Web-Browser POC

Discussion in 'Switch - Hacking & Homebrew' started by Sasori, Mar 4, 2017.

  1. Sasori
    OP

    Sasori GBAtemp Maniac

    Member
    1,384
    803
    Jan 28, 2015
    United States
    The method has been shared in case anyone wants to mess with this: https://www.se7ensins.com/forums/th...h-a-utility-to-hijack-the-webbrowser.1625475/

    I have yet to see anything like this posted on this site other then a few images posted by smealum and others. So I figured Id share another PoC to show that there is in fact a full functioning web browser on the Nintendo Switch

    If there was something posted like this already then Ill remove this thread ASAP. I also apologize for my horrid thread title lol



    I can provide a higher quality video with a capture card if requested. I figured it would be best to record with an external camera at first
     
    Last edited by Sasori, Mar 5, 2017
    Dr.Hacknik, master801 and Xenon Hacks like this.


  2. loler55

    loler55 GBAtemp Fan

    Member
    455
    113
    Jan 4, 2012
    Gambia, The
    really bad quality canot see anything looks like matrix
    tutorial to get them?
    which browser is it?
     
    Last edited by loler55, Mar 4, 2017
  3. Sasori
    OP

    Sasori GBAtemp Maniac

    Member
    1,384
    803
    Jan 28, 2015
    United States
    Yea thats a downside of not using a capturcard and only having an iPhone camera...
     
  4. loler55

    loler55 GBAtemp Fan

    Member
    455
    113
    Jan 4, 2012
    Gambia, The
    tutorial to get them?
    which browser is it?
     
  5. Sasori
    OP

    Sasori GBAtemp Maniac

    Member
    1,384
    803
    Jan 28, 2015
    United States
    No guide yet. However here are a few screenshots from my elgato so that you(and anyone else may see it better)

    Got the top of gamecapture HD in this one lol
    [​IMG]
    [​IMG]

    Bonus Screenshot
     
    loler55 likes this.
  6. loler55

    loler55 GBAtemp Fan

    Member
    455
    113
    Jan 4, 2012
    Gambia, The
    you can make a guide if you wish how it work.. plz
    time to try some exploits already given
     
    Last edited by loler55, Mar 4, 2017
  7. Sasori
    OP

    Sasori GBAtemp Maniac

    Member
    1,384
    803
    Jan 28, 2015
    United States
    When/if a guide is made it will be on Se7enSins. We want to mess with a few more things and see the extent of this first :)
     
    loler55 likes this.
  8. loler55

    loler55 GBAtemp Fan

    Member
    455
    113
    Jan 4, 2012
    Gambia, The
    oh shame other people cannot try exploits reason: We want to mess with a few more things and see the extent of this first

    one for all, all for one
     
    pelago likes this.
  9. Xenon Hacks

    Xenon Hacks GBAtemp Guru

    Member
    7,072
    3,386
    Nov 13, 2014
    United States
    Just ordered one from walmart and will keep it boxed, have my eyes open for anything new that pops up. This *could* be the start of something.
     
  10. Zan'

    Zan' 2F88744FEED717856386400A44BBA4B9CA62E76A32C715D4F

    Member
    385
    159
    Oct 8, 2015
    Well it's something really easy to achieve and will likely be limited in range.
    Unless there are major flaws in the browser this won't get you more than what you can do in your PC browser.

    It can allow for higher access and limited code exec.
     
    Last edited by Zan', Mar 4, 2017
  11. Xenon Hacks

    Xenon Hacks GBAtemp Guru

    Member
    7,072
    3,386
    Nov 13, 2014
    United States
    Im aware of this, however this browser was supposed to be useless and it's clearly not the case atm.
     
  12. Zan'

    Zan' 2F88744FEED717856386400A44BBA4B9CA62E76A32C715D4F

    Member
    385
    159
    Oct 8, 2015
    I don't see how a browser can be "useless" in the first place

    If it was "useless" it wouldn't be a browser.
     
