Hacking 3DS Hacking Ideas: Post Your Ideas Here!

[MAXLEMPIRA]

or maybe get a Bricked 3DS?? hahaha

 

[Superuser]

I'm new to hacking devices, but perhaps there is a way to use spotpass to run an exploit. I can attempt to log my router and wait for a spot pass request to come in. I'll check out if I can somehow send back some data to the console. There's a method to my madness, however. If spotpass messages are not encrypted, perhaps you can somehow run your own code (considering the system probably has rw access for notifications)

Just a theory, though.

 

[UltraMew]

I'm new to hacking devices, but perhaps there is a way to use spotpass to run an exploit. I can attempt to log my router and wait for a spot pass request to come in. I'll check out if I can somehow send back some data to the console. There's a method to my madness, however. If spotpass messages are not encrypted, perhaps you can somehow run your own code (considering the system probably has rw access for notifications)

Just a theory, though.

Nice idea... Doubt it'll work. Get some more posts though.

 

[JackW]

Is the encryption at the hardware level? Because if it was at the firmware level, presumably if you were able to flash a custom firmware you'd be able to do whatever you like, wouldn't you? And of course assuming there was a way to flash the 3DS without running signed code.

 

[liban100]

Random question but do you guys think that Gateway releasing Firmware Spoofing has got anything to do with emo kid 68 discovering that the Gateway Installer stopped the update message?

 

[subplay]

Just a thought, I dont know if anyone has bought this up, there is alot of pages.. But if it is games people want to play? I wonder if there is a way to reverse engineer the game cartridges instead of this hand held? surely you could get pokemon lets say and dump the rom, is there a way that the write protect could be disabled you think, so you could upload a rom onto the part of the chip where the rom lies and will then work with the key? I know it sounds stupid, its just a thought..

 

[JuanGomezFernand]

Gateway certificates are jumped by 3ds.

In the gateway code exploit, the ctr gateway have a key and copied to the 3ds rom, cause a hole to secure licenses to operate third-party home applications.

 

[Petter1]

Is there no Way like by the iPhone through the dfu mode or something like that?

 

[Rydian]

Is the encryption at the hardware level? Because if it was at the firmware level, presumably if you were able to flash a custom firmware you'd be able to do whatever you like, wouldn't you? And of course assuming there was a way to flash the 3DS without running signed code.

Well seeing as the NAND dumps people have made are encrypted and per-3DS, I assume so?

Random question but do you guys think that Gateway releasing Firmware Spoofing has got anything to do with emo kid 68 discovering that the Gateway Installer stopped the update message?

People realized that the Gateway installer stopped the update message like within a week of it's release, whereas firmware spoofing didn't come along until version 1.1 or whatever of the Gateway installer.

Just a thought, I dont know if anyone has bought this up, there is alot of pages.. But if it is games people want to play? I wonder if there is a way to reverse engineer the game cartridges instead of this hand held? surely you could get pokemon lets say and dump the rom, is there a way that the write protect could be disabled you think, so you could upload a rom onto the part of the chip where the rom lies and will then work with the key? I know it sounds stupid, its just a thought..

The ROM being Read-Only is hardware. Like DVDs you get from the store with a movie on them. You can't physically re-write the data on there.

Now, if you're talking about just remaking the games into a new cart... that's bootlegging, and people have done it with 3DS games for a while before the Gateway came out. They just realized nobody wants to buy a bootleg if you can only have a single game on each bootleg forever period.

Is there no Way like by the iPhone through the dfu mode or something like that?

The closest example on a game system would be the PSP's pandora/service thing, but that died less than halfway through the PSP's lifetime and we haven't seen anything like it since for downgrading.

Even with people finding out how to dump and restore the NAND, they can only downgrade to a dump that they themselves made on an earlier firmware on that exact 3DS.

 

[pelago]

that's bootlegging, and people have done it with 3DS games for a while before the Gateway came out..

Are you sure? I've not heard of any bootleg 3DS carts.

 

[Rydian]

Are you sure? I've not heard of any bootleg 3DS carts.

Crown 3DS was shown off, also the Ace 3DS Plus/Pro/Hyper/King/Mega/Ultimate/CROSS BUSTAH whatever.

 

[uherrera]

How about cloning a 3ds via the 3ds transfer utility so that purchasing a game on one console enables it on the other one as well?

 

[Rydian]

How about cloning a 3ds via the 3ds transfer utility so that purchasing a game on one console enables it on the other one as well?

