Hacking How to start 9.2 CFW dev?

Vappy

Well-Known Member
Member
Joined
May 23, 2012
Messages
1,508
Trophies
2
XP
2,435
Country
Yeah, pick smaller projects, learn programming, learn about systems, about hardware and operating systems, read and try to memorize the ARM manual a few dozen times, do the same for 3dbrew, ask lots of questions. That's probably roughly how anyone else has done it. :P
 
  • Like
Reactions: SLiV3R

BobDoleOwndU

Well-Known Member
Member
Joined
Dec 28, 2013
Messages
1,178
Trophies
0
Age
28
XP
2,012
Country
Canada
Best place to start would be to learn as much about the 3DS as possible. I don't know much about the 3DS personally, but I know there's a lot of readily available information on 3dbrew. Looking at the 4.X CFW and the Gateway exploit files would probably also be helpful.
 
  • Like
Reactions: SLiV3R

KazoWAR

Well-Known Member
Member
Joined
Aug 12, 2008
Messages
1,951
Trophies
1
Age
34
Location
Winter Haven
XP
2,025
Country
United States
I wanted to take mem dumps of 4.2 sysand, and 4.2 CFW and try to find what have been patched. then try to make patches for 9.X and see if i could get something out of it. but i could never find out how to do mem dumps in 4.X
 
  • Like
Reactions: Margen67

mathieulh

Well-Known Member
Member
Joined
Feb 28, 2008
Messages
378
Trophies
0
Website
keybase.io
XP
897
Country
France
You need to learn ARM assembly to begin with, you also need to know more on how the 3DS Operating System works (FIRM, the services...) you need to look into current vulnerabilities implementations and so forth.
If you haven't done any of this before, it might take you weeks before you get any tangible results.
 

The Real Jdbye

*is birb*
Member
Joined
Mar 17, 2010
Messages
22,484
Trophies
4
Location
Space
XP
12,332
Country
Norway
Title self explanatory.
Start by learning ARM assembly, then you can reverse engineer the GW launcher by looking at the ROP chain, cross reference that with the code at the addresses it calls, see what each instruction does and by that point you should know enough to begin working on your own version of the exploit. Then you will just have to figure out what needs to be patched in the firmware to do what you want (reverse engineering GWs code can also be of help in this)
Knowledge of the 3DS system will be important but you can learn a lot of that as you go :)
 
  • Like
Reactions: Margen67 and SLiV3R

Duo8

Well-Known Member
Member
Joined
Jul 16, 2013
Messages
3,604
Trophies
1
XP
2,657
Country
Vietnam
Everyone has to be a beginner at some point. You'll never know who will be the next Smealum :)

Yeah but we had at least 5 threads like these at some point. Throwing this question at google would be much quicker with the same results.
Make a thread if there's some specific thing you want to know, not a vague question.
 
  • Like
Reactions: SLiV3R

WulfyStylez

SALT/Bemani Princess
Member
Joined
Nov 3, 2013
Messages
1,149
Trophies
0
XP
2,857
Country
United States
CFW dev? Like booting into a hacked FIRM? Literally go look at Gateway's 1.0 launcher. Then make a 9.x native_firm with checks patched out. Done.
That's for booting from 4.x. Every single thing you need to make a custom firmware is public and has been for a really long time.
 
  • Like
Reactions: Margen67 and SLiV3R

dela

Well-Known Member
Newcomer
Joined
Dec 6, 2014
Messages
78
Trophies
0
Location
Cagliari
XP
122
Country
Italy
I think first of all needs:
extrapolate from CFW booting of 4.5 and clean it from all the patches to enable cia services.
Second phase from firmware 9.2 to try to dump the axiwram and FCRAM during a softreboot to understand how is the boot of sysnand.
Then once you understand how you start a firmware 9.2, we can think about how to rewrite the boot it.
 

WulfyStylez

SALT/Bemani Princess
Member
Joined
Nov 3, 2013
Messages
1,149
Trophies
0
XP
2,857
Country
United States
I think first of all needs:
extrapolate from CFW booting of 4.5 and clean it from all the patches to enable cia services.
Second phase from firmware 9.2 to try to dump the axiwram and FCRAM during a softreboot to understand how is the boot of sysnand.
Then once you understand how you start a firmware 9.2, we can think about how to rewrite the boot it.
To boot a different version, you just load that native_firm instead. version-independent setup stuff is done in firm, after all.
 
General chit-chat
Help Users
  • No one is chatting at the moment.
    K3N1 @ K3N1: https://youtube.com/shorts/bAR0DB38goU?feature=share