Difference between revisions of "Talk:DSi exploits"

From DSiBrew
Jump to navigation Jump to search
 
(41 intermediate revisions by 19 users not shown)
Line 4: Line 4:
  
 
== Kasu's Hack ==
 
== Kasu's Hack ==
Fake ? Everyone can do that using a DSi flashcard and remove it after ! <br>
+
 
 +
Fake ? Everyone can do that using a DSi flashcard and remove it after ! <br/>
 
If it isn't a fake show us how you load the code ! --[[User:Ludo6431|Ludo6431]] 16:39, 20 April 2009 (UTC)
 
If it isn't a fake show us how you load the code ! --[[User:Ludo6431|Ludo6431]] 16:39, 20 April 2009 (UTC)
  
== Exploit via Opera? ==
+
== DSi-only Game Exploit ==
 
 
The DSi Webbrowser is based on an older Opera 9.5/9.6 as I know and there are several security issues like the possibility of executing code through manipulated jpeg-images ([http://www.opera.com/support/kb/view/926/ here more detailed]).
 
  
Wouldn't it be possible to use such a security hole to start homebrew from the SD card?
+
Well, there's the first DSi-only game out there ([http://www.amazon.fr/Mon-coach-personnel-recettes-plaisir/dp/B001VOV7XI french cooking crap]). Is that of any use? [[User:BlackNeedle|BlackNeedle]] 00:20, 12 July 2009 (UTC)<br/>
 +
Mh, actually it's a hybrid game with extra functionality (camera) on DSi. [[User:BlackNeedle|BlackNeedle]] 00:22, 12 July 2009 (UTC)
 +
There is 2 others game like this :
 +
- My Cooking Coach : Prepare Healthy Recipes [EUR]
 +
- Classic Word Games [EUR]
  
 +
But I don't know if DSiDev Team (include loopy, darkfader and the others on IRC) are working on it ! <small>—Preceding unsigned comment added by [[User:Geniusdj|Geniusdj]] ([[User talk:Geniusdj|talk]] • [[Special:Contributions/Geniusdj|contribs]]) 10:29, 9 July 2009 (UTC)</small>
 +
Oh ! Team Twiizers have find an exploit (semi hardware and software, I guess) !
 +
But you're right that was one of those game who served for the exploit (Classic Word Game). <small>—Preceding unsigned comment added by [[User:Geniusdj|Geniusdj]] ([[User talk:Geniusdj|talk]] • [[Special:Contributions/Geniusdj|contribs]]) 15:08, 9 July 2009 (UTC)</small>
  
'''Advantages:'''
+
:ahhh, happy day.  I'll be watching this closely.--[[User:Funkamatic|<font face="Copperplate Gothic Light"><font color="red">FUNK<font color="black">A</font>MATIC</font></font>]][[User talk:Funkamatic|<font face="Impact"><font color="black">  ~talk</font></font>]] 17:28, 9 July 2009 (UTC)
  
1. Opera DSi webbrowser runs in native DSi mode --> access to all DSi features
+
We could try modifying the files it copies onto the SD card from the DSi Applications. I've been trying to do this but with no success. If anyone wants to help me out email me at: the2banned2one@gmail.com . Any help would be much appreciated. If I can get anything from this I will post it and the files here. --[[User:The2Banned2One|<font color="red">The2Banned2One</font>]][[User talk:The2Banned2One| ~talk]] <s>17:21, 5 August 2009 (EST)</s> <span style="font-size: smaller;" class="autosigned">—Preceding undated comment added 21:24, 5 August 2009 (UTC).</span><!--Template:Undated-->
  
2. Easy to use: Just save your homebrew on your SD card, surf to the manipulated image an execute your homebrew
+
== BannerBomb Like Exploit ==
  
3. No extra game/stuff/anything needed, you just have to download the DSi webbrowser for free and then you can start using homebrew on your DSi
+
Could we program something that can make the DSi Crash and load homebrew like the Wii's Bannerbomb?
 +
--[[User:TWLREECE|TWLREECE]] 18:35, 17 August 2009 (UTC)
  
 +
== Action Replay DSi ==
  
'''Disadvantage:'''
+
The Action Replay DSi runs in DSi Mode, has a Micro SD Card slot, and can run homebrew applications in a .nds format, could an installer program be written to install a homebrew channel on the DSi?--DSiDude
 +
:I'd like to know this also, but how do you know it runs in DSi mode?--[[User:Funkamatic|<font face="Copperplate Gothic Light"><font color="red">FUNK<font color="black">A</font>MATIC</font></font>]][[User talk:Funkamatic|<font face="Impact"><font color="black">  ~talk</font></font>]] 22:38, 21 January 2010 (UTC)
  
