Hacking hacking into the eshop

[Rankio]

Keep dreaming, kid, keep dreaming... maybe someday your dreams will come true.

Nintendo most likely signs titles _before_ uploading them to the server. They're doing their best to keep their private keys private (unlike Sony

).

Very supportive of you.

 

[Arisotura]

Keep dreaming, kid, keep dreaming... maybe someday your dreams will come true.

Nintendo most likely signs titles _before_ uploading them to the server. They're doing their best to keep their private keys private (unlike Sony

).

Very supportive of you.

Uh, it is obvious that this thread is epicfail. Not like spying a SSL connection with a web debugger will let you hack the 3DS or the eShop or even your mom's computer.

 

[lazymarek]

Can anyone tell me how it is possible to read an access to the eshop server?
When I connect to it with internet explorer 8 it doesn't work and fiddler shows the error message in the received bytes too!

 

[TheDreamLord]

That is probably a random key to be used in some sort of cryptographic handshake to generate a session ID and some sort of key-pair. For the record you didn't hack or decrypt anything. You captured and decoded, which is a good first step for beginners.

you are right I did a https hand shake the bad thing is that nus no longer lets me connect

Yes that's because Fiddler decrypts traffic for sniffing and then encrypts it back with it's own self-signed certificate before passing on the data to you and the server. No server is going to accept this certificate which is probably why you're not able to connect through NUS. NUS should let you connect again if you shut down Fiddler. And no client (read your computer) is going to accept this certificate either, which is why you had to add Fiddler's certificate to your Windows certificate store when you clicked on the option to decrypt HTTPS traffic in Fiddler's settings. Or maybe you added it to your browser's certificate store. Either way, you have to configure the client to accept this fake certificate.

At the most you'll be able to see the e-shop traffic but there's no way you're actually going to hack into it. Unless Nintendo really, really messed up somewhere

offtopic: BOWSER UR POST COUNT IS 666 XD