Hacking Wii U Hacking & Homebrew Discussion

[Chujowski]

Again, even if we did release an exploit, we've only been working on a kernel exploit, the only thing that it would enable is cheating, the same way Bean and Chadderz did it. Piracy still isn't possible with any exploit currently being worked on. We'd have to develop an entirely new exploit for IOSU to do any sort of thing like that.

I was referring to f0f. Tri-Core Linux has also made great progress, this would give them another reason to release everything they have done aside from the release of the WiiKeyU.

 

[NWPlayer123]

IIRC someone said that their exploits were patched in newer versions, so they're out of the picture, they're long gone by now, considering how long ago they did their shenanigans up to now with all the changes that have happened. Even if their exploit wasn't patched, it still wouldn't do any good because then Ninty could patch all our exploits in one fell swoop, better to release them one at a time if we were gonna do that. (Referring to F0F, Bean, and MN1 and co's in-the-work exploit)

 

[Chujowski]

IIRC someone said that their exploits were patched in newer versions, so they're out of the picture, they're long gone by now, considering how long ago they did their shenanigans up to now with all the changes that have happened. Even if their exploit wasn't patched, it still wouldn't do any good because then Ninty could patch all our exploits in one fell swoop, better to release them one at a time if we were gonna do that. (Referring to F0F, Bean, and MN1 and co's in-the-work exploit)

Didn't know they were patched. You got the source? If they haven't been patched Nintendo could potentially patch it over night if they wanted too... But most of us should have our WiFi not connected to any network on the console at this point. We could then use loaders to bypass the update on newer games or directly rip the update off the dump (if possible).

 

[Marionumber1]

Tri-Core Linux has also made great progress, this would give them another reason to release everything they have done aside from the release of the WiiKeyU.

Tri-core Linux is a Linux port, not a Wii U mode exploit. It cannot be used for Wii U homebrew on its own.

 

[Goku Junior]

If I'm not wrong, Trinux it's just a modified Linux to run under the three cores of Wii U CPU Espresso, but RAM, GPU and other components stills works as a normal Wii.

 

[Chujowski]

Tri-core Linux is a Linux port, not a Wii U mode exploit. It cannot be used for Wii U homebrew on its own.

They need the exploit to get the full access of the hardware on the Wii U to run the o/s. Right now it's being run off the vWii with limited ram.

 

[WulfyStylez]

They need the exploit to get the full access of the hardware on the Wii U to run the o/s. Right now it's being run off the vWii with limited ram.

Some of the research going toward Trinux could be used to run homebrew on the Wii U with full access to hardware, but it would be a pain in the ass because we'd be developing on bare metal. That's still useful to the Linux crowd for very obvious reasons.

As f0f said, we can use SDK libraries legally on the Wii U. That's pretty awesome, and a big change from how things were in the past with previous systems. Anyone remember xbins?

But yeah, f0f's stuff is liiiikely patched? It's possible their bugs may have been either reported to Nintendo, or they were just obvious enough that a quick security audit caught them. From the few technical details I've heard about some of their work (not public stuff, sorry) their holes have likely changed or have been closed since they found them. I don't actually think they themselves know any more.

 

[rednekcowboy]

But yeah, f0f's stuff is liiiikely patched? It's possible their bugs may have been either reported--sold to Nintendo and ODE makers, or they were just obvious enough that a quick security audit caught them. From the few technical details I've heard about some of their work (not public stuff, sorry) their holes have likely changed or have been closed since they found them. I don't actually think they themselves know any more.

The bolded and underlined part. I don't care what Marcan and the boys say publicly. Anyone that believes their whole "curiosity" explanation, etc has blinders on. Not saying there is anything wrong with what they did, hell I would as well. I'm just sick of all the BS. At least have the cajones to own up to it.

 

[Duo8]

Yeah, here's hoping the actual developers will show up in the nearest feature.

Define "actual developers".

 

[the_randomizer]

Define "actual developers".

They have shown up, people have too high of demands on here. They're on here right now, people are just blinded.

 

[WulfyStylez]

The bolded and underlined part. I don't care what Marcan and the boys say publicly. Anyone that believes their whole "curiosity" explanation, etc has blinders on. Not saying there is anything wrong with what they did, hell I would as well. I'm just sick of all the BS. At least have the cajones to own up to it.

Um, no. You totally interpreted that wrong. My point is, some bits and pieces of what f0f used initially have since been patched. That's all. I assumed it was possible they could have reported the bugs to Nintendo because they're actually reasonable people.

 

[Marionumber1]

The bolded and underlined part. I don't care what Marcan and the boys say publicly. Anyone that believes their whole "curiosity" explanation, etc has blinders on. Not saying there is anything wrong with what they did, hell I would as well. I'm just sick of all the BS. At least have the cajones to own up to it.

fail0verflow gave the exploit to people outside of their group. So assuming that the exploit has been sold to ODE makers (which is not verified to be true), it wasn't necessarily them.

 

[Bug_Checker_]

fail0verflow gave the exploit to people outside of their group. So assuming that the exploit has been sold to ODE makers (which is not verified to be true), it wasn't necessarily them.

I just wish people would stop making up shit. It is just such a waste of time trying to correct the record.
(This is NOT directed at Marionumber1(he tries to correct misstatements nearly all the time.)

Marcan said in Nov 2013

Also, allow me to paraphrase, summarize, and anonymize an IRC conversation that I had the other day. A is another fail0verflower (who developed the exploit in question), B is a respected Wii homebrew dev with more than enough skills to work on getting Wii U homebrew started, and one of the 30-ish people whom I said have access to the Wii U mode exploit.

