Hacking Web Browser (kind of) on the switch!

[jakibaki]

I've set up a custom dns which makes the switch think that your wifi has a "login-page" (like on some open wifi-hotspots) which makes your switch open a (very minimal) Web Browser with a simple website that just allows you to enter a link to go to it.

To use it just set your dns-settings to manual and your primary dns to 151.80.40.69 (thanks to svensonic1 for hosting this!). Press "Save" and
then "Connect to this network". It will say that registration is required to use this network and after pressing next it will open a webpage where you can enter what url you want to go to.

If you want to disable it just change your dns back to automatic and press save.

UPDATE: I removed my server (because I need it for something else) but sevensonc1s is still online!

UPDATE2: sevensonc1s server is down too.

 

[svensonic1]

Saw your stuff on the subreddit, awesome developments

 

[Shawn ShyGuy]

I'd like to see an HTML5 test run on this, just for shits and giggles. I don't have a switch tho so if someone wants to do the dirty work...

 

[dAVID_]

Hax at very first day!

 

[jakibaki]

I'd like to see an HTML5 test run on this, just for shits and giggles. I don't have a switch tho so if someone wants to do the dirty work...

Here you go!

 

[ethanwa79]

If there is anywhere you can find some good exploits, it's in a browser. Anyone trying anything?

 

[jakibaki]

Hax at very first day!

It's not really hacks (at least not in the way that this word is used in this place most of the time) but just abusing a feature (support for logging into weird wireless networks) for something that it wasn't meant to.

 

[DutchyDutch]

Probably not gonna work but I'm just gonna ask again, have you tried one of those online emulator sites on it? I'm talking NES / SNES / Genesis and stuff.

 

[kingraa777]

can the eshop be accessed with this dns ? or stupid question ?

 

[jakibaki]

can the eshop be accessed with this dns ? or stupid question ?

No you have to disable the custom dns when you want to use eshop again since the switch thinks that it's not connected to the internet with my dns.

--------------------- MERGED ---------------------------

Probably not gonna work but I'm just gonna ask again, have you tried one of those online emulator sites on it? I'm talking NES / SNES / Genesis and stuff.

It works! I can't get input to work but the rom boots!

 

[Shawn ShyGuy]

Here you go!

huh, not bad for a login page. Interestingly, it supports some protocols that Firefox 51 (what I use) doesn't even support (namely audio/video track selection)
link to the result page if anyone's wondering: https://html5test.com/s/a9cdd634af5787c0.html
also, it scores about 100 points higher than the N3DS browser
(ok i'm done geeking out now)

 

[hcorion]

Holy smokes this is exciting news! For those wondering here is the website with the details of the switch browser: http://html5test.com/s/a9cdd634af5787c0.html the version of webkit they're using seems to be older than chrome 30, based purely on point skimming , which is great for exploits. Infact we may be able to use the PS4 exploit seen here: https://cturt.github.io/ps4.html and here: https://www.exploit-db.com/exploits/28081/

 

[svensonic1]

The webapplet does not support YouTube sadly, maybe Netflix?

 

[hcorion]

Could anybody run this: browserscope.org on their switch? It's a browser vulnerability tracker. From what I can tell the switch browser is a mixed bag, with all sorts of features removed or added but is mostly similar to safari 8.

 

[jakibaki]

The webapplet does not support YouTube sadly, maybe Netflix?

I got a youtube-video to play once but when I try now the switch just crashes. Netflix won't work because of their weird drm.

 

[punderino]

Could anybody run this: browserscope.org on their switch? It's a browser vulnerability tracker. From what I can tell the switch browser is a mixed bag, with all sorts of features removed or added but is mostly similar to safari 8.

running give me a minute

--------------------- MERGED ---------------------------

websites down?

 

[jakibaki]

Could anybody run this: browserscope.org on their switch? It's a browser vulnerability tracker. From what I can tell the switch browser is a mixed bag, with all sorts of features removed or added but is mostly similar to safari 8.

done (http://www.browserscope.org/ is the right link for some reason your link didn't work for me)

 

[InsaneNutter]

It's a pretty good to see it's possible to load webkit exploits from your own network, even if the switch is offline.

Similar to the user manual DNS trick on the PS4.

 

[kingraa777]

I got a youtube-video to play once but when I try now the switch just crashes. Netflix won't work because of their weird drm.

my eshop doesnt even play its videos correct keeps pauseing anyone else get this ?

 

[punderino]

my eshop doesnt even play its videos correct keeps pauseing anyone else get this ?

Where it gets like, laggy as fuck? Yes.