Hacking Pastebin Posting/Discussion

[zecoxao]

sorry fpr the bump but this looks like an interesting pastebin
http://pastebin.com/UaPq9Xea

 

[Psi-hate]

sorry fpr the bump but this looks like an interesting pastebin
http://pastebin.com/UaPq9Xea

I'm unsure what it could be. It may be unrelated to the 3DS/WiiU so unless we could get some info, then I'll put it up there. It looks to me like a bunch of directories.

 

[Suiginou]

I'm unsure what it could be. It may be unrelated to the 3DS/WiiU so unless we could get some info, then I'll put it up there. It looks to me like a bunch of directories.

This is pretty obviously Wii U related: Title "IOSU dev nodes".

"dlp", "nim" and "pm" are also the names of 3DS system modules -- I wouldn't be surprised if Nintendo kept the names similar on the two platforms.

 

[Psi-hate]

This is pretty obviously Wii U related: Title "IOSU dev nodes".

"dlp", "nim" and "pm" are also the names of 3DS system modules -- I wouldn't be surprised if Nintendo kept the names similar on the two platforms.

Most likely. (I don't know too much about the Wii U honestly) I did recognize the "nim" and "pm" but was unsure if anything else used it. I suppose we could ask @shinyquagsire23 since he knows a lot about these things.

 

[Deleted-355425]

whether it is or isnt, glad people are contributing to this thread.

 

[Psi-hate]

It could probably be some info on the Wii U OS (I guess some people who have the exploit are working on the OS?) Not too wild a guess but eh.

 

[VinsCool]

sorry fpr the bump but this looks like an interesting pastebin
http://pastebin.com/UaPq9Xea

I saw "dev/ppckernel"

It probably is folders from the WiiU

 

[Nic333]

sorry fpr the bump but this looks like an interesting pastebin
http://pastebin.com/UaPq9Xea

That is Wii U stuff, however, i don't know how accurate that info is.

 

[ecc0]

http://pastebin.com/AwAxBshX

This appears to be a partially reverse engineered objdump of the ssl module trying to find how ClCertA is decrypted; it's got a few notes how much progress was made.

 

[Psi-hate]

http://pastebin.com/AwAxBshX

This appears to be a partially reverse engineered objdump of the ssl module trying to find how ClCertA is decrypted; it's got a few notes how much progress was made.

It says he needs help on it, so maybe we can get someone to figure it out so we can have a greater understanding of what can be accomplished/what else needs to be done. . Maybe @WulfyStylez can help? (Sorry for bothering you Wulfy!)

 

[WulfyStylez]

General ARM11 RE tips:
-If you're looking for something that uses a known service call, search for that command header.
-If you know it uses that command header but can't find it, look for something that builds a command from its components.
-Dumps >>>> NCCH data for obvious reasons, but if you're using NCCH data be sure you're splitting into segments and remapping ro and data to their proper spots, and allocating a segment for bss.
-Name your service handle offsets to quickly be able to name all functions making service calls with that service

There's not a lot I think end-users (or even most people outside of those doing pure research like I was when I looked into this) will get out of having the CTR client cert. You'll need to be really familiar with the 3DS' https-using apps to get much out of it, too. Like: you can fetch eShop metadata (a lot of it), but that's all available through the eshop app already. You can send NetUpdateSOAP requests to scan for updates, but yellows8 already has something that does that.

 

[Psi-hate]

General ARM11 RE tips:
-If you're looking for something that uses a known service call, search for that command header.
-If you know it uses that command header but can't find it, look for something that builds a command from its components.
-Dumps >>>> NCCH data for obvious reasons, but if you're using NCCH data be sure you're splitting into segments and remapping ro and data to their proper spots, and allocating a segment for bss.
-Name your service handle offsets to quickly be able to name all functions making service calls with that service

There's not a lot I think end-users (or even most people outside of those doing pure research like I was when I looked into this) will get out of having the CTR client cert. You'll need to be really familiar with the 3DS' https-using apps to get much out of it, too. Like: you can fetch eShop metadata (a lot of it), but that's all available through the eshop app already. You can send NetUpdateSOAP requests to scan for updates, but yellows8 already has something that does that.

Thanks for the info Wulfy. I'm sure this will come in handy to those having trouble with the subject.

 

[zoogie]

Yellows8 just posted this on 3dbrew
http://www.3dbrew.org/w/index.php?title=Internet_Browser&curid=142&diff=12940&oldid=12927

Basically saying there is an unreleased webkit exploit (for new3ds too) based on this pastebin:
http://pastebin.com/ufBCQKda (fixed in 9.9)

 

[VinsCool]

Yellows8 just posted this on 3dbrew
http://www.3dbrew.org/w/index.php?title=Internet_Browser&curid=142&diff=12940&oldid=12927

Basically saying there is an unreleased webkit exploit (for new3ds too) based on this pastebin:
http://pastebin.com/ufBCQKda (fixed in 9.9)

This is surprising, 3DSNice is a troll most of time. Or is he?

 

[zoogie]

This is surprising, 3DSNice is a troll most of time. Or is he?

Not if yellows8 says he's not.

 

[VinsCool]

Not if yellows8 says he's not.

I wonder if his 3ds/wiiu exploit games list is legit

 

[Death78793]

Yellows8 just posted this on 3dbrew
http://www.3dbrew.org/w/index.php?title=Internet_Browser&curid=142&diff=12940&oldid=12927

Basically saying there is an unreleased webkit exploit (for new3ds too) based on this pastebin:
http://pastebin.com/ufBCQKda (fixed in 9.9)

Interesting...
Time will tell what 3DSNice was actually up to at the moment. Then again, yellows8 only mentioned it as a PoC and not an actual way to load any kind of code. Interesting nonetheless

 

[hippy dave]

Saw this somewhere, don't know if it's new stuff http://pastebin.com/4f5P6QsK

 

[zecoxao]

Saw this somewhere, don't know if it's new stuff http://pastebin.com/4f5P6QsK

these pastebins are entertaining

 

[WulfyStylez]

Saw this somewhere, don't know if it's new stuff http://pastebin.com/4f5P6QsK

Nothing new, this has been obtainable for a very very long time with thoroughly-documented methods.