Just dumped one of switch 2 game binary (userland bug) It was quite fun because I used HDMI capture card to dump the memory by sending the data as patterned image frames and decode at PC Took over an hour but it worked Will be used for examining how switch 2 PAC works

BD-JB for PS5 upto 13.42 FW github.com/Gezine/BD-JB5

I created switch 1/2 userland exploit that is not webkit or save exploit "But we already have userland exploit from day 1" The difference is existing userland exploit is based on save exploit which can't be used without save transfer using Nintendo Online Service Which forces you to be at latest fw So even if kexploit or some sw based privilege escalation is found 99% people can't use save exploit. But this one works without any restriction and works at all fw Why not hack the webkit? Switch 2 webkit has Arm PAC(Pointer Authentication Code) that prevents ROP code execution So I avoided it as there was more easy one to exploit it