It has to be found out how to use such a security issue
+
According to [[http://www.youtube.com/watch?v=y4etylDSHrw this video]] the Action Replay DSi shows up as a Game and Watch collection NDS game.
 +
This automatically means it cannot support DSi mode, and is running in normal DS mode. -- neimod
  
 +
That IS the DSi Mode, because if you use it on a DS, it just automatically boots up the Action Replay, without going to the DS menu. I have tried this. I don't know much about the DSi's workings but I'm pretty sure of this. --DSiDude
  
I have no idea if this is possible and because I don't have the skills to do that, I thought I tell your about and you say if this idea is realistic.
+
:No, it means the DSi System Menu will see it as a NDS game, not as a DSi game. As such it will disable all DSi features and revert to DS compatibility mode. Just try to load a DSi game, and it should fail to load (DSi only), or have all DSi features disabled (DSi enhanced). -- neimod
  
--[[User:Makorus|Makorus]] 09:19, 9 May 2009 (UTC)
+
::Action Replay on a DS always just boots up, that doesn't have anything to do with DSi mode --[[User:Bg4545|bg4545]] 03:19, 24 January 2010 (UTC)
  
This exploit use a buffer overflow by accesing to an URI (file://) with a very long adress but it's need that the file has to be in the disk.
+
== Flip Note studio bug ==
URI link with Nintendo DSi Browser doesnt't work.
 
[http://www.zataz.com/news/18368/faille--vulnerabilite--exploit--opera.html] (link in French)
 
  
--[[User:Geniusdj|Geniusdj]] 13:30, 9 May 2009 (CET)
+
i dunno if this is of ANY use to anyone, but i found a glitch in Flipnote studio. As you may know, it accesses the SD card to see if there are any animations. I noticed it also tries to access the SD card when youre in a flipnote. I was making an animation, and i go to the story board mode to delete some frames. It then gave me a pop-up saying The object in the SD card slot could not be read (or something like that). It gives me that particular message because i have an SD adapter thats supposed to hold a micro sd. Anyways, just trying to be helpful.
  
 +
That's only useless MMC hw fail. That isn't exploitable at all. --[[User:Yellows8|Yellows8]] 02:44, 26 November 2010 (CET)
  
I talked especially about manipulated jpegs, because I suppose (I don't really know, but I think so) they can contain the code that shall be executed.
+
No, not that, just the odd timing of it trying to access the SD card was weird to me.
  
--[[User:Makorus|Makorus]] 17:53, 9 May 2009 (UTC)
+
== Team Cyclops flashcard ==
  
I was looking for a sample of those manipulated jpegs for Opera < v9.64 and that seems that is it only a vulnerability and not an exploit. The only exploit is the one with URI : i tried two example of this : [http://milw0rm.com/exploits/7135], the browser seems to be slower and after, it's show a page that says : "Out of memory. The page may not display correctly" or "The page have a wrong path".
+
It's called the CycloDsi, and i guess it can access DSi features. Should that go on this exploits page?
 +
[http://www.cyclopsds.com/cgi-bin/cyclods/engine.pl here's] their site.
  
Someone know the path to memory card of DSi ? 'Cause the exploit count on this by putting a file on the disk.
+
: The exploits page is only for homebrew exploits, _no_ flash cards. And if you look at recent changes a news entry for that flash card was removed. --[[User:Yellows8|Yellows8]] 00:00, 19 December 2010 (CET)
  
--[[User:Geniusdj|Geniusdj]] 13:22, 9 May 2009 (CET)
+
: Only technical information regarding the internal workings of the card exploit is welcome. Just pointing to a site that claims to have built a flashcard that has access to DSi features is NOT useful. --[[User:Neimod|Neimod]] 04:48, 19 December 2010 (CET)
  
== Bannerbomb for DSi? ==
+
== List of ideas for exploitation/hacking of latest dsi version ==
  
I think something like ([http://www.wiibrew.org/wiki/Bannerbomb/ Bannerbomb]) should be possible, because the Firmware of the DSi is similar to the Firmware of the Wii.--[[User:Ninko|Ninko]] 20:07, 16 May 2009 (UTC)
+
iwantfun-a hack using download play
  
