Tutorial  Updated

Using "smashhax" with Linux

If you can use the browser, I suggest that you use the new browserhax (up to 11.0.0-33!) in the meantime.

Try out Ubuntu 15.04: http://old-releases.ubuntu.com/releases/15.04/

This requires a New 3DS. The demo version doesn't work and is patched. If you have 1.1.3 or newer delete/disable the update data.

officially called smashbroshax sometimes smashax
Here is a new tool I call smashbroshax-helper. It is a graphical interface for the exploit which simplifies most of the process of broadcasting the packet. It requires almost no setup outside of creating a bootable Linux USB/DVD.

Important notes:
  • This does not work on Fedora or Red Hat-based distributions because aircrack-ng needs to be compiled on it (and I can't figure out how to install the needed things).
  • Don't use a virtual machine!
  • This probably will never work on Old 3DS.
Download smashbroshax-helper beta

It is recommended that you use a live Ubuntu 15.04 image. Versions 15.10+ have issues. http://old-releases.ubuntu.com/releases/15.04/
  1. Create a bootable USB/DVD with a Linux distribution (there are various guides online).
  2. If possible, get a second USB/SD card/storage device, download and save the above .zip to it.
    • Don't extract the contents of it to the USB device, as it might cause problems. Just save the .zip file to it.
    • If you can't do this, you'll have to connect to the Internet while in Linux to download it.
    • If using a bootable USB, make sure you can use two ports at a time. Don't take out the Linux USB while it is being used!
  3. Restart your computer and run the bootable USB/DVD you created.
  4. Extract the contents of the .zip to the Desktop.
  5. Open the smashbroshax-helper folder and double click "smashbroshax.sh".
  6. Follow the on-screen prompts.
  7. If everything goes well, you should now have homebrew!
Video demonstration, from boot to shutdown:

from https://gbatemp.net/threads/tutorial-using-smashhax-with-linux.397194/page-9#post-5842512


If you would like the full tutorial, involving terminal usage and compiling:
To reverse the changes to your wireless interface and remove issues connecting to networks after, rebooting your system or changing it to "Managed" instead of "monitor" should fix it. How to do that is in the second to last section.



@Cydget made a script that condenses most of this into a script. I have not tried it myself yet but it seems to work for others.
So, I made a little script for this. If anybody wants it, then unzip this file and read the readme. And yes, I like to pipe things. http://www.mediafire.com/download/oulnubnzkk9g3i0/smashhaxEZ.zip

