yellows8/3ds_browserhax_common

ROP-chain-generator for Nintendo 3DS titles with some form of web-browser.

This repo is for intended for any 3DS title which has some form of web browser. This repo is for generating ROP-chains for use with the previously mentioned targets: no browser exploit(s) are contained in this repo. Browser exploits seperate from this repo can use this for the actual ROP-chain + any required ROP gadgets etc.

Supported titles and versions

The versions below are listed in the following format: browserver titlever sysver. Which browserver(target title + version of the title) to use is automatically determined by checking the user-agent. Due to this, when accessing hax with this, the New3DS system web-browser must be set to use the normal user-agent, not the mobile user-agent(the mobile user-agent is the same for all versions).

Also note that with the system web-browser, only the last number in the system-version(X.X.X-NUPVER) actually matters for the browser version. Loading arm11code with the Old3DS browser is only supported with >=v5.0 NATIVE_FIRM, if you want to use pre-v5.0 NATIVE_FIRM with this you would have to modify the source. Normally doing so isn't needed since the *hax payloads don't support system-versions that old anyway.

Only the USA, EUR, and JPN browsers are supported(with the exception listed below): the main ExeFS codebin are all identical for these regions, unlike the other regions.

Note that for CHN and TWN the loader(with 3ds_arm11code_chntwn.s) is broken(the menustub fails to auto-locate APT_GetServHandle due to older homemenu/ctrsdk code).

Old3DS system Internet Browser(spider) (see also http://3dbrew.org/wiki/Internet_Browser#User-Agent_and_Browser_Versions_2):

• 1.7412 v6 2.0.0-2..2.1.0-3
• 1.7455 v1024 2.1.0-4..3.0.0-6
• 1.7498 v2050 4.0.0-7..4.5.0-10
• 1.7538 v0 4.2.0-9..4.5.0-10 This is the first version of the CHN+KOR (and probably TWN) browser. This is supported for CHN and KOR.
• 1.7552 v3075 5.0.0-11 / v3088/7.0.0-13 (v3088 main ncch is the same as v3075, only the manual CFA was updated) (that is, 5.0.0-11..7.0.0-13)
• 1.7567 v4096 7.1.0-16..9.5.0-22
• 1.7585 v5121 9.5.0-23..9.8.0-25
• 1.7610 v6149 9.9.0-26..10.1.0-27 CHN, KOR, and TWN are also supported for this.
• 1.7616 v7168 10.2.0-28..10.5.0-30 CHN, KOR, and TWN are also supported for this.
• 1.7622 v8192 10.6.0-31 CHN, KOR, and TWN are also supported for this.
• 1.7625 v9232 10.7.0-32..11.0.0-33 CHN, KOR, and TWN are also supported for this. Handled the same way as 1.7622.
• 1.7630 v10240 11.1.0-34

New3DS system Internet Browser(SKATER) (see also http://3dbrew.org/wiki/Internet_Browser#User-Agent_and_Browser_Versions):

• 1.0.9934 v10 9.0.0-20..9.2.0-20
• 1.1.9996 v1027 9.3.0-21..9.5.0-23
• 1.2.10085 v2051 9.6.0-24..9.8.0-25
• 1.3.10126 v3077 9.9.0-26..10.1.0-27 KOR is also supported for this.
• 1.4.10138 v4096 10.2.0-28..10.3.0-28 KOR is also supported for this.
• 1.5.10143 v5121 10.4.0-29..10.5.0-30 KOR is also supported for this.
• 1.6.10147 v6144 10.6.0-31 KOR is "supported" for this but it's not tested.
• 1.7.10150 v7184 10.7.0-32..11.0.0-33 KOR is also supported for this.
• 1.8.10156 v8192 11.1.0-34

Exploit testing

If you want to test a browser exploit on an unsupported browser version just to see if it at least crashes, you can use this: "URL?browserver={ver}". Where ver is one of the browservers listed in 3dsbrowserhax_common.php, such as "85" for New3DS or "7" for Old3DS(without quotes), or whatever versions the exploit page supports.

