mirrors/Incognito_RCM
1
0
Fork 0
mirror of https://github.com/Scandal-UK/Incognito_RCM.git synced 2024-12-22 18:32:03 +00:00
Code Issues Releases Activity
Wipes personal information from your Nintendo Switch via bare metal RCM payload
6 commits 2 branches 15 tags 1.7 MiB
C 96.7%
C++ 2.8%
Assembly 0.3%
Makefile 0.2%
Find a file
shchmue e1ffda6ab9 Merge interim hekate bugfixes
2019-04-18 13:14:05 -04:00
common Initial commit 2019-03-04 18:05:42 -05:00
source Merge interim hekate bugfixes 2019-04-18 13:14:05 -04:00
.gitignore Add .gitignore 2019-04-18 13:14:05 -04:00
LICENSE Initial commit 2019-03-04 18:05:42 -05:00
Makefile Add 8.0.0 support, move stack to IRAM for faster exec 2019-04-18 13:14:05 -04:00
README.md Initial commit 2019-03-04 18:05:42 -05:00

README.md

Lockpick_RCM

Lockpick_RCM is a bare metal Nintendo Switch payload that derives encryption keys for use in Switch file handling software like hactool, hactoolnet/LibHac, ChoiDujour, etc. without booting Horizon OS.

Due to changes imposed by firmware 7.0.0, Lockpick homebrew can no longer derive the latest keys. In the boot-time environment however, there are fewer limitations.

Usage

  • Launch Lockpick_RCM.bin using your favorite payload injector
  • Upon completion, keys will be saved to /switch/prod.keys on SD
  • If the console has Firmware 7.x, the /sept/ folder from Atmosphère or Kosmos release zip containing both sept-primary.bin and sept-secondary.enc must be present on SD or else only keyblob master key derivation is possible (ie. up to master_key_05 only)

Building

Install devkitARM and run make.

Massive Thanks to CTCaer!

This software is heavily based on Hekate. Beyond that, CTCaer was exceptionally helpful in the development of this project, lending loads of advice, expertise, and humor.

Known Issues

  • Chainloading from SX will hang immediately due to quirks in their hwinit code, please launch payload directly