Hacking Can't load up Homebrew Channel anymore after stupid mistake

Bug_Checker_

Well-Known Member
Member
Joined
Jun 10, 2006
Messages
950
Trophies
0
XP
664
Country
United States
Thanks, you read my mind was about to do another Syscheck lol

Here is the SysCheck

Region: PAL
System Menu 4.3E (v546)

Drive date: 07.12.2012
Homebrew Channel is not installed

Hollywood v0x0
Console ID: 615108632
Console Type: vWii
Shop Channel Country: United Kingdom (110)
Boot2 v0
Found 47 titles.
Found 35 IOS on this console. 0 of them are stub.

IOS9 (rev 1290): No Patches
IOS12 (rev 782): No Patches
IOS13 (rev 1288): No Patches
IOS14 (rev 1288): No Patches
IOS15 (rev 1288): No Patches
IOS17 (rev 1288): No Patches
IOS21 (rev 1295): No Patches
IOS22 (rev 1550): No Patches
IOS28 (rev 2063): No Patches
IOS31 (rev 3864): No Patches
IOS33 (rev 3864): No Patches
IOS34 (rev 3864): No Patches
IOS35 (rev 3864): No Patches
IOS36 (rev 3864): No Patches
IOS37 (rev 5919): No Patches
IOS38 (rev 4380): No Patches
IOS41 (rev 3863): No Patches
IOS43 (rev 3863): No Patches
IOS45 (rev 3863): No Patches
IOS46 (rev 3863): No Patches
IOS48 (rev 4380): No Patches
IOS53 (rev 5919): No Patches
IOS55 (rev 5919): No Patches
IOS56 (rev 5918): No Patches
IOS57 (rev 6175): No Patches
IOS58 (rev 6432): USB 2.0
IOS59 (rev 9249): No Patches
IOS62 (rev 6430): No Patches
IOS80 (rev 7200): No Patches
IOS236 (rev 65535): Trucha Bug, ES Identify, NAND Access
IOS249[56] (rev 21010, Info: d2x-v10beta52-vWii): NAND Access, USB 2.0
IOS250[57] (rev 21010, Info: d2x-v10beta52-vWii): NAND Access, USB 2.0
IOS251[58] (rev 21010, Info: d2x-v10beta52-vWii): NAND Access, USB 2.0
IOS512 (rev 7): NAND Access, USB 2.0
IOS513 (rev 1): NAND Access, USB 2.0
Report generated on 07/18/2014.

Hope this helps

EDIT2

So after much thinking and wondering if it would work I ripped the HBC forwarder (The Blue one) from my copy of my nand and installed it to my vWii and VOLIA! I have homebrew running again and to prove it here is the SysCheck

SysCheck v2.2.0 HD Edition by Double_A and R2-D2199, JoostinOnline, Nano
...runs on IOS59 (rev 9249).

Region: PAL
System Menu 4.3E (v546)

Drive date: 07.12.2012
Homebrew Channel 1.1.2 running on IOS58

Hollywood v0x21
Console ID: 615108632
Console Type: vWii
Shop Channel Country: United Kingdom (110)
Boot2 v0
Found 48 titles.
Found 35 IOS on this console. 0 of them are stub.

