Hacking Question Switch screen staying black after injecting payload

[Deleted member 517596]

One day i accidentally let my switch battery die (i have auto rcm on) i let it charge for 2 days and now when i plug my switch into the computer and go on tegrarcm which says rcm ok, but when i go to inject a payload nothing happens. Tegrarcm says that the payload has been injected successfully but switch stays blank. If i unplug my switch and plug it back in tegra doesn't recognise the switch until i hold the power button for 10 seconds and then press it once, this seems like something is happening but the screen stays black. The main issue is that i have autorcm enabled which means i have no way of testing if it boots into OF. Below is a list of things i have tried.

Things i have tried.

1. downloaded new sd card files from sdsetup
2. tried different sd cards
3. tried formatting the sd card as exfat and fat32
4. tried injecting payload using usb-c to usb-c cable and tried using usb-a to usb-c
5. tried injecting payload from different computer also tried injecting from phone
6. tried many different payloads
7. i have tried using this command for biskeydump which is meant to print the info to the cmd to try and see if anything is working but got nothing. (TegraRcmSmash.exe -w out/biskeydump.bin BOOT:0x0)

At this point im out of ideas the only thing i can think of is that its a hardware issue, but i have no idea how to check as i cant boot to the OF.

 

[thesjaakspoiler]

Try holding the power button for 15~30 seconds, that will turn off the Switch, even if it booted into RCM mode.
Then leave your Switch charging for a night as it will be charging extremely slow.
Use Lockpick_RCM as a payload to see if you can inject something succesfully.
lockpick doesn't depend on anything on the SD card.
The latest bootloaders do depend on what's on your SD card.

Edit : and don't charge it on the dock but directly. That also seems to make a difference.

 

[Deleted member 517596]

Try holding the power button for 15~30 seconds, that will turn off the Switch, even if it booted into RCM mode.
Then leave your Switch charging for a night as it will be charging extremely slow.
Use Lockpick_RCM as a payload to see if you can inject something succesfully.
lockpick doesn't depend on anything on the SD card.
The latest bootloaders do depend on what's on your SD card.

Edit : and don't charge it on the dock but directly. That also seems to make a difference.

okay ill give that a try and see if the lockpick_rcm payload works

--------------------- MERGED ---------------------------

Not sure why that post only went just then, anyway i left it charging overnight and just tried injecting lockpick_rcm and still nothing. when i inject the payload in the tegra console i get this

RCM Device detected
Invoking TegraRcmSmash.exe with args : "E:\Downloads\Lockpick_RCM.bin"
TegraRcmSmash (32bit) 1.2.1-3 by rajkosto
Opened USB device path \\?\usb#vid_0955&pid_7321#6&9d55e15&0&1#{aa0dbd45-3117-f331-5c49-76bf65225042}
RCM Device with id C08206040000000409B7306401101062 initialized successfully!
Uploading payload (mezzo size: 92, user size: 122305, total size: 188521, total padded size: 192512)...
Smashing the stack!
Smashed the stack with a 0x7000 byte SETUP request!
Payload successfully injected


which says it successfully injected the payload but nothing happens on the switch.

 

[Deleted member 517596]

i also just tried the tutorial on this website called "A definitive way to test if your Switch is patched or not (purchases after 07-2018)"

when i run the payload it says the payload was injected but i don't get any of the keys or anything in the console which tells me the payload isn't being run. i have attached an image of the console

 

[Kafluke]

Just because you can inject the payload doesnt mean you're not patched. You can push a payload on a patched system it just wont do anything after. Black screen.

If your system is not patched and you get a black screen it's usually related to the SD card.

 

[Deleted member 517596]

Yes, but i was pushing payloads the other week and it was working. I was running cfw and everything, until it ran out of battery and now it's not working, I have also checked my serial number on a couple of websites and it's not patched.

--------------------- MERGED ---------------------------

What else could be wrong with my sd card I have tried formatting it as exfat and fat32 and I have downloaded new files from sdsetup.

Also if it's the sd card why am I not getting anything when I run payloads that don't need files on the sd card like the one in my previous post where I wasn't getting a response with the keys.

 

[Deleted member 517596]

still having this issue if anyone has found a solution?

