Hacking Reverse engineer WiiKeyU for Homebrew?

TeamScriptKiddies

Licensed Nintendo (indie) Game Developer
Member
Joined
Apr 3, 2014
Messages
1,970
Trophies
0
Age
36
Location
Planet Earth :P
XP
1,703
Country
United States
would it be possible to reverse engineer wiikeyu for establishing code execution for running homebrew on WiiU?


Hold that thought! Out of the box, no, as emokid stated above, its simply a drive emulator. However, we "could" theoretically utilize it for launching homebrew, once we are able to fakesign isos. Of course, we're a long way off from that, but if we can fakesign isos homebrew apps could be released as disc images for use with ODE's. Of course, this could easily be stamped out by an update, but just throwing it out there :P.
 

TeamScriptKiddies

Licensed Nintendo (indie) Game Developer
Member
Joined
Apr 3, 2014
Messages
1,970
Trophies
0
Age
36
Location
Planet Earth :P
XP
1,703
Country
United States
Even then, it wouldn't be much help. Fakesigning disc images (that are actually homebrew apps) seems like the only plausible way to do it with a drive emulator. Again, Nintendo could easily stamp out running fakesigned isos with an update. Remember the trucha bug scenario for the wii? Although you could restore the trucha bug on later system menus, but without a full blown exploit for Wii U mode, we wouldn't be able to restore such a bug
 

Ryanrocks462

Wii U/3DS Hacker.. Will test anything, A Pirate
OP
Banned
Joined
Jun 18, 2014
Messages
566
Trophies
0
Location
California
XP
162
Country
United States
Hold that thought! Out of the box, no, as emokid stated above, its simply a drive emulator. However, we "could" theoretically utilize it for launching homebrew, once we are able to fakesign isos. Of course, we're a long way off from that, but if we can fakesign isos homebrew apps could be released as disc images for use with ODE's. Of course, this could easily be stamped out by an update, but just throwing it out there :P.

would it possible to create a home-brew based UDE and then start developing a launcher inside that UDE ?
 

TeamScriptKiddies

Licensed Nintendo (indie) Game Developer
Member
Joined
Apr 3, 2014
Messages
1,970
Trophies
0
Age
36
Location
Planet Earth :P
XP
1,703
Country
United States
maybe but even then, fakesigning would need to play a role in this. As far as the console is concerned, it sees the drive emulator as a completely unmodified original disc drive, technically leaving all security still intact. The ODE has to compensate for the security still being there, so it has to emulate all the necessary authentication steps (one of them being to make sure the "disc" encrypted properly). An ODE launching method, isn't impossible, just impractical, but it might be a good solution for some who refuse to tamper with their Wii U firmware (which we will be able to do eventually). Again though, if you go this route, don't plan on updating your console ever again, at least until a full blown Wii U exploit is out in the open. Because if you need to re-enable running fakesigned "discs" (isos) down the road, its not going to be possible without said exploit.
 

phanteon

Well-Known Member
Member
Joined
Nov 4, 2013
Messages
468
Trophies
1
Age
34
XP
563
Country
United States
is that even for sale? cobra announced an ODE but nothing else....
i believe they are waiting for more games to come out, so it would make any sense to pirate it.

i mean, i got gw bc there's a looot of great games, but on wiiu? i have WW and pikmin collecting dust for months
 

PhyChris

Well-Known Member
Member
Joined
May 6, 2009
Messages
368
Trophies
1
XP
2,086
Country
Canada
you cant run unsigned code on the console through the wiiu disc drive. simple. i think isos are signed as well so if you modify the iso you break the signature.
 
  • Like
Reactions: Marionumber1

Relys

^(Software | Hardware) Exploit? Development.$
Member
Joined
Jan 5, 2007
Messages
878
Trophies
1
XP
1,239
Country
United States
The WiiUKey
you cant run unsigned code on the console through the wiiu disc drive. simple. i think isos are signed as well so if you modify the iso you break the signature.

Remember when Nintendo completed ****** up RSA implementation on the Wii? XD
 

Relys

^(Software | Hardware) Exploit? Development.$
Member
Joined
Jan 5, 2007
Messages
878
Trophies
1
XP
1,239
Country
United States
lol who doesn't remember xD


Sony's ECDSA "random number" implementation was funnier though. haha

If anyone who's interested in history of poorly implemented cryptography algorithms on game consoles you should check out:

Writeup on Trucha Signing Bug

KaKaRoTo's Blog on Sony ECDSA algorithm

Also, if you enjoyed the Trucha Signing bug write up you should look at how previous consoles without signature checks were hacked through game ROMs/ISOs. For example: You could softmod the Sony Placestation 2 by injecting your own .elf into a game which has 2 elf files by editing and burning a new ISO and then use swap disk method.

Console developers have gotten better at implementing cryptography, but we find other ways in, for example through web browser. ;)
 

iNFiNiTY

Well-Known Member
Member
Joined
Apr 18, 2004
Messages
709
Trophies
1
XP
472
Sony were just really bad when it came to disc swapping for some reason... even Saturn was secure years before... and PSP had a memory stick swap method very early on! I bet if you could mod a PSP to have a different UMD loader and we could actually burn them you could probably swap them too.. poorly encrypted isn't even the word for simply having the decrypted executable right in the directory with the encrypted one... wtf was that?
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    S @ salazarcosplay: how are you @SylverReZ