COMPLETED How pikabricker works

midstor Nov 17, 2018.

  1. midstor
    OP

    midstor GBAtemp Regular

    Member
    5
    Aug 1, 2018
    United States
    So, Pikabricker was malware that was made as a fake Pikachu rom.

    I wrote a whole "writeup" on exactly how the malware works.

    https://pastebin.com/6dNDSyZA - Full Pikabricker writeup

    I hope this helps people who are making nsp scanners or something to see how they are made with better ease.


    Thank you

    NOTICE: THE INFORMATION IN THE PASTEBIN WAS FROM "OG" THE DEVELOPER OF THE BRICKWARE. PLEASE DO NOT CALL ME FAKE, ALL MY INFORMATION WAS FROM THE ORIGINAL DEVELOPER.
     
    Last edited by midstor, Nov 17, 2018 - Reason: Notice added.
    elm, tomman321, lordelan and 11 others like this.
  2. Beerus

    Beerus Gbatemp's God Of Destruction

    Member
    7
    May 3, 2017
    Canada
    Universe 7
    hey this is neat nice job
     
    ccprodigy and midstor like this.
  3. nWo

    nWo The Game Master

    Member
    6
    Oct 20, 2016
    Mexico
    Good job man.
     
    midstor likes this.
  4. SexySpai

    SexySpai xdddddddddddddddddddddddddddddddddd

    Member
    9
    Jun 16, 2018
    United States
    your mom lol
    Genius.
     
    TheVinAnator and midstor like this.
  5. WiiHomebrew+Snes

    WiiHomebrew+Snes GBAtemp Fan

    Member
    6
    May 4, 2016
    United States
    thanks
     
    midstor likes this.
  6. ccprodigy

    ccprodigy Advanced Member

    Newcomer
    3
    Jan 30, 2018
    United States
    Pretty basic info
     
    Arras, TheKerplunk, ColaBeldy and 4 others like this.
  7. jakkal

    jakkal GBAtemp Addict

    Member
    13
    Apr 27, 2018
    United States
    1. (to those who have broken switches, try building a new nand with some helpful tools (idk which ones))

    Next level genius stuff right here
     
    JJTapia19, DKB, TheKerplunk and 16 others like this.
  8. HtheB

    HtheB GBAtemp Advanced Fan

    Member
    8
    May 15, 2006
    Netherlands
    Bize Her Yer Trabzon
    Why using pastebin and not just posting here directly...?
     
    ColaBeldy, nmkd and dimmidice like this.
  9. SimonMKWii

    SimonMKWii Professional Idiot

    Member
    11
    Nov 18, 2017
    Australia
    Melbourne, Victoria
    Your write up isn't correct in the slightest... not trying to be rude, but I don't think you know what the hell you're talking about.
     
  10. ry755

    ry755 Fox

    Member
    6
    Nov 29, 2017
    United States
    California
    Wow so detailed lol
     
  11. MichiS97

    MichiS97 "Leftist snowflake milennial"

    Member
    9
    GBAtemp Patron
    MichiS97 is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    Jun 14, 2011
    Germany
    Munich
    How is this a writeup?
     
    TheKerplunk, ColaBeldy, nmkd and 2 others like this.
  12. Waicol

    Waicol Member

    Newcomer
    2
    Nov 11, 2018
    Afghanistan
    Sorry but reads like a Donald Trump tweet, no valuable info on it too.
     
    -Pao, ScottNBNP, nmkd and 2 others like this.
  13. ressit

    ressit GBAtemp Regular

    Member
    3
    Jun 4, 2018
    Vietnam
    no have backup how can fix this ??
     
  14. Milenko

    Milenko GBAtemp Advanced Maniac

    Member
    10
    Oct 16, 2017
    Australia
    try building a new nand with some helpful tools (idk which ones)
     
  15. Dungeonseeker

    Dungeonseeker GBAtemp Fan

    Member
    6
    Mar 28, 2016
    I'll do a write-up of your write-up...


    Your write-up is wrong.
     
  16. bundat

    bundat ¿

    Member
    4
    Jul 25, 2018
    Antarctica
    Damn, when it said "writeup", I thought it was going to be all detailed technically, like go more into detail about which bytes (i.e. at what offsets) are overwritten with what values... (like how @Creatable said most of the bytes overwritten are "unused", as supposedly "Everything from offset 0x0270 to 0x09B0 is unused" and how there was a 1 out of 9 chance in guessing the value of one of the "not unused" parts that were overwritten), or maybe a decompilation of the binary or whatnot.

    Also, :rofl2: @ the "i wrote this" on the first line.

    And also :rofl2: @ the "idk which ones" on the last line.
    Are there any other tools out there that can do that other than ChoiDujour? And I don't think you can even successfully do that with a corrupted PRODINFO, and no NAND backup and biskey backup...

    Tbh, this is a whole bunch of... nothing. Sorry.
     
    Last edited by bundat, Nov 17, 2018
  17. a7mag3ddon

    a7mag3ddon GBAtemp Regular

    Member
    4
    Mar 17, 2013
    Yup same here, i was looking for technical info as well.
     
    DayVeeBoi likes this.
  18. The Real Jdbye

    The Real Jdbye Always Remember 30/07/08

    Member
    19
    GBAtemp Patron
    The Real Jdbye is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    Mar 17, 2010
    Norway
    Alola
    I thought it only corrupted BIS and didn't touch PRODINFO, although I'm not exactly sure what BIS is other than it has something to do with partitions...
    That makes that guy an even bigger dick than I already thought he was.
     
    Freezerbomb and Mnecraft368 like this.
  19. TamarindoJuice

    TamarindoJuice GBAtemp Regular

    Member
    5
    Jan 30, 2016
    Brazil
    Really noice sir
     
  20. Reecey

    Reecey Mario 64 (favorite game of all time)

    Member
    11
    Mar 7, 2010
    At Home :)
    What we need is a little bat file that checks the nsp because who is going to trust any nsp from now on, trustable sources or not! The only source I trust now is a scene dump and that has to be sourced for me it may say scene dump on another forum but what’s stopping the uploaded from changing it you would never know the difference until you installed it. This is another reason why we need cdnsp back.
     
    Last edited by Reecey, Nov 17, 2018
Quick Reply
Draft saved Draft deleted
Loading...