Homebrew [33c3] Console Hacking 2016 (3DS/WiiU) talk Dec 27-30: smea, derrek, nedwill, naehrwert

What will Santa Hax bring us this year?

  • Slowhax (arm11 kernelhax)

    Votes: 184 32.1%
  • Soundhax (free primary userland sploit)

    Votes: 183 31.9%
  • Bootrom dump method !!

    Votes: 166 28.9%
  • Something more awesome than the above.

    Votes: 156 27.2%
  • Something nice for the WiiU

    Votes: 178 31.0%
  • Nothing. Ninty will banhammer: 001-1337 "Your use of this speech has been restricted by Nintendo"

    Votes: 80 13.9%
  • This checkbox pleases me

    Votes: 152 26.5%
  • ( ͡° ͜ʖ ͡°)

    Votes: 92 16.0%

  • Total voters
    574
  • Poll closed .

vb_encryption_vb

That hardmod guy....
Member
Joined
Nov 21, 2015
Messages
1,995
Trophies
2
Age
41
Location
Acworth, GA
XP
1,942
Country
United States
Now that a bootrom dump is possible, what can be done in regards to system transfers?

Will you be able to perform a system transfer across different regions?

No


Will you be able to fake a system transfer to generate new movable seed?

No


Will you be able to bypass the limit of 1 system transfer per week?

Server side


Will you be able to use an nnid/eshop on a region changed (n)3ds?

No
 

Salamencizer

Cute Hot Whatever
Member
Joined
Oct 3, 2015
Messages
802
Trophies
0
Age
24
Location
In your heart
Website
gbatemp.net
XP
728
Country
India
Screenshot_20161228-102809.png

Might be an mp3 or mp4 but not sure
 

Joom

 ❤❤❤
Member
Joined
Jan 8, 2016
Messages
6,067
Trophies
1
Location
US
Website
mogbox.net
XP
6,077
Country
United States
Well it looks like a music file going by the video.

It's an MP3. Wanna know what's funny? I had suggested looking into Sound a month before nedwill started his work by mentioning that playing a malformed MP3 might produce something neat. Turns out it did, and I had just made a guess. Makes me feel like I have super spooky psychic abilities, heh.
 

Lotoonlink

Probably doesn't know what he's talking about
Member
Joined
Aug 15, 2016
Messages
242
Trophies
0
XP
1,252
Country
United States
So, this says that we can now (or in the future?) fully decrypt games on PC, better emulation, complete CFW (installing custom updates, no sig checking, updating from a different internet source)?
So I geuss I'm gonna be that guy huh...
N64 emulation..?
 

artur3004

Well-Known Member
Member
Joined
Mar 31, 2015
Messages
486
Trophies
0
Age
28
XP
339
Country
Gambia, The
Is it possible to sign a custom system title and install it on stock 3ds with the new arm11 kernel exploit?
IIRC the part, NS is the part that can install titles, but also has a version check in it. That is the recent issue right now, doesn't it?

So can't we make a modified version with NS with newer version string but without version check?
Installing it should allow downgrading easily, doesn't it?

Am I blabbering nonsense or am I thinking correctly?
 

Lotoonlink

Probably doesn't know what he's talking about
Member
Joined
Aug 15, 2016
Messages
242
Trophies
0
XP
1,252
Country
United States
Is it possible to sign a custom system title and install it on stock 3ds with the new arm11 kernel exploit?
IIRC the part, NS is the part that can install titles, but also has a version check in it. That is the recent issue right now, doesn't it?

So can't we make a modified version with NS with newer version string but without version check?
Installing it should allow downgrading easily, doesn't it?

Am I blabbering nonsense or am I thinking correctly?
That's what I was thinking too! Maybe we could create a custom piece of software but sign it ourselves with sighax, then transfer it via downloadplay? Or create a custom cia that we can sign as a legit cia on source 3ds then install via fasthax on target 3ds.
 

hacksn5s4

Banned!
Banned
Joined
Aug 12, 2015
Messages
4,332
Trophies
0
XP
1,322
Country
That's what I was thinking too! Maybe we could create a custom piece of software but sign it ourselves with sighax, then transfer it via downloadplay? Or create a custom cia that we can sign as a legit cia on source 3ds then install via fasthax on target 3ds.
thing is the ds download play on the 3ds is like a dsi ware app i think so it may have access you the nand so that may be able to be exploited by sending a fake ds download play game from a flash card alowing boot of dsi ware hax ive seen a video of some one sending a fake ds game via ds download play so i don't think it has good signature checks so you could send a digused game
 
Last edited by hacksn5s4,

the assaf

Well-Known Member
Member
Joined
Jun 2, 2013
Messages
489
Trophies
0
Age
29
XP
360
Country
thing is the ds download play on the 3ds is like a dsi ware app i think so it may have access you the nand so that may be able to be exploited by sending a fake ds download play game from a flash card alowing boot of dsi ware hax ive seen a video of some one sending a fake ds game via ds download play so i don't think it has good signature checks so you could send a digused game
It uses signatures so a fake ds dlp won't work. Nds consoles that hacked with flash me are able to receive fake dlp demos.
Your trick can be done with hacked nds or firmware.nds, but not with stock firmware
 

hacksn5s4

Banned!
Banned
Joined
Aug 12, 2015
Messages
4,332
Trophies
0
XP
1,322
Country
It uses signatures so a fake ds dlp won't work. Nds consoles that hacked with flash me are able to receive fake dlp demos.
Your trick can be done with hacked nds or firmware.nds, but not with stock firmware
thing is you can run some flash cards with with out cfw what they do is spoof themselves as a ds game you could send a spoofed ds download play game
 

the assaf

Well-Known Member
Member
Joined
Jun 2, 2013
Messages
489
Trophies
0
Age
29
XP
360
Country
thing is you can run some flash cards with with out cfw what they do is spoof themselves as a ds game you could send a spoofed ds download play game
Flashcart can sent only signed dlp content. We can't send a payload because we can't sign it.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    The Real Jdbye @ The Real Jdbye: sure, it can be hands free