Hacking [WIP] KARL3DS - Kernel access on N3DS via Ninjhax + Loadcode

[WhoAmI?]

Dazzozo Are you showing us your sys version because you're working on something similar to Smealum? Homebrew on 9.3+? Smea said his gonna try get Ninjhax on 9.7, so...

 

[WhoAmI?]

And? Just restore the system settings. Ticket gone.

(If the CIA was legit you'd normally need to redownload the CIA from the eShop).

Do you even know what you're saying? Since when did "System Settings" have anything to do with ticket.db? I think you should spend your time reading up on 3dbrew... You'd know how System Settings saves data and how tickets are managed... System Settings aren't affiliated with ticket.db.

How about, next time you try and be smart about something, make sure what you're saying isn't trash...

 

[Nollog]

you seem confused.

Do you even know what you're saying? Since when did "System Settings" have anything to do with ticket.db? I think you should spend your time reading up on 3dbrew... You'd know how System Settings saves data and how tickets are managed... System Settings aren't affiliated with ticket.db.


How about, next time you try and be smart about something, make sure what you're saying isn't trash...

I thought data management can rebuild ticket.dB if you delete it, then go into settings, maybe she thinks that wipes stuff?

 

[WhoAmI?]

you seem confused.


I thought data management can rebuild ticket.dB if you delete it, then go into settings, maybe she thinks that wipes stuff?

Maybe.

What did you mean by "you seem confused"? All Dazz posted was a system version.... I'm just thinking open. Maybe Daz is working on something other than KARL, too? You ARE aware that Smea is working on Ninjax for 9.7, right?

 

[WhoAmI?]

And? Just restore the system settings. Ticket gone.

(If the CIA was legit you'd normally need to redownload the CIA from the eShop).

Ticket is NOT gone.

you seem confused.


I thought data management can rebuild ticket.dB if you delete it, then go into settings, maybe she thinks that wipes stuff?

 

[InfoFront]

That's why I said consider. I just don't see a reason why they would show 9.7 without a reason.

This entire thread seems to exist for no good reason.

 

[VinsCool]

This entire thread seems to exist for no good reason.

You do not understand the concept if you think so

 

[tony_2018]

Garyopa said that Gateway team found a hole in 9.7
Is it a deep enough hole? We don't know, but they are not out.

Deep enough hole? wtf does this even mean.

"Hey check this shit out, I found a loophole in the system. Its crazy but it works."

"Yeah cool but how deep is the loophole"

"?"

 

[motezazer]

Deep enough hole? wtf does this even mean.

"Hey check this shit out, I found a loophole in the system. Its crazy but it works."

"Yeah cool but how deep is the loophole"

"?"

In computer security, more a hole is deep, more control you obtain with it.

 

[Psi-hate]

Like Ninjhax. It was a small enough to get what they needed, but they would need to pull from a greater exploit to gain higher access like how it gains permission from the browser and etc. I guess gateway has only found userland.

 

[motezazer]

Like Ninjhax. It was a small enough to get what they needed, but they would need to pull from a greater exploit to gain higher access like how it gains permission from the browser and etc. I guess gateway has only found userland.

We have userland in 9.7 since November 2014.

 

[Psi-hate]

We have userland in 9.7 since November 2014.

I know. I'm just saying that a bit of stuff was parched and didn't give us as much room as before which means that it would be harder to fully exploit (Well, that's what I think.)

 

[felipejfc]

Except that when you install non-legit stuff to sysNAND, you get a dodgy ticket - no thanks.

except that you do not have to install anything on sysnand to run pastacfw and neither cia, you can install cia into sd card, you really need to gather more information before saying that x or y is dangerous, writing to sysnand indeed is, but for running pasta and cia on pasta you do not need to

 

[dkabot]

except that you do not have to install anything on sysnand to run pastacfw and neither cia, you can install cia into sd card, you really need to gather more information before saying that x or y is dangerous, writing to sysnand indeed is, but for running pasta and cia on pasta you do not need to

Installing a title puts a ticket in NAND which is not removed with the software. You can either reflash an older NAND backup or try to manually remove the ticket (supposedly a PITA) but it is there.
Additionally, if it is there, you can't install the legitimate version due to the ticket being wrong.