IOS9 (rev 1290): No Patches
IOS12 (rev 782): No Patches
IOS13 (rev 1288): No Patches
IOS14 (rev 1288): No Patches
IOS15 (rev 1288): No Patches
IOS17 (rev 1288): No Patches
IOS21 (rev 1295): No Patches
IOS22 (rev 1550): No Patches
IOS28 (rev 2063): No Patches
IOS31 (rev 3864): No Patches
IOS33 (rev 3864): No Patches
IOS34 (rev 3864): No Patches
IOS35 (rev 3864): No Patches
IOS36 (rev 3864): No Patches
IOS37 (rev 5919): No Patches
IOS38 (rev 4380): No Patches
IOS41 (rev 3863): No Patches
IOS43 (rev 3863): No Patches
IOS45 (rev 3863): No Patches
IOS46 (rev 3863): No Patches
IOS48 (rev 4380): No Patches
IOS53 (rev 5919): No Patches
IOS55 (rev 5919): No Patches
IOS56 (rev 5918): No Patches
IOS57 (rev 6175): No Patches
IOS58 (rev 6432): USB 2.0
IOS59 (rev 9249): No Patches
IOS62 (rev 6430): No Patches
IOS80 (rev 7200): No Patches
IOS236 (rev 65535): Trucha Bug, ES Identify, NAND Access
IOS249[56] (rev 21010, Info: d2x-v10beta52-vWii): NAND Access, USB 2.0
IOS250[57] (rev 21010, Info: d2x-v10beta52-vWii): NAND Access, USB 2.0
IOS251[58] (rev 21010, Info: d2x-v10beta52-vWii): NAND Access, USB 2.0
IOS512 (rev 7): NAND Access, USB 2.0
IOS513 (rev 1): NAND Access, USB 2.0
Report generated on 07/18/2014.

BUT and we have a big but here lol When I click on the forwarder channel is starts off with the scam screen!?! Have to wait for about 2 minutes for PRESS 1 to show up then it boots into HBC. Yes its a quick fix and I can homebrew again BUT would still love to be able to install HBC the right way so I still need help lol I have tried the normal way with the boot.elf file but it STILL tries to run on IOS59 even tho the quick fix way says its installed with IOS58 so would still like some help sorting this out please

Good News, so far.
So you need an IOS58-64-v6432.wad
Let's recap (for others reading this thread in future) what a wad is:
http://wiibrew.org/wiki/WAD_files
A wad in it's most basic form includes 6 parts:
header
Certificate chain
ticket
tmd
app
footer

example:
header: 0x00-0x3F = 0x40 bytes in length
00000000 00 00 00 20 49 73 00 00 00 00 0A 00 00 00 00 00
00000010 00 00 02 A4 00 00 04 90 00 1F CE 40 00 00 00 40
00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

certificate chain: 0x40-0xA3F = 0xA00 bytes in length
00000040 00 01 00 00 B3 AD B3 22 6B 3C 3D FF 1B 4B 40 77

ticket: 0xA40-0xCE3 = 0x2A4 bytes in length
00000A40 00 01 00 01 82 46 95 4E C1 3F 79 A8 4E 94 8C 80

***** Because of padding requirements of wad next file is at:
tmd:0xD00-0x118F = 0x490 bytes in length
00000D00 00 01 00 01 1D E2 F9 A0 95 C5 DC F6 EE D8 7F A1

***** Because of padding requirements of wad next file is at:
app data:0x11C0-0x1FDFFF = 0x1FCE40 bytes in length
000011C0 A9 13 2E 6A 7A 86 F0 65 58 C5 89 48 8C 3D 42 2B

footer:0x1FE000-0x1FE03F = 0x40 bytes in length
001FE000 66 69 72 6D 77 61 72 65 2E 36 34 2E 31 32 30 34

If you look at 00000A40 in an ios58 file and they include:
mostly zeros
'Root-CA00000001-XS00000003'
more zeros
'GottaGetSomeBeer'
you have a BAD wad

I can confirm that IOS58-64-v6432.wad DA033X is a bad wad w/
MD5: f4ec8b67e1d45cc40df740265235c563
SHA1: 023a55d4123942e9507be76084cc6653c7dfae0a

I would trust a zippy wad 91697558. It appears to be valid.
MD5: 1fe0b5e733a434918f1cf3dc354824be
SHA1: dc2d79530a4a31204e94bc4c41dfa38c39b3e749

More details:
In IOS58 there are 0x13(19) contents with ids starting at 0x00-0x12
Content ID's 00000000 file(which is 0x40 or 64 bytes long) when completedly unencrypted has a sha1 of:
b7ee65bd7b7e67ad2dc3f55172d7c561bcf71680
b7 ee 65 bd 7b 7e 67 ad 2d c3 f5 51 72 d7 c5 61 bc f7 16 80
which just so happens to be the sha1 of the footer of the "appears to be valid" IOS58-64-v6432.wad

