Hacking Zelda Buffer overflow

RDilus · Jun 30, 2011

hbc on 3DS would be pretty nais if you ask me
hbc install with zelda OOT 3D hehe
still we need a hacker who can work with this kind of situation
who is the best DS hacker this days or coder

machomuu · Jun 30, 2011

zanfire said:
i remember in twilight princess, th ehack for will was the overflow with naming Epona (right?). Its been a while, but cant you name it in here too? jw if anyone tried that one out yet.

(guessing someone thought that one through a while ago, but cant hurt to ask)

I'm pretty sure the exploit is initiated right after you press start on the intro screen.

pachura · Jun 30, 2011

zanfire said:
i remember in twilight princess, th ehack for will was the overflow with naming Epona (right?). Its been a while, but cant you name it in here too? jw if anyone tried that one out yet.

The Twilight Hack relied on feeding Wii a modified savegame file with a specific horse name inside.
On 3DS, savegames are encrypted PLUS there is some kind of checksum/signature preventing the console from loading manually modified savegames. So no, The Twilight Hack is not possible.

DeadlyFoez · Jul 1, 2011

The whole thing about the tweezers hack was that TT put in a GC game into the wii, and before starting the game they used a set of tweezers to bridge some of the traces that led to the ram so that certain memory stayed in memory instead of getting wiped away like when normally happens when the wii goes in to GC mode. After dumping the ram they were then able to get the common key. I forget how they came across the SD key, but it was probably the same way.

So now they had the keys to be able to decrypt the wii games so they can look at the games code, and they also had the SD key so they could modify savegames stored on the SD card.

Right now no one has publicly announced that they had either of those keys, or even the hashing algorithm that is used to hash the savegames. So because of this, you folks can speculate all you want or think of some crazy pointless things, but none of you are getting anywhere.

The 3DS has already been hacked to run homebrew and run backed up games, but all those people who have done it are not publicly talking. First reason is because they don't support piracy. Second reason is because they do not want people to have to rely on opening their 3DS up to be able to hack it, they simply want to wait until they have something that can be done with software only that will not be easily fixed by nintendo.

If you know the IRC channels to follow then you would know all of this already.

Ron457x2 · Jul 1, 2011

QUOTE said:
No...no they're not. The reason crash exploits are notable is because they are the first place hackers look for exploits, probably because they're rather easy than other exploits by comparison.

Ahh THIS is what I was reffering to. Either way, there is a possible chance that it could be done with a game crash.
This is what I was trying to think about, thanks for clearing that up for me, I knew they still have a similar concept though.

totalnoob617 · Jul 1, 2011

so if they only have a hardware exploit now then are they going to release a software exploit if they figure out one ,or are they going to be douche bags and continue on about"piracy". this is so retarded and antithetical to the hacker mindset that all information should be free that it makes me want to puke ,these little pukes are so brainwashed by the media and the system it is really sad.plutocratic corporatists working toward an oligarchy and complete control and censorship of the internet,they pick a wonderful side to be on dont they, i just hope we dont end up with people like there are on the ps3 scene that think this way on the 3ds scene too ,douche bag dickheads like that lame o hacker kid who is a retard(literally) and a rat that ratted on manning and wikileaks ,
or are they just against releasing it now cause they dont want people making money selling mod chips based on their work?

Rydian · Jul 1, 2011

Considering they can do this and you can't, I don't think you should be telling them how to do it.

I mean I agree that part of the hacker mindset is sharing information, but you're just mad.

DeadlyFoez · Jul 1, 2011

totalnoob617 said:
so if they only have a hardware exploit now then are they going to release a software exploit if they figure out one ,or are they going to be douche bags and continue on about"piracy". this is so retarded and antithetical to the hacker mindset that all information should be free that it makes me want to puke ,these little pukes are so brainwashed by the media and the system it is really sad.plutocratic corporatists working toward an oligarchy and complete control and censorship of the internet,they pick a wonderful side to be on dont they, i just hope we dont end up with people like there are on the ps3 scene that think this way on the 3ds scene too ,douche bag dickheads like that lame o hacker kid who is a retard(literally) and a rat that ratted on manning and wikileaks ,
or are they just against releasing it now cause they dont want people making money selling mod chips based on their work?
Learn to hack and pirate things yourself. You have no right to tell anyone how they should do anything. And just so you know, the main reason why the people that do the REAL hacking are against piracy is because if they were 'for' piracy then they could more easily get sued for hacking things and then there would be less of an argument for legit homebrew.
QUOTE(Rydian @ Jul 1 2011, 02:33 PM) Considering they can do this and you can't, I don't think you should be telling them how to do it.