Usage with seperate exploits

With php, this repo can be used with the following:

• Include config based on browserhax_cfg_example.php, see that file for details. Include 3dsbrowserhax_common.php.
• Set the global $ROPHEAP variable to an address under the process which the ROP-chain can use for storing arbitrary data(for example, this could be memory where data was sprayed for non-ROP-chain data, since that data isn't needed anymore at this point).
• Call generate_ropchain(). This generates a ROP-chain which can be included in JS via the $ROPCHAIN global variable. To generate a binary-only ROP-chain instead, set the $generatebinrop global variable to value 1 before calling generate_ropchain().
• The ROP-chain data can now be used for generating the final html/js, for example: "var ropchain = unescape($ROPCHAIN);"
• This can be used before the above ROP-chain data, for use as a ROP NOP-sled: "unescape($NOPSLEDROP);"
• This can be used for spraying the stack-pivot gadget address, like for vtable funcptrs: "unescape($STACKPIVOT);"
• This can be used when the exploit requires using the "pop {pc}" gadget: "$somestr.= genu32_unicode($POPPC);"

Configuration

See above regarding the cfg file.

By default, when $ropchainselect wasn't initialized by browserhaxcfg_handle_urlparams(), it will set $ropchainselect to value0 and $arm11code_loadfromsd to value2. When this is with a spider version prior to system-version v7.1, $ropchainselect will be set to value1. Next, regardless of browser-version, it then calls browserhaxcfg_handledefault().

Values for $ropchainselect:

• 0: This "ROP-chain" is just an address for THROW_FATALERR. Hence, throw_fatalerr() will be triggered when the above browserhaxcfg_handledefault() path is executed when browserhaxcfg_handledefault() doesn't initialize $ropchainselect.
• 1: <=v4.x arm9hax also implemented by oot3dhax(https://github.com/yellows8/oot3dhax) under EXECHAX=3, see 3dsbrowserhax_common.php generateropchain_type1().
• 2: ARM11-code loading via gspwn, see $arm11code_loadfromsd below. The payload should be position-independent-code without any GOT, since the payload is loaded to R-X memory where the address varies per title version. The payload is called with r0 set to an address of a structure mainly containing funcptrs for various functions in the process, see generateropchain_type2(). r1 is initialized too for a relocated stack address if the payload needs it. The max payload filesize is 0x8000-bytes. At the start of this ROP-chain, the sub-screen colorfill is set to display yellow, at the end it's set to display gray.
• 3: Read the contents of a file then dump it to SD. This uses OPENFILEDIRECTLY. 3dsbrowserhax_common.php must be modified in order to use this, see generateropchain_type3(). At the start of this ROP-chain, the sub-screen colorfill is set to display red, at the end it's set to display blue.
• 4: This uses the service-access-control bypass fixed with system-version v7.0, then it uses NSS:RebootSystem. This can be used for region-free on system-versions below v7.0. This was originally implemented a while after the regionfree method with NSS:RebootSystem was originally discovered: http://3dbrew.org/wiki/3DS_System_Flaws#Standalone_Sysmodules

Values for $arm11code_loadfromsd:

• 0: The arm11code payload is embedded in the ROP-chain data itself.
• 1: The arm11code payload is loaded from SD via this filepath: "sdmc:/arm11code.bin".
• 2: The arm11code payload is downloaded by requesting a binary with http, see the above example config and ropgen_httpdownload_binary() in 3dsbrowserhax_common.php. The binary is downloaded to SD, once it's finished with that the file has all-zeros written to it, then it attempts to delete the file(which doesn't actually delete the file, unknown why).

Browserhax usage info

How each exploit is triggered depends on the exploit, see the documentation for the seperate exploit for that. As said below, just triggering the exploit successfully is all that's really needed besides SD "/boot.3dsx".

