Hacking Crash WiiU via browser. Exploitable?

Status
Not open for further replies.

ChrisX930

Banned!
OP
Banned
Joined
Sep 3, 2013
Messages
788
Trophies
0
Location
Germany
XP
458
Country
Gambia, The
Hey Guys,

today I installed Plex (Media Server) on my PC to stream Movies and Animes on my Wii U.
All Videos works fine, but one of them crash my Wii U.
I thought: "Can I replicate this crash?" and "is it exploitable?"
If I try this video on a other PC, it works, but the Wii U always crash on it.
I'm not able to get back to the WiiU-Menü again. I have to hardreset my Wii U.

I uploaded a Video to show you this crash.

What do you think? Is it exploitable?
Current Firmware: 5.1.2E
It works with Firmware: 5.2.0, too!



After some time, I'll get some glitchy thing on the Wii U Gamepad.
QGZZbcK.png

Thanks to Blayd for this picture


Heres a Video that shows you that it works on PC, but it crashes on Wii U


EDIT:
And yea, if you want to replicate this crash, you should try it with the file I used.
You can download the Video HERE, (~70kb)
After you downloaded it, install PLEX on your PC, place the video into the library and open it on your WiiU
 

TeamScriptKiddies

Licensed Nintendo (indie) Game Developer
Member
Joined
Apr 3, 2014
Messages
1,970
Trophies
0
Age
36
Location
Planet Earth :P
XP
1,703
Country
United States
Lets see some code execution w00t! Nice discovery ChrisX930. Marionumber1 Chadderz NWPlayer123 are you seeing this?

EDIT: It looks like this exception is not being handled in any way shape or form by any aspect of the Wii U's security :). Now that this is out in wild, I don't recommend anyone download the next update whenever Nintendo rolls it out. I betcha they're going to try like hell to stamp this out.
 
  • Like
Reactions: ChrisX930

ChrisX930

Banned!
OP
Banned
Joined
Sep 3, 2013
Messages
788
Trophies
0
Location
Germany
XP
458
Country
Gambia, The
Are you trying to tell me that god damned anime is helping to hack the Wii U? This is unacceptable.

It's not the anime itself! XD
It's only the Video. I'm not sure why it crashes :/
On other videos that wouldn't work on WiiU, I only get a message that the video cannot be played (or something, my wii u isn't in english).
 

TeamScriptKiddies

Licensed Nintendo (indie) Game Developer
Member
Joined
Apr 3, 2014
Messages
1,970
Trophies
0
Age
36
Location
Planet Earth :P
XP
1,703
Country
United States
Are you trying to tell me that god damned anime is helping to hack the Wii U? This is unacceptable.


LOL its likely something to do with the header info, or perhaps the file size or something else that the Wii U just simply cannot handle. It has nothing to do with it being an anime XD.

ChrisX930 can you make sure you backup that exact video file in like a dozen places so you don't lose it. More examination is needed to be done to figure out whats happening here (whats causing the crash) and to see how we can proceed with tweaking it for code execution :). Just don't share the actual file itself with others of course, because it would be a copyright violation and would likely be DMCA'd and EUCD'd to death. The end user could always recreate the crash with his/her own video collection once we pinpoint whats causing the crash. It would only require some tweaking once we know whats going on. And that way, we don't have to worry about lawsuits etc lol. We want LEGAL exploits, not illegal haha

EDIT: What we really need is the experts I tagged above to weigh in on this. I'm sure they would be a lot more helpful putting these puzzle pieces together then myself :P. But nonetheless, I'm willing to lend a hand as much as I can. I want full blown cafeos kernel access too :). If you just found yet another webkit exploit for later firmwares, this brings us a step closer to making that a reality :).
 

ChrisX930

Banned!
OP
Banned
Joined
Sep 3, 2013
Messages
788
Trophies
0
Location
Germany
XP
458
Country
Gambia, The
LOL its likely something to do with the header info, or perhaps the file size or something else that the Wii U just simply cannot handle. It has nothing to do with it being an anime XD.

ChrisX930 can you make sure you backup that exact video file in like a dozen places so you don't lose it. More examination is needed to be done to figure out whats happening here (whats causing the crash) and to see how we can proceed with tweaking it for code execution :). Just don't share the actual file itself with others of course, because it would be a copyright violation and would likely be DMCA'd and EUCD'd to death. The end user could always recreate the crash with his/her own video collection once we pinpoint whats causing the crash. It would only require some tweaking once we know whats going on. And that way, we don't have to worry about lawsuits etc lol. We want LEGAL exploits, not illegal haha

Hahahahaha xD Yea, you're right :D
I have some copys of the video and I'll not lose it :D
It would be great if we can get some great things working with it :)
If you need more information or something, feel free to ask me.
 
