Hacking Homebrew [Release] CorruptedClues NDS Savegame Exploit

[ChampionLeake]

It's been a minute since I've actually did one of these. I almost forgot how to actually exploit/reverse engineer in general.

Introducing, CorruptedClues, a stack smash savegame NDS exploit for the game "Cate West: The Vanishing Files". This exploit takes advantage of the ASCII strings present within the savefile. These strings are however not checked, so a large carefully crafted string can overwrite the stack to lead into code being executed. My payload will only make your top screen flash different colors. Nothing else.

These are ARM9 exploits that takes over a NDS mode cartridge. These type of exploits are very limited since there's no SD or NAND access. They can be used to run a small payload. These exploits are almost useless, but still fun
Source Code: https://github.com/ChampionLeake/CorruptedClues
Video Demonstration:

 

[SylverReZ]

Only use case that I could think of is placing a small bootstrap into the save file to make it launch something like TWiLight Menu++ from a secondary device, like a slot-2 flashcard or SD card, that is if you could add the extra I/O code.

Otherwise, this is a rather interesting proof-of-concept. I don't see use cases with game-based exploits nowadays.

 

[Janni9009]

I don't see use cases with game-based exploits nowadays.

Flashcarts still need these to boot on stock DSi/3DS.

that is if you could add the extra I/O code.

Also, NoPass. The only Slot-2 cart that needs to actually be externally read is the Max Media Dock.

 

[ChampionLeake]

Flashcarts still need these to boot on stock DSi/3DS.

Also, NoPass. The only Slot-2 cart that needs to actually be externally read is the Max Media Dock.

These NDS savegame exploits are rendered pretty much useless as it only has access to the NDS savedata and nothing else. They can be used to only run very small demos. These are no use to enable or allow flashcards to work.

 

[Deleted member 702243]

it doesnt need to be useful to be cool