:arrow: Source
 

Discussion

Nice, just bought it.
Post automatically merged:

In England, on the used game store CeX it's already sold out... What a surprise.
I checked both CeX and also GAME UK - they're all sold out. It's also now impossible to find physical cartridges on eBay, too.
 
  • Wow
Reactions: Blythe93
I checked both CeX and also GAME UK - they're all sold out. It's also now impossible to find physical cartridges on eBay, too.
It's on a well known website, I can tell you by pm, but not publicly in case scalpers go for it. Just leave it for folks to buy one if they want.
 
  • Like
Reactions: Blythe93
It's on a well known website, I can tell you by pm, but not publicly in case scalpers go for it. Just leave it for folks to buy one if they want.
Already bought a copy on eBay right after they all sold out. It is the standard physical version as I checked, there doesn't seem to be any sign that a digital NS1 release existed in physical form at least.
 
So really as long as a board with RP2350 OR a RP2040 we’re good then? Wasn’t sure if we needed both. Found a usb c variant on amazon
https://a.co/d/08pV1fo1
As far as I know, any development board that can run Pico firmware should do (including Pico clones), although by extension I'd imagine that any board using either RP microcontroller with an integrated USB port could work just as well.
 
  • Like
Reactions: Blythe93
If I get Civ VII on a game card and never allow a switch to update it, will it always serve as a userland entrypoint? I guess the overflow can't be patched out of the game without an update... so even in the future, should I decide to update to a newer firmware and then some exploit lands, this game will be a good entry method, right?
 
If I get Civ VII on a game card and never allow a switch to update it, will it always serve as a userland entrypoint? I guess the overflow can't be patched out of the game without an update... so even in the future, should I decide to update to a newer firmware and then some exploit lands, this game will be a good entry method, right?
AFAIK there is no "overflow" or exploit beyond running arbitrary JS code in userland (nobody chimed in saying otherwise and I couldn't find evidence of it myself).

If you update to newer firmware, attack surface would decrease drastically, you would almost certainly be unable to use the fs exploit like what was chained with SmileBASIC entry point and would have to wait for new ones.

should we really be burning entrypoints like this?
i feel like we should really keep one of these private to have game dumps and console research moving forward...?
The game has arbitrary JS execution on first version which can be had by using the game card. It sounds to me the game would remain a viable entry point as Nintendo can't force you to update a card if you don't connect online in the first place. If I understood correctly.
 
AFAIK there is no "overflow" or exploit beyond running arbitrary JS code in userland (nobody chimed in saying otherwise and I couldn't find evidence of it myself).
Sorry I was sloppy with my question. I have no idea what kind of entrypoint it is, but it is definitely something that allows the input of an exploit (that's what the pico is doing).
I do have Seedsow on my Switch but somehow I feel like having a card that is physically in my hands and which can be used to inject whatever needs injecting is somehow more future-proof.
 
Yes, it is effectively the same dev board with the same microcontroller and it will work. W is for the wireless module which you don't need. H is for pre-soldered headers. Any variants will work just as well.
Thanks i bought it and the game paid 20 euro for the micro controller and 40 for the game.

I have a few questions regarding the exploit.
- I've seen some mention future hack might be permanent? is this that?
- Will we be able to play future games possibly with this method, or does this mean keep this switch at that 23.0.1 firmware forever?
- Is lower firmware also acceptable? i bought a new switch, keep it at that firmware?
 
If I get Civ VII on a game card and never allow a switch to update it, will it always serve as a userland entrypoint? I guess the overflow can't be patched out of the game without an update... so even in the future, should I decide to update to a newer firmware and then some exploit lands, this game will be a good entry method, right?
To my knowledge physical game carts don’t ever get updated via the internet. The update is just stored on the console
 

Site & Scene News

New Hot Discussed User Submitted