Hacking Possible New Way To Homebrew a Nintendo Switch

[LinusRG]

First of all anyone can use this idea because i don't know how to program or anything i just like cfw and all of that. Second someone might have already come up with this idea i don't want to take credit for it. But if no one has thought of this idea before you don't have to but could I at least be in the credits file of the exploit?

Anyways with all that out of the way my idea for an exploit is to create a photo album exploit. I know the switch can read photos from an sd card if you put them in the right place and since Nintendo probably does not think anyone would exploit the photo album it could be easily exploitable even on 6.0.0. Basically we would use a similar type of photo exploit that the psp used for it's photo exploit. The one where there was a bunch of photos then you launched one and it took you to the cfw installation menu for the psp. If you could create one similar that worked with the switch then you could exploit it pretty easily I think even on 6.0.0. I know most switches support RCM but for people who bought their switch recently (like me) RCM has most likely been patched so it would nice to have this exploit for people like me. Anyways someone please tell me if this is possible if it is I hope someone can make it happen.

 

[Kubas_inko]

I hihgly doubt that you can gain a trustzone access from the album. So probably not possible.

 

[jakkal]

Not this again

Are we back in 2017?

 

[LinusRG]

what do you mean by trustzone access

 

[Jhynjhiruu]

what do you mean by trustzone access

Before suggesting a new exploit idea, I suggest you read up about how the Switch's security works.

 

[Kubas_inko]

what do you mean by trustzone access

Before suggesting eploits, read thru switchbrew.

 

[LinusRG]

while we are on the subject of exploits my switch can access RCM mode but it and payloads can be injected but they cant be displayed. would a simple update be all that is needed to TegraRCMGui in order to inject payloads into newer switches that can still boot into RCM mode?

 

[magico29]

you need to check serial number b4 buy any switch and thats been told many times.

 

[Kubas_inko]

while we are on the subject of exploits my switch can access RCM mode but it and payloads can be injected but they cant be displayed. would a simple update be all that is needed to TegraRCMGui in order to inject payloads into newer switches that can still boot into RCM mode?

You have ipatched unit then.
So you can't use rcm exploits ever. You'll have to wait for other exploits.

 

[sj33]

what do you mean by trustzone access

I normally don't like to snipe like this, but it's not a good idea to suggest exploits without having a basic understanding of how the system in question works.

 

[Kubas_inko]

Tbh its not a bad idea, just no knowledge.

 

[SupImBirDy]

while we are on the subject of exploits my switch can access RCM mode but it and payloads can be injected but they cant be displayed. would a simple update be all that is needed to TegraRCMGui in order to inject payloads into newer switches that can still boot into RCM mode?

When I got my switch I’d load Hekate and then run a CFW and it would freeze or an error would pop. So I updated to 5.1 and they started to work with no error, unless you got a new patched switch

 

[LinusRG]

i probably did got min about 2 weeks ago

 

[SupImBirDy]

Still worth the try but see if it’s a patched one.

 

[Dust2dust]

how

Try this:
https://gbatemp.net/threads/a-defin...atched-or-not-purchases-after-07-2018.512018/

Then, you'll know for sure.

 

[LinusRG]

thankyou

 

[Garou]

people have been throwing this idea for a long time, I even find this one by quick searching to this forum
https://gbatemp.net/threads/hacking-the-switch-through-the-album.473691/

there is even a tool to sign the image so the switch album can see it
https://gbatemp.net/threads/release-nsscreenshotmaker.501018/

but no, currently it's not possible

 

[Crusatyr]

Your suggestion is like saying, 'I have an idea for curing cancer, has anyone tried a pill?'

 

[LinusRG]

ok it kind of makes sense i guess i should of known nintendo would not have left their album that open

 

[Jhynjhiruu]

ok it kind of makes sense i guess i should of known nintendo would not have left their album that open

It's more that, even if there was an exploit in the album (which is unlikely, as Nintendo would have paid special attention to any way the console interfaces with the outside world) it wouldn't allow anything like the level of access fushofelX gives.

 

[LinusRG]

makes sense