Hacking Any way to edit profile and fake link account?

Dontwait00 · Apr 29, 2019

t1op said:
If you don't want to download the whole zip file, I uploaded just that one file in post #66. You just have to delete the ".txt" extension. (An extension was required for upload here)

If you want a step by step guide for using BISKEYDUMP, MEMLOADER, and HACDISKMOUNT, you can follow my guide in post #63.
You would just add the above instructions using hactoolnet to use your product keys (named "device.keys" by BISKEYDUMP) to resign the save file.

Then you could continue to following my guide to inject the resigned save file. Resigning should make the need to boot ReiNX afterward obsolete.

Designgears suggests that you can make the whole process simpler by extracting your product keys with Lockpick rather than BISKEYDUMP. And that you can reinject your modified save file with Goldleaf instead of using Memloader and Hacdiskmount.
When I tried to use Goldleaf it just crashed. If resigning fixes this problem, then Goldleaf is definitely a simpler option.

Bootmonster also suggested that resigning makes the donated 6.x linked profile work on 7.x; whereas, before you apparently had to downgrade to 6.x to inject the 6.x profile.

If you are able to link the 6.x profile attached here (post #66) to a 7.x console, using Lockpick, Goldleaf, and Hacktoolnet, please add a reply to this thread to confirm that this simpler method worked for you.

So, i got it working the save file you posted on comment #66 on first try. Works like a charm! Im on 7.0.1 CFW on Atmosphere!

What i did was:

1 - Download the file you posted on comment #66 on this thread;

2 - Saved all my keys from my switch using Lockpick and then used nxmtp to paste it on the upcoming folder i create on the Desktop;

3 - Downloaded hactoolnet.zip and pasted on my Desktop (on a separated folder);

4 - Pasted the downloaded save file onto this folder, and removed the extension part;

4 - Opened the Prompt Command inside the folder and pasted this command: hactoolnet.exe -k prod.keys -t save 8000000000000010 --sign

5 - Injected the patched file (it overwrites the patch directly on the file) inside System/save/ folder using HacDiskMount.exe with memloader payload;

6 - Booted Atmosphere using latest KosmosNX package;

7 - Profit...

Thanks very much!!!

etraxz · May 4, 2019

Dontwait00 said:
So, i got it working the save file you posted on comment #66 on first try. Works like a charm! Im on 7.0.1 CFW on Atmosphere!

What i did was:

1 - Download the file you posted on comment #66 on this thread;

2 - Saved all my keys from my switch using Lockpick and then used nxmtp to paste it on the upcoming folder i create on the Desktop;

3 - Downloaded hactoolnet.zip and pasted on my Desktop (on a separated folder);

4 - Pasted the downloaded save file onto this folder, and removed the extension part;

4 - Opened the Prompt Command inside the folder and pasted this command: hactoolnet.exe -k prod.keys -t save 8000000000000010 --sign

5 - Injected the patched file (it overwrites the patch directly on the file) inside System/save/ folder using HacDiskMount.exe with memloader payload;

6 - Booted Atmosphere using latest KosmosNX package;

7 - Profit...

Thanks very much!!!

Thanks!
Got this to work on SX OS Emunand.
Did what you did exept on step 5 i opened the emunand.bin file in HacDiskMount.exe and mounted the system folder and put the signed file in the /save/ folder, then copied the .bin files back to the SD card and booted emunand.

motchee · May 4, 2019

etraxz said:
Thanks!
Got this to work on SX OS Emunand.
Did what you did exept on step 5 i opened the emunand.bin file in HacDiskMount.exe and mounted the system folder and put the signed file in the /save/ folder, then copied the .bin files back to the SD card and booted emunand.

Which profile file did you use? And what is your firmware version?

etraxz · May 4, 2019

motchee said:
Which profile file did you use? And what is your firmware version?

