Skip to content

Instantly share code, notes, and snippets.

@leo60228

leo60228/exploit.md

Created August 25, 2016 23:08
Show Gist options
  • Save leo60228/26a9abc2ffcd480c13f00ebf8dae2ab0 to your computer and use it in GitHub Desktop.
Save leo60228/26a9abc2ffcd480c13f00ebf8dae2ab0 to your computer and use it in GitHub Desktop.
Download ZIP
*Possible* 3DS 11.0 Downgrade "Exploit"
Raw
exploit.md

Notes:

  • Technically still dsiwarehax.
  • Just an alternate method of running it.
  • Exploit in Pokemon Gen 5 may work, probably won't, but is not the focus of this.
  • Requires a large time and monetary investment to run publicly.

Reasons why this could fail:

  • Only test done with CFW. Loader patches were turned off.
  • Not enough space in .text. May be able to be worked around (modded HB service?).
  • Not enough permissions. See above.
  • Unexpected error relating to final transfer. Could be worked around with unknown method.

Actual plan:

  • Dump code.bin file for 11.0 System Transfer.
  • Put a9lh 3DS with dsiwarehax on a remote network.
  • Connect a9lh 3DS to a custom server (raspi?).
  • Put server on a publically accessible IP.
  • Make NAND backup of remote system.
  • Heavily mod code.bin to connect to the server instead of UDS on both ends, loading via HANS from the HBL.
  • Run System Transfer via HANS as normal.
  • Restore NAND backup on remote system.
  • Follow normal dgtool instructions.
  • Install a9lh.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment