WARNING: DO NOT FOLLOW THIS GUIDE IF YOU DON'T HAVE HAXCHI OR CBHC INSTALLED!
You will lose all Homebrew entry points, the browser will not be usable anymore.

This guide has been written when there was no 5.5.2 exploit. CFW DOES NOT INCLUDE MOCHA, IF YOU LAUNCH MOCHA FROM THE BROWSER!
If you are on 5.5.2 you can use one of the new Homebrew entry points, such as https://stupiid.ovh, https://u.drg.li or https://sleepii.ovh.

This guide is NOT a 5.5.2 exploit, and will not get you Homebrew on 5.5.2, this is purely for those with CBHC or Haxchi who want the old browser exploit back for any reason.

Follow this guide only if you want both cfw and a relatively stable browserhax. (This is more stable than the 5.5.2 browser hax, but doesn't matter too much because it requires Haxchi or CBHC)

Downgraded browser's with NO CFW (Haxchi or CBHC) = no more Homebrew for you! (until a new update comes out, or a new exploit that doesn't require the browser comes out.)


Important note: BEFORE doing any permanent changes to your console's internal files, you should always make sure you have a backup (Seeprom and OTP is a my best option for this guide) (AppStore). if you don't make a full NAND backup, at least do a OTP/SEEPROM dump, that will save your console if you brick the browser, as you can install Haxchi with your Seeprom and OTP. Backing up your Seeprom and OTP will NOT fix full CBHC or FTPiiU bricks (Console not booting). Not necessarily only before following this guide, it's common advice for EVERY console's hacking projects. Always read and understand all the guide before starting it.

Spoiler: DISCLAIMER

DISCLAIMER: This guide requires file transfers via FTPiiU Everywhere. If you mess up your Wii U, I am not liable for any damage. If you follow this properly and read everything, nothing harmful should happen.

-Beginning-

Hello, this is a guide on how to downgrade your Internet Browser as to use the old browser vulnerability.
This means you will be able to use https://loadiine.ovh on 5.5.2, but first read the requirements, your Wii U might not be supported depending on what Homebrew you use.

-Requirements and warnings-

This requires CBHC, or Haxchi (you should have either Haxchi or CBHC if you're on 5.5.2, and if not you're out of luck) an FTP client, FTPiiU Everywhere, and an encrypted version of the Wii U Internet Browser, which can be gained through JNUSTool.

Spoiler: IMPORTANT WARNINGS, READ ME OR DIE

(WARNING, IF YOU'RE USING JUST HAXCHI, TO ACCESS THE INTERNET BROWSER IT WILL REQUIRE SIGNATURE PATCHES, MEANING YOU HAVE TO LAUNCH HAXCHI, OR MOCHA OR ANY OTHER CFW / SIGNATURE PATCHING PROGRAM EACH TIME YOU WANT TO USE THE BROWSER!)
Also, if you want this as a backup method in case CBHC fails, don't bother, dump your Seeprom and OTP instead. Doing this will make your Internet Browser unusable if CBHC fails.

-Starting-

First off, you want to go to the directory where JNUSTool.jar is and open a Command Prompt window there by putting your mouse cursor in an open area, and holding shift and right clicking. You should see an option that says "Open command window here" and you want to click it. Then paste in this command to get the Internet Browser code folder.
"java -jar JNUSTool.jar 000500301001210A v241"
It should do a long string of things in the terminal and then a window should appear.
First, select the arrow that looks like this, next to code (make sure that you don't select the checkbox next to code)

Scroll down until you find mvplayer.rpl, and click the arrow next to it, and then hit download.

Spoiler: What mvplayer and download look like

It should go through it's download process, and eventually finish. Once it's finished, find the output folder which should have the name "Internet Browser [HBAE01]" open the folder, and then open the "code" folder.

-Wii U Side-

Now, head over to your Wii U, and open the Homebrew Launcher with CFW on, otherwise known as signature patches. Load FTPiiU Everywhere, and open Filezilla or whatever FTP client you use.

-FTP and the Wii U-

In the box that says "host" type the IP address displayed on your gamepad screen and select "connect" on your FTP client.
If your console region is USA, go to /storage_mlc/sys/title/00050030/1001210a/code
If your console region is EUR, go to /storage_mlc/sys/title/00050030/1001220a/code
If your console region is JPN, go to /storage_mlc/sys/title/00050030/1001200a/code
Then, copy the mvplayer.rpl file from /Internet Browser [HBAE01]/code which you opened earlier to your FTP client that's open in the directory I told you to go to. It should prompt you to overwrite another file called mvplayer.rpl, and when it does, select yes. Once the file transfer is completed, press the home button on your gamepad, and do all the necessary steps to get to the home menu.

