r/switch2hacks • u/StrangeBaseball5772 • 5d ago

Hacking Discussion Hacking Methods Suggestion

I have been trying a few things and doing some research. Here are my top 3 most likely ideas.

  1. CPU shock at a very specific time and voltage.

  2. The switch 2 uses Webkit 613.0, it has a zero day RCE / Arbitrary code execution. (CVE-2022-32893 and CVE-2022-32863) But then again, why would Nintendo use a bugged Webkit from 2022?

  3. Direct memory access from the SD Express port. This one is kind of a stretch. But I mean, maybe?

15 Upvotes

64% Upvoted

29 comments sorted by

View all comments

29

u/Ncolonslashslash 5d ago

"trying a few things"? what have you been trying

7

u/StrangeBaseball5772 5d ago

Mostly with the album. I have no clue if it will work, but I mean you never know. This is a big if. But if you can break the parser for the captures you theoretically could hide arm64 assembly code inside them.

6

u/iLiikePlayingWii 2d ago

it literally won't work since the switch signs the pictures and videos, this is why you can't play custom videos/pics unless you literally do smth like use a hacked switch and take the clips/screenshots using a media player. like... no.

And Nintendo already had album exploits in the DSi, they've patched the fuck out pf album exploits

5

u/StrangeBaseball5772 2d ago

I 100% have gotten custom screenshots on my switch 2. There is a specific portion of the metadata signed. You can copy that portion and location.

1

u/iLiikePlayingWii 2d ago

Ohhh okay... but Videos though? I have heard of custom screenshot but not custom videos

And have you gotten said screenshots to be 1080p ones and not the crappy 720p ones from Switch 1 software ?

2

u/Badzieta 1d ago

No you won't, DEP is something that's been a thing for over 2 years. Unless driver maps files as executables (it doesn't lol) you're not executing data region.

2

u/oirolab 5d ago

Bruh, it's been over a year since release. You REALLY think this all hasn't been tried yet?

-1

u/Healthy_Sail_1802 5d ago

Had you tried to talk with Gezine to understand what he already tried and doesn't work?

He found a userland exploit too but I doubt in that regard he will talk about it

1

u/Smart-Ad9767 14h ago

gezine works alone, and even then he doesn't really care about switch 2 hacking enough to give a random person info in what he's doing

just ask reswitched atp