Closed moozhub closed 4 years ago
" don't see any attempts from the 3ds to associate itself with anything on channel 6." Which is normal without user-input to do so.
Right... so I'm guessing there is some multicast broadcasting going on here? I'm sorta a noob at multicasting too but it sorta seems like it's the same concept.. I just wasn't sure why I wasn't seeing anything on channel 6 after I put the beacon up, I'm only seeing anything from the 3DS on channel 11 once I attempt to host a local wireless game from it. Still doing some testing and I'll probably do some captures to see what's going on, if the channel itself is not the issue I'm not sure what else could be other than perhaps my WiFi adapter.
I'm assuming it doesn't matter which WiFi-AP the 3DS is connected to, since it would seem the idea is to set up some sort of proprietary beacon (in a case of 3ds connecting to a 3ds for local wireless).
So, for starters forgive me, I've only set up a wireless beacon a few other times to play around with aircrack so I'm unsure if this is a potential issue or not.
N3DS Firmware Version: 10.7.0-32U SSB Version: 1.0.1
When I use aireplay to setup the beacon, and watching that traffic on channel 6 I don't see any attempts from the 3ds to associate itself with anything on channel 6. Instead, I'm showing the device broadcasting itself on channel 11. Of course it's only doing this when I begin to host a game, but the main problem I'm experiencing is the device (N3DS) is not finding my beacon for whatever reason and since the PCAP provided here is precompiled capture hard coded with channel 6, the only way I can think of to test it is to use a hex editor and flip the bits around. I figured I'd post here first before doing that to see if you had a better suggestion.
And before sounding completely ignorant, I may have missed it somewhere...is there any other hardware that is required to be able to exploit this (game card)? I'm currently using a blank SD card that the 3ds partitioned, that's it. The system is pretty interested in getting me updated, which I would assume it would if this exploit were possible. My plan is to downgrade the firmware to get homebrew running on it using EmuNand9, but that's a bit further down the line. Let me know if I'm missing something..
Thanks