WRFUxxed

This repository contains the code for the WRFUxxed exploit for "WRFU Tester". It is compatible with version 0.60 (SHA-1: 2d65fb7a0c62a4f08954b98c95f42b804fccfd26).

For a detailed writeup of the exploit, see wrfuxxed.md.

Setup & Configuration

We recommend using WSL (Windows Subsystem for Linux), or MSYS2 to compile this repository. The steps provided will assume you already have one of those environments set up.

1. Install BlocksDS

Building

1. Run make

Usage

Patch uartBufv060.bin with the DSpico DLDI. The uartBufv060.bin file can then be included in the DSpico firmware.

The exploit payload initializes the DSpico and then uses Pico Loader to boot /_picoboot.nds on the DSpico SD card. Make sure the Pico Loader files are in the /_pico folder.

Errors

• Blue screen: Failed to mount the DSpico SD card.
• Red screen: Failed to open /_pico/picoLoader9.bin or /_pico/picoLoader7.bin.

License

This project is licensed under the Zlib license. For details, see LICENSE.txt.

Contributors

• @Gericom
• @XLuma
• @lifehackerhansol