[Release] LumaSwitch, Noob-Proof CFW for the Nintendo Switch

Discussion in 'The Edge of the Forum' started by EthanAddict, Jul 6, 2017.

  1. EthanAddict
    OP

    EthanAddict Founder of Skiddon't-ism

    Member
    433
    1,928
    Nov 12, 2016
    Greece
    [​IMG]
    This is the very first Noob-Proof Switch CFW
    It works by exploiting a fatal flaw in wifi menu:

    Nintendo used malloc() to allocate a 256 byte array,
    But when you insert the password, it calls to the memory location which was previously allocated,
    Which doesn't have proper buffer overflow protection, and thus, by inserting a properly crafted key, one can easily modify mem regions and get code execution

    How to do it:
    place hb.bin in the root of your SD card
    select a random access point and put this string as a key:
    Code:
    8513edc54e94959c75bcb3fcbadedb18264dc716b632d1eb24df2bcf1dbeea13e03fb51a69e023ee44848659fd7b20c9e61aafe31b24e5a6a7d258e6d9b810955241991b9d66c8da905acb79fb6281d4173e199bb56c8982d0c840d7b34d587af4891d891cc7d369807a54f03b6414d5f04d7c11494969d2635f62b06e2e34880c92693f6c3726f7240ab346aa05a6ca0b0379031b62cbe0a811e1bce369cc3476fce74fdfeb90342232f6e6f06cd904d375690e848c359958737613a2a226897dd837fa584f4acde1c7bbf88e6eaecf953ab85780ad51e0f6f2af0e995654d2a3db8372e914acf4dffa6326b80872d76c9d1b414e4e9ae42186b9fba5aa79f42fed7ff0a48ebd3e3a5ea2610d646bfe7860a6fc85f87a44aa68dcdd9d476d9e9fb9fddf8721c81d7a37ec3eab00c1fd36b55b0c6be68c0f907b10580473b13ddcbcbd009aeae22b7a4d0f476521b7903d442103218c764312c97427203e08d78c87ec5842cd89ecdb1b5a7af42af83e830bab3ef0f3cece430205f7cf5a58dd73b4158a2b9f3b19ddd1aabbd3a35471
    It should crash, and after ~10 seconds it will boot the hb.bin file

    Proof:
    [​IMG] [​IMG]

    Ask quesions in this thread
     

    Attached Files:

    • hb.7z
      File size:
      2.2 KB
      Views:
      18
    Zekamon likes this.
  2. Dionicio3

    Dionicio3 Some Cool Skiddo

    Member
    3,090
    4,396
    Feb 26, 2017
    United States
    Hollister, CA
    Can it run Windows?
     
  3. EthanAddict
    OP

    EthanAddict Founder of Skiddon't-ism

    Member
    433
    1,928
    Nov 12, 2016
    Greece
    Windows 7, because Windows 10 suck
     
    Zekamon, TheKingy34 and NutymcNuty like this.
  4. DeoNaught

    DeoNaught ¯\_(ツ)_/¯

    Member
    1,468
    1,300
    Aug 22, 2016
    United States
    Over there ;)
    Can it play gaemcoob gaems?
     
  5. EthanAddict
    OP

    EthanAddict Founder of Skiddon't-ism

    Member
    433
    1,928
    Nov 12, 2016
    Greece
    Yes, a gacube emeleter was implemented in the hb
     
    DeoNaught likes this.
  6. Zekamon

    Zekamon Now with extra salt!

    Member
    467
    136
    Sep 16, 2016
    Germany
    Thanks for letting me test the Extreme Pre-Alpha build on my prototype white switch mini. I'm enjoying the lack of Homebrew so far!
     
  7. Zekamon

    Zekamon Now with extra salt!

    Member
    467
    136
    Sep 16, 2016
    Germany
    Also here is the Config Screen so you can see what you can do.[​IMG]
     
    gnmmarechal and EthanAddict like this.