This is the very first Noob-Proof Switch CFW
It works by exploiting a fatal flaw in wifi menu:
Nintendo used malloc() to allocate a 256 byte array,
But when you insert the password, it calls to the memory location which was previously allocated,
Which doesn't have proper buffer overflow protection, and thus, by inserting a properly crafted key, one can easily modify mem regions and get code execution
How to do it:
place hb.bin in the root of your SD card
select a random access point and put this string as a key:
Code:
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:
Ask quesions in this thread
