Hacking Payloads for 10.6 up etc

Starhowl

Active Member
OP
Newcomer
Joined
Aug 3, 2013
Messages
41
Trophies
0
Age
42
XP
144
Country
Gambia, The
Can someone explain to me what it means that the latest 'payloads' are up for 10.6 and what smea's latest tweets from Feb 25 etc. mean?
 

ChaosRipple

Well-Known Member
Member
Joined
Oct 1, 2015
Messages
272
Trophies
0
Age
29
XP
183
Country
United States
In order to run some sort of exploit, a payload must be installed where the exploit launches. For example, for Oot3DHax, the payload must be injected into the save file of the Oot3D game. Now, everytime there is a system update, the payload must be updated so that its offsets match the ones of the new update. Hence, the payloads for 10.6 are created to allow exploiting into the Homebrew Launcher on a version 10.6 system.
 

Starhowl

Active Member
OP
Newcomer
Joined
Aug 3, 2013
Messages
41
Trophies
0
Age
42
XP
144
Country
Gambia, The
why is nobody talking about this around here? doesn't it mean that 10.6 updated systems now are exploitable?
 

Tony_93

Well-Known Member
Member
Joined
Jun 13, 2015
Messages
2,457
Trophies
1
Location
California
XP
2,436
Country
United States
why is nobody talking about this around here? doesn't it mean that 10.6 updated systems now are exploitable?

Yes but still no...

There are several types of exploits and ways for code execution to happen but to put it simple for you, there are 2 basic things you should uderstand:

"userland code execution" and "kernel code execution", userland gives you access to what games and apps can access only, but kernel gives you full access to the system.

Smea's homebrew launcher only needs userland code execution which as I said before it will give full access to what games and apps have access to, for example it will allow you to play homebrew games and other things in a userland level, kernel in the other hand will give you full access to the system and everything it can do, run a CFW for example, dump your NAND, downgrade your system, etc...

No one is talking about this because we have had userland code execution in every firmware since a bit more than a year now thanks to Smea, this is not something new hapenning in 10.6
 
Last edited by Tony_93,

Starhowl

Active Member
OP
Newcomer
Joined
Aug 3, 2013
Messages
41
Trophies
0
Age
42
XP
144
Country
Gambia, The
Well I'm wondering if Gateway will come out with their promised (kernel mode?) exploit for 10.3 soon..
 

Tony_93

Well-Known Member
Member
Joined
Jun 13, 2015
Messages
2,457
Trophies
1
Location
California
XP
2,436
Country
United States
Well I'm wondering if Gateway will come out with their promised (kernel mode?) exploit for 10.3 soon..

The exploit is out there already, is called Memchunkhax2 and it allows you to downgrade your system to 9.2 (sysupdater) and use Gateway/CFW (once you get to 9.2).
 
Last edited by Tony_93,

Starhowl

Active Member
OP
Newcomer
Joined
Aug 3, 2013
Messages
41
Trophies
0
Age
42
XP
144
Country
Gambia, The
But it also could brick my console.. right?
If they say 'an exploit is out for 10.3', does this mean there is an exploit out for 10.3.28E, 10.3.28U, 10.3.14, 10.3.01, etc. ..?
(in other words for all regions and all subversions?)
 

Tony_93

Well-Known Member
Member
Joined
Jun 13, 2015
Messages
2,457
Trophies
1
Location
California
XP
2,436
Country
United States
But it also could brick my console.. right?
If they say 'an exploit is out for 10.3', does this mean there is an exploit out for 10.3.28E, 10.3.28U, 10.3.14, 10.3.01, etc. ..?
(in other words for all regions and all subversions?)

The region doesn't matter and there is only 10.3.28, there is no 10.3.01, no 10.3.02... no 10.3.27...So as long as it is 10.3 you can use Memchunkhax2 on it.

There is a chance of bricking your system either by human error (wrong files used), corrupted files used or by extremely bad luck and the downgrade proccess halts at some point for an unknown reason (it happens once in a while).

The only %100 safe way to do this without risk is to hardmod your system and dump your NAND before trying the downgrade proccess, you can either do it yourself if you know how to solder or send your system to a trusted usee from this website (charge would be around $40). So in any case your system bricks midway in the proccess, you can bring him back from the dead by flashing the backup and trying again.
 
Last edited by Tony_93,

ChaosRipple

Well-Known Member
Member
Joined
Oct 1, 2015
Messages
272
Trophies
0
Age
29
XP
183
Country
United States
why is nobody talking about this around here? doesn't it mean that 10.6 updated systems now are exploitable?

