Hacking Official [Release] CakesFW

[mid-kid]

Can i boot Cakes through Tubehax on o3ds fw9.2 (just asking )
(No ironfall on it)

I don't think ironhax/ninjhax 2.0 are able to boot other CFWs either.
At least, iirc, brahma only works with ninjhax up to 1.1, and I don't think anybody's about to fix that.

This includes tubehax.

 

[Torx]

Does ninjhax 2.0/2.1 use a new boot.3dsx as Ive been launching the boot.3dsx from ninjhax 1.1 on tubehax?

 

[3xkrazy]

Does ninjhax 2.0/2.1 use a new boot.3dsx as Ive been launching the boot.3dsx from ninjhax 1.1 on tubehax?

Im pretty sure that 2.X uses the new boot.3dsx, which has less kernel privileges.

 

[Zap Rowsdower]

Does ninjhax 2.0/2.1 use a new boot.3dsx as Ive been launching the boot.3dsx from ninjhax 1.1 on tubehax?

You cannot launch a 1.1b boot.3dsx using a 2.0 exploit. Now what you could do if you're so determined is do what I did and modify your 1.1b payload to load a file other than boot.3dsx, (then Ninjhax 2.0 could still load the boot.3dsx) but I wouldn't call it easy to do.

 

[3xkrazy]

You cannot launch a 1.1b boot.3dsx using a 2.0 exploit. Now what you could do if you're so determined is do what I did and modify your 1.1b payload to load a file other than boot.3dsx, (then Ninjhax 2.0 could still load the boot.3dsx) but I wouldn't call it easy to do.

Could you share your code?

 

[hippy dave]

You cannot launch a 1.1b boot.3dsx using a 2.0 exploit. Now what you could do if you're so determined is do what I did and modify your 1.1b payload to load a file other than boot.3dsx, (then Ninjhax 2.0 could still load the boot.3dsx) but I wouldn't call it easy to do.

Yes please share, I could really use this

 

[Zap Rowsdower]

This is kind of OT, (PM me for questions. I don't want to muddy the thread) but here's how I did it. You have to decrypt your extracted payload with blowfish.py after making this change,
ret=cipher(S,P,l,r,0) --> ret=cipher(S,P,l,r,1)
and it's hardcoded to load blowfish_processed.bin (google for a pastebin)
There will be a number of 'boot.3dsx' instances in the file output to hex edit, and when that's done you change the code back to 0, and reverse the command line arguments
and then you'll have your edited payload ready to be injected.

 

[Zidapi]

This is kind of OT, (PM me for questions. I don't want to muddy the thread) but here's how I did it. You have to decrypt your extracted payload with blowfish.py after making this change,
ret=cipher(S,P,l,r,0) --> ret=cipher(S,P,l,r,1)
and it's hardcoded to load blowfish_processed.bin (google for a pastebin)
There will be a number of 'boot.3dsx' instances in the file output to hex edit, and when that's done you change the code back to 0, and reverse the command line arguments
and then you'll have your edited payload ready to be injected.

Great work! Create a new thread for this and we shall crown you king (for as long as we see fit).

 

[Sparkette]

My bad, I misread that as "We won't share code" and managed to overlook the link to the github repo.

Disregard my earlier post, please allow me to applaud your work.

Edit: lol responses to edited responses to edited posts

Now I'm curious; what did your posts say before?

 

[Wintice]

A new question ...could I use cakes on N3DS with sysnand 8.1 and emunand 9.5？

 

[b1l1s]

A new question ...could I use cakes on N3DS with sysnand 8.1 and emunand 9.5？

There's a bug still with mset on n3ds 8.1.

 

[Wintice]

There's a bug still with mset on n3ds 8.1.

Got it. I mistakenly thought that all the mset ROPs do the same thing as GW‘s...

 

[innercy]

reinstall back latest build, so far so good.

 

[Zap Rowsdower]

Great work! Create a new thread for this and we shall crown you king (for as long as we see fit).

Quiet down everyone, your "king" has something to say.
...lol
The newest NH2.0 boot.3dsx is actually backwards compatible, meaning that you can use a 1.1b payload to load those 1.1 exclusive apps.

 

[Cindakil]

Hi!

I have a N3DS 9.0 with emunand created.
MSET Downgraded.
Gateway Flashcard

But I lost my cubic ninja, is there any way to get access to gateway menu or RX, or Cakes... ??

 

[b1l1s]

Hi!

I have a N3DS 9.0 with emunand created.
MSET Downgraded.
Gateway Flashcard

But I lost my cubic ninja, is there any way to get access to gateway menu or RX, or Cakes... ??

If you already have mset downgraded you can just use the blue cart(I don't own GW but I think this is the one) to install the ROP that you need, be it for GW, rxTools or CakesFW.

 

[thaikhoa]

If you already have mset downgraded you can just use the blue cart(I don't own GW but I think this is the one) to install the ROP that you need, be it for GW, rxTools or CakesFW.

@173210 has done experimental plugin module for CakesFW. Do you have any idea about that? Screenshot plugin?

 

[Kawaii]

can future cakeCFW firmware.bin location placed in 'cakes' folder please

 

[Cindakil]

I dumped and decrypted my Sysnand partitions (with Decrypt9) and now I have FIRM0.bin, Firm1.bin and CTRNAND.bin.

How I can obtain firmkey.bin and firmware.bin??

PS: Is a New3DS 9.2

Im lost


EDIT: I THINK that I get the correct firmkey.bin but I'm not sure what firmware.bin I have to use. They say me "Failed to decrypt the firmware.bin"

 

[Cavioe]

I dumped and decrypted my Sysnand partitions (with Decrypt9) and now I have FIRM0.bin, Firm1.bin and CTRNAND.bin.

How I can obtain firmkey.bin and firmware.bin??

PS: Is a New3DS 9.2

Im lotst

Easiest way is to go to that 3ds iso site and get it from there.