ReSwitched Wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Tools: Pegaswitch ======
Pegaswitch is a tool for working in the domain of native code on the Nintendo Switch. It takes advantage of an exploit that utilizes WebKit's [[hacking:vulnerabilities:webkit:cve-2016-4657|CVE-2016-4657]] vulnerability.
This tool, and its exploit code, lives at [[https://github.com/reswitched/Pegaswitch]].
===== How It Works =====
We use an Array object as the stale one (garbage collected) and then write a large number of Uint32Array views (of a single ArrayBuffer object) to memory to try to get an overlap.  From there, we can both traverse object values, read/write from pointers, and more.
===== Usage =====
==== Requirements ====
    * Node 7
    * UDP 53 and TCP 80/81 open on your machine's firewall
    * A Nintendo Switch running on system firmware 2.0.0 (the Day One update)
==== Module Dependencies ====
    * Node: ''%%$ npm install%%''
==== Instructions ====
    - Use ''%%$ git clone git@github.com:reswitched/Pegaswitch.git%%'' to clone the repo
    - ''%%$ npm install%%'' to install dependencies
    - ''%%$ npm start%%'' to start the server
    - Set your current Switch connection's primary and secondary DNS servers to your computer's local IP
    - Use one of the following methods to trigger the captive portal browser:
        * Hover over a game, press + to open the game menu, then update "Via the Internet"
        * Go to the settings, internet settings, your connection, then "Connect to this Network"
        * Attempt to access the eShop, then select "Sign In and Link" or "Create Account"
            * Note that this will only work for [[software:accounts#local_users|Local Users]] who have not already linked to a Nintendo Account
            * Note that the eShop applet is slightly different to the Captive Portal applet (see [[software:browser]])
    - The node shell should give you a command prompt
    - Type ''%%help%%'' in the shell to see available commands
ReSwitched Wiki

User Tools

Site Tools

Page Tools
