Difference between revisions of "Talk:DSi exploits"

From DSiBrew
Jump to navigation Jump to search
 
(34 intermediate revisions by 15 users not shown)
Line 5: Line 5:
 
== Kasu's Hack ==
 
== Kasu's Hack ==
  
−
Fake ? Everyone can do that using a DSi flashcard and remove it after ! <br>
+
Fake ? Everyone can do that using a DSi flashcard and remove it after ! <br/>
 
If it isn't a fake show us how you load the code ! --[[User:Ludo6431|Ludo6431]] 16:39, 20 April 2009 (UTC)
 
If it isn't a fake show us how you load the code ! --[[User:Ludo6431|Ludo6431]] 16:39, 20 April 2009 (UTC)
  
−
== Exploit via Opera? ==
+
== DSi-only Game Exploit ==
  
−
The DSi Webbrowser is based on an older Opera 9.5/9.6 as I know and there are several security issues like the possibility of executing code through manipulated jpeg-images ([http://www.opera.com/support/kb/view/926/ here more detailed]).
+
Well, there's the first DSi-only game out there ([http://www.amazon.fr/Mon-coach-personnel-recettes-plaisir/dp/B001VOV7XI french cooking crap]). Is that of any use? [[User:BlackNeedle|BlackNeedle]] 00:20, 12 July 2009 (UTC)<br/>
 +
Mh, actually it's a hybrid game with extra functionality (camera) on DSi. [[User:BlackNeedle|BlackNeedle]] 00:22, 12 July 2009 (UTC)
 +
There is 2 others game like this :
 +
- My Cooking Coach : Prepare Healthy Recipes [EUR]
 +
- Classic Word Games [EUR]
  
−
Wouldn't it be possible to use such a security hole to start homebrew from the SD card?
+
But I don't know if DSiDev Team (include loopy, darkfader and the others on IRC) are working on it ! <small>—Preceding unsigned comment added by [[User:Geniusdj|Geniusdj]] ([[User talk:Geniusdj|talk]] • [[Special:Contributions/Geniusdj|contribs]]) 10:29, 9 July 2009 (UTC)</small>
 +
Oh ! Team Twiizers have find an exploit (semi hardware and software, I guess) !
 +
But you're right that was one of those game who served for the exploit (Classic Word Game). <small>—Preceding unsigned comment added by [[User:Geniusdj|Geniusdj]] ([[User talk:Geniusdj|talk]] • [[Special:Contributions/Geniusdj|contribs]]) 15:08, 9 July 2009 (UTC)</small>
  
 +
:ahhh, happy day.  I'll be watching this closely.--[[User:Funkamatic|<font face="Copperplate Gothic Light"><font color="red">FUNK<font color="black">A</font>MATIC</font></font>]][[User talk:Funkamatic|<font face="Impact"><font color="black">  ~talk</font></font>]] 17:28, 9 July 2009 (UTC)
  
−
'''Advantages:'''
+
We could try modifying the files it copies onto the SD card from the DSi Applications. I've been trying to do this but with no success. If anyone wants to help me out email me at: the2banned2one@gmail.com . Any help would be much appreciated. If I can get anything from this I will post it and the files here. --[[User:The2Banned2One|<font color="red">The2Banned2One</font>]][[User talk:The2Banned2One| ~talk]] <s>17:21, 5 August 2009 (EST)</s> <span style="font-size: smaller;" class="autosigned">—Preceding undated comment added 21:24, 5 August 2009 (UTC).</span><!--Template:Undated-->
  
−
1. Opera DSi webbrowser runs in native DSi mode --> access to all DSi features
+
== BannerBomb Like Exploit ==
  
−
2. Easy to use: Just save your homebrew on your SD card, surf to the manipulated image an execute your homebrew
+
Could we program something that can make the DSi Crash and load homebrew like the Wii's Bannerbomb?
 +
--[[User:TWLREECE|TWLREECE]] 18:35, 17 August 2009 (UTC)
  
−
3. No extra game/stuff/anything needed, you just have to download the DSi webbrowser for free and then you can start using homebrew on your DSi
+
== Action Replay DSi ==
  
 +
The Action Replay DSi runs in DSi Mode, has a Micro SD Card slot, and can run homebrew applications in a .nds format, could an installer program be written to install a homebrew channel on the DSi?--DSiDude
 +
:I'd like to know this also, but how do you know it runs in DSi mode?--[[User:Funkamatic|<font face="Copperplate Gothic Light"><font color="red">FUNK<font color="black">A</font>MATIC</font></font>]][[User talk:Funkamatic|<font face="Impact"><font color="black">  ~talk</font></font>]] 22:38, 21 January 2010 (UTC)
  
