Homebrew Clarification Thread - What is going on?

[LuigiSmash220]

I don't really get why people want SHSHax so badly. It's pretty much worthless compared to Memchunkhax.

Well it is just a matter of time to see which one is finished first

 

[dankzegriefer]

Well it is just a matter of time to see which one is finished first

memchunkhax2 already has a working variant, just lacking an implementation.

 

[Jwiz33]

SNShax is privilege userland, regardless of bootrom changes there is a 99% chance you can still use it.

Good point. For some reason I keep on thinking that it is an arm11 kexploit because it can access am:u, but it is only privileged userland. Kind of like how HANS can "hijack" the eShop to get the badge NNID bit required to create badge data, right?

 

[muskieratboi]

I'm just going to properly salute SteveIce10 for his work so far, and go back to my own business, because I know stuff like this can take a while.

o7

 

[LuigiSmash220]

• memchunkhax2 already has a working variant, just lacking an implementation.

Even so who knows
(But hello caffine)

 

[dankzegriefer]

Even so who knows
(But hello caffine)

Merry New Years!
https://github.com/Steveice10/memchunkhax2/blob/master/source/main.c

 

[LuigiSmash220]

Merry New Years!
https://github.com/Steveice10/memchunkhax2/blob/master/source/main.c

Wat this mean?

 

[Jwiz33]

Merry New Years!
https://github.com/Steveice10/memchunkhax2/blob/master/source/main.c

He hasn't updated anything new though?

 

[dankzegriefer]

Wat this mean?

It's code to exploit memchunkhax2. It just needs to be implemented if I understand it rite.

But I'm no coder. I'm just a man who can read and guess well.

 

[Jwiz33]

Wat this mean?

WIP implementation of the ARM11 kernel exploit described here. Currently overwrites the memory block header next pointer, but freezes due to being pointed at an invalid location.

Doesn't work yet.

 

[rufuszombot]

I have a N3DSXL on 10.1, so I will wait patiently for SNShax, which seems like the best for me. At least I still have my o3DS on 9.0 until then, so I'm in no hurry for anything.
Still excited though.
Hype.

 

[TR_mahmutpek]

When will these hacks/haxs out?
Thanks...

 

[LuigiSmash220]

I have a N3DSXL on 10.1, so I will wait patiently for SNShax, which seems like the best for me. At least I still have my o3DS on 9.0 until then, so I'm in no hurry for anything.
Still excited though.
Hype.

Yea i cant wait to get fire emblem if updates from the japan eshop and finally buy cloud for smash 4
But only a matter of time to see if some one sneezes exploits

 

[DKB]

When will these hacks/haxs out?
Thanks...

They will be out when they are ready, which..can be within a few days, or a week. The best time for them to come out would be before 10.4 is released.

 

[LuigiSmash220]

When will these hacks/haxs out?
Thanks...

Could be tomorrow or a week from now who knows

 

[Jwiz33]

I feel like Steveice10 is almost done, so it may be sometime this week.

 

[Kartik]

When will these hacks/haxs out?
Thanks...

Even as we talk devs are working on them.

 

[ChaosRipple]

Im reading Steveice10’s code and it seems almost complete. If i understood what was said in the conference, then all thats left to complete the code is to create a couple memchunks which mimmicks the ones supposedly created by the Arm11 kernel, store it on the slab heap, and redirect the next pointer to that location in the memory. And also, he would need to know what to store in those blocks of memory to allow his own code execution.

 

[dark_samus3]

I don't really get why people want SNSHax so badly. It's pretty much worthless compared to Memchunkhax.

Not saying any of you, just..I've seen a few people saying "Oh, SNSHax is going to come out first," blah blah.

SNShax is a MUCH simpler vuln than memchunkhax 2... Basically, get ROP (we already have that) launch SNS using slightly elevated privelages (which are provided by HBL already) hijack SNS and its permissions to do what we want, that last part is really all that needs to be done and from the way they were talking it doesn't even look hard...

 

[DKB]

SNShax is a MUCH simpler vuln than memchunkhax 2... Basically, get ROP (we already have that) launch SNS using slightly elevated privelages (which are provided by HBL already) hijack SNS and its permissions to do what we want, that last part is really all that needs to be done and from the way they were talking it doesn't even look hard...

I thought SHSHax was only userland, and, it can't be used on >10.2. But, alright. If it's really that important then..hell. I guess they should work on it..AFTER.