:The problem with that is that the DSi uses simple bitmaps for banners, and not the intricate proprietary format Nintendo uses. So, unless Nintendo fail at bitmap parsing, there isn't likely to be an exploit there. [[User:Muzer|Muzer]] 09:14, 17 May 2009 (UTC)
+
iwantfun-an simulator/emulator like the one for ipod [this is to help hacking development]
  
::Oh, I didn't know that. [[User:Ninko|Ninko]] 18:11, 17 May 2009 (UTC)
+
iwantfun-a costom headphone jack that plugs into computer [usb] and can access dsi files or softmod from a computer program
  
:What if you were to attempt to load a corrupted file? Does the DSi have safeguards in place to prevent a malformed bitmap from being loaded? [[User:ploogle|Ploogle]] 17:24, 24 May 2009 (GMT -8:00)
+
iwantfun-there is 4 game [dsi shop] exploits that work on all system versions exept latest.make more of them.
  
== Camera or Sound Channel Exploit? ==
+
iwantfun-a costom charger cord with usb that plugs into computer and a program described below
Has anyone looked into an exploit involving loading a corrupted sound or image file into the Sound or Camera channel via the SD card? How about a purposefully corrupted filesystem on the SD card? [[User:ploogle|Ploogle]] 17:29, 24 May 2009 (GMT -8:00)
 
  
== Dsi Homebrew via DS Download play? ==
+
iwantfun-a program that detects if usb cord is attached or has a manual ability called 'select a usb port'. then it sends a virus that enter's the dsi [ or any unfortionate device u forgot to unplug] and deletes by force all security files and replaces them with fakes/replacements.all security certificate's however are left untouched.I am not liable for any damages caused by this on said 'unfortunate' devices.
  
Wouldn't it be possible to develope an app for Wii, which sends a kind of Installer via WiFi to the dsi and then dowload and run it with DS download play? The Wii can send things to the DS(i) so the connectivity is given, isn't it? <small>—Preceding unsigned comment added by [[User:Shadowchao|Shadowchao]] ([[User talk:Shadowchao|talk]] • [[Special:Contributions/Shadowchao|contribs]]) 03:29, 12 June 2009 (UTC)</small>
+
iwantfun-this is a likely to work method.using a different program then described above.this program deletes everything and replaces all of the files with any force neccesary.one way to ensure this is to make the program not interpret any of the data and give it all of the known unencryption keys, certificate's, and signature's in case it needs it. it would also have the administrative power [either though something fake,though hacking, or legit/real].it would replace the system with already hacked files, menu, etc.
  
Sounds umm... interesting, but it would be inconvenient for users who don't own a wii [[User:TwoBladedKnight|TwoBladedKnight]] 09:49, 12 June 2009 (UTC)
+
iwantfun-this will also likely work. hack a game download from the dsi store . replace the file thats downloaded from the dsi store with a dsi exploiting file, plus the game.
  
:Quite probably impossible, for the time being at least, unless there is an exploitable buffer overflow in download play. It was originally possible on an original DS with older firmware (using WiFiMe), but this was patched long ago, before even the DSi came out. [[User:Muzer|Muzer]] 15:56, 13 June 2009 (UTC)
+
=== Rules? ===
 +
Shouldn't the "rules" be moved from the main page to here? -[[User:Winmaster|Winmaster]] 15:38, 29 September 2012 (CEST)

Latest revision as of 15:38, 29 September 2012

Dub-T's Nintendo DSi Shop Hack

Erm, doesn't this just follow from what I wrote on Hackmii? http://hackmii.com/2009/01/dsibrew/ --Bushing 11:41, 20 April 2009 (UTC)

Kasu's Hack

Fake ? Everyone can do that using a DSi flashcard and remove it after !
If it isn't a fake show us how you load the code ! --Ludo6431 16:39, 20 April 2009 (UTC)

DSi-only Game Exploit

Well, there's the first DSi-only game out there (french cooking crap). Is that of any use? BlackNeedle 00:20, 12 July 2009 (UTC)
Mh, actually it's a hybrid game with extra functionality (camera) on DSi. BlackNeedle 00:22, 12 July 2009 (UTC) There is 2 others game like this : - My Cooking Coach : Prepare Healthy Recipes [EUR] - Classic Word Games [EUR]

But I don't know if DSiDev Team (include loopy, darkfader and the others on IRC) are working on it ! —Preceding unsigned comment added by Geniusdj (talkcontribs) 10:29, 9 July 2009 (UTC) Oh ! Team Twiizers have find an exploit (semi hardware and software, I guess) ! But you're right that was one of those game who served for the exploit (Classic Word Game). —Preceding unsigned comment added by Geniusdj (talkcontribs) 15:08, 9 July 2009 (UTC)

ahhh, happy day. I'll be watching this closely.--FUNKAMATIC ~talk 17:28, 9 July 2009 (UTC)

We could try modifying the files it copies onto the SD card from the DSi Applications. I've been trying to do this but with no success. If anyone wants to help me out email me at: the2banned2one@gmail.com . Any help would be much appreciated. If I can get anything from this I will post it and the files here. --The2Banned2One ~talk 17:21, 5 August 2009 (EST) —Preceding undated comment added 21:24, 5 August 2009 (UTC).