−
'''Disadvantage:'''
+
According to [[http://www.youtube.com/watch?v=y4etylDSHrw this video]] the Action Replay DSi shows up as a Game and Watch collection NDS game.
 +
This automatically means it cannot support DSi mode, and is running in normal DS mode. -- neimod
  
−
It has to be found out how to use such a security issue
+
That IS the DSi Mode, because if you use it on a DS, it just automatically boots up the Action Replay, without going to the DS menu. I have tried this. I don't know much about the DSi's workings but I'm pretty sure of this. --DSiDude
  
−
I have no idea if this is possible and because I don't have the skills to do that, I thought I tell your about and you say if this idea is realistic.
+
:No, it means the DSi System Menu will see it as a NDS game, not as a DSi game. As such it will disable all DSi features and revert to DS compatibility mode. Just try to load a DSi game, and it should fail to load (DSi only), or have all DSi features disabled (DSi enhanced). -- neimod
  
−
--[[User:Makorus|Makorus]] 09:19, 9 May 2009 (UTC)
+
::Action Replay on a DS always just boots up, that doesn't have anything to do with DSi mode --[[User:Bg4545|bg4545]] 03:19, 24 January 2010 (UTC)
  
−
This exploit use a buffer overflow by accesing to an URI (file://) with a very long adress but it's need that the file has to be in the disk.
+
== Flip Note studio bug ==
  
−
URI link with Nintendo DSi Browser doesnt't work.
+
i dunno if this is of ANY use to anyone, but i found a glitch in Flipnote studio. As you may know, it accesses the SD card to see if there are any animations. I noticed it also tries to access the SD card when youre in a flipnote. I was making an animation, and i go to the story board mode to delete some frames. It then gave me a pop-up saying The object in the SD card slot could not be read (or something like that). It gives me that particular message because i have an SD adapter thats supposed to hold a micro sd. Anyways, just trying to be helpful.
  
−
[http://www.zataz.com/news/18368/faille--vulnerabilite--exploit--opera.html] (link in French)
+
That's only useless MMC hw fail. That isn't exploitable at all. --[[User:Yellows8|Yellows8]] 02:44, 26 November 2010 (CET)
  
−
--[[User:Geniusdj|Geniusdj]] 13:30, 9 May 2009 (CET)
+
No, not that, just the odd timing of it trying to access the SD card was weird to me.
  
 +
== Team Cyclops flashcard ==
  
−
I talked especially about manipulated jpegs, because I suppose (I don't really know, but I think so) they can contain the code that shall be executed.
+
It's called the CycloDsi, and i guess it can access DSi features.  Should that go on this exploits page?
 +
[http://www.cyclopsds.com/cgi-bin/cyclods/engine.pl here's] their site.
  
−
--[[User:Makorus|Makorus]] 17:53, 9 May 2009 (UTC)
+
: The exploits page is only for homebrew exploits, _no_ flash cards. And if you look at recent changes a news entry for that flash card was removed. --[[User:Yellows8|Yellows8]] 00:00, 19 December 2010 (CET)
  
−
I was looking for a sample of those manipulated jpegs for Opera < v9.64 and that seems that is it only a vulnerability and not an exploit. The only exploit is the one with URI : i tried two example of this : [http://milw0rm.com/exploits/7135], the browser seems to be slower and after, it's show a page that says : "Out of memory. The page may not display correctly" or "The page have a wrong path".
+
: Only technical information regarding the internal workings of the card exploit is welcome. Just pointing to a site that claims to have built a flashcard that has access to DSi features is NOT useful. --[[User:Neimod|Neimod]] 04:48, 19 December 2010 (CET)
  
−
Someone know the path to memory card of DSi ? 'Cause the exploit count on this by putting a file on the disk.
+
== List of ideas for exploitation/hacking of latest dsi version ==
  
−
--[[User:Geniusdj|Geniusdj]] 13:22, 9 May 2009 (CET)
+
iwantfun-a hack using download play
  
−
:If one of these is found, it could work, but it seems attempts have been fruitless so far. An OOM error is not the same as a crash, and the DSi's browser will not access its own filesystem or the SD card - they're not that stupid! Of course, searching for another exploit can do no harm, especially if it involves something in a web page, since then it's more likely to be able to load executable code from that same page. [[User:Muzer|Muzer]] 18:41, 17 June 2009 (UTC)
+
iwantfun-an simulator/emulator like the one for ipod [this is to help hacking development]
  
−
== Bannerbomb for DSi? ==
+
iwantfun-a costom headphone jack that plugs into computer [usb] and can access dsi files or softmod from a computer program
  
−
I think something like ([http://www.wiibrew.org/wiki/Bannerbomb/ Bannerbomb]) should be possible, because the Firmware of the DSi is similar to the Firmware of the Wii.--[[User:Ninko|Ninko]] 20:07, 16 May 2009 (UTC)
+
iwantfun-there is 4 game [dsi shop] exploits that work on all system versions exept latest.make more of them.
  
