Hacking RELEASE HACDN - Download game NCA files directly from Nintendo's CDN!

[SimonMKWii]

STOP USING THIS, A PATCH IS NECESSARY.

Wait... you thought I was done with the massive releases???
Here's one more!
This is HACDN, it's like ShogunTool, but on steroids!

Features:

• Everything ShogunTool did, plus game download capabilities!

Dependencies:

• Requires the ShopN cert and your personal cert (https://gbatemp.net/threads/certnxtractionpack-get-your-switch-cert-from-a-nand-dump.503844/), then fill in keys.txt file!
• hactool v1.1.0 (https://github.com/SciresM/hactool/releases)

But won't this allow piracy?

• No, as this application cannot download titlekeys, and you can only extract titlekeys from your Switch for games you have legitimately purchased.

Usage:

• Put in a title ID, get info and then click "Get the Game NCA!"

It will save the main NCA in a named folder (e.g. Super Mario Odyssey) in the "Games" folder.

Note: The application may go into "not responding" mode while downloading, this is normal.

 

[Mazamin]

Thanks! This is an impressive release
Nice if you want to keep a backup of your digital games
(This is the holy Grail for the future piracy, even though it's not a piracy tool)

 

[Deleted member 420418]

Epic! Sadly people can distribute title keys and piracy will ramp up again.

 

[tanglangxia]

Hope to increase the packaged .nsp function

 

[TheKrane]

Wait a second. So you're saying we can download games directly from the Nintendo Servers?
Wouldn't that mean that they can find out which IP the games are downloaded to and then ban/blacklist thos IP addresses?

 

[Muskusrat]

Wait a second. So you're saying we can download games directly from the Nintendo Servers?
Wouldn't that mean that they can find out which IP the games are downloaded to and then ban/blacklist thos IP addresses?

They could, but they never did this for WiiU for example where download with uTikDownloader was super easy.

 

[BvanBart]

Wowa... this is nice thank

 

[DarthDub]

I'll wait this out til I see how Nintendo bans accounts on Switch cause I feel like it won't be lax like the Wii U.

 

[eliboa]

Great work SimonMKWii as always ;-) Thank you

 

[SimonMKWii]

I'll wait this out til I see how Nintendo bans accounts on Switch cause I feel like it won't be lax like the Wii U.

They can't detect this, all HTTP requests are identical to the way the Switch would output them!
Unless you download a game you don't own, this would seem suspicious to Nintendo, surprise, surprise...

 

[Reploid]

No piracy, no fun.

 

[ry755]

lol Nintendo will never learn security

They could, but they never did this for WiiU for example where download with uTikDownloader was super easy.

Yeah but no one really cared about the Wii U very much. With the Switch it's the complete opposite.

 

[javilobo8]

They can't detect this, all HTTP requests are identical to the way the Switch would output them!
Unless you download a game you don't own, this would seem suspicious to Nintendo, surprise, surprise...

Same User Agent? XD

 

[thekarter104]

We don't know how Nintendo will handle bans. We first have to see.

 

[SimonMKWii]

Same User Agent? XD

Yeah, same UA, assuming you're on firmware 5.0.2, as that's what I set the value to

 

[javilobo8]

Yeah, same UA, assuming you're on firmware 5.0.2, as that's what I set the value to

Nice job then!

 

[SciresM]

Wait... you thought I was done with the massive releases???
Here's one more!
This is HACDN, it's like ShogunTool, but on steroids!

1) Please do not embed compiled binaries of hactool in your tool. Please link to the releases page.

They can't detect this, all HTTP requests are identical to the way the Switch would output them!
Unless you download a game you don't own, this would seem suspicious to Nintendo, surprise, surprise...

2) Actually, this is totally distinguishable:
2a) You are not using the correct user-agent, so the server can tell your tool is downloading and not a console.
2b) You are not sending the correct requests to download games the way that the console does -- the console uses a very specific pattern of requests, and you're not doing it.

3) Your tool doesn't actually work.
3a) The way that you download games is to save the first "8008135" bytes of the CNMT NCA (dude, seriously?), and then you download the first 1000000000 bytes of the NCAID listed at offset 96 into the CNMT.
-This is not a valid heuristic for determining the main application NCA ID from a CNMT.
-Games are frequently more than a billion bytes in size.
3b) Your "title name recognition feature" hardcodes Odyssey 1.0.0's NCA ID....and doesn't have names registered for literally anything else.

Anyway, this tool's pretty shit, I'd recommend using only at your own risk.

 

[Kubas_inko]

Do you need titlekeys to install games via something like fbi?

 

[nmkd]

Does that mean, JUST IN THEORY, that I can just download paid games and then use a key that someone shared (you know that's gonna happen anyway) and play it?

If yes, then... ouch. Then piracy is way too convenient.

 

[charlieb]

1) Please do not embed compiled binaries of hactool in your tool. Please link to the releases page.
---snip---
Anyway, this tool's pretty shit, I'd recommend using only at your own risk.

*OUCH*

--------------------- MERGED ---------------------------

Does that mean, JUST IN THEORY, that I can just download paid games and then use a key that someone shared (you know that's gonna happen anyway) and play it?

If yes, then... ouch. Then piracy is way too convenient.

You've obviously not seen things on the WiiU scene where it was as easy as this


To OP, thank you all the same for this, all homebrew is welcome regardless.