Homebrew [POC] Game Cartridge Steganography

  • Thread starter Thread starter SubstituteCS
  • Start date Start date
  • Views Views 5,568
  • Replies Replies 39
  • Likes Likes 17
Mario Kart 7 stores replays in the Cartridge, good chance if has a few MB of storage, how big is a default nand dump?

Uncompressed, and using Gateway's format: O3DS is around 950MB or so (varies), and N3DS is around 2GB (also varies). The exact size depends on which flash chip you have.
 
doesn't animal crossing have an 8mb save, in nand? (does svdt work or card2 games?)
maybe there are games with more space, but yeah, split your nand dump into 1000 parts, write them to 1000 animal crossing carts, and hope that you don't get mix up the order of the cartridges
 
doesn't animal crossing have an 8mb save, in nand? (does svdt work or card2 games?)
maybe there are games with more space, but yeah, split your nand dump into 1000 parts, write them to 1000 animal crossing carts, and hope that you don't get mix up the order of the cartridges
It does, and doesn't. You can inject / copy via emergency mode, but the gfxInitDefault() (the GUI) crashes on some games (e.g. Sm4sh.)
We're trying on a better system over at
https://github.com/meladroit/svdt/issues/16
 
  • Like
Reactions: Margen67
doesn't animal crossing have an 8mb save, in nand? (does svdt work or card2 games?)
maybe there are games with more space, but yeah, split your nand dump into 1000 parts, write them to 1000 animal crossing carts, and hope that you don't get mix up the order of the cartridges
That actually gives me a good idea... have a developer hide certain codes inside a few of their new games, and whoever has the right one wins a prize.
 
I remember doing this with an archive in jpeg images. It's an interesting concept, to be sure.

I do like the idea that it has a failsafe in that it would likely wipe the data when the game runs :p
 
I remember doing this with an archive in jpeg images. It's an interesting concept, to be sure. Given the size of saves though, I'm not sure how much could be deliberately stored per game. Enough for an image or three, I suppose.

I do like the idea that it has a failsafe in that it would likely wipe the data when the game runs :p
You could stick a large chunk of text documents on it :yay:

The fail safe only works if you replace the save file, and the game auto deletes bad saves. It could be susceptible to an attack via suspending the game before it starts the delete depending on when the person realizes what's going on.
 
You could stick a large chunk of text documents on it :yay:

The fail safe only works if you replace the save file, and the game auto deletes bad saves. It could be susceptible to an attack via suspending the game before it starts the delete depending on when the person realizes what's going on.

Indeed, you could fit a lot of text in even a MB of space. :p

If the attacker realises you have embedded content into the save, that's why it's encrypted as well. No point having obscurity being your only security. Even if they suspended it pre/mid deletion, it couldn't be accessed without the key \:D/
 
  • Like
Reactions: Margen67
There are plenty of places a message can hide: I remember something about XORing simple text data with a lossy compressed file like jpg or mpeg and there is no obvious damage to the file. This is going back a while, but it was really easy to do even in a total crap high-level language like Mathematica.

Most people don't think to shave the messenger's head but instead are distracted by the locked box he's carrying.
I remember back a few years ago it was really popular to upload pictures to 4chan, but if you changed the extension to .rar it was an extractable archive with whatever inside of it. Same thing you're talking about?
 
This is real fuckin helpful for injecting files into Download Play. Thanks! :creep:
I have never used Download Play, care to elaborate? Like, does Download Play send files to another system directly? (Additionally, does this mean you can send data you normally wouldn't be able to?)
 
i mean even with a cartridge inserted it picks download play.
That's a bug, did you hot swap your sd card before selecting SVDT? That happens when you do, just hit [Start] to exit SVDT and relaunch it (this time HBL will allow you to pick the game you want.)
 
3ds off
install on sd card
put sd in
turn 3ds on
launch svdt
notice bug
exit svdt but not turning off
launch svdt
"BUG"
 

Site & Scene News

Popular threads in this forum