Hacking [WIP] KARL3DS - Kernel access on N3DS via Ninjhax + Loadcode

[Polarialis]

The progress so far is ridiculous. Not only that, but custom firmware (if open source) could change everything - right now it seems we have to pay for the privilege of homebrew. i.e. Gateway. This could turn everything on its head. I'm absolutely rooting for you guys, the possibilities from this are endless.

 

[shinyquagsire23]

I'm actually also hoping to use the gained ARM11 kernel access for a few other things. Because while we can't flush the icache in ARM11 usermode, we can do it on ARM11 kernel mode. So maybe we'll end up sacrificing an svc and turn it into an svc dedicated to flushing the icache.

 

[Slushie3DS]

Does this have any possibility of being usable on the old3DS family?

 

[shinyquagsire23]

Does this have any possibility of being usable on the old3DS family?

Of course, actually at the moment porting to N3DS is the hard part, all the old 3DS stuff is there because of Gateway.

 

[Polarialis]

Of course, actually at the moment porting to N3DS is the hard part, all the old 3DS stuff is there because of Gateway.

So what's the state of ARM9 right now?

Edit: I see it's being done next. I look forward to reading up on the progress tomorrow evening.

 

[Slushie3DS]

Of course, actually at the moment porting to N3DS is the hard part, all the old 3DS stuff is there because of Gateway.

I'm actually talking to the guys on 3dsdev about ARM9 right now. Is the end result most likely going to be an emuNAND on >4.5?

 

[Polarialis]

I still can't believe how amazing this is though. If you guys get ARM9, that's it - checkmate. You'll essentially have Gateway's exploit working without the cart, and on the N3DS too. Madness.

 

[misterb98]

I still can't believe how amazing this is though. If you guys get ARM9, that's it - checkmate. You'll essentially have Gateway's exploit working without the cart, and on the N3DS too. Madness.

...Until the price of flashcarts falls below cubic ninja.

This is amazing! What amazes me further is how quietly this thread is progressing.

 

[shinyquagsire23]

Success has been had!

While it might not look like much (because it really isn't much), that 0xf00ff00f was written in ARM11 kernel mode on an N3DS. Using my old 3DS, I managed to find the proper offset to patch and it works flawlessly. All that's left is a bit of tuning on the repatching side and actually doing something with it! Code is on my github still under bootstrap.

 

[Sizednochi]

What the heck. Last time I checked this thread things weren't THIS FAR. And that was today in the morning. Holy shit.

 

[puss2puss]

this is amazing! cant wait to see where it will lead!
great work

 

[SpongeFreak52]

Wow, excellent work! Super excited to see where this is going.

 

[codychaosx]

Maybe gateway will hurry up n release there stuff now in fear that you guys will provide a gatewayless option (soon) well sooner than their soon lmao

 

[TehLexinator]

Success has been had!

Amazing job. I will be honest - I want piracy, but will more than settle for emulators.

Great job team!

 

[kamesenin888]

I what can be done with arm 11 kernel access?

 

[shinyquagsire23]

I what can be done with arm 11 kernel access?

So far, basically all the memory patching you want (within ARM11's virtual memory of course), icache and dcache invalidation, further escalation into ARM9, fun stuff. On another note, I managed to patch the SVC handler to give me access to every SVC available, including SVC 0x7B. So once I get my ARM11 kernel executor all packaged nicely I should be able to get CitrAGB running full speed.

 

[console]

Awesome!!! I can't wait when you release something more powerful tool out for on Nintendo 3DS and 3DS XL. I guess your tool is worth than all other tools.

 

[zuxicovp]

So will the final result of this still require Cubic Ninja?

 

[Wowfunhappy]

Yes.

 

[vectorsquad]

It's yet too early for this but here's what I'm good at...

Soundcloud link:
https://soundcloud.com/vectorsquad/karl3ds-launcher-theme