3DS Webkit exploits can be quite unstable. When a webkit exploit is very unstable, formatting the browser savedata is recommended if you haven't done so before with the current exploit URL. If you want, from hblauncher-payload booted via browserhax you could install exploit(s) listed here: http://3dbrew.org/wiki/Homebrew_Exploits

You can have the browser auto-load the exploit page if you return to Home Menu from that page. For exploits which automatically trigger, you may have to disable wifi/etc before attempting to load the page in order to return to Home Menu successfully before the exploit actually triggers.

Homebrew Launcher

This codebase is mainly intended for loading an arbitrary arm11code payload, at a vaddr which varies per title/version. Homebrew-launcher can be booted via this arm11code payload, with the loader included with this repo. The spider version of this loader automatically locates the required addresses and such on-the-fly. The New3DS web-browser is supported by this too, without anything that's system-version/region specific(besides the data loaded from the payload). The loader determines whether it's running under spider or SKATER by checking the New3DS flag loaded via NS(command 0x01020000 http://3dbrew.org/wiki/NS_and_APT_Services). Therefore, do not use this payload on Old3DS outside of spider, and on New3DS do not use this loader outside of SKATER.

In some cases on Old3DS, a crash/"hang" may occur with an orange or white bottom-screen. If it ever returns to Home Menu when the bottom-screen was orange, then a reboot is required.

This loader will initially try to load the hblauncher ropbin payload from SD-card "/browserhax_hblauncher_ropbin_payload.bin". This is separate from the otherapp payload.
If loading from SD fails, this loader will then automatically detect the required payload, then download it with HTTP. This latter method is highly recommended(unless this method doesn't work well for the user): with a "/boot.3dsx" on SD card, there's zero other setup/user-input needed once the browserhax is triggered successfully.
When loading the payload with both of the above methods fails, a crash will be triggered.

Hanging/crashing at an gray-bottom-screen means *hax payload loading failed, normally this is due to network issues(you should reboot your system when this happens).

The loader for Old3DS runs actual native code under the context of Home Menu, if you really want to run your own code under Home Menu you can modify that code in the loader. This code runs very early in the Home Menu process boot.

Screen colors

When using browserhax the bottom-screen colorfill will be set to various colors in the following order:

• 1. Yellow: Browser ROP started running, this also means the exploit itself worked fine.
• 2. Gray: This colorfill is set right before jumping to the initial arm11code binary, for running native code for the first time.
• 3. Orange: This is set after the *hax payload was successfully loaded into memory via HTTP/SD.
• 4. White: This is set by the *hax payload itself when it starts running.

Credits

• megazig for helping with APT(for APT stuff once the Home Menu code in the loader starts running) during the initial + eventually successful Old3DS Home Menu takeover implementation.

3ds_browserhax_common's Issues

Hello Yellows8

I have something (I think it be interesting) for the 3DS but I dont know if it have potential on HAX. How Can I talk to you?

Communication Error

I always restart my system before I scan the QR Code, and my DNS is set to 8.8.8.8, yet when the exploit tries to run, there's just a communication error before any colors appear on the bottom screen
There wasn't an issue yesterday, so is this another change wth the website or is there just a weird error with my system?

Firmware 11.0.0-33U

Browserhax stuck on orange screen OLD3DS firmware=10.4.029U

I never thought it was possible but I am stuck on the orange screen and I have tried everything I can think of. Please help!!!

Stuck on red screen. Cant find fix.

Running 11.0.0.33.u old 3ds
Downloaded zipped file HB 3ds v3.1.
Placed 3ds folder and boot.3dsx file on DS.
I follow these steps:

1. Turn Off Wi-Fi
2. Open web browser and delete cookies history and initialize save data
3. Re-open web browser and set up save data
4. Scan QR code and load webpage
5. Wait for connectivity error and turn on Wi-Fi then reload webpage

I've tried this countless times and every time I get the red screen

9.4.0-13U stuck at yellow screen

Browser version: 1.7552

I cannot get past the yellow screen after the browser accesses slider hax. Everything seems to be in order (starter kit extracted to root + updates so my SD card has 3ds, Nintendo3ds, themes, updates and the boot.3dsx) and whenever I fail, I either restart the console or clear the internet cookies/history (alternating). I also have my DNS set to auto but everytime I click on the far left/right of the slider (again alternating) I get the yellow screen then an error that takes me back to home.