 

[RednaxelaNnamtra]

Installing a title puts a ticket in NAND which is not removed with the software. You can either reflash an older NAND backup or try to manually remove the ticket (supposedly a PITA) but it is there.
Additionally, if it is there, you can't install the legitimate version due to the ticket being wrong.

I installed all the Games i owned on my old 3DS to my New 3DS using non legit cias, before the E-shop spoof was possible, at first e-shop login using the NNID I used before on my old 3DS, all non legit ticket of E-Shop Games i bought got updated. After it finished, I was able to use all my previous non legit cias without patches.
Later i installed a legit Pokeon CIA over a self dumped and created one, to be able to play it without emunand, an in NTR, so it is possible to install a legitimate version over an bad ticket one.

 

[Alkéryn]

I installed all the Games i owned on my old 3DS to my New 3DS using non legit cias, before the E-shop spoof was possible, at first e-shop login using the NNID I used before on my old 3DS, all non legit ticket of E-Shop Games i bought got updated. After it finished, I was able to use all my previous non legit cias without patches.
Later i installed a legit Pokeon CIA over a self dumped and created one, to be able to play it without emunand, an in NTR, so it is possible to install a legitimate version over an bad ticket one.

He was Speaking about installing the same title from eshop I think

 

[dkabot]

I installed all the Games i owned on my old 3DS to my New 3DS using non legit cias, before the E-shop spoof was possible, at first e-shop login using the NNID I used before on my old 3DS, all non legit ticket of E-Shop Games i bought got updated. After it finished, I was able to use all my previous non legit cias without patches.
Later i installed a legit Pokeon CIA over a self dumped and created one, to be able to play it without emunand, an in NTR, so it is possible to install a legitimate version over an bad ticket one.

Were the CIAs personal or from a site like that ISO site(TM)?

 

[RednaxelaNnamtra]

It could be possible that you cant buy it, but already bought games will become legit if you enter the eshop. I will check it
Edit:
I created them from a titleDB of my other 3DS(only the legid cia version later was from an other site), but without personal ID. So it should be the sames as unpathced from Iso sites. but at some point after creating the cias i moved my NNID to my n3DS emunand(it failed, but i was able to login with my nnid on my new 3DS). And at first login to E-shop, it legitimated all my bought Games. But its not(at least with pasta enabled) possible to buy games that have tickets that are not legit(it only says redownload).
For the tets I deleted the cia i created from my cardrige using the system settings, I dont know if it will behave in a other way, when using the Dev Menu for deletion.

 

[WhoAmI?]

except that you do not have to install anything on sysnand to run pastacfw and neither cia, you can install cia into sd card, you really need to gather more information before saying that x or y is dangerous, writing to sysnand indeed is, but for running pasta and cia on pasta you do not need to

Are you really playing that card? I never said that you needed to install anything to run pasta! I said that I don't want to install non-legit CIA's to sysNAND WITH pasta. No matter if you install that CIA to NAND via FBI or to the SD card, YOU GET A TICKET! emuNAND is preferred because I can unlink it from sysNAND and install the "fake" stuff on emuNAND , that way - no non legit stuff on sys. Comprenday?

Anyway, yeah I suppose PASTA is safe, however - I don't feel safe with non legit tickets, either way. It's my personal preference. I'd prefer rxTools over PASTA, any day - assuming that rxTools allowed non-legit stuff (which it doesn't). See my point?

So don't go telling me to do my research as I know full well what I'm talking about.

 

[tony_2018]

In computer security, more a hole is deep, more control you obtain with it.

Nothing has been full blown, 1/2 blown, 1/8 blown or barely a cm blown. All are just ram hacks.