BluUBomb - A primary Wii U entrypoint via bluetooth

H2x1_generic_WiiU_image1280w.jpg

BluUBomb exploits the Wii U's bluetooth stack to gain IOSU kernel access via bluetooth.

Not to be confused with BlueBomb for the Wii and Wii Mini.

What does this mean?
This means you can get IOSU code execution by only pairing an emulated Wii Remote to the system.

This should be useful to fix a few softbricks on the Wii U side.
You don't need a working browser or Mii Maker.
if you've messed up with regionhax and can no longer access the browser, BluUBomb can fix this as well.

The BluUBomb repository contains a few different kernel binaries for different purposes:

loadrpx.bin
Launches a launch.rpx from the root of your SD card on the next application launch.

regionfree.bin
Applies IOSU patches to temporarily remove region restrictions.
This should be helpful if you've locked yourself out of your applications due to permanent region modifications.

wupserver.bin
Launches a wupserver instance directly after using bluubomb.
This gets you full system access remotely via wupclient (replace the IP in line 29 with the one of your Wii U).
This works without having to leave the controller pairing screen.

Check out the repository for additional instructions:
https://github.com/GaryOderNichts/bluubomb

The write-up and technical details can be found here:
https://github.com/GaryOderNichts/bluubomb/blob/master/WRITEUP.md

Credits
  • GaryOderNichts - bluUbomb
  • rnconrad for the WiimoteEmulator
  • dimok789 and everyone else who made mocha possible
 
Last edited by GaryOderNichts,

testing_this

Member
Newcomer
Joined
May 17, 2021
Messages
17
Trophies
0
Age
44
XP
666
Country
United States
Alright so here is a binary which copies a file named "cert.der" from the root of your SD card to the correct certificate path.
You can get the original cert from the decrypted NUS title or if you have a backup.
So what you need to do:
- extract the attached .zip
- rename the "ssl_unbrick.bin" to "bluu_kern.bin" and copy it to the root of the SD
- rename the cert to "cert.der" and copy it to the root
- power on your Wii U
- run bluubomb
- wait

Once finished successfully the console will reboot. If it fails it will power off without rebooting.
Let me know how it goes.

It didn't work. :(

I double checked that the files were the correct ones (ssl_unbrick.bin and CACERT_NINTENDO_CA_G3.der)
I did rename them.

Nothing changes on the console, I still can go back and then freezes. I tried 3 times.
 

GaryOderNichts

Well-Known Member
OP
Member
Joined
Aug 9, 2018
Messages
792
Trophies
1
XP
5,536
Country
Germany
Tested and nope. Same as before.
Hmm it seems like the kernel binary isn't even loaded from the SD.
Do you happen to know what firmware version you're running?

Try replacing your bluubomb executable with the attached one and see if it shuts down your console.
 

Attachments

  • bluubomb.zip
    13.3 KB · Views: 99

lemontree123

New Member
Newbie
Joined
Sep 26, 2021
Messages
4
Trophies
0
Age
39
XP
35
Country
Vietnam
Please help to check my issue:
This is my output:

ubuntu@ubuntu:~/WiimoteEmulator$ sudo ./bluubomb
listening for connections... (press wii u's sync button)
connected to 9C:E6:35:97:8C:E0
sent 803
kernel bin sent 0
sent 772
rop sent 0
pivot sent 207
cleaning up...


Thanks
 

lemontree123

New Member
Newbie
Joined
Sep 26, 2021
Messages
4
Trophies
0
Age
39
XP
35
Country
Vietnam
Please help to check my issue:
This is my output:

ubuntu@ubuntu:~/WiimoteEmulator$ sudo ./bluubomb
listening for connections... (press wii u's sync button)
connected to 9C:E6:35:97:8C:E0
sent 803
kernel bin sent 0
sent 772
rop sent 0
pivot sent 207
cleaning up...


Thanks
 

lemontree123

New Member
Newbie
Joined
Sep 26, 2021
Messages
4
Trophies
0
Age
39
XP
35
Country
Vietnam
From looking at the terminal output it seems fine. Make sure your SD Card is formatted to FAT32, and the kernel is placed correctly and named correctly on the SD. Try blowing into the SD Card slot to remove any dust.
I changed to new SD card, blow to clean the slot then IT WORKED!!! Thank you so much for saving my WiiU ^^
 

CMDreamer

Well-Known Member
Member
Joined
Oct 29, 2014
Messages
1,719
Trophies
1
Age
39
XP
3,574
Country
Mexico
@GaryOderNichts Sorry to bother, just got a second-hand softbricked WiiU with error 160-0103. Can't get to the home screen, it stops when configuring the language, looks like the seller did a system format or something like that.

