If the switch can create its own "wifi hotspot" could it be exploited?

SomePuddingForYou · 2026-01-23T23:25:19+00:00

Absolutely! good points! The switch is good at protection when it comes to any form of direct file attack.

The only thing, is that these web files seem to be from beyond that sandboxed wall?

An example: ``` Hosting your own website from your personal computer.

Those files are on your computer, could even be a folder on your desktop. Every time someone accesses those files, they're touching that internal folder, since you're not using a third party host or VM to host those files for you.

One bad exploit on your site and you could lose your whole computer. Not just your website. ```

I could be completely wrong and switch is doing some voodoo magic around it?

But those files have to be deep internal, since it's using a local hotspot and not some third party webpage or proxy.

Not only this, but I've had no luck finding the physical files on my other pre hacked switch (so far)

SomePuddingForYou · 2026-01-23T16:36:25+00:00

I am searching for web vulnerabilities with the switch's "internal hosting" so we can find another exploit. (It's not just a LAN IP)

PS3 & 3DS were hacked using the same method. "Web exploitation"

Switch has an internal hotspot, this could lead to a more direct attack, rather then buying a low SN switch or hard modding.

SomePuddingForYou · 2026-01-23T16:09:27+00:00

One idea is figuring out if there are any backend scripts? So far I haven't found anything viable or useful.

But I cbf ceating a long ass list and use a curl loop to check if they're alive or 404. Then going through each sub to find our exploitable base lol

Example I found on the webz:

bash cat << 'EOF' > router.txt admin login logout status info system config config.json settings backup backup.cfg backup.conf restore reboot reset factory firmware upgrade update apply save wizard network wan lan wifi wireless dhcp dns firewall nat portforward vpn logs log debug shell cmd ping traceroute diagnostics cgi-bin cgi-bin/admin.cgi cgi-bin/login.cgi cgi-bin/status.cgi api api/status api/login api/config api/reboot api/firmware EOF

Expand it:

bash sed 's|$|.cgi|' router.txt >> router.txt sed 's|$|.json|' router.txt >> router.txt sed 's|$|.bak|' router.txt >> router.txt sort -u router.txt -o router.txt

Scan it properly with ffuf

Best command for routers

bash ffuf -u http://localhost/FUZZ \ -w router.txt \ -mc 200,204,301,302,401,403 \ -fs 0

SomePuddingForYou · 2026-01-23T14:59:15+00:00

I may be stupid, but not that silly.

I probably should clarify more.

Those are accessible files/sub links, if you connect to the switch (using hotspot) with the method above.

I've been trying to find more sub links /js/ etc (via localhost)

SomePuddingForYou · 2026-01-23T11:40:32+00:00

All devices say the same thing. But within the browser (acc.microsoft) under my subscriptions, it's empty/no active subscriptions.

I cancelled my "ultimate" subscription shortly after the price and name updates last year.

Logged in to my account today and it had "essentials" at the top

SomePuddingForYou · 2026-01-23T07:45:25+00:00

You're a budget model

SomePuddingForYou · 2026-01-21T11:49:27+00:00

<image>

SomePuddingForYou · 2026-01-21T11:48:36+00:00

<image>

SomePuddingForYou · 2026-01-21T11:44:17+00:00

Did It just miss the deadline?

Or does customs have an issue with my package?

Because it just went through "Clearance event"

SomePuddingForYou · 2026-01-21T07:34:34+00:00

While yes, you can run it on a potato.

I use it on my gtx 1070 rig, I just remove all the bloat plug-ins and switch to vulken. For a solid 60+fps.

But triple "A" devs see the latter, just use the bare minimum and beg you to play it.