[referring to posts on this thread where I claimed the 30-ish people had the exploit]
<B> marcan: you never actually gave us a usable exploit
<marcan> Huh, I thought we did.
<B> I can't use it because <reasons>
<marcan> Weird, I didn't know that was the case. It's not in A's style. It should be easy to fix that problem.
<A> Actually, I fixed that months ago. I just haven't been putting any effort into this for the past year or so, and never got around to sharing the fixed version.
<A> Ah, I need to change something else now. I'll do it, but not this second.
<B> TBH, I'd rather work on <Wii stuff not related to the Wii U> first, because it annoys the shit out of me.
<marcan> Keep in mind that none of that would be useful for the Wii U.
<B> Yeah, but I keep running into it.


See? Lack of interest. B would rather be working on something else. I don't blame him. But understand that this is the pattern that I've been seeing - the general feeling that Wii U homebrew would be cool, yes, but nobody capable is motivated enough to go from "it would be cool" to "I'm going to get my hands dirty and actually get this started".

So a non complete exploit may have made its way into 30 hands(btw the ode goes back to early 2013). But as they say "Great minds think alike".
It is arrogant to believe that only someone can figure out a solution and no one else can. While software has some limits if you own the hardware (like nintendo does) they can figure everything out.
Obfuscation is introduced only to slow down Nintendo(not stop them) and to limit for profit dongle competitors (and includes softmods).

 

[TheLoneWolfe]

Hey guys, I was wondering about something: I don't have any plans to create an IOSU exploit (and more importantly, wouldn't have the skills to do so if I did) but I was curious (as I'm always looking to learn stuff), what would one want to read in order to learn to develop an exploit like that? There's obviously lots of material online and in books detailing kernel exploitation of open systems like Windows, Unix and OS X that I've been reading lately, but what would be a parallel to the IOSU in a modern OS like the three mentioned? If there isn't one, again, what kind of reading would be suggested?

 

[WulfyStylez]

Hey guys, I was wondering about something: I don't have any plans to create an IOSU exploit (and more importantly, wouldn't have the skills to do so if I did) but I was curious (as I'm always looking to learn stuff), what would one want to read in order to learn to develop an exploit like that? There's obviously lots of material online and in books detailing kernel exploitation of open systems like Windows, Unix and OS X that I've been reading lately, but what would be a parallel to the IOSU in a modern OS like the three mentioned? If there isn't one, again, what kind of reading would be suggested?

Probably a lot of the same reading for any embedded kernel exploitation, but keep in mind that you'll need to know ARM assembly after a certain point, not just PPC asm.

 

[FaTaL_ErRoR]

I came across quite possibly a flaw in the file save system.
It appears in the black ops 2 save game file there are unencrypted commands.
pkE@$CdckQ+ this is ISDN codec. It's calling to this MP8G^B5LDIC9fGB2d|*/-
codec checking the disk for the audio..aka commanding the audio on.
&[email protected]#S this is a IBM server command.
KV#zy3;U-uk|y[ve991K]fVI0jT4ubf_hC<Y8K8d6>Xfp<F:>a3'JMhDl +iP-y- This is the disk drive key. but missing the ip from my wii u.
I think without even fully decoding the file this may be very exploitable. (since these commands are basically linux commands) Someone could probably change the ckcd to ckusb (obviously it's not called usb in the filesave) Then delete the mpfile and add an unencrypted command. I think it will execute the command.
Also it appears it is encrypting with pycrypt. So I am working on compiling a new py program to decrypt. (still gathering keys from all over the internet)
So much work to do. Anyway just thought I would update. And now back to working on this.

 

[Helsionium]

FaTaL_ErRoR - what you're writing is total nonsense. When is this troll going to be banned, finally?

 

[WulfyStylez]

I came across quite possibly a flaw in the file save system.
It appears in the black ops 2 save game file there are unencrypted commands.
pkE@$CdckQ+ this is ISDN codec. It's calling to this MP8G^B5LDIC9fGB2d|*/-
codec checking the disk for the audio..aka commanding the audio on.
&[email protected]#S this is a IBM server command.
KV#zy3;U-uk|y[ve991K]fVI0jT4ubf_hC<Y8K8d6>Xfp<F:>a3'JMhDl +iP-y- This is the disk drive key. but missing the ip from my wii u.
I think without even fully decoding the file this may be very exploitable. (since these commands are basically linux commands) Someone could probably change the ckcd to ckusb (obviously it's not called usb in the filesave) Then delete the mpfile and add an unencrypted command. I think it will execute the command.
Also it appears it is encrypting with pycrypt. So I am working on compiling a new py program to decrypt. (still gathering keys from all over the internet)
So much work to do. Anyway just thought I would update. And now back to working on this.

Literally everything you say is 100% out-the-ass fake, please stop. You sound like me when I was a first-grader at recess claiming I 'hacked the internet'. You're just spewing random words in hopes that maybe someone will think you know what you're doing.

No game data sits decrypted on Wii U USB storage or on eMMC. End of story.

 

[yahoo]

Lol. I really hope FaTaL_ErRoR doesn't actually think these "findings" are progress of any kind.

 

[bgonev]

I came across quite possibly a flaw in the file save system.
It appears in the black ops 2 save game file there are unencrypted commands.
pkE@$CdckQ+ this is ISDN codec. It's calling to this MP8G^B5LDIC9fGB2d|*/-
codec checking the disk for the audio..aka commanding the audio on.
&[email protected]#S this is a IBM server command.
KV#zy3;U-uk|y[ve991K]fVI0jT4ubf_hC<Y8K8d6>Xfp<F:>a3'JMhDl +iP-y- This is the disk drive key. but missing the ip from my wii u.

Basicaly you are right, but for this command I think you missed:

&[email protected]#S this is a IBM server command.

..this is not IBM command - It's Hitachi USP9900V internal call for activating Copy On Write functionality and Storage based Replication..

Buahahahahaa ...