  • Like
Reactions: TeamScriptKiddies

TeamScriptKiddies

Licensed Nintendo (indie) Game Developer
Member
Joined
Apr 3, 2014
Messages
1,970
Trophies
0
Age
36
Location
Planet Earth :P
XP
1,703
Country
United States
Hahahahaha xD Yea, you're right :D
I have some copys of the video and I'll not lose it :D
It would be great if we can get some great things working with it :)
If you need more information or something, feel free to ask me.



Well for one, whats the (exact) file size of that video? As for plex I'll need to set that up here at home XD. We need to start ruling stuff out.
 

TeamScriptKiddies

Licensed Nintendo (indie) Game Developer
Member
Joined
Apr 3, 2014
Messages
1,970
Trophies
0
Age
36
Location
Planet Earth :P
XP
1,703
Country
United States
Sure, but Not for firmware 5.1.2(E).
Filesize: 225525 KByte

hmmmm i'll have to see if i can get plex set up and make a dummy video file of that exact file size to see if i can recreate it. Unfortunately, I'm on 5.0.0U so I'm not sure we'll end up with the same result but its worth a shot.
 

ChrisX930

Banned!
OP
Banned
Joined
Sep 3, 2013
Messages
788
Trophies
0
Location
Germany
XP
458
Country
Gambia, The
hmmmm i'll have to see if i can get plex set up and make a dummy video file of that exact file size to see if i can recreate it. Unfortunately, I'm on 5.0.0U so I'm not sure we'll end up with the same result but its worth a shot.
I don't think that the Crash caused by the filesize. I'm able to Play Videos with more Kbytes.
Possibly it's because the Header or the fileformat?
 
Status
Not open for further replies.

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • BigOnYa @ BigOnYa:
    South Park is great cause they always touch on relavent issues going on today, and make something funny out of it.
    +3
  • S @ salazarcosplay:
    @BigOnYa were you always up to date on the current events and issues of the time or were there issues that you first found out thru south park
  • BigOnYa @ BigOnYa:
    Most of the time yea I knew, I watch and read the news regularly, but sometimes the Hollywood BS stuff, like concerning actors slip by me. I don't follow most Hollywood BS (example: the Kardasians)
    +2
  • S @ salazarcosplay:
    @BigOnYa there were relevant issues before south park was made, that's why i think a south park prequel/spinoff would be great. Randy and his friends in their child hood
    +1
  • BigOnYa @ BigOnYa:
    Yea, like them running in high school together, getting into stuff, and how they got hitched and had kids. And how the town of South Park was back then compared to now. That would be cool to see.
  • BakerMan @ BakerMan:
    yeah
  • The Real Jdbye @ The Real Jdbye:
    @salazarcosplay if they made a prequel, it would still be about current issues, cause it doesn't make sense to make it about stuff that happened 30 years ago that nobody cares about anymore
  • The Real Jdbye @ The Real Jdbye:
    it's too late
  • The Real Jdbye @ The Real Jdbye:
    the older south park episodes about particular issues usually age poorly since the topic is no longer relevant
  • The Real Jdbye @ The Real Jdbye:
    an exception is giant douche vs turd sandwich, that's always relevant :P
    +1
  • K3Nv2 @ K3Nv2:
    I was gone for like an hour and none of you thought to write or call pos
  • BigOnYa @ BigOnYa:
    We knew you were going to Sonic to get lunch.
  • K3Nv2 @ K3Nv2:
    Sonics fast I would've been home in 10 mins
  • BigOnYa @ BigOnYa:
    Meet and greet with AncientBoi then?
  • K3Nv2 @ K3Nv2:
    That would've gone slow he's old
    +1
  • ZeroT21 @ ZeroT21:
    sadly the person in question feels too young for his own good
  • K3Nv2 @ K3Nv2:
    We don't question people
  • ZeroT21 @ ZeroT21:
    me neither, i just bash them
  • K3Nv2 @ K3Nv2:
    We just question @AncientBoi
  • ZeroT21 @ ZeroT21:
    it wasn't a question, it was fact
  • BigOnYa @ BigOnYa:
    He said he had 3 different doctors apt this week, so he prob there. Something about gerbal extraction, I don't know.
    +1
  • ZeroT21 @ ZeroT21:
    bored, guess i'll spread more democracy
  • LeoTCK @ LeoTCK:
    @K3Nv2 one more time you say such bs to @BakerMan and I'll smack you across the whole planet
  • K3Nv2 @ K3Nv2:
    Make sure you smack my booty daddy
    +1
    K3Nv2 @ K3Nv2: Make sure you smack my booty daddy +1