DSiWareHax FINAL

Post by **sniper3d** » Fri 26 Aug 2011 06:54

[align=center]DSiWareHax FINAL[/align]

After 2 years of research, an exploit has been discovered for the US and EUR, Sudoku, by EA.
Only a few hundred people were able to benefit from this exploitable DSi-Ware before it was pulled, patched, then re-released. When DSi-Ware is exploited it offers a unique situation. Not only is DSi mode unlocked (more RAM, faster processor) but there's also access to the SD card. Thanks to the current updated development library, you can save your Homebrew to the SD card, as shown by the recent DS Doom updates.

The DSiWareHax (the injector) has once again been updated for what's called its "final" .
update. Three new DSi Ware titles are now fully exploitable, allowing run mode for the DSi.
These new titles are Guitar Rock Tour by Gameloft (US, EUR, AU), Legends of Exidia by Gameloft (US, EUR, AU, JP), and Fieldrunners by Subatomic Studios (US, EUR, AU).

This update comes with a catch! If you don't currently own one of the 4 exploitable titles you won't be able to get them. To buy and download the titles you'll need to be on firmware v1.4.3.
In order to move the exploited title from the SD card to NAND (so it can be used), you'll need DSi firmware v1.4.1.

QUOTE(What to do)
Sudokuhax:
• After launching Sudoku, press button A or touch screen at the Sudoku title screen, to execute the exploit and run /boot.nds.
Grtpwn:
• After launching Guitar Rock Tour, scroll down and goto High-Scores->Drums->Easy. Then the exploit will execute and load /boot.nds.
Exidiahax:
• After pressing button A or start at the two title screens, select the first save slot and press continue. The exploit will then execute loading /boot.nds.
Fieldrunhax:
• Touch the 'Scores' button at the main menu, boot.nds will then be loaded.

This content is for members only. Log in or register for free to see it.

List of exploits
Official site

Post by **darkscad** » Fri 26 Aug 2011 08:05

DSi mode is unlocked (more RAM, faster processor)!
but why don't they do that by default!
isn't it like the ps3 where one of the processors is only active against the hack?
that would be a permanent patch on his DSi, which would allow installing DSIWARE onto his SD ....
too bad I don't have a DSi

*thanks for the news!

you should add the NFO.

Spoiler

DSiWareHaxInj v1.1
Copyright 2010-2011 Team Twiizers
All rights reserved, do not redistribute.

The injectrawsav app and the dsisavpatch python app, allows you to inject exploit(s) retrieved automatically from a server into DSiWare exported from the data management menu to SD card.
You can only copy these DSiWare exploits to ``internal memory'' after injecting the exploit into DSiWare on SD card, if you already have the target DSiWare and if your DSi system version is still 1.4.1.(System update 1.4.2 blocks copying exploits to ``internal memory'')
DSiWare exploits can't be used on 3DS at all.

Usage of the exploit is described below:

1. Export the target DSiWare to SD card via the data management menu. See the below instructions for the list of target DSiWare.
2. The exploit will then be injected into the DSiWare application via client software. See the below client software usage instructions. The client software uploads DSi-specific data from the DSiWare application to a web server, then injects the retrieved data into the DSiWare application.
3. Copy the output binary to SD card with the same filename as the original.
4. Copy the exploit from SD card to ``internal memory'' via the data management menu.
5. See the below link for this step.
6. Now boot.nds on SD card will be run.

The data uploaded by the client software includes the anonymous DSi-unique console ID, and other data required for modifying the DSiWare binary on SD card. This data is used for logging unique web server requests.
The tracker for the client software and DSiWare exploits is available here: https://bugs.hackmii.com/
Client software source code licensed under GNU GPLv2 is available here: https://github.com/yellows8/dsi

Usage of the client software from step 2 of the above instructions:
Choose an exploit available for your region and system from here: https://bootmii.org/dsiexploits/downloads/exploitslist
Copy /private/ds/title/<titleid.bin> from SD card to hard-drive where the client software is located. Then run the client software with the chosen DSiWare titleid .bin input.

Builds of injectrawsav are stored in the builds directory.
For Linux/Mac run this terminal command: ./injectrawsav <titleid.bin>
For Windows, you can either drag and drop the input <titleid.bin> onto injectrawsav.exe, or run this from command-line: injectrawsav.exe <titleid.bin>
For dsisavpatch.py, run it with this from terminal/command-line: python dsisavpatch.py <titleid.bin>

The output of the client software is <titleidhax.bin>. Copy this output file to /private/ds/title/ on SD card. Rename /private/ds/title/<titleid.bin> on SD card to <titleidbak.bin>, then rename <titleidhax.bin> to <titleid.bin>. Continue with the above instructions at step 3.

Removing DSiWare Exploits:
Rename /private/ds/title/<titleid.bin> to <titleidhax.bin>, then rename /private/ds/title/<titleidbak.bin> <titleid.bin>.
Then copy the DSiWare application from SD card to ``internal memory'' via the data management menu.

Credits:
libcurl for the http library used by injectrawsav.
Steve Reid's SHA1 implementation.
John Hall's 8x8 font, used by the SD card loader: https://overcode.yak.net/12

DSiWare exploits can't be used on 3DS.

Post by **KuronekoChris** » Fri 26 Aug 2011 09:33

This looks very interesting, I should think about it

.

Thanks sniper3d

Chris

DSiWareHax FINAL