There are five vwii Content files which were never on the wii:
00000001 97 3a 76 5c 69 55 eb e6 ca 04 f0 49 0e eb b3 f7 02 69 73 9a
00000002 43 cb c9 d4 51 df 62 96 21 43 47 f8 a3 33 49 b2 dd a8 43 f0
00000009 40 85 29 af c5 02 07 e6 4b 97 55 5e 43 a1 73 5e c8 5a e1 aa
0000000B e5 32 75 90 51 a4 86 be 38 5d 6a 94 85 93 d6 bd 3c 70 89 ee
00000012 5f f6 1d 1a 0c 12 88 62 23 89 ba 3e 53 64 4a f1 14 5e 22 cb
But the rest of the Content files were part of wii IOS58 v6175 (except for Content ID 00000000 which was noted above).
more to follow
 
  • Like
Reactions: TeamScriptKiddies

MartinDocNewland

Searching for the truth
OP
Member
Joined
Jul 7, 2012
Messages
594
Trophies
0
XP
491
Country
Morning! So from what I can understand lol I need to find IOS58-64-v6432.wad with the SHA1 checksum of b7ee65bd7b7e67ad2dc3f55172d7c561bcf71680
Is this the checksum of the file or something inside it?
 

Bug_Checker_

Well-Known Member
Member
Joined
Jun 10, 2006
Messages
950
Trophies
0
XP
664
Country
United States
Morning! So from what I can understand lol I need to find IOS58-64-v6432.wad with the SHA1 checksum of b7ee65bd7b7e67ad2dc3f55172d7c561bcf71680
Is this the checksum of the file or something inside it?

No you need
"I would trust a zippy wad 91697558. It appears to be valid.
MD5: 1fe0b5e733a434918f1cf3dc354824be
SHA1: dc2d79530a4a31204e94bc4c41dfa38c39b3e749 "

b7ee65bd7b7e67ad2dc3f55172d7c561bcf71680 is the sha1 of the last 64 bytes of the wad(at the very end of the wad)
 

MartinDocNewland

Searching for the truth
OP
Member
Joined
Jul 7, 2012
Messages
594
Trophies
0
XP
491
Country
No you need
"I would trust a zippy wad 91697558. It appears to be valid.
MD5: 1fe0b5e733a434918f1cf3dc354824be
SHA1: dc2d79530a4a31204e94bc4c41dfa38c39b3e749 "

b7ee65bd7b7e67ad2dc3f55172d7c561bcf71680 is the sha1 of the last 64 bytes of the wad(at the very end of the wad)


I don't know if its too early in the morning for me but what is a zippy wad? tried looking it up but could not find anything lol

EDIT

I think i found it!
 

Bug_Checker_

Well-Known Member
Member
Joined
Jun 10, 2006
Messages
950
Trophies
0
XP
664
Country
United States
I don't know if its too early in the morning for me but what is a zippy wad? tried looking it up but could not find anything lol

you looked for 2 out of 3 terms. 3 out of 4 terms assuming you looked for the filename,also.
btw, that number is not a file size.

If you think you found, it do a md5 or sha1 on the file to confirm it is the file.
 

Bug_Checker_

Well-Known Member
Member
Joined
Jun 10, 2006
Messages
950
Trophies
0
XP
664
Country
United States
Well I think I have found it, so should I use this guide: http://wiiuhax.com/wiiuhax-com-tuto...king-on-the-wii-u-step-by-step-noob-friendly/ to install it? and will this wad help me install HBC the right way?


Before you do ANYTHING else, (if it installs properly) backup your nand. You may still have other ios issues. You should exact them all and look to see if any have the bad signing problems like I mentioned earlier.
In fact, I would try to do another nand backup before you try to install the wad.
 