The only issue I can think of is I copied my original SD card with no mods into a larger one via pc. I even have no themes going on and I removed any game cartridges.

spider doesn't work on 8.0.0-18U

old 3ds, browser version v1.7567
It seems the payload is executed. The screen turns yellow and then grey, but then stuck there.

Browserhax is Probably Dead.

I'm using an older system firmware, and due to Nintendo's updated servers, all online features are blocked on older firmware versions, this includes the internet browser. Unlike other online applications, ctr-httpwn does not allow access to the internet browser. Since browserhax is only available to older firmware versions and there is no way to access the internet browser on these versions, browserhax is dead until a 10.7 alternative is found. This is my speculation.

so menuhax and browserhax doest work on 10.6

Is there any chance it will be on 10.6? Because the new Downgrade software is very tempting.Good luck :).

L+R+Down+B not working

The L+R+Down+B force quit code isn't working on Old3DS.

System: Nintendo 2DS
Firmware: 11.0.0-33U
Launcher Used: GridLauncher
Payload: Spider33hax

installing homebrew will give updating unstable :(

well i've got browserhax but i try updating to the latest firmware but it will begin to say the f%&king same error so does ANYONE know how to fix? no, i did not install RXtools PLZ HELP!

How to boot a custom payload (RAM Dumping)?

I tried it with a local server first, but that has kicked me to Home Menu everytime with nothing happened.

If I use your hosted version and create browserhax_hblauncher_payload.bin on SD Card, it also won't work. The gray screen comes and then I'll get kicked. This "rare" case occurred also after a restart, so maybe this is not the same cause.

The payload bin is a compiled RAM dumper from Spider3DSTools.

It's interesting to find the webkithax_tmp.bin on the SD Card, because you said that it will first attempt to load the payload from the SD Card.

Is there a way to host this on a local system?

Whenever I try to put this on a local webserver, it never seems to even run, I just crash back to the home menu. Any ideas?

Thanks!

you said your not going to work on free for a while

can we get an idea on when it is going to be worked on?obviously not the exact date.
plsss tell us(browserhax/menu)

Problem

Each time I use the URL (yls8.mtheall.com/3dsbrowserhax_auto.php) the yellow screen appear, the grey, and the orange. But at orange screen, the chargement is not loading and my page crash, and I return with an error at the 3ds menu. Please help! My old 3ds is 10.5 and I use Homebrew launcher 10.4.

System freezes on Red Screen; have to restart

When using the autotool, the screen flashes Yellow, then Gray, then Orange, then White, displays the return for a second, and then flashes Blue, then Green (I think? It was really fast), and finally (again, I think, there may have been one more color) Red. From here, I have to restart the system, as no inputs do anything.

I'm using a New3DS with firmware 11.0.0-33u.

3DS stuck on startup

When I try to start browserhax, it gets stuck on the starting screen. Picture:

Red screen not listed under Screen Colors

I keep getting a red screen after the blue screen. No description is provided for that.

A red screen is mentioned earlier:

At the start of this ROP-chain, the sub-screen colorfill is set to display red, at the end it's set to display blue.

But that also isn't super helpful.

Supported verisons

With the supported verisons listed, does the system revision number matter? cause i've been trying this on 10.5 for the past 2 hours, knowing it worked once before. but it isn't now, and the only thing that has changed was the system revision number.

10.6 and 10.7 support

10.6 and 10.7 support? please

Is it possible on old 3DS on 10.6 to downgrade FW?

I want to find if it is possible to downgrade FW on old3DS, without another 3ds or game cart. I have heard it is possible to update with a game cart. Could it be possible to 'update' to a old FW version?

1 out of every 30 tries or more

So, is there any way to fix that with the annoying Browser crash? Its really an annoyance, because i can get BrowserHax started like every 30th time or even more if i am unlucky, and it just isn't fun anymore after a while. I also see many people having custom files on their SDCard, while i always reset mine with fresh files, but it still fails 95% of the time, until it just ends up magically working. Sometimes i change the time to 1.1.2000 and 00:00, then i change the router its connected to, i always clear the browser for everything (resetting it), trying to reapply the Standard Theme (even if it is applied) and such, and yet there is a small chance of it working at all. Any fix for this at all?

2.1.0-4E not working ;_;

I ran this on my 3DS: http://yls8.mtheall.com/3dsbrowserhax_auto.php but it doesn't work.

I put boot.3dsx on the root of my SD card and I've even cleared the cache. The console is completely new and is running 2.1.0-4E.

When launching the payload, it works until I try moving the slider, in which case it freezes. I also made a post of it, on that forum: http://gbatemp.net/threads/backing-up-nand-on-2-1-0-4e.400302/

Do you have any info that I could go by? Thank you!

Old3DS 10.5.0-30U Crash after first run

Using this page (http://yls8.mtheall.com/3dsbrowserhax_auto.php) to activate browser hax worked on the system the first time without issue. After something crashed it is now giving this error anytime I try to run it. I will give the exact steps that caused the issue, but I can't really give anymore than that.

Edit: Ignore the steps as they have nothing to do with the issue, it was just a random crash that was not the cause of it not working.

Steps

1. I added the starter pack data from https://smealum.github.io/3ds/
2. I added the retroarch nightly build from 1/27/2016
3. I patched to english and then added "Mother 3.gba" into the system in the folder "/GBA/Mother 3.gba"
4. I scanned with the camera the QR code to the auto page and browserhax loaded and worked
5. I started up gpSP_libretro and then proceeded to "Load Content" to the "Mother 3.gba" file
6. The emulator had some funky crash (that I didn't record and thus can't report to them) that forced me to shut the system down
   Now browserhax no longer works.

After step 6, it then started showing this error message (http://dump.nrgs.org/3ds/20160128_012636.jpg) with the colors yellow, gray, and orange, before crashing.

For some reason, not sure why, it's now is showing this error message (http://dump.nrgs.org/3ds/20160128_014627.jpg) in lieu of the other one on occasion. Usually for this one it only flashes yellow and then the error message pops up.

As a note, I'm very new to the 3DS hacking scene (this is not my system, my system is a New 3DS at 10.3.0-28U and it works fantastically) and whatnot and am ignorant of not knowing enough, right now, to give a proper bug report.

10.2.0-28U Yellow screens and crashes

I have a Old3DS with 10.2.0.28U. I have my Date and time set to Jan 1st 00:00 and have initialized savedata. I scanned the QR code the Bottom screen turns yellow but the top screen still moves. after a few second it brings up an error message saying
"An error has occurred. Hold down the POWER Button to turn off the power, then turn it on and try again" and the nintendo site. My SD card has all the files needed. I just dont know what to do.

Crashing after yellow screen

I've got a pretty old 3DS with with v5.1.0-11E having browser version 1.7552.
I've downloaded and put the files into the original SD card that came with the unit and attempted to launch via sliderhax but no luck so far. I've tried like an hour each time clicking on a different part of the slider and messing with A button and stuff but no luck. Every single time it crashes to home screen after the yellow screen hanging for like 3 seconds saying "An error has occured. Please save your data in any software currently in use, then restart the system.".
The issue is very similar to this.
Is there anything else that I can try or my unit/firmware is not supported somehow?

Thanks in advance.

EDIT: And yes I've tried with different networks. Used my WiFi with my ISP DNS, with Google DNS and my phone's 3G connection.

Browserhax (sliderhax) results in grey screen every time.

I have reinitialized the save data, reset the network, and tried it on multiple networks. Every time I go to the auto page, it drops me at sliderhax. i touch the slider and the bottom screen turns yellow and then grey, which it stays on until i turn off the system. The firm version is 8.1.0-19U

Browserhax on 2ds stalls on yellow screen them crashes

There seems to be some sort of issue with the 2ds and browserhax. My 2ds is on 9.20, browser version 1.7552. Initializing the browser doesn't work. Pressing A while launching doesn't work. I've made sure I have the correct files and they do work because they can be launch from my emunand on 10.3. The absolute farthest I can get is the yellow screen on bottom which doesn't mean much to me but I'm sure the creator has an idea of whats stopping it there

Browserhax Site Source?