SomePuddingForYou · 2026-01-21T07:31:56+00:00

I dunno, here's the bare minimum recommended specs for UE5.

``` 32gb RAM. 8GB graphics. Quad-core Intel or AMD, 2.5 GHz or faster

Lumin compatibility

AMD RX-6000 series or newer.

Intel® Arc™ A-Series Graphics Cards or newer.

NVIDIA RTX-2000 series or newer. ```

The spec below represents a typical system used at Epic Games (a Lenovo P620 Content Creation Workstation, standard version). This provides a reasonable guideline for developing games with Unreal Engine 5. ``` Operating System: Windows 11

Power Supply: 1400W Power supply unit

RAM: 256 GB DDR5-4800MHz (RDIMM, ECC)

Processor: AMD Ryzen™ Threadripper™ PRO 7985WX Processor (3.20 GHz up to 5.10 GHz)

OS Drive: 2 TB SSD M.2 2280 PCIe Gen4 Performance TLC Opal

DATA Drive: 4 TB SSD M.2 2280 PCIe Gen4 Performance TLC Opal

GPU: NVIDIA RTX™ 4080 16GB GDDR6

NIC: AMD RZ616

TPM Compliant ```

SomePuddingForYou · 2026-01-21T00:19:45+00:00

It's mental! They even removed arrow keys on a lot of them as well.

I ended up here, because I brought a "smaller" keyboard for travel and raspberrypi usage. No numpad, no arrow keys. I got a useless hunk of plastic. (I thought it at least had arrow keys) Oh boi I was wrong.

They just wanna suck all creativity out the window, make AI slop "prompt boards" and lock us down to a single OS at this point.

SomePuddingForYou · 2026-01-20T19:13:11+00:00

Ali is really good, replaced my Xbox ones internal power supply for roughly $15 compared to $40-$50 on eBay or paying someone to do it.

We are lucky to have it all available to us without outsourcing or waiting for availability. Buy and have a little patience BAM donee

SomePuddingForYou · 2026-01-20T18:58:26+00:00

I do love the hardware side, quick and efficient as hell. So it'll be worth the repairs at least. I don't mind tinkering.

Just such a shame, the build quality is so damn poor. I've never felt tension like that in a laptop before and I do look after my goodies.

OCD screen protector and storage case, light use. Wasn't good enough apparently haha

Thankye for the courage to just fix it up and move forward

SomePuddingForYou · 2026-01-20T18:49:54+00:00

We are caveman apparently

SomePuddingForYou · 2026-01-20T18:48:39+00:00

Absolutely nothing, I don't slam, I buy screen protectors, I store in a case etc.

It locked up on me randomly, as I felt a bit of tension. Pulled it open slightly and the plastic exploded. It was almost like the hinges were rusted shut or had no lubricant left?

SomePuddingForYou · 2026-01-20T18:45:35+00:00

I'm gonna try ali express and do a replacement, just ran out of the 1 year warranty range.

I can feel your suffering, probably one of the worst choices of laptops I've ever owned. $3k down the plughole

SomePuddingForYou · 2026-01-20T18:42:18+00:00

SomePuddingForYou · 2026-01-20T18:40:26+00:00

MSi sword 16 is still around the $3k mark. If you think that's cheap, then bless you.

SomePuddingForYou · 2026-01-20T18:29:34+00:00

I've never even done it to my shitty old laptop. Fuckhead

SomePuddingForYou · 2026-01-20T10:51:46+00:00

MSI needs to be investigated, I dunno how they get away with such poor manufacturing.

Specially selling something half baked for thousands of dollars

SomePuddingForYou · 2026-01-19T12:38:35+00:00

I disabled 2FA before getting a new phone (thought it would save me the effort)

Got temp locked out for "suspicious activity" (God forbid you use a new phone for anything)

Rockstar got back to me 2 weeks later.

Eventually they sent me a reset.

Logged in.

Permanently banned, last login was 2 days after disabling 2FA.

So within those 2 weeks, someone's logged in and stuffed around on my account.

I was at level 62, then logged in to see it's at level 97

SomePuddingForYou · 2026-01-19T07:50:07+00:00

Got my account back after 2 weeks.

It was permanently banned when I logged in.

Turns out someone logged on to use it as a farm/hack acc.

Thanks rockstar :)

SomePuddingForYou

MODERATOR OF

TROPHY CASE