 

[simo0n1631]

still having this issue if anyone has found a solution?

i'm also having this issue, i've asked like 3 times on the discord and have been ignored all 3 times lol

 

[BigOnYa]

i'm also having this issue, i've asked like 3 times on the discord and have been ignored all 3 times lol

Sorry guys, I don't think anyone is ignoring you on purpose, it's just I/ we are at a loss on what else can be done or what is wrong. It does seem odd that the LockPick_RCM is able to be pushed to the switch successfully (Smashed the stack with a 0x7000 byte) but no show on the switch screen at all. Seems to me either a bad battery or a bad switch. I would suggest leave it on the charger for couple of days to maybe charge the battery back to a operable state, then try again. Battery replacements are a cheap fix if you want to start there to try fix after charging couple days and still doesn't work. Good luck.

 

[simo0n1631]

Sorry guys, I don't think anyone is ignoring you on purpose, it's just I/ we are at a loss on what else can be done or what is wrong. It does seem odd that the LockPick_RCM is able to be pushed to the switch successfully (Smashed the stack with a 0x7000 byte) but no show on the switch screen at all. Seems to me either a bad battery or a bad switch. I would suggest leave it on the charger for couple of days to maybe charge the battery back to a operable state, then try again. Battery replacements are a cheap fix if you want to start there to try fix after charging couple days and still doesn't work. Good luck.

ok thanks

 

[Draxzelex]

still having this issue if anyone has found a solution?

Have you tried other ports, cables, and/or operating systems?

 

[hostelo]

was this ever resolved?

still have this problem as well

 

[Draxzelex]

was this ever resolved?

still have this problem as well

Have you tried other ports, cables, and/or operating systems?

 

[H4ydos]

Having the same issue, I have posted on Reddit.
No fix yet. Would love to see something come across this cause it's an unresolved issue that lots are starting to get. Switch works fine for normal boot but can't enter post RCM payload injected mode

 

[H4ydos]

Having the same issue, I have posted on Reddit.
No fix yet. Would love to see something come across this cause it's an unresolved issue that lots are starting to get. Switch works fine for normal boot but can't enter post RCM payload injected mode

 

[Draxzelex]

Having the same issue, I have posted on Reddit.
No fix yet. Would love to see something come across this cause it's an unresolved issue that lots are starting to get. Switch works fine for normal boot but can't enter post RCM payload injected mode

Have you tried other ports, cables, and/or operating systems?

 

[kcino]

i'm also having this issue, i've asked like 3 times on the discord and have been ignored all 3 times lol

go on your pc go to device manager then disable the switch apx driver then renable it if your payload is stuck or incomplete this will help reset it then boot into rcm and inject the payload i just had this issue not even a day ago

 

[Tossum]

One day i accidentally let my switch battery die (i have auto rcm on) i let it charge for 2 days and now when i plug my switch into the computer and go on tegrarcm which says rcm ok, but when i go to inject a payload nothing happens. Tegrarcm says that the payload has been injected successfully but switch stays blank. If i unplug my switch and plug it back in tegra doesn't recognise the switch until i hold the power button for 10 seconds and then press it once, this seems like something is happening but the screen stays black. The main issue is that i have autorcm enabled which means i have no way of testing if it boots into OF. Below is a list of things i have tried.

Things i have tried.

1. downloaded new sd card files from sdsetup
2. tried different sd cards
3. tried formatting the sd card as exfat and fat32
4. tried injecting payload using usb-c to usb-c cable and tried using usb-a to usb-c
5. tried injecting payload from different computer also tried injecting from phone
6. tried many different payloads
7. i have tried using this command for biskeydump which is meant to print the info to the cmd to try and see if anything is working but got nothing. (TegraRcmSmash.exe -w out/biskeydump.bin BOOT:0x0)

At this point im out of ideas the only thing i can think of is that its a hardware issue, but i have no idea how to check as i cant boot to the OF.

I have had this twice. its caused by that auto rcm thing. You need to use an official charger to charge your switch up overnight. Then unplug it from the charger and run tegra RCM with it connected to your pc. as soon as the switch screen shows that the payload had been pushed immediately unplug it and plug back in the charger. then uninstall that infernal auto rcm thing.

 

[townimbecile]

I just experienced this exact issue. It turns out I was using a USB hub. Hooking directly to a USB port fixed the issue.

 

[Wrecks]

Try holding the power button for 15~30 seconds, that will turn off the Switch, even if it booted into RCM mode.
Then leave your Switch charging for a night as it will be charging extremely slow.
Use Lockpick_RCM as a payload to see if you can inject something succesfully.
lockpick doesn't depend on anything on the SD card.
The latest bootloaders do depend on what's on your SD card.

Edit : and don't charge it on the dock but directly. That also seems to make a difference.

This worked for me! Thank you!