Emunand is on 6.2(Sysnand 1.0.0), used a profile from my other switch which i have used online before and the emunand firmware was 6.2 aswell (with sysnand 5.1)
But i think it would work the same if you use the profile attached in comment #66 with emunand on 7.0.1

designgears · May 4, 2019

I wasn't able to get this imported on 8.0.x after signing it, I had to downgrade to 6.2.0 first, then put the file in, let it boot, then update to 8.0.1.

Kingslayer_Kyle · May 6, 2019

Dontwait00 said:
So, i got it working the save file you posted on comment #66 on first try. Works like a charm! Im on 7.0.1 CFW on Atmosphere!

What i did was:

1 - Download the file you posted on comment #66 on this thread;

2 - Saved all my keys from my switch using Lockpick and then used nxmtp to paste it on the upcoming folder i create on the Desktop;

3 - Downloaded hactoolnet.zip and pasted on my Desktop (on a separated folder);

4 - Pasted the downloaded save file onto this folder, and removed the extension part;

4 - Opened the Prompt Command inside the folder and pasted this command: hactoolnet.exe -k prod.keys -t save 8000000000000010 --sign

5 - Injected the patched file (it overwrites the patch directly on the file) inside System/save/ folder using HacDiskMount.exe with memloader payload;

6 - Booted Atmosphere using latest KosmosNX package;

7 - Profit...

Thanks very much!!!

Does anybody know if this replaces your profile? And if so do your savegames still stay in place? Or do you have to do something in order to move them over to the new profile?

bootmonster · May 6, 2019

Kingslayer_Kyle said:
Does anybody know if this replaces your profile? And if so do your savegames still stay in place? Or do you have to do something in order to move them over to the new profile?

It is a completely new profile yes. You need to back up your saves with checkpoint, replace the profile, then restore them to the new one. Just make sure to rename the new profile to the same name as your old one.

You will need to launch each game once on the new profile to create a new save before restoring from checkpoint.

Kingslayer_Kyle · May 6, 2019

So I've just replaced the profile and everything is working fine. Renamed it back to what my original profile was called. Now I'm trying to load up Edizon to restore my save files, but I can't open it because every time I launch Edizon atmosphere crashes.. anybody know what could be causing it?

EDIT:
Error Code 2168-0002 (0x4a8)
Title: 010000000000100D (This is the Album app.. Not sure why this specifically is causing a crash after switching profiles)

bootmonster · May 6, 2019

Kingslayer_Kyle said:
So I've just replaced the profile and everything is working fine. Renamed it back to what my original profile was called. Now I'm trying to load up Edizon to restore my save files, but I can't open it because every time I launch Edizon atmosphere crashes.. anybody know what could be causing it?

EDIT:
Error Code 2168-0002 (0x4a8)
Title: 010000000000100D (This is the Album app.. Not sure why this specifically is causing a crash after switching profiles)

Edison will crash if you don’t have any new saves to restore to.

Did you make sure to launch all of the games you want to restore at least once like I said?

Kingslayer_Kyle · May 6, 2019

bootmonster said:
Edison will crash if you don’t have any new saves to restore to.

Did you make sure to launch all of the games you want to restore at least once like I said?

Yeah, I've loaded all of the games.. Interestingly enough checkpoint actually loads, and shows the other 2 users as just black boxes.. maybe this is what's crashing edizon? If so how would I remove these

**FIXED

It seems that after replacing the profile, I needed to go to system settings>save data and completely delete everything. (I backed up my save data before replacing the profile so I should just be able to restore it all now. Thanks for the help regardless)

Moquedami · May 6, 2019

I´ll probably need to do this to use MK11 with update 1.03
Can anyone share a donor for firm 7.01 please?
Should i back up all my save games with checkpoint before this procedure?
What else will be lost afterwards?

Kingslayer_Kyle · May 6, 2019

Moquedami said:
I´ll probably need to do this to use MK11 with update 1.03
Can anyone share a donor for firm 7.01 please?
Should i back up all my save games with checkpoint before this procedure?
What else will be lost afterwards?

I just did it on 7.0.1, the same file works in post #66

Backup all saves before you do anything, replace the profile, delete all saves in system settings or you won't be able to launch edizon (As you still have save files for profiles that no longer exist), then restore all saves.

