Difference between revisions of "Homebrew Exploits"

From 3dbrew
Jump to navigation Jump to search
Line 1: Line 1:
 +
==Payload==
 +
{| class="wikitable" border="1"
 +
|-
 +
!  Works on latest fw
 +
!  Name
 +
!  Description
 +
!  Supported firmwares
 +
|-
 +
| style="background: salmon" | No, not updated yet.
 +
| [https://smealum.github.io/3ds/ *hax payload]
 +
| Booted by all of the below non-sysmodule exploits.
 +
| From '''9.0.0-7''' up to and including '''11.0.0-33'''.
 +
|}
 +
 +
For the rest of this page, "Supported firmwares" refers to the exploit ''itself'', not whether *hax payload supports it.
 +
 
==Standalone Homebrew Launcher Exploits==
 
==Standalone Homebrew Launcher Exploits==
 
The following homebrew exploits can be executed on a previously un-exploited system.
 
The following homebrew exploits can be executed on a previously un-exploited system.
Line 18: Line 34:
 
| [http://smealum.net/ninjhax/ Install]
 
| [http://smealum.net/ninjhax/ Install]
 
|-
 
|-
−
| style="background: salmon" | No
+
| style="background: salmon" | No, exploit update required.
 
| [[ninjhax|Ninjhax 2.x]]
 
| [[ninjhax|Ninjhax 2.x]]
 
| From '''9.0.0-7''' up to and including '''10.7.0-32'''.
 
| From '''9.0.0-7''' up to and including '''10.7.0-32'''.
Line 25: Line 41:
 
| [https://smealum.github.io/ninjhax2/ Install]
 
| [https://smealum.github.io/ninjhax2/ Install]
 
|-
 
|-
−
| style="background: salmon" | No
+
| style="background: salmon" | No, exploit update required.
 
| [http://plutooo.github.io/freakyhax/ freakyhax]
 
| [http://plutooo.github.io/freakyhax/ freakyhax]
 
| From '''9.0.0-7''' up to and including '''11.0.0-33'''.
 
| From '''9.0.0-7''' up to and including '''11.0.0-33'''.
Line 46: Line 62:
 
| [http://mrnbayoh.github.io/basicsploit/ Install]
 
| [http://mrnbayoh.github.io/basicsploit/ Install]
 
|-
 
|-
−
| style="background: salmon" | No
+
| style="background: lightgreen" | Yes
 
| [[smashbroshax|smashbroshax]] (beaconhax)
 
| [[smashbroshax|smashbroshax]] (beaconhax)
−
| (New 3DS only) From '''9.0.0-X''' up to and including '''11.0.0-33'''.
+
| (New 3DS only) From '''9.0.0-X''' up to and including '''11.1.0-34'''.
 
| Super Smash Bros 3DS (full-game) and a way to broadcast raw wifi beacons. The demo (prior to the updated November 2015 [https://github.com/yellows8/3ds_smashbroshax version]) isn't usable with the *hax payloads. Game-version v1.1.3 fixed the vuln used with this, see the repo for a workaround for that.
 
| Super Smash Bros 3DS (full-game) and a way to broadcast raw wifi beacons. The demo (prior to the updated November 2015 [https://github.com/yellows8/3ds_smashbroshax version]) isn't usable with the *hax payloads. Game-version v1.1.3 fixed the vuln used with this, see the repo for a workaround for that.
 
| [[User:Yellows8|Yellows8]]
 
| [[User:Yellows8|Yellows8]]
Line 61: Line 77:
 
| [http://yls8.mtheall.com/3dsbrowserhax.php Install]
 
| [http://yls8.mtheall.com/3dsbrowserhax.php Install]
 
|}
 
|}
−
 
−
Note that all Exploits are currently unusable, because the home menu was updated in 11.1.0-34.
 
  
 
Note that ninjhax 1.x is still not obsolete. Even though ninjhax 2.x can be run on 9.3+, this was made possible (amongst other things) by sacrificing the memory remapping exploit used in ninjhax 1.x (rohax). Therefore, things like JIT engines for emulators can only be supported on ninjhax 1.x. Furthermore, ninjhax 2.x does not run on system versions below 9.0.0-X, while ninjhax 1.x does.
 