−
:The problem with that is that the DSi uses simple bitmaps for banners, and not the intricate proprietary format Nintendo uses. So, unless Nintendo fail at bitmap parsing, there isn't likely to be an exploit there. [[User:Muzer|Muzer]] 09:14, 17 May 2009 (UTC)
+
iwantfun-a costom charger cord with usb that plugs into computer and a program described below
  
−
::Oh, I didn't know that. [[User:Ninko|Ninko]] 18:11, 17 May 2009 (UTC)
+
iwantfun-a program that detects if usb cord is attached or has a manual ability called 'select a usb port'. then it sends a virus that enter's the dsi [ or any unfortionate device u forgot to unplug] and deletes by force all security files and replaces them with fakes/replacements.all security certificate's however are left untouched.I am not liable for any damages caused by this on said 'unfortunate' devices.
  
−
:What if you were to attempt to load a corrupted file? Does the DSi have safeguards in place to prevent a malformed bitmap from being loaded? [[User:ploogle|Ploogle]] 17:24, 24 May 2009 (GMT -8:00)
+
iwantfun-this is a likely to work method.using a different program then described above.this program deletes everything and replaces all of the files with any force neccesary.one way to ensure this is to make the program not interpret any of the data and give it all of the known unencryption keys, certificate's, and signature's in case it needs it. it would also have the administrative power [either though something fake,though hacking, or legit/real].it would replace the system with already hacked files, menu, etc.
  
−
::Well, there isn't much in a bitmap you can bork up. Also, I believe all this is encrypted and we still don't know any of the DSi's keys. You see, with the Wii, once one hardware exploit was found that is really hard to do, all the easier exploits followed. Absolutely none of the Wii exploits we have today would NEVER have existed if it weren't for the initial Twiizers attack. Trucha signing involves having some key so the disc's signature can be checked against, Twilight Hack requires the SD key, and Banner Bomb requires the key for encrypting channels (I can't remember which one is used, I think it might be the SD again). Of course, there's no harm in fiddling with the header of encrypted data to see if you can bork anything, but it's highly unlikely. [[User:Muzer|Muzer]] 18:41, 17 June 2009 (UTC)
+
iwantfun-this will also likely work. hack a game download from the dsi store . replace the file thats downloaded from the dsi store with a dsi exploiting file, plus the game.
  
−
== Camera or Sound Channel Exploit? ==
+
=== Rules? ===
−
 
+
Shouldn't the "rules" be moved from the main page to here? -[[User:Winmaster|Winmaster]] 15:38, 29 September 2012 (CEST)
−
Has anyone looked into an exploit involving loading a corrupted sound or image file into the Sound or Camera channel via the SD card? How about a purposefully corrupted filesystem on the SD card? [[User:ploogle|Ploogle]] 17:29, 24 May 2009 (GMT -8:00)
 
−
 
 
−
:The DSi refuses to open JPEGs from a foreign source that aren't signed by the DSi. Audio files are another matter, but again, there isn't much in that format to bork up. If you get an audio file the DSi can play and fiddle with the first few bytes in a hex editor, see if you can get the DSi to crash. You could also try with a stupidly massive audio file/JPEG. It's unlikely there will be an exploit here, but possible. [[User:Muzer|Muzer]] 18:41, 17 June 2009 (UTC)
 
−
 
 
−
== Dsi Homebrew via DS Download play? ==
 
−
 
 
−
Wouldn't it be possible to develope an app for Wii, which sends a kind of Installer via WiFi to the dsi and then dowload and  run it with DS download play? The Wii can send things to the DS(i) so the connectivity is given, isn't it? <small>—Preceding unsigned comment added by [[User:Shadowchao|Shadowchao]] ([[User talk:Shadowchao|talk]] • [[Special:Contributions/Shadowchao|contribs]]) 03:29, 12 June 2009 (UTC)</small>
 
−
 
 
−
Sounds umm... interesting, but it would be inconvenient for users who don't own a wii [[User:TwoBladedKnight|TwoBladedKnight]] 09:49, 12 June 2009 (UTC)
 
−
 
 
−
:Quite probably impossible, for the time being at least, unless there is an exploitable buffer overflow in download play. It was originally possible on an original DS with older firmware (using WiFiMe), but this was patched long ago, before even the DSi came out. [[User:Muzer|Muzer]] 15:56, 13 June 2009 (UTC)
 
−
 
 
−
Well, might be, but i talk about the connectivity between Wii and DSi,which is surely not fixed. So Why don`t modify a .nds to make it work like an installer? Or did you mean to load modifyed apps is fixed?
 