  13. Xenon Hacks

    Xenon Hacks GBAtemp Guru

    Member
    7,072
    3,386
    Nov 13, 2014
    United States
    It was not intended for normal use that's what I mean
     
  14. Zan'

    Zan' 2F88744FEED717856386400A44BBA4B9CA62E76A32C715D4F

    Member
    385
    159
    Oct 8, 2015
    So you mean it isn't usable in the sense of accessibility.

    Which it technically isn't. But Nintendo did a bad job managing that.
    And there is a major flaw in "preventing" users to access it.
     
    Xenon Hacks likes this.
  15. Xenon Hacks

    Xenon Hacks GBAtemp Guru

    Member
    7,072
    3,386
    Nov 13, 2014
    United States
    Agree, lets just leave it at apples to apples at this point as we are cluttering the thread :P
     
    Zan' likes this.
  16. loler55

    loler55 GBAtemp Fan

    Member
    455
    113
    Jan 4, 2012
    Gambia, The
    time to try some browserexploidsites in it
    i see the news in my eyes : ps4/vita browser exploit on the switch
     
    Last edited by loler55, Mar 4, 2017
  17. Xenon Hacks

    Xenon Hacks GBAtemp Guru

    Member
    7,072
    3,386
    Nov 13, 2014
    United States
    That's way more than a little optimistic
     
    loler55 likes this.
  18. loler55

    loler55 GBAtemp Fan

    Member
    455
    113
    Jan 4, 2012
    Gambia, The
    let me dream my dreams:)
    worth a try
    optimistic a cfw is on switch are available
    we have a chance because We can open the apparently unfinished browser!!!!!!!!!!!!!
    why ninty dosnt allow to use the browser???
    reason: Probably it is too easy to exploit and
    They learned from their mistakes on the wiiu But they do not get it safe without more time...
    I can not imagine any other reason


    i see nintypeople run and cry + a patch is incomming
    10 people lost her jobs because of the mistake
     
    Last edited by loler55, Mar 4, 2017
  19. Voxel

    Voxel Fable Junkie

    Member
    GBAtemp Patron
    Voxel is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    5,199
    5,923
    Jun 27, 2015
    United Kingdom
    England, UK
    Here is a small set of instructions I quickly typed up to access that hidden browser. It makes use of Charles Proxy and Apache, but I'm sure that when the thing they made in Visual Studio gets released, this won't be neccessary anymore...
    If similar instructions were already posted, I do apologize in advance!

    1) Set up and install Charles Proxy + Apache server if you haven't already, then open Charles proxy only.
    2) Grab the index.html from the SwitchDNS repo that 'Temp member parrotgeek1 kindly set up for us. Place this html file into the "www" folder of your apache installation.
    3) On your Switch, go to Settings -> Internet Settings -> YourConnectedRouter -> Change Settings, and turn Proxy Settings on. Use your PC's local IP address as the server, and use the port number configured in Apache (default is 80) as the port number. When done, you can open up apache on your PC.
    (To change this port, if for some reason it doesn't work, change all instances of ":80" in 'httpd.conf' and 'httpd-vhosts.conf' to a different port number, such as ":1337".)
    4) Now save your settings, and test your connection. If everything went smoothly, you should see that Charles will ask if your Switch's IP address should be allowed to connect. Click 'Yes/Allow', and you should see "http://conntest.nintendowifi.net" pop up on the left-hand side of the window. Right-click on it, and select "map remote".
    5) In the 'map to' section of the window, type "http" in the protocol field, then your PC's local IP address in the host field, and the port number you configured for apache in the port field. Then click "OK".
    6) Choose "test connection" again on the Switch. The connection should now fail, but when you click off the message, you should now be redirected to the index.html page hosted on your PC, through the hidden web browser!
    7) Now enter a link to a page (such as https://google.co.uk or something; it can be anything really) and now it should take you to that page you requested! :)
     
    Xenon Hacks, peteruk and Zan' like this.
  20. migles

    migles Mei the sexiest bae

    Member
    6,899
    4,634
    Sep 19, 2013
    Saint Kitts and Nevis
    my dad works for nintendo.
    Navigate (or redirect) into one of those websites that detect the type of browser and its capabilities (there was a html5 tester website) so we know of its just a mini opera thing and how complete is it