Note that ninjhax 1.x is still not obsolete. Even though ninjhax 2.x can be run on 9.3+, this was made possible (amongst other things) by sacrificing the memory remapping exploit used in ninjhax 1.x (rohax). Therefore, things like JIT engines for emulators can only be supported on ninjhax 1.x. Furthermore, ninjhax 2.x does not run on system versions below 9.0.0-X, while ninjhax 1.x does.
Line 84: Line 98:
 
| [http://smealum.github.io/3ds/ Install]
 
| [http://smealum.github.io/3ds/ Install]
 
|-
 
|-
−
| style="background: salmon" | No
+
| style="background: lightgreen" | Yes
 
| [http://vegaroxas.github.io/ steelhax]
 
| [http://vegaroxas.github.io/ steelhax]
−
| From '''9.0.0-X''' up to and including '''11.0.0-X''', for '''X''' up to and including 33.
+
| From '''9.0.0-X''' up to and including '''11.1.0-X''', for '''X''' up to and including 34.
 
| A copy of Steel Diver: Sub wars
 
| A copy of Steel Diver: Sub wars
 
| Vegaroxas
 
| Vegaroxas
 
| [https://github.com/VegaRoXas/vegaroxas.github.io/raw/master/files/steelhax-installer.zip Install]
 
| [https://github.com/VegaRoXas/vegaroxas.github.io/raw/master/files/steelhax-installer.zip Install]
 
|-
 
|-
−
| style="background: salmon" | No
+
| style="background: lightgreen" | Yes
 
| [https://github.com/yellows8/oot3dhax oot3dhax]
 
| [https://github.com/yellows8/oot3dhax oot3dhax]
−
| From '''9.0.0-X''' up to and including '''11.0.0-X''', for '''X''' up to and including 33.
+
| From '''9.0.0-X''' up to and including '''11.1.0-X''', for '''X''' up to and including 34.
 
| A gamecard or eShop-install of Legend of Zelda: Ocarina of Time 3D. Besides using the installer app, writing raw saveimages with a save dongle for example is another option. Before compression was introduced in the 2016-7-18 release, the size of the *hax payload meant the exploit can't coexist with regular saves on a physical version of the game.
 
| A gamecard or eShop-install of Legend of Zelda: Ocarina of Time 3D. Besides using the installer app, writing raw saveimages with a save dongle for example is another option. Before compression was introduced in the 2016-7-18 release, the size of the *hax payload meant the exploit can't coexist with regular saves on a physical version of the game.
 
| Yellows8 / smea et al.
 
| Yellows8 / smea et al.
Line 113: Line 127:
 
| [https://smd.salthax.org/ Install].
 
| [https://smd.salthax.org/ Install].
 
|-
 
|-
−
| style="background: salmon" | No
+
| style="background: salmon" | No, exploit update required.
 
| [https://github.com/shinyquagsire23/v_hax (v*)hax]
 
| [https://github.com/shinyquagsire23/v_hax (v*)hax]
 
| From '''9.0.0-X''' up to and including '''11.0.0-X''', for '''X''' up to and including 33.
 
| From '''9.0.0-X''' up to and including '''11.0.0-X''', for '''X''' up to and including 33.
Line 121: Line 135:
 
| [https://vvvvvv.salthax.org/ Install].
 
| [https://vvvvvv.salthax.org/ Install].
 
|-
 
|-
−
| style="background: salmon" | No
+
| style="background: salmon" | No, exploit update required.
 
| [https://github.com/Dazzozo/humblehax humblehax]
 
| [https://github.com/Dazzozo/humblehax humblehax]
 
| From '''9.0.0-X''' (USA/EUR) up to and including '''11.0.0-X''', for '''X''' up to and including 33.
 
| From '''9.0.0-X''' (USA/EUR) up to and including '''11.0.0-X''', for '''X''' up to and including 33.
Line 128: Line 142:
 
| [https://citizens.salthax.org/ Install].
 
| [https://citizens.salthax.org/ Install].
 
|-
 
|-
−
| style="background: salmon" | No
+
| style="background: salmon" | No, exploit update required.
 
| [http://mrnbayoh.github.io/basehaxx/ basehaxx]
 
| [http://mrnbayoh.github.io/basehaxx/ basehaxx]
 
| From '''9.0.0-X''' up to and including '''11.0.0-X''', for '''X''' up to and including 33.
 
