Hacking Is it possible to inject payloads with friend codes?

[koboyashi]

Here's some history for new users.
Nintendo 3ds or wiiU had an exploit using friend codes to inject code from internet browser or the camera to basically crack the system wide open for Luma.

Now i'm asking if it's possible to do the same thing with the switch, especially with the Online Play Invites, would it be feasible?
I mean in theory, the friend bot just sends code from the "Supported Software"; and I know it wouldn't be much but at least it would be enough to read from somewhere, such as an microSD to install old firmware or manually inject payloads no matter the firmware.

tl;dr Injection from friends list, yes or no.

 

[Hayato213]

You need an unpatched unit for RCM method exploit. Alternative is modchip via hardmod.

 

[pinbi7]

friends list no , browser yes
look into caffeine/pegascape
https://switch.homebrew.guide/hacking/caffeine/pegascape.html
that was the original way to softmod your switch back on FW3.0

 

[koboyashi]

friends list no , browser yes
look into caffeine/pegascape

right now im trying to look for an exploit with the friends list since im on mariko, Im thinking using the friend code generator in some sort of way could brute force a way into the console. Maybe without RCM.

 

[pinbi7]

for mariko you'll need a mod chip

pega/caffeine only works on 4.2FW and lower

all exploits use RCM

anything other then RCM doesn't exist

 

[impeeza]

Here's some history for new users.
Nintendo 3ds or wiiU had an exploit using friend codes to inject code from internet browser or the camera to basically crack the system wide open for Luma.

Now i'm asking if it's possible to do the same thing with the switch, especially with the Online Play Invites, would it be feasible?
I mean in theory, the friend bot just sends code from the "Supported Software"; and I know it wouldn't be much but at least it would be enough to read from somewhere, such as an microSD to install old firmware or manually inject payloads no matter the firmware.

tl;dr Injection from friends list, yes or no.

was writing some explanation but:

for mariko you'll need a mod chip

pega/caffeine only works on 4.2FW and lower

all exploits use RCM

anything other then RCM doesn't exist

¡ditto!

 

[koboyashi]

Yeah I can kinda guess why most modding/homebrew has a hit a wall for Mariko. Wont stop from me trying random crap and researching. Just wondering if it was possible already.

 

[budDRY]

keep at it
why else are there new exploits for older consoles

then those who keeps saying "no no nothing else. just what we have on the table"

 

[ZachyCatGames]

Here's some history for new users.
Nintendo 3ds or wiiU had an exploit using friend codes to inject code from internet browser or the camera to basically crack the system wide open for Luma.

Now i'm asking if it's possible to do the same thing with the switch, especially with the Online Play Invites, would it be feasible?
I mean in theory, the friend bot just sends code from the "Supported Software"; and I know it wouldn't be much but at least it would be enough to read from somewhere, such as an microSD to install old firmware or manually inject payloads no matter the firmware.

tl;dr Injection from friends list, yes or no.

Taking over the user page applet wouldn't give you the ability to execute payloads or downgrade (which is pointless anyway because Nintendo burns (physically destroys) tiny fuses embedded in the SoC every few updates and check how many are burnt on boot, panicking if too many are burnt, and in your case the vulns used on older firmwares used to run payloads doesn't exist on mariko). To run a payload you'd need some kind of vuln in Nintendo's trustzone firmware, Nintendo's bootloader, or Nvidia's bootrom, with no such vulns currently known to exist, and likely not existing.

 

[seany1990]

Yeah I can kinda guess why most modding/homebrew has a hit a wall for Mariko. Wont stop from me trying random crap and researching. Just wondering if it was possible already.

How familiar are you with system security? It's not a job for a layman