  • Like
Reactions: TeamScriptKiddies

MartinDocNewland

Searching for the truth
OP
Member
Joined
Jul 7, 2012
Messages
594
Trophies
0
XP
491
Country
Before you do ANYTHING else, (if it installs properly) backup your nand. You may still have other ios issues. You should exact them all and look to see if any have the bad signing problems like I mentioned earlier. In fact I would try to do another nand backup before you try to install the wad.


Ok, will do
 
  • Like
Reactions: TeamScriptKiddies

gi5431

Well-Known Member
Member
Joined
Dec 27, 2012
Messages
212
Trophies
0
Age
39
XP
478
Country
United States
I've done exactly the same thing. I really want to kick myself in the head. I installed these wads and now nothing will boot, not even through an exploit.
BC-NUS-v6.wad

Real Nand IOS/cIOS:
IOS58-64-v6176.wad
cIOS202[60]-hermesrodries-v6.wad
cIOS222[38]-hermes-v5.1.wad
cIOS223[57]-hermes-v5.1.wad
cIOS224[37]-hermes-v5.1.wad
cIOS245[37]-d2x-v10-beta53-alt.wad
cIOS246[38]-d2x-v10-beta53-alt.wad
cIOS247[53]-d2x-v10-beta53-alt.wad
cIOS248[55]-d2x-v10-beta53-alt.wad
cIOS249[56]-d2x-v10-beta52.wad
cIOS250[57]-d2x-v10-beta53-alt.wad
cIOS251[58]-d2x-v10-beta53-alt.wad
cIOS252[56]-d2x-v10-beta53-alt.wad

Has anyone got a fix or do i need to post more info?
 

Bug_Checker_

Well-Known Member
Member
Joined
Jun 10, 2006
Messages
950
Trophies
0
XP
664
Country
United States
I've done exactly the same thing. I really want to kick myself in the head. I installed these wads and now nothing will boot, not even through an exploit.
BC-NUS-v6.wad

Real Nand IOS/cIOS:
IOS58-64-v6176.wad
cIOS202[60]-hermesrodries-v6.wad
cIOS222[38]-hermes-v5.1.wad
cIOS223[57]-hermes-v5.1.wad
cIOS224[37]-hermes-v5.1.wad
cIOS245[37]-d2x-v10-beta53-alt.wad
cIOS246[38]-d2x-v10-beta53-alt.wad
cIOS247[53]-d2x-v10-beta53-alt.wad
cIOS248[55]-d2x-v10-beta53-alt.wad
cIOS249[56]-d2x-v10-beta52.wad
cIOS250[57]-d2x-v10-beta53-alt.wad
cIOS251[58]-d2x-v10-beta53-alt.wad
cIOS252[56]-d2x-v10-beta53-alt.wad

Has anyone got a fix or do i need to post more info?


Do NOT delete your cios's! READ,READ and READ some more!
Start with this thread.
Go to the pages listed and read some more.
Get as much info as possible about what you have started with and what you did and what you can do now.
Do NOT delete/install/format anything. Get as much info as possible then start a new thread.
Do not worry if you have done some of those things. Tell the forum members everything. It will be much easier to help.
 
  • Like
Reactions: TeamScriptKiddies

Cyan

GBATemp's lurking knight
Former Staff
Joined
Oct 27, 2002
Messages
23,749
Trophies
4
Age
45
Location
Engine room, learning
XP
15,649
Country
France
he might also require IOS36.

I tested to extract my wads from a FSToolbox dump using "Showmiiwads 1.5 mod v1.0" and it adds gottagetsomebeer.
I've then checked the checksum directly in the dump shared1 folder, and they don't match the expected checksum/size provided by wiimpersonator. I suppose FSToolbox didn't dump the files correctly?
I will do a dump using Maxternal's dumper and compare the files with FSToolbox dump.

How do you pack wads correctly from a dump?


edit:
the checksum matches other IOS file expected checksum.
my 00000002.app matches IOS37 but not the 00000002.app from IOS58.

it depends the order the wads are installed?
He probably will need to reinstall IOS59 to be up to date with shared content?
 