Requirements
  • Any Linux distribution should do (this has only been tested with Debian-based distributions). Windows and OS X users should wait or find a method for now, sorry!
    • Please do not use Linux in a virtual machine, it likely won't give direct access to your wireless card. Dual boot or use a live USB/disk.
    • The recommended distro to use is Ubuntu 15.04 (link to Ubuntu MATE 15.04).
  • A Wi-Fi-capable wireless card.
  • Super Smash Bros. for Nintendo 3DS Full or Demo.
  • New 3DS. This does not work on Old 3DS.
  • Patience. The hax is sort-of unreliable so your game will most likely crash a few times.
  • Recommended: Another device to access the internet (phone, tablet, computer, console).
Preparing
  • Install these packages using your package manager. For example, "apt-get" for Debian-based distributions (including Ubuntu).
    Code:
    openssl libssl-dev libnl-genl-3-200 libnl-genl-3-dev libnl-3-200 libnl-3-dev pkg-config
  • Find your wireless card's interface by opening a terminal and using the command "ip link". It would be something like wlan0 or wlp3s0.
    Code:
    ian@ian-VPCEG34FX:~/Desktop/aircrack-ng-1.2-rc2/src$ ip link
    1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default 
        link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    2: eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN mode DEFAULT group default qlen 1000
        link/ether xx:xx:xx:xx:xx:xx brd ff:ff:ff:ff:ff:ff
    3: wlan0: <NO-CARRIER,BROADCAST,ALLMULTI,PROMISC,NOTRAILERS,UP,LOWER_UP> mtu 1500 qdisc mq state DORMANT mode DORMANT group default qlen 1000
        link/ieee802.11/radiotap xx:xx:xx:xx:xx:xx brd ff:ff:ff:ff:ff:ff
  • You probably already have it, but get the homebrew starter kit and place it on your SD card.
  • Download the smashhax .pcap files from the releases section of the smashbroshax repository.
  • Determine the .pcap file to use. This should be straightforward using the file names.
    The built beacon-hax pcaps are located under "pcap_out/". In the filenames, "vXYZ" means game-version "vX.Y.Z". Full-game filenames for USA include "gameusa", while the other regions filenames include "gameother".
  • Get the "Otherapp payload" from the Homebrew Launcher site and save it to "smashpayload.bin" at the root of your SD card.
  • Download and extract aircrack-ng's latest release source.
  • Save aireplay-ng.patch from the smashbroshax repository in the folder "aircrack-ng-1.2-rc2".
Compiling aircrack-ng/aireplay-ng
  • Open a terminal and go to the "aircrack-ng-1.2-rc2" folder.
  • Use the command "patch src/aireplay-ng.c < aireplay-ng.patch". If you get the following then it has succeeded.
    Code:
    patching file src/aireplay-ng.c
    Hunk #1 succeeded at 560 (offset 1 line).
    Hunk #2 succeeded at 573 (offset 1 line).
  • Run "make" and wait. The program should be compiled with the patch now. If you get the following as the last line then it has succeeded.
    Code:
    make[1]: Leaving directory '/path/to/aircrack-ng-1.2-rc2/src'
The moment of truth
  • Run these 3 terminal commands in order, using the wireless interface (from "ip link") you found earlier.
    sudo ifconfig wireless_interface down
    sudo iwconfig wireless_interface mode monitor
    sudo ifconfig wireless_interface up
    sudo iwconfig wireless_interface channel 6​
    (the last line was suggested by @difool. and might make the payload trigger faster)
  • Enter the "src" folder in your terminal.
  • Run the following command to start broadcasting the packet: "sudo ./aireplay-ng --interactive -r /path/to/smashbros_version_beaconhax.pcap -h 59:ee:3f:2a:37:e0 -x 10 wireless_interface"
    Use the .pcap file and wireless interface you found out earlier.
  • On the 3DS system, start the game, then choose Smash and Group. Wait for the magic to happen.
Encountering errors? Something confusing?
  • Does running aireplay-ng end with "End of file"? You might be running your installed version of aircrack-ng. Don't forget the ./ for "sudo ./aireplay-ng ..."!
  • Please tell me the distribution you are using and the error you've encountered. This will help me fix your issue faster.
  • If you don't get something, don't hesitate to point it out! I want to help anyone I can.
  • Did you spot an inaccuracy or mistake I made? It would be great if you can tell me that too.
  • This was before the Otherapp payload selector was added to the HBL site. This is kept here for legacy reasons or something.
    • Determine what file you need to get from the Homebrew Launcher Payload section:
      With the release builds, the hax loads the payload from SD "/smashpayload.bin". This should contain the hb-launcher(https://smealum.github.io/3ds/) otherapp payload. Until there's a proper otherapp payload selector on the hb-launcher site, the payload can be downloaded from the following URL(see also https://github.com/smealum/sploit_installer):
      FIRMVER values(without quotes):
      • "POST5" = non-New3DS
      • "N3DS" = New3DS
      REGION values(without quotes):
      • "U" = USA
      • "E" = EUR
      • "J" = JPN
      MENUVER values(without quotes):
      • "11272": Non-JPN, system-version v9.0.
      • "12288": System-version v9.2.
      • "13330": System-version v9.3.
      • "14336": System-version v9.4.
      • "15360": System-version v9.5.
      • "16404": System-version v9.6.
      • "17415": System-version v9.7.
      • "20480_usa": USA, system-versions v9.9-v10.0.
      • "19456": Non-USA, system-versions v9.8-v10.0.
      MSETVER values(without quotes):
      • "8203": System-versions below v9.6.
      • "9221": System-versions starting with v9.6.
      For example, the payload URL for New3DS USA 9.9.0-X - 10.0.0-X is:https://smealum.github.io/ninjhax2/Pvl9iD2Im5/otherapp/N3DS_U_20480_usa_9221.bin
      The end result is a file named "smashpayload.bin" at the root of your SD card.

You are allowed to reproduce/reprint this tutorial, as long as a link back to this page (https://gbatemp.net/threads/tutorial-using-smashhax-with-linux.397194/) is included.
 
Last edited by ihaveahax,

Lyomak

Well-Known Member
Member
Joined
Jun 24, 2009
Messages
436
Trophies
1
Age
39
Location
Bogotá
Website
twitch.tv
XP
389
Country
Colombia
I get really confused reading this, but it seems that's the only way I have to install IronHax on 10.2. I'll give it a shot tonight. Does it work on a laptop built-in Realtek RT8191SE chipset? Or should I get a USB stick with an Atheros one? I have the SSB demo btw.
 
Last edited by Lyomak,

Acryt

Well-Known Member
Member
Joined
Aug 22, 2015
Messages
310
Trophies
0
XP
169
Country
United States
I'll note that I was using Smash Bros v1.11 with cart, and never once got it to trigger the payload correctly.
 

