Hacking Bounty question

[Deleted member 702243]

Anyone who thinks identifying a complete exploit chain in a console like the switch 2 takes a few months is a moron though.

Could take years, could require a newer firmware, could be on base.

It'll happen though. Software is buggy by default. Even NASA has bugs.

it would be funny if it turned out exploitable vulnerabilities only work in like firmare 25.1.0 or something, the launch consoles people kept unopened cant be hacked, and we are already on 28.3.0 by the time it becomes public, so you cant just update. and it just randomly happens that no physical copies have 25.1.0 on them that you would need. then only the few people who actually used their console but randomly got busy with something else end up being able to use it

 

[naxil]

https://reversing.live/sslbypass.html

Can be used in fw before the patch? and for do what?

 

[RyanTheArchivist]

https://reversing.live/sslbypass.html

Can be used in fw before the patch? and for do what?

I'm not sure what you are asking. Are you asking if this can be used as some console hack or something? The answer is no. Exploits that allow running custom code on their own arent anything too special. We'd need a kernel exploit to go along with them to do anything meaningful.

 

[M7L7NK7]

Even if something was found on the launch firmware, there isn't going to be a scene if 10 people have one

 

[Ondrashek06]

Hurdur there are no bugs in horizon os hurdur

Obviously this is nothing on it's own, but hopefully will shut up the people repeating that nonsense. Good to see the bug program working!

If there were bugs/exploits in modern HorizonOS, how come not a single Switch hacker found any during the 8 years of the Switch existing?

 

[twatsandwich]

If there were bugs/exploits in modern HorizonOS, how come not a single Switch hacker found any during the 8 years of the Switch existing?

Mate. We are literally talking in a thread about one.

 

[Ondrashek06]

Mate. We are literally talking in a thread about one.

Actually I thought that it was just discussing the HackerOne program, not that someone found an exploit.

But sadly, when someone is faced with a choice to either hand an exploit to Nintendo for patching and an insane sum of money -OR- to release it to the public and risk a lawsuit, they're going to pick option #1.

So while people might've been finding exploits in HorizonOS, we never heard of them due to the sweet HackerOne money.

 

[subcon959]

So while people might've been finding exploits in HorizonOS, we never heard of them due to the sweet HackerOne money.

Just a little pet peeve of mine but you don't find an exploit. You find a vulnerability and then develop an exploit to take advantage of it.

 

[Deleted member 702243]

theres been a lot of vulnerabilities, and still are. they just aren't useful for anything meaningful

https://switchbrew.org/wiki/Switch_System_Flaws