Ran it once, then tried running again after completion, can be temporarily worked around by only doing 9 modules, then rebooting the switch and doing the next 9 modules etc.
stage1, crashing ldr
Boom.
Got fsp-ldr handle after 3 iterations:
fsp-ldr handle: 3997758
stage2, dumping sysmodule
dumping usb
/main
/main.npdm
dumping tma
/main
/main.npdm
dumping boot2
/main
/main.npdm
dumping settings
/main
/main.npdm
dumping bus
/main
/main.npdm
dumping bluetooth
/main
/main.npdm
dumping bcat
/main
/main.npdm
dumping friends
/main
/main.npdm
dumping nifm
/main
/main.npdm
dumping ptm
/main
dumping bsdsockets
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 12 00 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping hid
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 13 00 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping audio
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 14 00 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping LogManager.Prod
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 15 00 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping wlan
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 16 00 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping ldn
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 18 00 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping nvservices
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 19 00 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping pcv
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 1a 00 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping ppc
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 1b 00 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping nvnflinger
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 1c 00 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping pcie.withoutHb
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 1d 00 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping account
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 1e 00 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping ns
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 1f 00 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping nfc
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 20 00 00 00 00 00 00 01 | ....... |
- 1 X descriptor
dumping psc
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 21 00 00 00 00 00 00 01 | !....... |
- 1 X descriptor
dumping capsrv
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 22 00 00 00 00 00 00 01 | "....... |
- 1 X descriptor
dumping am
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 23 00 00 00 00 00 00 01 | #....... |
- 1 X descriptor
dumping ssl
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 24 00 00 00 00 00 00 01 | $....... |
- 1 X descriptor
dumping nim
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 25 00 00 00 00 00 00 01 | %....... |
- 1 X descriptor
dumping lbl
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 29 00 00 00 00 00 00 01 | )....... |
- 1 X descriptor
dumping btm
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 2a 00 00 00 00 00 00 01 | *....... |
- 1 X descriptor
dumping erpt
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 2b 00 00 00 00 00 00 01 | +....... |
- 1 X descriptor
dumping vi
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 2d 00 00 00 00 00 00 01 | -....... |
- 1 X descriptor
dumping pctl
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 2e 00 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping npns
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 2f 00 00 00 00 00 00 01 | /....... |
- 1 X descriptor
dumping eupld
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 30 00 00 00 00 00 00 01 | 0....... |
- 1 X descriptor
dumping glue
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 31 00 00 00 00 00 00 01 | 1....... |
- 1 X descriptor
dumping eclct
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 32 00 00 00 00 00 00 01 | 2....... |
- 1 X descriptor
dumping es
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 33 00 00 00 00 00 00 01 | 3....... |
- 1 X descriptor
dumping fatal
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 34 00 00 00 00 00 00 01 | 4....... |
- 1 X descriptor
dumping creport
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 36 00 00 00 00 00 00 01 | 6....... |
- 1 X descriptor
dumping qlaunch
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 00 10 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping auth
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 01 10 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping cabinet
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 02 10 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping controller
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 03 10 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping dataErase
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 04 10 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping error
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 05 10 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping netConnect
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 06 10 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping playerSelect
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 07 10 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping swkbd
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 08 10 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping miiEdit
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 09 10 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping LibAppletWeb
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 0a 10 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping LibAppletShop
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 0b 10 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping overlayDisp
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 0c 10 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping photoViewer
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 0d 10 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping LibAppletOff
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 0f 10 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping LibAppletLns
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 10 10 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping LibAppletAuth
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 11 10 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping starter
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 12 10 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping myPage
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 13 10 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping maintenance
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 15 10 00 00 00 00 00 01 | ........ |
- 1 X descriptor
dumping flog
IPC Failure: 0xf601 (Port remote dead in module Kernel), offending request shown below
IPC message:
- Data
data+0x0 | 00 c0 13 00 b0 8b 00 01 | ........ |
- 1 X descriptor
// Attempt 2
stage1, crashing ldr
ERR [651]: IPCMessage(67073 = Error: 0x10601 (Port max sessions exceeded in module Kernel))
assertOk@exploit/Result.js:24:0
getAutoHandle@exploit/ipc.js:727:0
sendTo@exploit/ipc.js:298:0
eval code
Ran it once, then tried running again after completion, can be temporarily worked around by only doing 9 modules, then rebooting the switch and doing the next 9 modules etc.
stage1, crashing ldr Boom. Got fsp-ldr handle after 3 iterations: fsp-ldr handle: 3997758 stage2, dumping sysmodule dumping usb