−
 
 
−
:I'm talking about loading modified apps has been fixed. The DS's executables in download play are signed by Nintendo or something along those lines (can't remember what), and although there was some kind of exploit with the older DSs, that was fixed long ago. There may be other exploits of that type, or hell, they might have been idiots and reintroduced the same bugs. However, when we don't know much about the DSi's executable format, it's all very shot-in-the-dark. [[User:Muzer|Muzer]] 18:41, 17 June 2009 (UTC)
 
−
 
 
−
== Image Exploit ==
 
−
 
 
−
well the above topic about opera got me thinking. And while the opera exploit is a possibility (i think), couldnt we just use a ChickHEN like exploit, except for DSi. (ChickHEN is an exploit using images for PSP). I dont know the details on the workings of ChickHEN, but someone might want to check it out. --[[User:ChuckBartowski|ChuckBartowski]] 05:07, 16 June 2009 (UTC)
 
−
 
 
−
Go to DSiDev IRC and asks them yourself if it's possible !  GeniusDJ <small>—Preceding unsigned comment added by [[User:Geniusdj|Geniusdj]] ([[User talk:Geniusdj|talk]] • [[Special:Contributions/Geniusdj|contribs]]) 12:49, 16 June 2009 (UTC)</small>
 
−
 
 
−
:ChickHEN uses TIFFs, which have many many exploitable fields. The DSi will only read JPEGs, and only JPEGs signed by that DSi at that. If you fiddle about with one in a text editor and find something that makes the DSi freeze, report it, but other than that, I doubt it would work. [[User:Muzer|Muzer]] 18:41, 17 June 2009 (UTC)
 
−
 
 
−
== Mario Kart DS? ==
 
−
 
 
−
In mario kart if you select time trials and goto the luigis mansion stage and goto the stairs before entering the mansion and press a+b while pressing up down left or right. the game freezes and the music loops. maybe an exploit can be found to let us run homebrew from the sd card.
 
−
 
 
−
:I believe that this exploit would only be useful for DS mode and not DSi mode. Could be wrong though. --[[User:Funkamatic|<font face="Copperplate Gothic Light"><font color="red">FUNK<font color="black">A</font>MATIC</font></font>]][[User talk:Funkamatic|<font face="Impact"><font color="black">  ~talk</font></font>]] 02:43, 17 June 2009 (UTC)
 
−
 
 
−
::Funkamatic is right. [[User:Muzer|Muzer]] 18:41, 17 June 2009 (UTC)
 

Latest revision as of 14:38, 29 September 2012

Dub-T's Nintendo DSi Shop Hack

Erm, doesn't this just follow from what I wrote on Hackmii? http://hackmii.com/2009/01/dsibrew/ --Bushing 11:41, 20 April 2009 (UTC)

Kasu's Hack

Fake ? Everyone can do that using a DSi flashcard and remove it after !
If it isn't a fake show us how you load the code ! --Ludo6431 16:39, 20 April 2009 (UTC)

DSi-only Game Exploit

Well, there's the first DSi-only game out there (french cooking crap). Is that of any use? BlackNeedle 00:20, 12 July 2009 (UTC)
Mh, actually it's a hybrid game with extra functionality (camera) on DSi. BlackNeedle 00:22, 12 July 2009 (UTC) There is 2 others game like this : - My Cooking Coach : Prepare Healthy Recipes [EUR] - Classic Word Games [EUR]

But I don't know if DSiDev Team (include loopy, darkfader and the others on IRC) are working on it ! —Preceding unsigned comment added by Geniusdj (talk • contribs) 10:29, 9 July 2009 (UTC) Oh ! Team Twiizers have find an exploit (semi hardware and software, I guess) ! But you're right that was one of those game who served for the exploit (Classic Word Game). —Preceding unsigned comment added by Geniusdj (talk • contribs) 15:08, 9 July 2009 (UTC)

ahhh, happy day. I'll be watching this closely.--FUNKAMATIC ~talk 17:28, 9 July 2009 (UTC)

We could try modifying the files it copies onto the SD card from the DSi Applications. I've been trying to do this but with no success. If anyone wants to help me out email me at: the2banned2one@gmail.com . Any help would be much appreciated. If I can get anything from this I will post it and the files here. --The2Banned2One ~talk 17:21, 5 August 2009 (EST) —Preceding undated comment added 21:24, 5 August 2009 (UTC).