BannerBomb Like Exploit

Could we program something that can make the DSi Crash and load homebrew like the Wii's Bannerbomb? --TWLREECE 18:35, 17 August 2009 (UTC)

Action Replay DSi

The Action Replay DSi runs in DSi Mode, has a Micro SD Card slot, and can run homebrew applications in a .nds format, could an installer program be written to install a homebrew channel on the DSi?--DSiDude

I'd like to know this also, but how do you know it runs in DSi mode?--FUNKAMATIC ~talk 22:38, 21 January 2010 (UTC)
According to [this video] the Action Replay DSi shows up as a Game and Watch collection NDS game. 
This automatically means it cannot support DSi mode, and is running in normal DS mode. -- neimod

That IS the DSi Mode, because if you use it on a DS, it just automatically boots up the Action Replay, without going to the DS menu. I have tried this. I don't know much about the DSi's workings but I'm pretty sure of this. --DSiDude

No, it means the DSi System Menu will see it as a NDS game, not as a DSi game. As such it will disable all DSi features and revert to DS compatibility mode. Just try to load a DSi game, and it should fail to load (DSi only), or have all DSi features disabled (DSi enhanced). -- neimod
Action Replay on a DS always just boots up, that doesn't have anything to do with DSi mode --bg4545 03:19, 24 January 2010 (UTC)

Flip Note studio bug

i dunno if this is of ANY use to anyone, but i found a glitch in Flipnote studio. As you may know, it accesses the SD card to see if there are any animations. I noticed it also tries to access the SD card when youre in a flipnote. I was making an animation, and i go to the story board mode to delete some frames. It then gave me a pop-up saying The object in the SD card slot could not be read (or something like that). It gives me that particular message because i have an SD adapter thats supposed to hold a micro sd. Anyways, just trying to be helpful.

That's only useless MMC hw fail. That isn't exploitable at all. --Yellows8 02:44, 26 November 2010 (CET)

No, not that, just the odd timing of it trying to access the SD card was weird to me.

Team Cyclops flashcard

It's called the CycloDsi, and i guess it can access DSi features. Should that go on this exploits page? here's their site.

The exploits page is only for homebrew exploits, _no_ flash cards. And if you look at recent changes a news entry for that flash card was removed. --Yellows8 00:00, 19 December 2010 (CET)
Only technical information regarding the internal workings of the card exploit is welcome. Just pointing to a site that claims to have built a flashcard that has access to DSi features is NOT useful. --Neimod 04:48, 19 December 2010 (CET)

List of ideas for exploitation/hacking of latest dsi version

iwantfun-a hack using download play

iwantfun-an simulator/emulator like the one for ipod [this is to help hacking development]

iwantfun-a costom headphone jack that plugs into computer [usb] and can access dsi files or softmod from a computer program

iwantfun-there is 4 game [dsi shop] exploits that work on all system versions exept latest.make more of them.

iwantfun-a costom charger cord with usb that plugs into computer and a program described below

iwantfun-a program that detects if usb cord is attached or has a manual ability called 'select a usb port'. then it sends a virus that enter's the dsi [ or any unfortionate device u forgot to unplug] and deletes by force all security files and replaces them with fakes/replacements.all security certificate's however are left untouched.I am not liable for any damages caused by this on said 'unfortunate' devices.

iwantfun-this is a likely to work method.using a different program then described above.this program deletes everything and replaces all of the files with any force neccesary.one way to ensure this is to make the program not interpret any of the data and give it all of the known unencryption keys, certificate's, and signature's in case it needs it. it would also have the administrative power [either though something fake,though hacking, or legit/real].it would replace the system with already hacked files, menu, etc.

iwantfun-this will also likely work. hack a game download from the dsi store . replace the file thats downloaded from the dsi store with a dsi exploiting file, plus the game.

Rules?

Shouldn't the "rules" be moved from the main page to here? -Winmaster 15:38, 29 September 2012 (CEST)