More actions
| Briccmii | |
|---|---|
 | |
| General | |
| Author | rajkosto |
| Type | Payload (Binaries) |
| Version | 2 |
| License | GPL-2.0 |
| Last Updated | 2018/06/19 |
| Links | |
| Download | |
| Website | |
| Source | |
| Support Author | |
A payload for the switch that corrupts the first bytes of each BCT public key in BOOT0 so that the Switch only enters RCM mode.
Also checks (and restores) proper keyblob into customer_data of said BCT, if requested.
Note: If Briccmii is active, the system cannot be booted normally. Therefore, this should only be used by experienced individuals.
User guide
Send the briccmii.bin to your Switch running in RCM mode via a fusee-launcher (sudo ./fusee-launcher.py briccmii.bin or just drag and drop it onto TegraRcmSmash.exe on Windows).
Then follow the on-screen prompts.
Media
Switch Homebrew: briccmii | RCM Autoboot Tool in Aktion [Deutsch/German] (NintendoBrew)
Changelog
v2 2018/06/19
- Also checks (and restores, if requested) the correct keyblob into BCT.
v1 2018/05/21
- Initial release.
Credits
- Initial code based on https://github.com/Atmosphere-NX/Atmosphere
- Everything except fusee-primary been removed (from Atmosphere).
- All hwinit code has been replaced by the updated versions from https://github.com/nwert/hekate
- Files pinmux.c/h, carveout.c/h, flow.h, sdram.c/h, decomp.h,lz4_wrapper.c,lzma.c,lzmadecode.c,lz4.c.inc are based on https://github.com/fail0verflow/switch-coreboot.git sources
- main.c has been modified to read all the BCTs, figure out which ones are used, and either corrupt byte 0x210 of each one, or restore it to match the fuse SHA256. It also checks if the customer_data in all the BCTs matches their requested version keyblob, and copies the correct one, if requested.
External links
- Author's website - https://switchtools.sshnuke.net/
- GitHub - https://github.com/rajkosto/briccmii