BannerBomb Like Exploit

Could we program something that can make the DSi Crash and load homebrew like the Wii's Bannerbomb? --TWLREECE 18:35, 17 August 2009 (UTC)

Action Replay DSi

The Action Replay DSi runs in DSi Mode, has a Micro SD Card slot, and can run homebrew applications in a .nds format, could an installer program be written to install a homebrew channel on the DSi?--DSiDude

I'd like to know this also, but how do you know it runs in DSi mode?--FUNKAMATIC ~talk 22:38, 21 January 2010 (UTC)
According to [this video] the Action Replay DSi shows up as a Game and Watch collection NDS game. 
This automatically means it cannot support DSi mode, and is running in normal DS mode. -- neimod

That IS the DSi Mode, because if you use it on a DS, it just automatically boots up the Action Replay, without going to the DS menu. I have tried this. I don't know much about the DSi's workings but I'm pretty sure of this. --DSiDude

No, it means the DSi System Menu will see it as a NDS game, not as a DSi game. As such it will disable all DSi features and revert to DS compatibility mode. Just try to load a DSi game, and it should fail to load (DSi only), or have all DSi features disabled (DSi enhanced). -- neimod
Action Replay on a DS always just boots up, that doesn't have anything to do with DSi mode --bg4545 03:19, 24 January 2010 (UTC)

Flip Note studio bug

i dunno if this is of ANY use to anyone, but i found a glitch in Flipnote studio. As you may know, it accesses the SD card to see if there are any animations. I noticed it also tries to access the SD card when youre in a flipnote. I was making an animation, and i go to the story board mode to delete some frames. It then gave me a pop-up saying The object in the SD card slot could not be read (or something like that). It gives me that particular message because i have an SD adapter thats supposed to hold a micro sd. Anyways, just trying to be helpful.

That's only useless MMC hw fail. That isn't exploitable at all. --Yellows8 02:44, 26 November 2010 (CET)

No, not that, just the odd timing of it trying to access the SD card was weird to me.

Team Cyclops flashcard

It's called the CycloDsi, and i guess it can access DSi features. Should that go on this exploits page? here's their site.

The exploits page is only for homebrew exploits, _no_ flash cards. And if you look at recent changes a news entry for that flash card was removed. --Yellows8 00:00, 19 December 2010 (CET)
Only technical information regarding the internal workings of the card exploit is welcome. Just pointing to a site that claims to have built a flashcard that has access to DSi features is NOT useful. --Neimod 04:48, 19 December 2010 (CET)

List of ideas for exploitation/hacking of latest dsi version

iwantfun-a hack using download play

iwantfun-an simulator/emulator like the one for ipod [this is to help hacking development]

iwantfun-a costom headphone jack that plugs into computer [usb] and can access dsi files or softmod from a computer program

iwantfun-there is 4 game [dsi shop] exploits that work on all system versions exept latest.make more of them.

iwantfun-a costom charger cord with usb that plugs into computer and a program described below

iwantfun-a program that detects if usb cord is attached or has a manual ability called 'select a usb port'. then it sends a virus that enter's the dsi [ or any unfortionate device u forgot to unplug] and deletes by force all security files and replaces them with fakes/replacements.all security certificate's however are left untouched.I am not liable for any damages caused by this on said 'unfortunate' devices.

iwantfun-this is a likely to work method.using a different program then described above.this program deletes everything and replaces all of the files with any force neccesary.one way to ensure this is to make the program not interpret any of the data and give it all of the known unencryption keys, certificate's, and signature's in case it needs it. it would also have the administrative power [either though something fake,though hacking, or legit/real].it would replace the system with already hacked files, menu, etc.

iwantfun-this will also likely work. hack a game download from the dsi store . replace the file thats downloaded from the dsi store with a dsi exploiting file, plus the game.

Rules?

Shouldn't the "rules" be moved from the main page to here? -Winmaster 15:38, 29 September 2012 (CEST)

Retrieved from "https://dsibrew.org/w/index.php?title=Talk:DSi_exploits&oldid=4303"