Homebrew RELEASE Switch Safety - XCI & NSP Verification Tool

TehCheez · Dec 2, 2018

Today I am proud the release Switch Safety! A tool that is used to check the MD5 or Switch files and verify if they are safe.

NOTE: This application is super beta, I only have the MD5 of one game saved in the verification document right now. I am currently searching for a trustworthy person to help me edit the master document with all the verified MD5 strings. If I can't find someone soon I will release the source code (probably going to do that anyway once I'm not so tired) so someone else can take on the responsibility.

Application Details:

* Windows only
* Retrieves the files MD5 and compares it to a verified master document hosted online
* Allows you to browse for files
* Progress bar (some large files can take a while to scan)
* Will download text document to PC from trusted, online host
* Application will display a message box letting you know if the file is safe

Screenshots:

Download: https://github.com/ThisIsCheez/SwitchSafety/releases

Edit: Posted the source code. I will not be perusing this project any further. Would be great if someone with more time picked it up.

KOALAaufPILLEN · Dec 2, 2018

That for sxos or as homebrew befor we install would be great and needed

TehCheez · Dec 2, 2018

KOALAaufPILLEN said:
That for sxos or as homebrew befor we install would be great and needed

I have zero knowledge of the Switch programming language so I won't be able to design a Switch app for this

Also, if there's more people like me, I never connect my Switch to the internet and an internet connection would be required to grab the master MD5 list.

Great idea, hopefully someone with more knowledge and time than me can make that happen.

Deleted-442439 · Dec 2, 2018

Nice, would be good if you added signature checking for NCAs, and name to SHA256 verification.

TehCheez · Dec 2, 2018

jjbredesen said:
Nice, would be good if you added signature checking for NCAs, and name to SHA256 verification.

It can already do NCA files, would just have to add them to the master list. And I may add SHA256 at a later time.

Vadographer · Dec 2, 2018

this is amazing, the community needed something like this

TehCheez · Dec 2, 2018

Posted the source code. I will not be perusing this project any further. Would be great if someone with more time picked it up.

Rikikoo · Dec 2, 2018

jjbredesen said:
Nice, would be good if you added signature checking for NCAs, and name to SHA256 verification.

Checking the name of an NCA against its hash is not useful, people can "spoof" that trivially.
Instead he can indeed verify the signature of the NCA, and the pfs0 hash table/romfs hash tree.

Clydefrosch · Dec 2, 2018

including updates, dlc and potentially homebrew, the list of hashes is going to be gigantic and someone basically has to safeguard it and double check.
this might end up being problematic from a practical point of view

liomajor · Dec 2, 2018

The tool is just a md5 checker, there is nothing safe or verification to keep out any switch hurting file.

Why?

- The md5 has to come from a trustable source
- It needs to be checked before getting added (someone has to risk the test if not taken from own copy!)
- No valid check without md5
- The md5 might not always be the same (trimmed, header patches and so on)

A valid verification would dismantle the files and check for brick code like we had for psvita!

Everyone could use their prefered tool to check md5 (also i can modify files to make it my designed md5 if wanted to!)

isoisoiso · Dec 3, 2018

Not needed after atmosphere's nand protection implementation but good anyways

liomajor · Dec 3, 2018

Malicious homebrew still can defeat them.

It's always best to use clean trustable files and to do everything to not endanger your console for greater justice.

tiliarou · Dec 3, 2018

It's actually the NCA hash that would need to be verified... as is, this tool is only a MD5 verifier with auto pull from a server for correct hashes...

Mysuke · Dec 4, 2018

tiliarou said:
It's actually the NCA hash that would need to be verified... as is, this tool is only a MD5 verifier with auto pull from a server for correct hashes...

Doesn't this tool already does that? https://gbatemp.net/download/nspverify.35153/

Would this tool give a corrupted/invalid NCA error when verifying a NSP with brick code?

BLCKBLuR · Jul 11, 2019

I seriously wish someone would pick this project up.... OR does anyone know of another way to check if my NSPs are legit? I can't find a list of original game hashes anywhere...

Garou · Jul 12, 2019

BLCKBLuR said:
I seriously wish someone would pick this project up.... OR does anyone know of another way to check if my NSPs are legit? I can't find a list of original game hashes anywhere...

try https://gbatemp.net/threads/nx-game-info-for-macos-and-windows.528419/
it checks if nca signature and fs permission are valid. more details in the README

Homebrew RELEASE Switch Safety - XCI & NSP Verification Tool

Well-Known Member

Active Member

Well-Known Member

Deleted-442439

Guest

Well-Known Member

Active Member

Well-Known Member

Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Similar threads

Popular threads in this forum