Favna

#PCMasterRace
Member
Joined
Sep 12, 2009
Messages
864
Trophies
1
Website
twitter.com
XP
822
Country
Netherlands
I get really confused reading this, but it seems that's the only way I have to install IronHax on 10.2. I'll give it a shot tonight. Does it work on a laptop built-in Realtek RT8191SE chipset? Or should I get a USB stick with an Atheros one? I have the SSB demo btw.


Another way would be to have someone with ironhax already installed install oot3dhax onto a physical card. Or.. Someone who has said physical card ready already.
 

Lyomak

Well-Known Member
Member
Joined
Jun 24, 2009
Messages
436
Trophies
1
Age
39
Location
Bogotá
Website
twitch.tv
XP
389
Country
Colombia
Another way would be to have someone with ironhax already installed install oot3dhax onto a physical card. Or.. Someone who has said physical card ready already.

I can't do that at the moment. I tried using Ubuntu 15.02 and I also got stuck at the 93 packet thing and I was using a Realtek built-in chipset. I'll see if I can get Cubic Ninja at a decent price or else, wait for more exploits.
 

Favna

#PCMasterRace
Member
Joined
Sep 12, 2009
Messages
864
Trophies
1
Website
twitter.com
XP
822
Country
Netherlands
I can't do that at the moment. I tried using Ubuntu 15.02 and I also got stuck at the 93 packet thing and I was using a Realtek built-in chipset. I'll see if I can get Cubic Ninja at a decent price or else, wait for more exploits.
Ubuntu released their update to Ubuntu 15.10 Willy Werewolf today - I no longer have the set up to try smashhax at this moment - but perhaps you can try it? If you do, report back the result please?
 

Lyomak

Well-Known Member
Member
Joined
Jun 24, 2009
Messages
436
Trophies
1
Age
39
Location
Bogotá
Website
twitch.tv
XP
389
Country
Colombia
Ubuntu released their update to Ubuntu 15.10 Willy Werewolf today - I no longer have the set up to try smashhax at this moment - but perhaps you can try it? If you do, report back the result please?

I mean, I used 15.10, sorry. I got stuck at 93 packet and my laptop's WiFi chipset is Realtek RT8191SE.
 

Cydget

Well-Known Member
Member
Joined
Oct 1, 2015
Messages
493
Trophies
0
Age
27
XP
260
Country
United States
So, I messaged yellows8 on github and asked him about smash hax for v1.1.2 and he said,"I still need to push my local-git-commits + upload the archive for that(includes support for payload 2.5)." so if smashhax isnt working now, just wait for the updated to become available, and then try it.

--------------------- MERGED ---------------------------

Been trying this for a bit now but everytime i start sending the packet it never exceeds 9 pps, be it if I put 10 or 11 (as seen in your video) in the command. Furthermore it also gets stuck on sending 93 packets and even after 10 minutes my New3DS is still searching.

New3DS Firmware 10.2.0-28
Smash bros version: EU Demo
Pcap: smashbros_eurdemo_beaconhax.pcap
Linux distro: Ubuntu 15.04
Wireless interface: wlan0

Any ideas what might be the cause?

Update: So by setting the "10" value to 20 it does change to 19 pps, but it still gets stuck at 93 packets.
So I have the same problem you had with it getting stuck at 93 packets. I believe it is the network card, because if I use one of my usb wifi adapters it works "fine".
 
  • Like
Reactions: ihaveahax

DivergentCode

Member
Newcomer
Joined
Oct 29, 2015
Messages
5
Trophies
0
Age
34
XP
52
Country
United States
Thanks for making this tutorial--I'm able to send out the beacon packets.

The hold up now is the exploit keeps failing. The system crashes with either (1) horizontal bars of grey and white or (2) a pixelated mess of color. I feel like each case indicates a different failure (I just don't know what it means). Any thoughts?

N3DS Firmware: 10.2.0-28U
Smash bros version: USA demo
Using appropriate/current pcap release (v1.2 released a few hours ago)
SD card contains latest homebrew starter kit and otherapp payload
 

Cydget

Well-Known Member
Member
Joined
Oct 1, 2015
Messages
493
Trophies
0
Age
27
XP
260
Country
United States
Thanks for making this tutorial--I'm able to send out the beacon packets.

The hold up now is the exploit keeps failing. The system crashes with either (1) horizontal bars of grey and white or (2) a pixelated mess of color. I feel like each case indicates a different failure (I just don't know what it means). Any thoughts?

