Homebrew [Release] Custom ROP loader HTML

[duke_srg]

Added firmware spoof to access eshop and other online services

 

[motezazer]

Added firmware spoof to access eshop and other online services

You should precise that it doesn't work on firmwares higher than 9.2

 

[duke_srg]

You should precise that it doesn't work on firmwares higher than 9.2

I suppose it is exactly for 9.0-9.2, right?

BTW, which part of the code allows to keep browser running but not crash after code executed?

2All: actual DownloadCode and relative index.html modification may be unstable, it depends greatly on the each unique 3DS memory layout after loading spider browser. I ran the exploit with no issues for almost two weeks but that did not prevent that suddenly it started to work way less stable so even full browser data reset did not help. I'm planning to make downloadcode with appropriate html a separate project keeping ROP loader more stable.

 

[fmkid]

Ok, duke, I replaced my links with your suggested html code and tried again, but definitely not works... Anyway, thanks for your advice!

I have this last question: Problem is on latest VC.dat, index.html or both?... And will be possible that you post (here or any place) older VC.dat & index.html file versions?

Thanks again and keep on work!

 

[duke_srg]

fmkid the problem is in index and downloadcode pair. I used all available payload space but that is far less stable that the original. I'll try to workaround that.
VC injection source is available at github, you can build it yourself if needed right now.

 

[fmkid]

fmkid the problem is in index and downloadcode pair. I used all available payload space but that is far less stable that the original. I'll try to workaround that.
VC injection source is available at github, you can build it yourself if needed right now.

OK, thanks a lot... And I hope that you can solve that issue on a better way!

 

[duke_srg]

OK, thanks a lot... And I hope that you can solve that issue on a better way!

I'll make a light fix in an hour or so.

 

[duke_srg]

fmkid just applied a small fix to index.html and rebuild VC.dat to fin into one bulk, check now please!

 

[fmkid]

fmkid just applied a small fix to index.html and rebuild VC.dat to fin into one bulk, check now please!

Where I get the updated files to check?

 

[duke_srg]

Where I get the updated files to check?

Nothing to get, 3dsonline tools is updated =)

 

[fmkid]

Nothing to get, 3dsonline tools is updated =)

Ok, I will be on it in a moment!

 

[fmkid]

Here are the results testing VC injection with latest VC.dat and index.html files on my local server:

- 3DS Browser Bookmarks direct method: WORKING FINE!

- Personalized HTML page with links (<a href...> & <input type...>) method : Works, BUT only in a very, really very few times. It's somewhat unstable yet.. After a lot of test, the best way to run VC injection I could see through this method was holding turn off 3DS WiFi slider while opening either VC game and browser, and turn on just until the moment to load the created HTML page with links.

 

[duke_srg]

fmkid
I've redesigned launcher page on 3DS tools with icons, also added most usable ROPs including VC dump. For me it works stable from thar page, please also check that

 

[SomeGamer]

Help! Memory dump doesn't work for me! Others are seemingly fine. I'm on 9.5 O3DS, what am I doing wrong?

 

[duke_srg]

Which one, FCRAM dump?

 

[SomeGamer]

Which one, FCRAM dump?

Yes! (Are there others?)

 

[duke_srg]

Yes! (Are there others?)

It should not, because it inclusdes ARM code for 9.2

 

[SomeGamer]

It should not, because it inclusdes ARM code for 9.2

Then I'm confused. Memdump2.bin worked for me on 9.5...

 

[duke_srg]

Then I'm confused. Memdump2.bin worked for me on 9.5...

Oh, so this may be index/downloadcode issue. Have you tried deleting history /cookies?

 

[SomeGamer]

Oh, so this may be index/downloadcode issue. Have you tried deleting history /cookies?

Of course, a lot of times...