| From '''9.0.0-X''' up to and including '''11.0.0-X''', for '''X''' up to and including 33.
Line 135: Line 149:
 
| [http://mrnbayoh.github.io/basehaxx/ install]
 
| [http://mrnbayoh.github.io/basehaxx/ install]
 
|-
 
|-
−
| style="background: salmon" | No
+
| style="background: lightgreen" | Yes
 
| [https://github.com/yellows8/stickerhax stickerhax]
 
| [https://github.com/yellows8/stickerhax stickerhax]
−
| From '''9.0.0-X''' up to and including '''11.0.0-X'''.
+
| From '''9.0.0-X''' up to and including '''11.1.0-X'''.
−
| A gamecard or eShop-install of Paper Mario: Sticker Star. Only USA and EUR are fully supported currently.
+
| A gamecard or eShop-install of Paper Mario: Sticker Star.
 
| [[User:Yellows8|Yellows8]]
 
| [[User:Yellows8|Yellows8]]
 
| [https://github.com/yellows8/stickerhax Here]
 
| [https://github.com/yellows8/stickerhax Here]
Line 208: Line 222:
 
| Yes, that's not the intended default use however.
 
| Yes, that's not the intended default use however.
 
| [https://github.com/yellows8/ctr-httpwn/releases ctr-httpwn]
 
| [https://github.com/yellows8/ctr-httpwn/releases ctr-httpwn]
−
| From '''9.6.0-X''' up to and including '''11.0.0-X'''.
+
| From '''9.6.0-X''' up to and including '''11.1.0-X'''.
 
| None
 
| None
 
| [[User:Yellows8|Yellows8]]
 
| [[User:Yellows8|Yellows8]]

Revision as of 21:28, 13 September 2016

Payload

Works on latest fw Name Description Supported firmwares
No, not updated yet. *hax payload Booted by all of the below non-sysmodule exploits. From 9.0.0-7 up to and including 11.0.0-33.

For the rest of this page, "Supported firmwares" refers to the exploit itself, not whether *hax payload supports it.

Standalone Homebrew Launcher Exploits

The following homebrew exploits can be executed on a previously un-exploited system.

Works on latest fw Name Supported firmwares Requirements Author Install
No Ninjhax 1.1b From 4.0.0-7 up to and including 9.2.0-20. A cartridge or eShop version (JPN-only) of "Cubic Ninja". smea Install
No, exploit update required. Ninjhax 2.x From 9.0.0-7 up to and including 10.7.0-32. A cartridge or eShop version (JPN-only, not available anymore for purchase) of "Cubic Ninja". smea Install
No, exploit update required. freakyhax From 9.0.0-7 up to and including 11.0.0-33. A cartridge or eShop version (USA/EUR/JAP, not available anymore for purchase) of "Freakyform Deluxe". plutoo Install
No smilehax From 9.0.0-7 up to and including 11.0.0-33 SmileBASIC (JPN all versions up to 3.32 excluded, USA 3.31 only) plutoo Install
No BASICSploit From 9.0.0-7 up to and including 11.0.0-33 SmileBASIC (USA all versions) MrNbaYoh Install
Yes smashbroshax (beaconhax) (New 3DS only) From 9.0.0-X up to and including 11.1.0-34. Super Smash Bros 3DS (full-game) and a way to broadcast raw wifi beacons. The demo (prior to the updated November 2015 version) isn't usable with the *hax payloads. Game-version v1.1.3 fixed the vuln used with this, see the repo for a workaround for that. Yellows8 Install
No browserhax From 9.0.0-2 to 11.0.0-33

Note that the browser-version-check bypass is only usable prior to 10.7.0-32.

A USA, EUR, JPN, or KOR system. Yellows8 Install

Note that ninjhax 1.x is still not obsolete. Even though ninjhax 2.x can be run on 9.3+, this was made possible (amongst other things) by sacrificing the memory remapping exploit used in ninjhax 1.x (rohax). Therefore, things like JIT engines for emulators can only be supported on ninjhax 1.x. Furthermore, ninjhax 2.x does not run on system versions below 9.0.0-X, while ninjhax 1.x does.

Secondary Exploits

Installation of these exploits requires a previously exploited system to install. After installation, they can be used on their own.