-Final steps!-

Once you're at the home menu, power down your console (TURNING OFF YOUR WII U IS REQUIRED, DO NOT SKIP THIS STEP OR THE DOWNGRADE WILL NOT WORK), then power it on, and navigate to the Internet Browser with CFW on. Go to https://loadiine.ovh on your Internet Browser, and if it redirects you to a page saying you're on 5.5.2, go to the URL that it redirects you to, and change the "l=552" to "l=551" and hit ok. Once you've done that, launch the browser exploit as you normally would and you should be good to go.

Spoiler: back to 5.5.2

Now, to change your Internet Browser back to 5.5.2, for whatever reason, do the same steps, but when doing the JNUSTool section, do "java -jar JNUSTool.jar 000500301001210A v258" instead.

-Thanks-

I hope you enjoyed this tutorial! It's my first one on here, so I do understand it's not very helpful for a beginner, but I'll try my best, thanks.

 

[Cyan]

his second hope is in case he did a OTP/SEEPROM dump while being in an old firmware version, and kept these files!
in that case, he can install haxchi by connecting a WiiU formatted HDD to his computer.

I don't have a lot of hope that he did, or have these files. looks like very few people dumped these data. I don't remember if hacking guide ever told the users to do it. It could be added.

 

[Alvyssy]

you downgraded the browser, or the movie player?

if you downgraded the browser, if that's even possible, force a firmware update and it will replace the old browser version with the latest.
But, as you posted in this thread which is about replacing the movie player only while keeping the browser to latest version, I suppose you are in this situation and you can't fix it if it doesn't launch.

I wonder what you did to prevent it from launching.
Did you touch any other files while using ftpiiu ?


You could fix it and install haxchi if you have your OTP/SEEPROM dump.

I downgraded the mvplayer and my browser is stuck! Anyway how can I force an update? I'm such a d**khead, I don't have any dumps either

--------------------- MERGED ---------------------------

At least I hope that someone learns from my errors, one of them is this: I bricked my vwii and since then I had to resynchronize my wiimotes to the older Wii or use Dolphin

I downgraded the mvplayer and my browser is stuck! Anyway how can I force an update? I'm such a d**khead, I don't have any dumps either

 

[BullyWiiPlaza]

A different kind of question, can someone point out which functions inside the mvplayer.rpl have been changed to fix the vulnerability for learning purposes?

 

[Cyan]

Anyway how can I force an update?

you can't force an update if you are already on latest browser version and you downgraded only the movie player. sorry.
you could fix it on NEXT wiiu firmware update, if it ever happens. no certitude.


BullyWiiPlaza : I didn't read any post here with that information.
I guess you could decompile both rpl file version to compare them.
I never did it myself (I don't have IDA Pro, but I know there's a plugin for WiiU files)

 

[Alvyssy]

At this point I really hope that some sort of chrunyroll exploits come out so that I can restore my web browser

 

[jbuck1975]

How did you access ftpiiu without haxachi to do the downgrade?

 

[Alvyssy]

How did you access ftpiiu without haxachi to do the downgrade?

I used webhax, and when I succeded I opened Mocha and accessed the homebrew laucher through the forwarder on the wii u menù. With the CFW on I got the permissions on Ftp

 

[BullyWiiPlaza]

BullyWiiPlaza : I didn't read any post here with that information.
I guess you could decompile both rpl file version to compare them.
I never did it myself (I don't have IDA Pro, but I know there's a plugin for WiiU files)

If only decompiling was a thing with PowerPC without terrible results.
Disassembling is somewhat good enough though but comparing both files automatically is another problem to find the differences.
Surely some people know that in detail since an exploit has been made from it.

 

[MousSe]

ARE YOU F*CKING SERIOUS !? You forgot to said we can't do it on IOS Hax ! Now the Internet Browser Freeze when I launch !!!!!!!!

 

[BullyWiiPlaza]

ARE YOU F*CKING SERIOUS !? You forgot to said we can't do it on IOS Hax ! Now the Internet Browser Freeze when I launch !!!!!!!!

Anyone who can read is clearly in the advantage

WARNING: DO NOT FOLLOW THIS GUIDE IF YOU DON'T HAVE HAXCHI OF CBHC INSTALLED !
You will lose all hacks entry points, the browser will not be usable anymore.

 

[ShadowOne333]

Anyone who can read is clearly in the advantage

That was added yesterday .
Check the Edit label at the bottom of the OP

Last edited by Cyan, Yesterday at 11:11 AM - Reason: Added header warning

 

[BullyWiiPlaza]

That was added yesterday .
Check the Edit label at the bottom of the OP

This guy commented after it has been edited so he was supposed to see it.

 

[Cyan]

and like I said, even if the header wasn't there, the guide SPECIFICALLY SAID : You NEED HAXCHI OR CBHC !

