Hacking RELEASE HACDN - Download game NCA files directly from Nintendo's CDN!

Status
Not open for further replies.

Reisyukaku

Onii-sama~
Developer
Joined
Feb 11, 2014
Messages
1,534
Trophies
2
Website
reisyukaku.org
XP
5,422
Country
United States
I just noticed, @Reisyukaku, CDNX has the same security flaw:
https://github.com/Reisyukaku/CDNX/blob/master/CDNX/Form1.cs
It doesn't retrieve the data the "correct" way...
1501343319795.jpg

https://github.com/Reisyukaku/CDNX/commit/1ce30833f830371010dd40c201878a7555ce4382
 

Reisyukaku

Onii-sama~
Developer
Joined
Feb 11, 2014
Messages
1,534
Trophies
2
Website
reisyukaku.org
XP
5,422
Country
United States
@Reisyukaku is it safe or is your tool safe yet?
There's no 100% guarantee on any tool really.. but it's the safest cdn tool on the market right now lol. User-agent requires deviceID, which i 00'd out, so right there Nintendo could detect shenanigans but it operates the same way the console does otherwise.
 

PsychoRabbit

Well-Known Member
Newcomer
Joined
Nov 25, 2016
Messages
50
Trophies
0
Age
33
XP
390
Country
Argentina
ITS hit and miss maybe at times SciresM is a good guy or whatever but our convo was rude plain and simple.

I discovered somethin,s brought it to his attention and SCIRESM DISCREDITED AND SAID IT WAS IMPOSSIBLE.

Same day released my finding and he did not respond. Could not even say for example "good job, my mistake it was possible. Nothing.

If he's a hgood guy that's great but not important. I'd like to have a positive experience working with him for example but not knowing me predetermined jughment gets nowhere and just stop progress.

SciresM does great work and I appreciate it so no one t rake this in a way it is not intended

The way you presented your "method" at first was really wrong.
You came with a thread claiming you had a method to update games, without specifing any details nor said anything about using a second switch. Instead you comment only to generate hype and looking for subscription to your YouTube channel.
So, what you really want is self promotion and fame.

SciresM came and said it was impossible in a way we all imagined, having only one Switch, he wasn't wrong. Then after he broke your hype-wall, you waited until that to detail it was a 2-switch method. And yes, it was almost a useless method, and even if it was useful for a tiny percent of switch owners, it was unstable as the target switch risk to an unwanted system update.
 

Dr.doom

Well-Known Member
Member
Joined
Apr 15, 2016
Messages
161
Trophies
0
XP
352
Country
United States
There's no 100% guarantee on any tool really.. but it's the safest cdn tool on the market right now lol. User-agent requires deviceID, which i 00'd out, so right there Nintendo could detect shenanigans but it operates the same way the console does otherwise.
I've been waiting all day for you to jump in on this cause I've been watching cdnx since I caught a glimpse in that pastebin also I used reinand till you dropped support big fan of your work .
 

ANTONIOPS

Well-Known Member
Member
Joined
Jan 15, 2016
Messages
126
Trophies
0
Age
32
XP
862
Country
Spain
There's no 100% guarantee on any tool really.. but it's the safest cdn tool on the market right now lol. User-agent requires deviceID, which i 00'd out, so right there Nintendo could detect shenanigans but it operates the same way the console does otherwise.


But nintendo can still check the certificate that we use to connect and check its database of certificates burned on the consoles at factory and get the id right?
 

Uwabami

Well-Known Member
Member
Joined
Feb 4, 2014
Messages
946
Trophies
1
XP
2,289
Country
Germany
But nintendo can still check the certificate that we use to connect and check its database of certificates burned on the consoles at factory and get the id right?
Yes. This is different from the 3DS/WiiU era. It's not as easy and safe as it was before. You should stay away from all apps that require your console's unique client certificate if you don't want it to be banned. It's that simple.
 

V-Temp

Well-Known Member
Member
Joined
Jul 20, 2017
Messages
1,227
Trophies
0
Age
34
XP
1,342
Country
United States
But nintendo can still check the certificate that we use to connect and check its database of certificates burned on the consoles at factory and get the id right?

You're always going to fingerprint your access, there's no getting around it. And they can and do populate data of what a given account (and associated console) own. The moment you try to get something you do not own is the moment your CID is effectively forfeit.
 
  • Like
Reactions: Uwabami

Reisyukaku

Onii-sama~
Developer
Joined
Feb 11, 2014
Messages
1,534
Trophies
2
Website
reisyukaku.org
XP
5,422
Country
United States
But nintendo can still check the certificate that we use to connect and check its database of certificates burned on the consoles at factory and get the id right?
No, but worst case scenario, they see an all zero DID and just ban the cert that was accompanying it. Although we dont even know how strict ninty will be about watching the servers. I'm still fine and i've been poking all kinds of servers with mine.
 
Status
Not open for further replies.

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    BakerMan @ BakerMan: