News for hackers. Stuff that matters.

A comment on PegaSwitch: Exploit Toolkit for Nintendo Switch. Parent comment

Re:PegaSwitch: Exploit Toolkit for Nintendo Switch by kevsprk on Monday March 13, 2017 @10:21PM (#13864442)
Awesome work. Have you guys looked into potential differences between the captive browser applet and the share applet, which opens when you try to share an image from your album to Facebook? The share applet is locked down to what seems to be a whitelist of URLs it can access.

I noticed on the share applet, there is a JavaScript object: window.nx that exposes some internal functions. However, I have had no luck actually calling those functions. If you want to know more about this, I can show you how I execute JavaScript on it and give you a list of window.nx functions

[ Parent | on HN ]
Re:PegaSwitch: Exploit Toolkit for Nintendo Switch by daeken on Monday March 13, 2017 @10:26PM (#13864465)
Yeah, so they're shared codebases (obviously), but they have some different stuff enabled. There's actually more in window.nx than is exposed even with the share applet, but no one has really dug too deep into it yet. I'm fairly certain there's a function to call to enable everything, but given our full access to the process, there's not much incentive there.

That said, I know there are a couple JS projects aiming to build a kind of 'debugger' into the web applets; might help them to know what you know!

[ Parent | on HN ]