Works on latest fw Name Supported firmwares Requirements Author Install
No ironhax From 9.5.0-X up to and including 10.3.0-X, for X up to and including 28. A copy of "Ironfall: Invasion" downloaded from eShop before August 11th, 2015. Note the updated version that was released on October 13th, 2015 is not supported. smea Install
Yes steelhax From 9.0.0-X up to and including 11.1.0-X, for X up to and including 34. A copy of Steel Diver: Sub wars Vegaroxas Install
Yes oot3dhax From 9.0.0-X up to and including 11.1.0-X, for X up to and including 34. A gamecard or eShop-install of Legend of Zelda: Ocarina of Time 3D. Besides using the installer app, writing raw saveimages with a save dongle for example is another option. Before compression was introduced in the 2016-7-18 release, the size of the *hax payload meant the exploit can't coexist with regular saves on a physical version of the game. Yellows8 / smea et al. See here.
No menuhax JPN/USA/EUR: From 9.0.0-X up to and including 11.0.0-X.

KOR: From 9.6.0-X up to and including 11.0.0-X.

JPN/USA/EUR: Having created theme extdata through opening the official theme selector at least once. Yellows8 Download
No, exploit update required. supermysterychunkhax From 9.9.0-X (USA/JPN) / 10.2.0-X (EUR) up to and including 11.0.0-X, for X up to and including 33. A gamecard or eShop-install of Pokémon Super Mystery Dungeon. Shiny Quagsire / SALT team Install.
No, exploit update required. (v*)hax From 9.0.0-X up to and including 11.0.0-X, for X up to and including 33.

Note that 9.0.0-X is only required for the Homebrew Launcher - the game itself only requires 2.1.0-X for primitive userland code execution.

A copy of VVVVVV downloaded after March 2012 (v1). The game is not available anymore for purchase. Shiny Quagsire / SALT team Install.
No, exploit update required. humblehax From 9.0.0-X (USA/EUR) up to and including 11.0.0-X, for X up to and including 33. An eShop-install of Citizens of Earth (either v1 or v2), featured in the Humble "Friends of Nintendo" Bundle. Dazzozo / SALT team Install.
No, exploit update required. basehaxx From 9.0.0-X up to and including 11.0.0-X, for X up to and including 33. A gamecard or eShop-install of Pokémon Omega Ruby / Alpha Sapphire. MrNbaYoh install
Yes stickerhax From 9.0.0-X up to and including 11.1.0-X. A gamecard or eShop-install of Paper Mario: Sticker Star. Yellows8 Here

Exploits without Homebrew Launcher (Not recommended)

Warning: The following exploits can run code, but are missing a 3DSX launcher. They cannot launch any homebrew in the 3DSX format.

Works on latest fw Name Supported firmwares Requirements Author Install
No browserhax (Without the loader in the 3ds_browserhax_common repo) (Old3DS) From 5.0.0-2 to 11.0.0-33 (Pre-v5.0 is supported for some versions if you manually modify the source)

(New3DS) From 9.0.0-20 to 11.0.0-33

Note that the browser-version-check bypass is only usable prior to 10.7.0-32.

An USA, EUR, or JPN system. Yellows8 Install
No Ninjhax (with specialized payloads) Up to 9.2.0-20? smea + independent developers N/A

Previous Exploits

Warning: These exploits do not work. They are exploits which no longer function at all, regardless of software or firmware revision.

Works on latest fw Name Supported firmwares Requirements Author Install
No Tubehax None. Was: From 9.0.0-X up to and including 10.1.0-X, for X up to and including 27. The YouTube application and an Internet connection. As of October 15, 2015, this is no longer usable due to an update being released which fixes the vuln used by tubehax + app update being forced (see here). smea Install

Other Homebrew Loaders

The hblauncher_loader title can be used when running under modded-FIRM which allows running unsigned titles, to boot the *hax payloads.

Sysmodule Exploits

This section is for system-module exploits, which can be run from the *hax payloads.

Works on latest fw Name Supported firmwares Requirements Author
Yes, that's not the intended default use however. ctr-httpwn From 9.6.0-X up to and including 11.1.0-X. None Yellows8

WebKit vuln testing

See here.

Retrieved from "https://www.3dbrew.org/w/index.php?title=Homebrew_Exploits&oldid=18184"