Uhhh. You'd need to do a NAND backup on the one 3DS with the games, then update both to the latest firmware and do the transfer (the transfer is NOT directly from one 3DS to the other, it's done via Nintendo's servers), then when it's done restore the old NAND backup on the 3DS that had the games.

But then you'd end up with one 3DS that can never update or go online (or it'll realize it shouldn't have the games and disable them), and another one that's updated on the latest firmware and can't use the gateway or whatever other 4.x stuff might come out.

 

[keven3477]

how about makin a custom firmware disconect the internet not the router of a conection, use a program like usendmii that makes the custom firmware downloadable while its not conected to real wiifi and at the specific site the 3ds picks its firmware from, and download a hacked firmware from home.

 

[Rydian]

how about makin a custom firmware disconect the internet not the router of a conection, use a program like usendmii that makes the custom firmware downloadable while its not conected to real wiifi and at the specific site the 3ds picks its firmware from, and download a hacked firmware from home.

It doesn't matter how you give the firmware update to the 3DS, the 3DS will see that it wasn't made/signed by Nintendo and refuse to do anything with it.

 

[Kupie]

It doesn't matter how you give the firmware update to the 3DS, the 3DS will see that it wasn't made/signed by Nintendo and refuse to do anything with it.

Hopefully we can crack into the 3DS code through software (the Gateway can run homebrew and such... why can't it dump some Hashes and encryption keys?) then find some 'Master Key' of sorts.

There have been some signing bugs for past systems (Trucha, anyone?) which means a bug could also be found in the signing process for the 3DS. Never give up hope, anyone!

 

[excalibrax]

I don't know if its been suggested before, I don't know much but I did have an idea. Would it be possible to find out how the nintendo server for downloading games hosts and servers files. And then emulate that with your computer so your router redirects it to a website you are hosting. Then you could post games up there for you to download to the 3ds and it would encrypt it at that point with the 3ds itself.

At the moment I doubt that nintendo is hosting files for games encrypted for everyones system at once it has to be a generic software thats transfered to the system itself( or so i believe).

This way we might be able to load games or homebrew on the 3ds without actually changing any of the files on the handheld at all.

It's a crazy idea, but it might be a more doable idea than others.

 

[jastolze]

Hopefully we can crack into the 3DS code through software (the Gateway can run homebrew and such... why can't it dump some Hashes and encryption keys?) then find some 'Master Key' of sorts.

There have been some signing bugs for past systems (Trucha, anyone?) which means a bug could also be found in the signing process for the 3DS. Never give up hope, anyone!

Do you remember when one of the PSP hackers allowed us to run unsigned code on the PSP? Well, it was near the end of the PSP's Lifespan, but it eventually happened. As a result of this, we can run custom games and apps without the need for CFW or Homebrew loaders. Hopefully, the Vita will be cracked soon, so that we have access to that extra ram and GPU. I really want to run Quake 3 on the Vita!

 

[Rydian]

Hopefully we can crack into the 3DS code through software (the Gateway can run homebrew and such... why can't it dump some Hashes and encryption keys?) then find some 'Master Key' of sorts.

The key to encrypt/sign isn't in the 3DS, only the key to decrypt/check. Only Nintendo has the signing keys.

There have been some signing bugs for past systems (Trucha, anyone?) which means a bug could also be found in the signing process for the 3DS. Never give up hope, anyone!

Yeah, this is generally how it's done. Most of the time systems are hacked without the encryption/signing keys.

I don't know if its been suggested before, I don't know much but I did have an idea. Would it be possible to find out how the nintendo server for downloading games hosts and servers files. And then emulate that with your computer so your router redirects it to a website you are hosting. Then you could post games up there for you to download to the 3ds and it would encrypt it at that point with the 3ds itself.

At the moment I doubt that nintendo is hosting files for games encrypted for everyones system at once it has to be a generic software thats transfered to the system itself( or so i believe).

This way we might be able to load games or homebrew on the 3ds without actually changing any of the files on the handheld at all.

It's a crazy idea, but it might be a more doable idea than others.

Custom files won't do anything unless signed, and you need the keys, and Nintendo signs stuff before sending it out, so logging won't get it.

 

[excalibrax]

Custom files won't do anything unless signed, and you need the keys, and Nintendo signs stuff before sending it out, so logging won't get it.

So is it signed for that specific 3ds before its sent out? or could you intercept the signed file and then use that on everyone else's system.