Cyan

GBATemp's lurking knight
Former Staff
Joined
Oct 27, 2002
Messages
23,749
Trophies
4
Age
45
Location
Engine room, learning
XP
15,649
Country
France
He installed wads from Wii (BC, cIOS) and he couldn't run HBC anymore.
He factory reseted WiiU (which also deleted all channels on vwii) but kept the IOS.
Thanks to cIOS 249 he still had, he managed to delete BC and unwanted cIOS.
He reinstalled IOS58 and 36 (maybe other?) but they were fakesigned so he still can't install HBC correctly. But he managed to install a Wad of HBC which display the scam screen but at least he has access to it through a fakesigned IOS58.

He wants to restore clean 58, 36, and maybe other IOS.

He found a supposedly clean IOS58. I don't know if he installed it yet.

He also try before asking, which might creates more issues. (please, ask if you can do something first)
 

MartinDocNewland

Searching for the truth
OP
Member
Joined
Jul 7, 2012
Messages
594
Trophies
0
XP
491
Country
He installed wads from Wii (BC, cIOS) and he couldn't run HBC anymore.
He factory reseted WiiU (which also deleted all channels on vwii) but kept the IOS.
Thanks to cIOS 249 he still had, he managed to delete BC and unwanted cIOS.
He reinstalled IOS58 and 36 (maybe other?) but they were fakesigned so he still can't install HBC correctly. But he managed to install a Wad of HBC which display the scam screen but at least he has access to it through a fakesigned IOS58.

He wants to restore clean 58, 36, and maybe other IOS.

He found a supposedly clean IOS58. I don't know if he installed it yet.

He also try before asking, which might creates more issues. (please, ask if you can do something first)


This is all correct lol The only IOS's i need clean are IOS36 & IOS58 all of the rest are clean. Doing another nand dump to check and yes this time i'm only doing what i'm being told lol

EDIT

The IOS58 that I found was not clean

EDIT I confused myself lol We talking about a clean IOS58 or IOS58-64-v6432 when you say I found a clean one?
 

Cyan

GBATemp's lurking knight
Former Staff
Joined
Oct 27, 2002
Messages
23,749
Trophies
4
Age
45
Location
Engine room, learning
XP
15,649
Country
France
the 91697558 is not clean, or you tried it and it didn't work?


just an idea, wouldn't it be easier to reinstall dumped files to NAND without packing a wad file? users should have a kept NAND dump before they installed anything to it. (and even better, made a new dump after each WiiU update)
Write files to shared1
updated the content.map too if needed
ticket\00000001\00000024.tik
ticket\00000001\0000003a.tik
title\00000001\0000003a\content\00000000.app
title\00000001\0000003a\content\title.tmd
title\00000001\00000024\content\00000000.app
title\00000001\00000024\content\title.tmd

it's more dangerous than installing all at once using wad?
 

MartinDocNewland

Searching for the truth
OP
Member
Joined
Jul 7, 2012
Messages
594
Trophies
0
XP
491
Country
the 91697558 is not clean, or you tried it and it didn't work?


just an idea, wouldn't it be easier to reinstall dumped files to NAND without packing a wad file? users should have a kept NAND dump before they installed anything to it. (and even better, made a new dump after each WiiU update)
Write files to shared1
updated the content.map too if needed
ticket\00000001\00000024.tik
ticket\00000001\0000003a.tik
title\00000001\0000003a\content\00000000.app
title\00000001\0000003a\content\title.tmd
title\00000001\00000024\content\00000000.app
title\00000001\00000024\content\title.tmd

it's more dangerous than installing all at once using wad?


I have not installed the 91697558 yet but the other ios58 I found yesterday I did install and that did not work. QUESTION, are IOS58 & IOS58-64-v6432 the same?
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    K3Nv2 @ K3Nv2: https://stockanalysis.com/stocks/ntdoy/market-cap/ I think they'll be alright