Hacking Request to acquire full NAND dump for forensics class

[ASimpleUser]

Hello together,

I'm a long time reader in this nice forum but never had anything worthy of posting myself.

For my computer crime and forensics class I have to make a small project. I'd like to do a full forensic analysis of the Nintendo Switch. Since this involves my professors buying a (used) Nintendo Switch for roughly around 200€, I'd have to propose and estimate if it would be worthwhile for our class.

In order to assess this, I think it would be valuable to look at a full NAND dump, but I don't have an own Switch to make one.

Can anybody provide me with a source where I could have a look at such a dump or send me one themselves? I would be very thankful and of course also keep all information by myself and delete it after usage. I think it could be a exciting research project!

 

[Kafluke]

Cant share nand dumps. Proprietary Nintendo copywrited stuff. Just get a hold of a switch and do it yourself

 

[Traiver]

Nice try Nintendo.

 

[FAST6191]

That is jumping in at the deep end -- you will have nice encryption, run level protection and more besides to go through as the Switch is the latest in a long line of a company building its own hardware and aiming to keep people that tend to be around here out of it. This is unless you are allowed to use existing hacks/sources*, in which case it is a bit easier..

*I don't know what the forensics class is teaching here, there are nice papers on such things for when they have been hacked and people are using them as general purpose computers (a personal favourite https://www.tandfonline.com/doi/full/10.1080/15567280701417991 , though I should probably link https://web.archive.org/web/2014080....com/useful-articles/games-console-forensics/ as well. Also https://nostarch.com/xboxfree because why not.) and obviously then leaving it as an option for something that might end up in court. If it is looking through a plaintext nand dump for strings, run logs, hacking indicators... then so be it.
If you actually have to do some hacking work in the first place... it is a bit more than a class project, maybe even a final undergrad project unless you really want to.

Anyway I don't have a dump and you might be hard pressed to find one just sitting around, especially with the relevant keys. It is very possible someone will find you one though.

 

[nathone]

Hello together,

I'm a long time reader in this nice forum but never had anything worthy of posting myself.

For my computer crime and forensics class I have to make a small project. I'd like to do a full forensic analysis of the Nintendo Switch. Since this involves my professors buying a (used) Nintendo Switch for roughly around 200€, I'd have to propose and estimate if it would be worthwhile for our class.

In order to assess this, I think it would be valuable to look at a full NAND dump, but I don't have an own Switch to make one.

Can anybody provide me with a source where I could have a look at such a dump or send me one themselves? I would be very thankful and of course also keep all information by myself and delete it after usage. I think it could be a exciting research project!

where are you located? Do you have the facilities to read a bare EMMC chip? I have a switch EMMC that has been removed from its daughter board, if you have a forensics lab you can scan it to your hearts content. Although with the encryption I am not sure how far you will get...

 

[Krude]

Well, since the Incognito homebrew now exists (which scrubs all personal information like console certificates and stuff from your NAND), it wouldn't be that dangerous to clean a nand and send it over. The legalities of sharing a NAND with proprietary nintendo software on it aside.

A NAND is still 32 GBs large, so you can't exactly send it via email.

 

[SaUzEr]

Nice try Nintendo.

AHAHAAHAHHHA the most funny post..