I mean I agree that part of the hacker mindset is sharing information, but you're just mad.

Not everyone shares their stuff. TT still has closed source on most things that they created, but I don't hear anyone bitching about it....why? Well, because in the end people are still able to pirate on the wii without needing the HBC, BootMii, or hackmii installer source. Real hackers only share things if they are forced to because of licenses.

Another point, EgoHot still never shared how he got the keys, but then he also claimed that he wants all of sony's secrets out in the open so people can learn from it.

In the end, if you can't hack it yourself then no one has any right to tell the real hackers what to do or how to do it because it will just cause them to keep stuff to themselves.

totalnoob617 · Jul 2, 2011

if geohot or anyone else for that matter wanted to have this knowledge public they could easily release it anon ,and my point is that this younger generation has grown up in this extreme propaganda media climate so they are just completely brainwashed servile corporatist servants ,they are smart enough to do things most cant but not smart enough to realize that they are on the same side of the riaa and mpaa and the corporations that are trying to destroy the freedom of the internet ,trying to control everything for their own greed and motives ,there not even able to realize that this used to be considered fair use or that copyright was not ever intended for this purpose of controling content in this way no matter what it is
geohot is a sellout ,working for assbook,these used to e people who were anti establishment and that was before the establishment was as out of control as it is now , now they are brainwashed sheep,
plus this whole fame whoring element , just release things anonymously ,and if you need recognition that bad just spread an unconfirmable rumor that you are linked to the release ,the scene/s were never like this before ,full of socially inept d-bags that have been brainwashed into adopting the phony "morals" of the corporatist elite , they will wake up when it is too late and the internet more closely resembles television ,where your freedom and choices are limited by few major media companies

urisma · Jul 2, 2011

Well actually the younger generation has the problem of being incredibly self centered; expecting everybody else to provide for them. Oh, and extreme teenage angst. Geohot isn't a sell out. If he was he'd have never jailbroken the Iphone or the PS3. Just because smart people don't hand you hacks on a silver platter doesn't mean they're terrible people, doesn't mean they support "the man" and hate everything the "scene" stands for.

Ever notice how the only people who complain about a console "Scene" are the ones that don't contribute and know jack shit about what real hacking is?

DeadlyFoez · Jul 2, 2011

totalnoob617 said:
if geohot or anyone else for that matter wanted to have this knowledge public they could easily release it anon ,and my point is that this younger generation has grown up in this extreme propaganda media climate so they are just completely brainwashed servile corporatist servants ,they are smart enough to do things most cant but not smart enough to realize that they are on the same side of the riaa and mpaa and the corporations that are trying to destroy the freedom of the internet ,trying to control everything for their own greed and motives ,there not even able to realize that this used to be considered fair use or that copyright was not ever intended for this purpose of controling content in this way no matter what it is
geohot is a sellout ,working for assbook,these used to e people who were anti establishment and that was before the establishment was as out of control as it is now , now they are brainwashed sheep,
plus this whole fame whoring element , just release things anonymously ,and if you need recognition that bad just spread an unconfirmable rumor that you are linked to the release ,the scene/s were never like this before ,full of socially inept d-bags that have been brainwashed into adopting the phony "morals" of the corporatist elite , they will wake up when it is too late and the internet more closely resembles television ,where your freedom and choices are limited by few major media companies
Tl;dr
You are serious out of touch and talking out of your ass. You have no clue from a real hackers standpoint, so you really should just STFU.

Imagine discovering some serious great hack that no one else has found. The excitement makes you feel all warm and fuzzy, but the moment that you publicly release it then you will be scared.

You don't give a flying fuck if any hacker gets sued. You just want your warez. But the hackers care. Look at what happened to EgoHot, and he even hid his methods and TRIED HIS BEST to prevent piracy with his action. I am NOT defending EgoHot because he is a prick, but he did do things as correctly as possible but still got ass rap-ed by sony, which is what all real legal hackers fear.

You are on the "give me" end, so you have clue. Learn some skills and then understand why protecting yourself is such a big deal. And in the end, nothing is TRULY anonymous in the internet. Anyone can be found, especially if it is known through court proceedinga that THIS person was the one with the knowledge.