N3DS Firmware: 10.2.0-28U
Smash bros version: USA demo
Using appropriate/current pcap release (v1.2 released a few hours ago)
SD card contains latest homebrew starter kit and otherapp payload
I just tried with the new pcap file, and it worked the first time. How many pps does it average around when sending packets?

Also, I think that with this new update smash hax has become a lot more stable, because it has not failed once for me since the update
 
Last edited by Cydget,

DivergentCode

Member
Newcomer
Joined
Oct 29, 2015
Messages
5
Trophies
0
Age
34
XP
52
Country
United States
I just tried with the new pcap file, and it worked the first time. How many pps does it average around when sending packets?

Also, I think that with this new update smash hax has become a lot more stable, because it has not failed once for me since the update
Do you have the demo as well?

My average pps is usually on par or one less than what I set it for (tried 10, 20, & 40).
 

Acryt

Well-Known Member
Member
Joined
Aug 22, 2015
Messages
310
Trophies
0
XP
169
Country
United States
I just tried with the new pcap file, and it worked the first time. How many pps does it average around when sending packets?

Also, I think that with this new update smash hax has become a lot more stable, because it has not failed once for me since the update
Thanks for posting that this has been updated and seems more reliable. I hope that holds true if I ever have to go back to trying it. I already regret not setting up a casper'd ubuntu so I wouldn't have to setup the packages again. Also, did you use the demo as stated above?

From what I understand every different version seems to have different results on reliability.
 
Last edited by Acryt,

DivergentCode

Member
Newcomer
Joined
Oct 29, 2015
Messages
5
Trophies
0
Age
34
XP
52
Country
United States
I just tried it on the demo, and it didnt work :( You might want to consider buying the game
Aww bummer. I'm outta demo plays now anyway, so I gotta get the retail version (been meaning to). Will definitely do that first thing tomorrow and let ya know how it goes. Thanks, Cydget!
 

DivergentCode

Member
Newcomer
Joined
Oct 29, 2015
Messages
5
Trophies
0
Age
34
XP
52
Country
United States
Works like a charm! The exploit failed on SSB v1.0.0, but v1.1.2 works well (tried a few times and they were all successful). Homebrew, here I come :yaynds:
 

Lyomak

Well-Known Member
Member
Joined
Jun 24, 2009
Messages
436
Trophies
1
Age
39
Location
Bogotá
Website
twitch.tv
XP
389
Country
Colombia
So, I messaged yellows8 on github and asked him about smash hax for v1.1.2 and he said,"I still need to push my local-git-commits + upload the archive for that(includes support for payload 2.5)." so if smashhax isnt working now, just wait for the updated to become available, and then try it.

--------------------- MERGED ---------------------------


So I have the same problem you had with it getting stuck at 93 packets. I believe it is the network card, because if I use one of my usb wifi adapters it works "fine".

Which usb wifi stick? I was planning of buying a TP-Link TL WN725N which is cheap and compatible with Homepass on Windows, but I want to see first if there's any usb wifi fully compatible with SmashHax.
 

DivergentCode

Member
Newcomer
Joined
Oct 29, 2015
Messages
5
Trophies
0
Age
34
XP
52
Country
United States
Sorry, if this has been asked before,can I use virtual machine with Linux to set up smashhax

I have a USB wifi adapter (Sabrent NT-H802N) and can directly attach to a VM (under the USB icon on VirtualBox), which works just fine with smashhax. You'll probably run into problems with using a built-in wifi card (difficult to gain direct access and change to monitor mode in a VM). But, yes, it is possible :)
 
  • Like
Reactions: tivu100

Cydget

Well-Known Member
Member
Joined
Oct 1, 2015
Messages
493
Trophies
0
Age
27
XP
260
Country
United States
Which usb wifi stick? I was planning of buying a TP-Link TL WN725N which is cheap and compatible with Homepass on Windows, but I want to see first if there's any usb wifi fully compatible with SmashHax.
I used an old medialink MWN-USB54G. Im not sure if they are even still being sold(not best if you want to connect to internet). I also tested this with a Samsung WIS09ABGN Linkstick wireless lan adapter(it was made for a blue ray player, but works badly with linux) Here is a list that should work with aircrack-ng http://www.aircrack-ng.org/doku.php?id=compatibility_drivers
 

ManBLG

New Member
Newbie
Joined
Jan 8, 2014
Messages
4
Trophies
0
Age
33
XP
85
Country
United States
When i type in the last command to start sending out the beacon it gives me this error in LXTerminal

sudo: ./aireplay-ng: command not found

Any idea what im doing wrong?
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    K3Nv2 @ K3Nv2: Deeze nuts