How could I go into installing a system update on the WiiU using a homebrew application, so the damaged system files could be replaced, is that even possible?

Thanks in advance!
 

Helvetica

Member
Newcomer
Joined
Sep 5, 2017
Messages
18
Trophies
0
XP
354
Country
Korea, North
Heya. I'm trying to connect to my console but as I attempt to disable Simple pairing mode, I get thrown this error:

Can't set Simple Pairing mode on hci0: Input/output error (5)

Is there any way to get around this? Or am I at a dead end?
 

GaryOderNichts

Well-Known Member
OP
Member
Joined
Aug 9, 2018
Messages
792
Trophies
1
XP
5,536
Country
Germany

Helvetica

Member
Newcomer
Joined
Sep 5, 2017
Messages
18
Trophies
0
XP
354
Country
Korea, North

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • Xdqwerty @ Xdqwerty:
    or rather, why?
  • K3Nv2 @ K3Nv2:
    I'm about to buy a $200 flash cart
  • Psionic Roshambo @ Psionic Roshambo:
    I think I have a 256GB card in my 3DS lol
  • Psionic Roshambo @ Psionic Roshambo:
    It's a New 3DS XL so it's still under warranty... If it ever breaks gonna make Nintendo fix it lol You said it was new.... For eternity!!!
  • Psionic Roshambo @ Psionic Roshambo:
    But my 3DS is loaded with emulators and 3DS games and DS games and GBA games probably thousands of games in total lol
  • Xdqwerty @ Xdqwerty:
    Brb going with my dad
  • Xdqwerty @ Xdqwerty:
    @Psionic Roshambo, are most of those games shovelware?
    +1
  • K3Nv2 @ K3Nv2:
    Nah gotta buy 3 1tb SD cards for 3ds the entire libraries need archived in my home
    +1
  • SylverReZ @ SylverReZ:
    >buys x3 1TB SD cards
    >stores the entire 3DS library on them
    >installs CFW
    >realised why I wasted loads of money and resources
    +2
  • Psionic Roshambo @ Psionic Roshambo:
    Lol no I clean my sets
  • K3Nv2 @ K3Nv2:
    Cause it's in my home ready to go
  • K3Nv2 @ K3Nv2:
    Like uremum
  • Psionic Roshambo @ Psionic Roshambo:
    But 100 games on SNES and Genesis and GBA then TG16 and NES and GB and GBC then all the other random systems and arcade games it all adds up lol
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    Virtual Boy alone has probably 5 games!!! Lol
    +1
  • K3Nv2 @ K3Nv2:
    I won't mention any names in chat but some of us wastes $300 on preloaded hdds :tpi:
    +1
  • SylverReZ @ SylverReZ:
    @Psionic Roshambo, The PS5 had none.
    +2
  • Psionic Roshambo @ Psionic Roshambo:
    Lol I spent more than that on a stuffed 4TB drive lol
  • K3Nv2 @ K3Nv2:
    Honestly I've yet to fill the 1tb internal drive on my ps5
    +1
  • Xdqwerty @ Xdqwerty:
    @SylverReZ, 1) except final fantasy 16. 2) why would I have a console's whole catalogue if most of the games are either shovelware or terrible games?
  • Psionic Roshambo @ Psionic Roshambo:
    Kind of a waste, but the allure of all those games over 100,000
  • Psionic Roshambo @ Psionic Roshambo:
    Some shovel ware with low ratings you might enjoy more than the ratings would sugest
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    Cruisn on the Wii is one of my personal examples of that, it's considered one of the worst games of all time, I loved it and completed it several times.
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    The trick for me was to go into the settings and crank up the Wiimote sensitivity to the max and it gets twitchy but you can win that way lol
  • Psionic Roshambo @ Psionic Roshambo:
    Lots of other games I enjoyed that reviews would say otherwise lol
  • btei @ btei:
    lethal company servers are down rn
    btei @ btei: lethal company servers are down rn