Whenever i hit inspect, or View Page Source, all i get is: This exploit only supports the Nintendo 3DS main web-browser(s).
How can i view the raw HTML/PHP of the site?

browserhax 2ds on 9.8.0 sliderhax not working

i was reading another person's issue on this, and i'm getting the exact same issue (flashes yellow but crashes). i followed every guide i could find. however, both of us updated our systems using a game card. as a suggestion, you said to do a full update, how would one do that without updating to 10.5 ?

red screen struck

I'm trying running browserhax on an O3DS 9.2 firmwhere.
Screen changes some colors (yellow/gray/yellow/gray/green/blu/) then struck on a red screen.
I followed the instructions and many tutorial always the same result.
I have never seen the slidebar in browser before screen start change color.

New3DS 10.5.0-26K stuck at gray screen.

Hi, i have a new 3ds from korea when i try to install the browserhax the bottom screen goes yellow then gray and then nothing happens, i hope the support to 10.5.0-26K come soon.

Bye.

spider v1.7616 Support?

On Old3DS Spider 1.7616 I get the error "This browser version is not recognized."

3DS 10.6 HOMEBREW LAUNCHER PROBLEM

Hi. I just up my 3ds to 10.6. But homebrew launcher is not loading, i have no color screens, Just a text. I want install rxTools, but i don't know how to install this. Pls how to use the homebrew launcher ?

Error when trying to use HANS

I'm running on version 10.2 and when I go to use HANS with animal crossing, "an error has occurred" message pops up and tells me to restart my system. I've tried restarting my system several times and initializing save data on the internet browser, but the error still pops up.

Server down?

I'm trying to install menuhax on firmware 11.0.0-33U using browserhax access
Browserhax worked very well the night before yet menuhax wasn't able to install
Today, however, I read over some solutions for menuhax but couldn't get into browserhax because the server is down (I tried all browsers on multiple devices, all the same 505 Internal Server Error)
Is this temporary? Or is it just local?

P.S.- On Chrome it just says "this site is unreachable"

Browserhax fails on 10.6.0-31E

While I'm sure you're aware of this, browserhax fails on latest firmware 10.6.0-31.

Hope you can find a new exploit soon :)

Enable the hack to be accessed through http://107.211.140.65/3dsbrowserhax_auto.php

Even with the nag blocking me, if I put some invalid dns, and try to access directly through the IP, I get the Not Found message.

It was the only internet page that my browser have ever shown after the nag started.

Maybe this can bypass the nag, if, instead of showing the 'not found', it shows the actual page as if being accessed by the url

3ds_arm11code.s:1908: Error: branch out of range

Got this error while trying to compile 3ds_arm11code.s!

patch for 11.1 Old3DS?

I read on gbatemp.net that Browserhax had reportedly been patched for v11.1
I just want to know if this is accurate and if there's a download link for it

WebKit vuln testing, for vuln stockpiling. Find as *many* useful testcases as you can for whatever system browser you prefer, regardless of whether browserhax is publicly available for latest version.

Instead of asking for "new browserhax when"(such issues will only get closed eventually), actually helping with the vuln testing would be preferred.

This applies mainly to Old3DS, but New3DS is fine too.

You could try using crash-trigger WebKit test-cases(from the WebKit SVN, in particular https://trac.webkit.org/browser/trunk/LayoutTests) with the latest web-browser to see if any crash occurs. Remember to test with the raw HTML. Do not send any test-cases publicly which actually trigger crashes with a 3DS browser, it should be done privately via IRC. Try to locate the change-set for any test-cases which cause crashes as well.

You should check the Nintendo OSS(https://www.nintendo.co.jp/support/oss/index.html) to verify that each test-case actually affects the browser, and is actually useful(no NULL-deref for example), before testing the test-case, if you can.