Your profiles will be lost, that is all.. so you'll need to backup all saves for each profile (Edizon has a full backup feature that I used to backup all saves for all profiles at once.)

Moquedami · May 7, 2019

If you lose your user profiles, doenst rhis affects the installed games too?
I thought game tickets were also tied to an user account

aut0mat3d · May 7, 2019

Worked like a charm on 7.0.1 - thanks!

Kingslayer_Kyle · May 8, 2019

Moquedami said:
If you lose your user profiles, doenst rhis affects the installed games too?
I thought game tickets were also tied to an user account

No,they are not.. installed games won't be effected.

If you are concerned about anything, backup your profiles (The file that you're replacing) before hand.. Then if you had trouble you can just replace the file with your backup.

Benny1985 · May 14, 2019

Hello together

I am currently on FW 8.01. and i am using SX.

Does the manual and the provided savefile also work here (since the savefile comes from FW 6.0 and I am on 8.0.1)?

Can I still update offline via Choi after linking the account, or will the linking of the account then be deleted again?

I didn't really understand the restore of the user profiles and the recovery of the savedata.

I save all savedata via checkpoint, then link the account, then delete all savedata on the switch, then create my user profiles again which I had before, then start each game once and play to the first savepoint and then restore the old savedata via checkpoint?
Is there also a 1 click solution in Checkpoint to restore everything at once?

Many thanks for your help.

Greetings Benny

Kingslayer_Kyle · May 14, 2019

Benny1985 said:
Hello together

I am currently on FW 8.01. and i am using SX.

Does the manual and the provided savefile also work here (since the savefile comes from FW 6.0 and I am on 8.0.1)?

Can I still update offline via Choi after linking the account, or will the linking of the account then be deleted again?

I didn't really understand the restore of the user profiles and the recovery of the savedata.

I save all savedata via checkpoint, then link the account, then delete all savedata on the switch, then create my user profiles again which I had before, then start each game once and play to the first savepoint and then restore the old savedata via checkpoint?
Is there also a 1 click solution in Checkpoint to restore everything at once?

Many thanks for your help.

Greetings Benny

Idk but there is with Edizon, When I used Edizon i used 1 click to backup, and 1 click to restore all. And yeah.. Pretty much nailed it. I used the profile on fw 7.0.1 so Maybe it works on 8.0.1 too? Only way is to try and find out. If it doesn't work just make sure you backup the file you're replacing beforehand. Then you can use it to revert if it doesn't work.

Benny1985 · May 14, 2019

But because of SX, there shouldn't be any problems?

In the previous posts ReiNX is mentioned again and again.

Kingslayer_Kyle · May 14, 2019

Benny1985 said:
But because of SX, there shouldn't be any problems?

In the previous posts ReiNX is mentioned again and again.

The file you're replacing (8000000000000010) is nothing to do with custom firmware, It's the file in your nand that contains your profiles. I doubt it makes a difference what CFW you're using.

derp421 · Jun 2, 2019

designgears said:
Resign 8000000000000010; (prod.keys from the implant console)
hactoolnet.exe -k prod.keys -t save 8000000000000010 --sign

I have a 7.0.0 donor 8000000000000010 file from one of my switches and I'm trying to sign it with the prod.keys from my implant console (also on 7.0.0) using hactoolnet but i keep getting this message "Failed to match key rsa_oaep_kek_generation_source
Failed to match key rsa_private_kek_generation_source
Unable to sign save file. Do you have all the required keys?" but I looked at the prod.keys for both switches and the rsa_oaep_kek_generation_source and rsa_private_kek_generation_source are the same so idk why it isn't signing.

Hacking Any way to edit profile and fake link account?

Unknown

New Member

New Member

New Member

Well-Known Member

Active Member

Well-Known Member

Active Member

Well-Known Member

Active Member

Well-Known Member

Active Member

Well-Known Member

Well-Known Member

Active Member

Member

Active Member

Member

Active Member

Member

Similar threads

Popular threads in this forum