Grow up, learn how to hack. Keep it to yourself. Then you have nothing to bitch about. Otherwise, continue to be lamer leach that just bitches about wanting what other people know but are not knowledgeable enough to do it yourself.

QUOTE(urisma @ Jul 1 2011, 07:58 PM) Well actually the younger generation has the problem of being incredibly self centered; expecting everybody else to provide for them. Oh, and extreme teenage angst. Geohot isn't a sell out. If he was he'd have never jailbroken the Iphone or the PS3. Just because smart people don't hand you hacks on a silver platter doesn't mean they're terrible people, doesn't mean they support "the man" and hate everything the "scene" stands for.

Ever notice how the only people who complain about a console "Scene" are the ones that don't contribute and know jack shit about what real hacking is?

^^You said it best

rickdgray · Jul 2, 2011

Aright, I think we're all just getting a little off topic. I think the point of this thread was to establish a good buffer overflow in OoT for research in exploiting.

urisma · Jul 2, 2011

I don't think it's a buffer overflow. I think it's an integer overflow. They're very different, and the 2nd isn't exploitable. The first is rarely exploitable either.

DigitalDeviant · Jul 2, 2011

Svorax said:
Aright, I think we're all just getting a little off topic. I think the point of this thread was to establish a good buffer overflow in OoT for research in exploiting.

I don't think anyone knows if that is even possible. We can't "establish" something like a buffer overflow from forum discussions were most members have no experience in hacking.

Rydian · Jul 2, 2011

Yeah this was somebody with an idea, but then it got shot down in the first few replies.

DigitalDeviant · Jul 2, 2011

Rydian said:
Yeah this was somebody with an idea, but then it got shot down in the first few replies.

I'm curious Rydian, is a buffer overflow hack(in general) with in the realm of possibilities for 3DS or is it something that just cannot be discerned without
more information?

urisma · Jul 2, 2011

I know you didn't point that question at me, but I have the knowledge to answer it. It's definitely possible to do a buffer overflow exploit. The vulnerabilities exist in pretty much all types of software regardless of of the system, be it a game console, PC, embedded something, etc. The only problem is A) figuring out whether or not it's exploitable. Very few of them actually give the ability to run unsigned code and it's also impossible to figure out whether or not it's impossible without looking at the code (for the most part at least). Perhaps a proof of concept can be brewed up with a huge NOP sled and insane luck, but that's far far away from running your own programs. B) if it is exploitable, making the exploit. You'll have to read through disassemblies galore looking for how exactly to implement the exploit, since they are completely non portable. A completely unique exploit has to be made for every overflow.

DigitalDeviant · Jul 2, 2011

urisma said:
I know you didn't point that question at me, but I have the knowledge to answer it. It's definitely possible to do a buffer overflow exploit. The vulnerabilities exist in pretty much all types of software regardless of of the system, be it a game console, PC, embedded something, etc. The only problem is A) figuring out whether or not it's exploitable. Very few of them actually give the ability to run unsigned code and it's also impossible to figure out whether or not it's impossible without looking at the code (for the most part at least). Perhaps a proof of concept can be brewed up with a huge NOP sled and insane luck, but that's far far away from running your own programs. B) if it is exploitable, making the exploit. You'll have to read through disassemblies galore looking for how exactly to implement the exploit, since they are completely non portable. A completely unique exploit has to be made for every overflow.

Thanks for your input, and welcome to gbatemp!

Seaking · Jul 2, 2011

wait, a glitch to get unlimited hearts? HOW!?

please make a video about it, i wanna see it!

Coto · Jul 2, 2011

DigitalDeviant said:
Rydian said:

Yeah this was somebody with an idea, but then it got shot down in the first few replies.

Click to expand...

I'm curious Rydian, is a buffer overflow hack(in general) with in the realm of possibilities for 3DS or is it something that just cannot be discerned without
more information?

It would be too early to assume anything. The best to do now would be to sniff ram, and start from there. I get the feeling the security built in 3DS mode is much more complex than we all believe. Heck even the NDS (DS) firmware is encrypted with a 1024-bit RSA signature.

Hacking Zelda Buffer overflow

Well-Known Member

Drops by occasionally

Well-Known Member

XFlak Fanboy

Well-Known Member

Banned!

Resident Furvert™

XFlak Fanboy

Banned!

Active Member

XFlak Fanboy

Well-Known Member

Active Member

Well-Known Member

Resident Furvert™

Well-Known Member

Active Member

Well-Known Member

Well-Known Member

-

Similar threads

Popular threads in this forum