Certain themes break New3DS browserhax.

According to a number of people, certain themes(official/custom) cause New3DS browserhax-loader to fail(orange screen).

It seems like Home Menu takeover fails somehow, but I still haven't debugged this yet(didn't have any themes on New3DS which trigger it last time I checked). Leave a comment here if you know of any themes which trigger this(ideally not any paid themes).

not a issue just a heads up

if you are unaware the 3ds did a update to 10.4.0.-29. (I'm just saying chances are you are already aware, if not well heads up)

Fails to load payload after first succesful time

New 3DS 10.3
Using reset with date change.

First time i was able to run payload but it turns out i forgot to set-up home menu themes and so menuhax didn't let me install anything.

I have installed home menu extradata but now payload never loads from browserhax.
It just gets me bad certificate and error that video cannot be loaded.

Should i just try and try or could it be something went wrong?

Broken webkithax_tmp.bin deletion.

The SD "/webkithax_tmp.bin" file is cleared to all-zero once it's done being used, then it's supposed to be deleted. But the latter doesn't actually happen, it's been broken for a long time(from a cmdlog a good while ago it appeared to work "fine"). Cause is unknown.

My 3ds began crashing in a different way:PERMANENT YELLOW SCREEN

well thats weird, it always crashed on the orange but it turned white then permanently yellow so now my 3ds is acting like its a f***ing 2ds >:(

browserhax down can I help with fixing this?

Im not very experienced in this kind of stuff but I might be able to help?

Cannot use APT_SetAppCpuTimeLimit

Hello, I tcheck problem about using svchax on the korean 3ds.
I think, APT_SetAppCpuTimeLimit is main reason about svchax stuck problem (https://github.com/aliaspider/svchax/blob/e1ddbff/svchax.c#L219).

So I googled and saw yellows8/3ds_homemenuhax#6 issue, but this page's help step(launch official app, exit it, launch browserhax) make freezing ninjhax launch (o3ds, n3ds both stuck 2nd yellow screen, i think that point is https://github.com/smealum/ninjhax2.x/blob/86bb033/menu_payload/menu_ropbin.s#L159-162)

so few minute ago, I tested jap region o3ds, it also stuck after 2nd yellow screen.
is this totally ninjhax problem? or can you share another help step?

Browserhax 10.7 / brwsr v1.7625

(sry, i will speak french, it's my original language)
Bonjour yls8 et smealum.
En fait j'utilise browserhax pour accéder au hblauncher, mais depuis la 10.7 et 10.6 dont j'ai mis a jour ma 2ds, plus rien n'est accesible. Je regarde les exploits sur 3dbrew, et les seuls disponibles sont :
Ninjhax 2.5
smashbroshax
oot3dhax
(v*)hax
Et un autre qui utilise Pokemon Super Donjon Mystère.
Je n'ai pas : VVVVVV, Pokemon Super Donjon Mystère, OOT3D, et Smash Bros, ni Cubic Ninja et puis tous les autres que Cubic Ninja doivent être installés DEPUIS le hblauncher. J'ai vu des tutoriels a propos de la Sky3DS, mais je n'ai pad vraiment envie d'acheter une SKY3DS à 80€, donc je demande :
Quand brwsrhaw sera mis a jour pour la 10.7 et la v1.7625 du brwsr et sans le crash "not recognized" ? Merci.

1.7567 broken again

yeah, not working on O3DS 9.2... again

An ask for you

Hi there!, Im just going to ask how can I run unsigend code on 3DS, Im a student on HTML (Im developing a web Beta... but I think I will never release that page) and another programming lenguajes... So, I mean I want to develop a Hax or a Homebrew app... Only I want to know what kind of lenguaje I need to know?... and the last question is... after I updet to 10.7.0-32 I recibed another Update!! But I never see info on internet... I still on 10.7.0-32...

HopeBrowserHaxWorksAgainOn3DS #HopesAndDreamsOnAFreeHaxFor10.7