Hacking Exploiting the Switch with Ocarina of Time

OldGnashburg

Cobra Chicken Summoner
OP
Member
Joined
Feb 6, 2017
Messages
520
Trophies
0
Location
Alberta, Canada
XP
3,017
Country
Canada
So here's a possibly dumb question, back in 2019 Arbitrary Code Execution was discovered in OoT, it was crude, required crazy controller shenanigans, but as more things were discovered, OoT is at the point where you can get Total Control with one instance of SRM which is basically a use after free bug. It's fully within the capabilities of OoT on the Wii and GameCube to sandbox escape and in the case of the GameCube, warp to the credits in Majora's Mask, and I'm the case of Wii, anything, including homebrewing the console, the only reason it hasn't been done is because it requires designing a rather larger payload and the only way to run something like that without being a TAS is removing the character limit on the file screen and using that to type in your payload. It's been theorized that you could also pull data from system information from the host console, for example in the Wii, pulling data from a Mii, or System Name or other stuff. Anyways long story short, what ACE in N64 games mean for Switch homebrew.
 

masagrator

The patches guy
Developer
Joined
Oct 14, 2018
Messages
6,403
Trophies
3
XP
12,292
Country
Poland
issue with your theorem is that Gamecube and Wii don't use or use fake ASLR (with predictable randomization). This was issue with all Nintendo consoles to 3DS and WiiU lineup included.
Switch is using full-fledged ASLR. Escaping sandbox is not possible without defeating ASLR unpredictability.
 

Draxzelex

Well-Known Member
Member
Joined
Aug 6, 2017
Messages
19,057
Trophies
2
Age
30
Location
New York City
XP
13,537
Country
United States
So here's a possibly dumb question, back in 2019 Arbitrary Code Execution was discovered in OoT, it was crude, required crazy controller shenanigans, but as more things were discovered, OoT is at the point where you can get Total Control with one instance of SRM which is basically a use after free bug. It's fully within the capabilities of OoT on the Wii and GameCube to sandbox escape and in the case of the GameCube, warp to the credits in Majora's Mask, and I'm the case of Wii, anything, including homebrewing the console, the only reason it hasn't been done is because it requires designing a rather larger payload and the only way to run something like that without being a TAS is removing the character limit on the file screen and using that to type in your payload. It's been theorized that you could also pull data from system information from the host console, for example in the Wii, pulling data from a Mii, or System Name or other stuff. Anyways long story short, what ACE in N64 games mean for Switch homebrew.
Also, we don't have Ocarina of Time for the Switch...
 

Arilys

Active Member
Newcomer
Joined
Feb 3, 2018
Messages
40
Trophies
0
Age
31
XP
251
Country
Portugal
Also, we don't have Ocarina of Time for the Switch...
OP probably asked this because of the N64 games that Nintendo's gonna make available with the Online Expansion Pack, where OoT is included.

But yeah, wouldn't expect too much due to what masagrator mentioned.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    SylverReZ @ SylverReZ: @K3Nv2, Lol