-Requirements and warnings-

This requires CBHC, or Haxchi

IMPORTANT WARNINGS, READ ME OR DIE (WARNING, IF YOU'RE USING JUST HAXCHI, TO ACCESS THE INTERNET BROWSER IT WILL REQUIRE SIGNATURE PATCHES, MEANING YOU HAVE TO LAUNCH HAXCHI, OR MOCHA OR ANY OTHER CFW / SIGNATURE PATCHING PROGRAM EACH TIME YOU WANT TO USE THE BROWSER!)

you didn't have a signature patcher utility you could use BEFORE launching the browser? then you didn't read or followed the guide correctly.

I thought "die" was too strong and asked the author to change that word, as we don't expect nor hope or wish death to our users, but that's connotation to console bricking. your console (semi)died. you just lost the browser, not the other console's features.
that message was here from the start.


Sorry for your console too, but users should follow the guides correctly, not read half of it. the warning didn't change the way the guide works, it's still good and the same than before, for both 5.5.1 AND 5.5.2
the warning I added to the top is only for users who can't read text NOT IN RED.


Same question than previous user : Did you get your OTP and SEEPROM dump ? if not, then you can't do anything.
if you did it, then you can install haxchi from your computer without the browser.

 

[MousSe]

Anyone who can read is clearly in the advantage

I had an acces to the homebrew launcher without haxchi, I try the internet browser downgrade and now when I try to launch it, it freeze. I need to wait a wii.u update or a new exploit.

 

[ShadowOne333]

I had an acces to the homebrew launcher without haxchi, I try the internet browser downgrade and now when I try to launch it, it freeze. I need to wait a wii.u update or a new exploit.

Try to force an update of the console.
Perhaps that will restore the browser.

If you can do that, then try to use the newly released exploit for 5.5.2 browsers, and use that to install Haxchi.

 

[MousSe]

Try to force an update of the console.
Perhaps that will restore the browser.

If you can do that, then try to use the newly released exploit for 5.5.2 browsers, and use that to install Haxchi.

I use the internert browser exploit for 5.5.2 to try to downgrade, but how I can force an update ? Or if someone know how to reset my wii u without erase my save because when I want to do that, it said I can't access saves I place in my usb storage.

 

[ShadowOne333]

I use the internert browser exploit for 5.5.2 to try to downgrade, but how I can force an update ? Or if someone know how to reset my wii u without erase my save because when I want to do that, it said I can't access saves I place in my usb storage.

Go to Settings, and then go to Update.
Perhaps that should prompt you to update the console.

if not, then try to backup your saves in something like a USB drive or something, and then do a format of the system.
That's the only thing I can think of right now which might be able to get you out of the problem.

 

[MousSe]

This guy commented after it has been edited so he was supposed to see it.

I try before this message appear... I ask help NOW !

--------------------- MERGED ---------------------------

Go to Settings, and then go to Update.
Perhaps that should prompt you to update the console.

if not, then try to backup your saves in something like a USB drive or something, and then do a format of the system.
That's the only thing I can think of right now which might be able to get you out of the problem.

I can do that but the save can't be used after the operation. But I don't know if saves are compatible with the save owner. I'm going to try if crunchyhax is not release.

 

[MousSe]

Go to Settings, and then go to Update.
Perhaps that should prompt you to update the console.

if not, then try to backup your saves in something like a USB drive or something, and then do a format of the system.
That's the only thing I can think of right now which might be able to get you out of the problem.

How I can force an update ? My console is already on 5.5.2... And I made a backup of my saves, but I don't know if it going to be usable a reset.

 

[Cyan]

you can't force an update.
you are already on latest firmware version, and your browser is already on latest version too.
only one module is downgraded, not the browser, so the console will not detect that it can be updated.


your only chance to fix it is :
- hope there's a new console update (5.5.3), but it will certainly patch the 5.5.2 browser exploit. not very useful to hack the console, but useful to get browser access back.
- you did a OTP and SEEPROM dump of your console before doing anything dangerous to your NAND. in that case you can install haxchi from your computer.
- you did a full NAND dump (software or hardware), and you can restore it with hardware. though, if you did it from software maybe you have your OTP/SEEPROM already, you can follow step 2 instead.
- wait until there's a new entry point in another app (crunchy roll? if it's not a joke since the beginning). that's probably the best you can do while staying on 5.5.2

that's all. you can't fix it in any other way (for now).


note: Formating the system will not help.
it's deleting installed eShop titles and savegames.
it's not deleting system app, and reinstalling them from nowhere as source. the console doesn't keep a "firmware re-installer" file.
it's also modifying your SEEPROM console's seed for encryption, you'll lose access to your USB backup savegames !!

format is not an option to fix something, it's an option to DELETE and LOSE everything from current users, for example to sell the console to ANOTHER user.
all data are lost and can't be recovered. (unless, you have SEEPROM dump to access USB on your computer)