3DS: RPwnG exploit patched by Nintendo, source code released
Yesterday, Nintendo patched an exploit in game RPG Maker Player. The exploit had been publicly released by 3DS hacker MrNbaYoh last week, and allowed 3DS users on the latest firmware to run the popular Homebrew Launcher tool.
The exploit required people to either download a vulnerable DLC, or to share some specifically crafted maps online in the game. The hacking community had organized around twitter hashtag #GetRPwnG in order to share maps that triggered the exploit. Because these techniques required to go through the game’s online server, it has probably been reasonably easy for the game developers to patch.
As of a few hours ago, the 3DS hacking community reports that RPG Make maps containing the hack are instantly removed when they get uploaded, which probably implies a system has been put in place server side to block the exploit’s signature.
What this means is that if you were lucky enough to download the exploit in time, you can still use it, but users who learned about this too late will not be able to enjoy homebrew as they cannot download the exploit anymore.
Since the exploit had been patched, MrNbaYoh has published the source for it (link below). It is not impossible, but unlikely, that someone could rework the exploit in a way that does not trigger the prevention mechanism on the server side. Or maybe someone will figure out a way involving some network proxy to download the files from an unofficial server…
Well it seems it’s not possible to upload the exploit anymore, I guess it’s safe to release the sources then.
— MrNbaYoh (@MrNbaYoh) August 28, 2017