Homebrew VC injections (on firmwares up to 10.1)

[Deleted User]

Well, interesting... This could work.

 

[shutterbug2000]

I have a way that should work. It's complicated, but it won't require anything but rom.gbc, just like how browserhax normally only requires boot.3dsx.

 

[Deleted User]

I have a way that should work. It's complicated, but it won't require anything but rom.gbc, just like how browserhax normally only requires boot.3dsx.

Tell me.

 

[teampleb]

I have a way that should work. It's complicated, but it won't require anything but rom.gbc, just like how browserhax normally only requires boot.3dsx.

If you can get it working you'll be god! Lol.

 

[shutterbug2000]

Well, my plan is to actually just do what yellows8 already has done: use ROP to extract, modify, and replace ram data.

 

[teampleb]

Well, my plan is to actually just do what yellows8 already has done: use ROP to extract, modify, and replace ram data.

Do you think it could work with stagefrighthax or just sliderhax?

 

[shutterbug2000]

Do you think it could work with stagefrighthax or just sliderhax?

It can work for both, all I have to do is modify the chain once. All rop values(open file, close file, gspwn commands, etc.) are there for all browser versions, new and old 3ds.

Take a look here for more(if you can understand it ):

https://github.com/yellows8/3ds_browserhax_common/blob/master/3dsbrowserhax_common.php

 

[DarkRioru]

sounds like this could be a reality Awesome!!!!!!

--------------------- MERGED ---------------------------

Do you think it could work with stagefrighthax or just sliderhax?

whats stagefrighthax???

 

[teampleb]

whats stagefrighthax???

stagefrighthax = Browserhax on n3DS
sliderhax = Browserhax on o3DS

 

[DarkRioru]

stagefrighthax = Browserhax on n3DS
sliderhax = Browserhax on o3DS

ok... thanks but, why not just call it browserhax for both o3ds and n3ds?

 

[teampleb]

ok... thanks but, why not just call it browserhax for both o3ds and n3ds?

Because they're different hacks...

 

[DarkRioru]

Because they're different hacks...

ok then...

 

[AutumnWolf]

This may be a thing owo

 

[Deleted User]

Is anything being worked on?

 

[teampleb]

Is anything being worked on?

Read this page...

 

[shutterbug2000]

Yessss. We at least have ram injection now .

(It's injecting the rom, but in the incorrect location currently)

 

[teampleb]

Yessss. We at least have ram injection now .

(It's injecting the rom, but in the incorrect location currently)

You're my new master now. (sorry mass, but this is way cooler)

 

[shutterbug2000]

Waitwaitwait. It IS injecting into the right spot. I JUST DID IT! Wooooo!

 

[teampleb]

Waitwaitwait. It IS injecting into the right spot. I JUST DID IT! Wooooo!

Awesome! What does it work with? You should start a new release thread.

 

[shutterbug2000]

Awesome! What does it work with? You should start a new release thread.

It works with anything that browserhax works with normally. You do need a webserver and a dns server(to redirect yls8.mtheall.com to a local ip to increase stability, at least for sliderhax). Note that you can only inject up to 32 kb atm, but I do have plans to make splitting the rom possible to inject 32 kb at a time(it's just limitations of the hax itself). I basically just modified yellows8's existing ROP chain to inject data to the vc, and not run it.