Nobody is really talking about it because like Tony_93 says, the exploit being used by what Smealum is referring to in those tweets don't give full privileges. Also, at this current time, those updates payloads for 10.6 only work with Oot3D and Cubic Ninja (and maybe SSB?) since the Web Browser and the Home Menu was patched, meaning you'd have to pay at minimum of about $55 out of your pocket to access the exploit. And like Tony_93 says, we've had this exploit for a long time already. We're only patching it to allow it to work on the latest system update.

Well I'm wondering if Gateway will come out with their promised (kernel mode?) exploit for 10.3 soon..
That's putting words into Gateway's mouth. They said they're "providing support up to version 10.3." That doesn't exactly mean they will provide a kernel exploit to work with 10.3. It could just mean they will provide a downgrade method for 10.3 users so that they will be able to use Gateway on 9.2, which is exactly what they're saying on their website.

Though, if they can implement NTRCardHax into their carts or even use SNSHax, they can technically get kernel on 10.3 (even on O3DS).
 
Last edited by ChaosRipple,

Starhowl

Active Member
OP
Newcomer
Joined
Aug 3, 2013
Messages
41
Trophies
0
Age
42
XP
144
Country
Gambia, The
Is there anyway some kind of Google sheet or Excel table for a comparison between different firmwares?
 

ChaosRipple

Well-Known Member
Member
Joined
Oct 1, 2015
Messages
272
Trophies
0
Age
29
XP
183
Country
United States
Is there anyway some kind of Google sheet or Excel table for a comparison between different firmwares?

This is the official Nintendo link, although they aren't exactly descriptive, probably because they don't want to let more people know about possible exploits. 3DBrew has more info on exactly what changes.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • A @ ATEMVEGETA:
    Most things I can find resulting to a ban is save-editing reasons, like Pokehex, etc, and going online afterwards.
  • K3Nv2 @ K3Nv2:
    I'm almost certain fucking Google fibers modems blocking out PPPoE signals
  • K3Nv2 @ K3Nv2:
    Like the 6th time I had to reboot this router trying to get PPPoE active
  • BigOnYa @ BigOnYa:
    Ken, your hamster inside it is hungry. Can't you turn POE on/off in your WiFi settings page? Or is it not staying on?
    +1
  • A @ ATEMVEGETA:
    @BigOnYa, Well, in that thread they say it's pretty much safe to manage save files back and forth to consoles as long as you don't go online with cheats activated or with a pirate game.
  • A @ ATEMVEGETA:
    I own every of my games legit with their own cartridges
  • A @ ATEMVEGETA:
    also, I'm not planning to use any cheats, etc, just continue the normal gameplay on the emulator
  • K3Nv2 @ K3Nv2:
    It only gives a internet settings option then it spazes out
    +1
  • BigOnYa @ BigOnYa:
    @ATEMVEGETA if you use save from other switch you may be ok, but using a save from emulator to switch will prob get you banned
  • K3Nv2 @ K3Nv2:
    Under ipv4/6
  • A @ ATEMVEGETA:
    The save file will be created and started normally on the Switch's OFW with a legit game. Then that save file will be transfered to the emulator and continue the gameplay there. Then send it back to the console.
  • K3Nv2 @ K3Nv2:
    I feel like I need to touch @Sicklyboy rack to make it work at this point
  • A @ ATEMVEGETA:
    The save file(s) would never be created first in an emulator
  • A @ ATEMVEGETA:
    Do you think continuing the story on the emulator would flag the save file as illegal? (Again no cheats, etc will take place, only normal story of the game progress)
  • BigOnYa @ BigOnYa:
    But still using the save on a emulator, then back to switch is shady
    +2
  • A @ ATEMVEGETA:
    Yea, that's the only thing I want to clarify actually. If someone has tried it with no problems.
    +1
  • A @ ATEMVEGETA:
    If using the save on the emulator flags the save file. :/
  • A @ ATEMVEGETA:
    Again, "using" I mean normal gameplay not modify it with other means like pokehex, etc
  • A @ ATEMVEGETA:
    @BigOnYa, Can you help me clarify this thing somehow? Do you know someone that may know or have tried it?
  • Psionic Roshambo @ Psionic Roshambo:
    Just play it on the emulation at home and portable use the normal save, I wouldn't risk anything if online is important to you
  • K3Nv2 @ K3Nv2:
    My psychiatrist tried to help me once said it was mine 9 months later
    +1
  • BigOnYa @ BigOnYa:
    Just ask in the forums if anybody has done it, I don't know of anybody who has, or would risk it.
  • Psionic Roshambo @ Psionic Roshambo:
    Baby daddy issues lol
    Psionic Roshambo @ Psionic Roshambo: Baby daddy issues lol