ROM Hack [DEVELOPMENT] Injecting pokemon in ORAS without a cyber gadget or Gateway

AquaX101

Well-Known Member
OP
Member
Joined
Apr 15, 2014
Messages
717
Trophies
0
Location
Somewhere
XP
978
Country
United States
SciresM PKHeX Browser Exploit has been released! Kazo's encounter exploit is still being worked on!
http://projectpokemon.org/forums/sh...-Browser-RAM-based-Pokemon-Injection&p=195497

SciresM and KazoWAR have successfully been able to inject pokemon without the need of a gateway or a cyber gadget using the tool Spider3DS. It will be compatible with both ORAS and XY and currently, SciresM is making a program for this exploit.
VIDEOS:

This ones from SciresM.
This one is from Kazo.
 

ubergeek77

Post editing world champ.
Member
Joined
Dec 6, 2014
Messages
584
Trophies
0
XP
587
Country
United States
If they could use the same tool to dump a decrypted version of the save for savedatafiler, I would be so happy <3
 

cearp

瓜老外
Developer
Joined
May 26, 2008
Messages
8,610
Trophies
1
XP
7,754
Country
Tuvalu
so there will be a post about it in that spider thing thread, then a development thread here, saying wow look at this, and then finally the actual release thread when it is finished. :D
but this is very very cool stuff, looking at it in the wider picture (not just injecting pokemon etc)
 
  • Like
Reactions: Dartz150

Dartz150

Yet another Onii-chan
Member
Joined
May 5, 2010
Messages
2,241
Trophies
1
Age
30
Location
Over your head
XP
3,986
Country
Mexico
Like cearp said, this will turn into a masive post flood lol. Well, I'm VERY impressed they achieved this, my high hopes right now is to enable custm plugins while running an X program, even screenshot function would be very amazing.
 

Xenon Hacks

Well-Known Member
Member
Joined
Nov 13, 2014
Messages
7,414
Trophies
0
Age
29
XP
4,650
Country
United States
814a4bfd896e9238ff6a3f9555e7e55e.jpg
 

Duo8

Well-Known Member
Member
Joined
Jul 16, 2013
Messages
3,593
Trophies
1
XP
2,473
Country
Vietnam
Oh, I see. Probably due to the card2 format it uses.

That shouldn't matter since the system handles that should it?

Anw I thought with gpuhax you can only access a small portion of the program? This is full on ram editing. Not to mention NX and stuff?
 

ubergeek77

Post editing world champ.
Member
Joined
Dec 6, 2014
Messages
584
Trophies
0
XP
587
Country
United States
That shouldn't matter since the system handles that should it?

Anw I thought with gpuhax you can only access a small portion of the program? This is full on ram editing. Not to mention NX and stuff?

I wasn't even considering they only had RAM access in the bag for right now. When I asked that question, I was under the impression we'd have enough access to just tell the 3DS to decrypt the save, and have it do just that. I beleive we have enough access to do this, seeing as smealum demo'd Smash when he released regionthree. Even if we aren't actively accessing the save during play, surely we can make something to handle saves on 9.x; previously we were locked to 4.x, and that isn't the case anymore.

But I don't know. I'm not an expert on this. Really wish I was though.
 

Duo8

Well-Known Member
Member
Joined
Jul 16, 2013
Messages
3,593
Trophies
1
XP
2,473
Country
Vietnam
I wasn't even considering they only had RAM access in the bag for right now. When I asked that question, I was under the impression we'd have enough access to just tell the 3DS to decrypt the save, and have it do just that. I beleive we have enough access to do this, seeing as smealum demo'd Smash when he released regionthree. Even if we aren't actively accessing the save during play, surely we can make something to handle saves on 9.x; previously we were locked to 4.x, and that isn't the case anymore.

But I don't know. I'm not an expert on this. Really wish I was though.

Hmm... If you can execute code as the program (Pokemon in this case) you should be able to dump its save (and whatever else the system allows)
 

SciresM

Developer
Developer
Joined
Mar 21, 2014
Messages
954
Trophies
2
Age
32
XP
7,804
Country
United States
Hmm... If you can execute code as the program (Pokemon in this case) you should be able to dump its save (and whatever else the system allows)


I don't know if that's possible or not, but for what it's worth the code Kazo and I are executing is entirely within the web browser.
 

Apache Thunder

I have cameras in your head!
Member
Joined
Oct 7, 2007
Messages
4,294
Trophies
2
Age
35
Location
Levelland, Texas
Website
www.mariopc.co.nr
XP
6,162
Country
United States
I can definitely see Pokecheck using this in some form when they finally get back up and running. This would be the kinda of breakthrough they would need. ;)

At some point they can dynamically build the payload for pokemon stored on Pokecheck.org and spit out an auto generated QR code to point the web browser to the unique payload for the end user.


Quite some time before this happens. But we're already using the web browser to do this. Just put the two and two together and this seems destined for Pokecheck. :D

A version for 9.2 and below with more features would be great as well. 9.3/9.4 can't use a launcher.dat file I believe so code space is limited I would assume?

How much information can you jam into the web browser payload without using an external file on the SD card? Curious about that. :P
 

Dartz150

Yet another Onii-chan
Member
Joined
May 5, 2010
Messages
2,241
Trophies
1
Age
30
Location
Over your head
XP
3,986
Country
Mexico
For now only the devs know what is possible and what isn't, so i'll only wait for the upcoming updates, and yep, I'm so hyped as hell, but my mind tells me to not jump and start to theorize on everything lol
 

Duo8

Well-Known Member
Member
Joined
Jul 16, 2013
Messages
3,593
Trophies
1
XP
2,473
Country
Vietnam
I don't know if that's possible or not, but for what it's worth the code Kazo and I are executing is entirely within the web browser.

Then editing another program's RAM is possible inside the browser (with just the initial ROP then gpuhax) ?
 

Dartz150

Yet another Onii-chan
Member
Joined
May 5, 2010
Messages
2,241
Trophies
1
Age
30
Location
Over your head
XP
3,986
Country
Mexico
I wish this is functional for Pokemon X as well since I only have a eshop (and in download history, not downloaded) version of AS (offtopic: launch day :D)

But in X there is no more fun to find, maybe the classic "walk through walls cheat", so we can sneak peek on the locked power plants lol.
 
General chit-chat
Help Users
  • No one is chatting at the moment.
    KenniesNewName @ KenniesNewName: https://www.cnn.com/2022/09/28/entertainment/coolio-obit/index.html