Homebrew [Release] Custom ROP loader HTML

[SomeGamer]

I mean... How can I select to dump 128MB, not 3.

EDIT: Silly me! Didn't scroll until now... saw FCRAM dump! Sorry for taking away your valuable time!

 

[duke_srg]

I mean... How can I select to dump 128MB, not 3.

Just use FCRAM dump option, the ROP one have precompiled dump size

 

[NeoKamek]

Duke,

Thanks so much for your support of the spider exploit and the excellent tools you've provided.

Are there any caveats to using DownloadCode in its current form? I plan on migrating my LeafTools spider exploits to DownloadCode but I ran into a few difficulties (the index.html on the repo does not run DownloadCode, I had to borrow the one from http://dukesrg.no-ip.org/3ds/rop/ to get it to work) and wanted to make sure it would be (relatively) safe to roll out before I do so.

DownloadCode is a godsend btw, now I can easily test code changes without having to fiddle with the SD card constantly. Great job

 

[duke_srg]

NeoKamek As you already noticed, DownloadCode requres special index.html to launch, which will place additional payload. The downside is that all ROP exploit became less stable - the probability of not executing the exploit code decreases. The maximum payload length, including DownloadCode itself, is 768*5*3 bytes. However 768*5 should be more stable, also I've noticed that for several code stability decreases just after reaching 4096 bytes (though this value is not linked with the spider exploit sizes)

As for the LeafTools, I optimized Action Replay engine so sigature search speed was increased greatly. If you're patching only several words at a time using action replay engine is preffered

 

[NeoKamek]

Sounds good, most of the leaftools can be eliminated by making calls to action replay instead. I'll have to look into it. Thanks for the info!

 

[duke_srg]

Sounds good, most of the leaftools can be eliminated by making calls to action replay instead. I'll have to look into it. Thanks for the info!

There are several examples with signature search in ARCode thread, which works for sure!

 

[duke_srg]

Finally made a multiple patch address and Base64 data support for patching ROP load in index.html. Also changed patch address separator to ':' to avoid conflicting with Base64 pad character.
VC.dat and memdump.dat rebuild with print output support. memdump.dat and MemoryDump.dat also can now be patched to change address/size of the dump (be aware that MemodyDump.dat dump size is limited with the heap size used as a buffer)
Will update the head post tomorrow, refer to Beta menu in 3DS online tools to get the offsets.

 

[Kengetsu]

I have a question, i've been trying to get the Virtual Console ROM injector to run on my 3DS running firmware 9.20-20, but everytime I run it it tells me the file is to small regardless of the file I put in. I'm using the Gameboy game Metroid 2 Return of Samus, i've tried using files from 32kb to 20mb but nothing works. I'm running it via a bookmark I made in the browser using the url : http://dukesrg.no-ip.org/3ds/rop?VC.dat&rom.gb

 

[duke_srg]

I have a question, i've been trying to get the Virtual Console ROM injector to run on my 3DS running firmware 9.20-20, but everytime I run it it tells me the file is to small regardless of the file I put in. I'm using the Gameboy game Metroid 2 Return of Samus, i've tried using files from 32kb to 20mb but nothing works. I'm running it via a bookmark I made in the browser using the url : http://dukesrg.no-ip.org/3ds/rop?VC.dat&rom.gb

It should work fine, however I'm not sure it is working with metroid 2 VC. Super Mario DX and Shantae a proved to work. Also notice that after first injection VM ROM size changes to I jected ROM size and until VC restarted only smaller Roms can be reinjected.

 

[kingdawn]

My 3DS sysnand is 4.2 ( from Gateway downgrade payload)
I want to use this for ACNL:Leaftools, but I never managed to work, using loadcode.dat or loadcode4.dat.
Here what I tried:
0.A 3DS sysnand 4.2 running with the Legit CIA of ACNL.
1.Download all the leaftools bins, (eg.lt-money.bin,etc), and put them on root the SDCARD. NOT download LoadCode.dat and NOT put them in sdcard.
2.Running in game, the pause the game, open the browser, open the url: http://dukesrg.no-ip.org/3ds/rop/?LoadCode4.dat&lt-money.bin
3.Without the lowwer screen flash, just the brower exits with a error.

Where did I do sth wrong?

And whether there is a TEST bin like code.bin to test whether the LoadCode4.dat work on my 3DS 4.2?

 

[kingdawn]

The same error mentioned in somewhere by the others, especially in the ACNL:Leaftools thread.
We all have things in common is that our sysnand is 4.x.
Does this matter?
I want to troubleshot this, so first turn to here and duke
Any words or opinions would be appreciated.
Thanks!

 

[duke_srg]

As I know all code.bin existed up to date was only for firmware 9.x.

 

[powersaver]

Edit: it seems to work if I wait a while on the "Executing..." and then just quit back to the homescreen by pressing home.

Hi, can anyone explain how to use spoof.dat?

I sometimes I have issues with my Spider3DSTools server (human error I think), however I can't get spoof.dat to work at all, not even once.

On my o3DS, I restored my backed-up 9.2 NAND and I'm trying to use spoof.dat. I'm using ...3ds/rop?spoof.dat and it just says Executing...

Thanks.

 

[KazoWAR]

is there an example of DownloadCode?

 

[Madridi]

@duke_srg
Do you have a back up site (github?) to run loadcode
http://dukesrg.no-ip.org/3ds/rop?LoadCode.dat&xxxxxx.bin
Something like the above?

Dukesrg.no-ip has not been working for a couple of days, and it would be nice to have alternatives.

I already changed all my links for rxTools, decrypt9, emunand9, cakes, etc.. From no-ip to dukesrg.github.io .. Now loadcode remains the only thing that I need an alternative for.

Thanks

 

[duke_srg]

@duke_srg
Do you have a back up site (github?) to run loadcode
http://dukesrg.no-ip.org/3ds/rop?LoadCode.dat&xxxxxx.bin
Something like the above?

Dukesrg.no-ip has not been working for a couple of days, and it would be nice to have alternatives.

I already changed all my links for rxTools, decrypt9, emunand9, cakes, etc.. From no-ip to dukesrg.github.io .. Now loadcode remains the only thing that I need an alternative for.
Thanks

no-ip.com account was suspended, moved to dukesrg.dynu.com, just forgot to fix this topic head. And yes, github.io mirror contains most of exploits.

 

[Madridi]

no-ip.com account was suspended, moved to dukesrg.dynu.com, just forgot to fix this topic head. And yes, github.io mirror contains most of exploits.

Thanks, dynu.com worked great

What is the mirror for loadcode exploit on github (If it's on there)?
http://dukesrg.github.io/3ds/rop?LoadCode.dat&xxxxxx.bin
Something like this?

 

[Madridi]

@duke_srg

Now dukesrg.dynu.com seems to be down.. Is there a github.io mirror for loadcode?

 

[duke_srg]

@duke_srg

Now dukesrg.dynu.com seems to be down.. Is there a github.io mirror for loadcode?

Use .dynu.net instead, looks like dynu.com was reported %)

 

[rickyfaus0]

so no more new website or what guys