Hacking WiiU new error bsod

[air2004]

That was hard.

 

[Master0fBlunt]

It doesnt look useful but its the first ive seen. Look at date of post, then look at this:

Was in hctdm lobby on blops2, then wii froze solid, then that.

 

[lismati]

Wow. What triggered that? This is an unhandled exception, and is really interesting from a hacker standpoint. I think people like Marionumber1/Chadderz should look at this

 

[Master0fBlunt]

Wow. What triggered that? This is an unhandled exception, and is really interesting from a hacker standpoint. I think people like Marionumber1/Chadderz should look at this

I know, im upset i found it in the wild and not in a coontrolled setting, i dont have the skill or equipment to make a dump either. All i know was that I was in a multiplayer hardcore tdm lobby in black ops 2, i touched everything so its hard to tell what the trigger was. I was in a party, i changed my emblem, i played regular tdm, i was lookin at stats, everything. I dont really recall but im fairly sure it was about to load the prematch map load screen.


Edit: it froze in the lobby, i was using a pro controller. I was button spamming i think the game start timer was beeping and i was spamming b to get out of a menu or something iuhno, i got too excited and lost track of a few details

 

[Master0fBlunt]

And thanks whoever submitted my ip to "stopforumspam.com" and tryed to ban my ip from gbatemp. Guess you didnt see the part where i said im on an htc m8, so its not like i dont get a new ip every time i turn my phone on. I just want to know what would drive someone to do that to someone trying to share something.

 

[Sicklyboy]

And thanks whoever submitted my ip to "stopforumspam.com" and tryed to ban my ip from gbatemp. Guess you didnt see the part where i said im on an htc m8, so its not like i dont get a new ip every time i turn my phone on. I just want to know what would drive someone to do that to someone trying to share something.

If we wanted to ban you we would have just... banned you.

The IP your phone cycled to must be one that was on the blacklist already. Because, you know, you get a new IP quite often on phones. You're likely not the only person to have ever used that one.

You've got a lot of balls to come here and ask for help and then act like a douchebag when things don't go your way.

 

[GorTesK]

does your wiiu still boot up normaly? if yes, do you THINK you could recreate this, even if you say, that it was pretty much random?
just tagging the before mentioned people, so they actually see this, maybe they can shed some light on it, what it actually means
Marionumber1 Chadderz

 

[Master0fBlunt]

does your wiiu still boot up normaly? if yes, do you THINK you could recreate this, even if you say, that it was pretty much random?
just tagging the before mentioned people, so they actually see this, maybe they can shed some light on it, what it actually means
Marionumber1 Chadderz

Yep boots up fine, nothing seems out of place. I might try to do it purposely but im not expecting much. Honestly gunna wait for mario or or chad to tell me whether its worth button mashing for hours lol.

 

[Master0fBlunt]

If we wanted to ban you we would have just... banned you.

The IP your phone cycled to must be one that was on the blacklist already. Because, you know, you get a new IP quite often on phones. You're likely not the only person to have ever used that one.

You've got a lot of balls to come here and ask for help and then act like a douchebag when things don't go your way.

Except my ip didnt change since my last post, so theres that.
And no, i do not have balls.
And im trying to contribute. My wiiu works just fine so no help needed from me....

Now before another interesting forum topic gets lost in a petty little spat, can we focus on the issue. Weve established im not a spammer and nobody reported my ip. There, moving on....

 

[jonthedit]

Except my ip didnt change since my last post, so theres that.
And no, i do not have balls.
And im trying to contribute. My wiiu works just fine so no help needed from me....

Now before another interesting forum topic gets lost in a petty little spat, can we focus on the issue. Weve established im not a spammer and nobody reported my ip. There, moving on....

Yes. Glad to see it
The stack dump may have value, no way to tell without digging into it, send it over to Chadderz

 

[OncleJulien]

rarely has anyone asked so much, yet given so little.

 

[TeamScriptKiddies]

It doesnt look useful but its the first ive seen. Look at date of post, then look at this:

Was in hctdm lobby on blops2, then wii froze solid, then that.

Register addresses wiiiiiiiiiii .

 

[NWPlayer123]

Hey, <this> produced a crash dump. Can we exploit it even though we have no way to control data to actually have code execution happen?
IDK why you're pinging MN1 and chadderz, they can't do anything with this. If you really wanted to use this, send it to Treyarch, they could debug the game to see what crashed (what all that data is) but that's about it

 

[TeamScriptKiddies]

Hey, <this> produced a crash dump. Can we exploit it even though we have no way to control data to actually have code execution happen?
IDK why you're pinging MN1 and chadderz, they can't do anything with this. If you really wanted to use this, send it to Treyarch, they could debug the game to see what crashed (what all that data is) but that's about it

well theoretically, if the cause of the crash can be determined (not an easy task, by any means), if we can find a way to reallocate the ram being used by the game, we could inject our own code of sorts to take its place. I would imagine that games have permission to access usb mass storage devices (since you can run eshop games off a usb), this would give us an advantage over the current browser exploit. It might even be what we could run our injected code off of.

Of course, this being said, we would still be in a "sandbox" of sorts with whatever permissions the game has for now, but maybe we could at least get some decent homebrew going this way. I mean this exploit (like the browser exploit, and the twilight hack on the original wii) would have to be run EVERY single time you want to launch a homebrew app, it could give us an advantage over what we have now.

If somebody from that point on could find a bug in the code somewhere to escalate privileges, maybe we could (eventually) gain full kernel rights over cafeOS. Even if we don't end up with a full blown kernel exploit for cafeOS via this method, its a step up from what we're capable of doing now.

Master0fBlunt do you think you could try and recreate this and capture it on video so we can all see exactly how you pulled it off? I think this is definitely worth looking into....

 

[Master0fBlunt]

im game. Not promising anything though, like i said its in the wild. Everybody start playing blops for hacks sake! lol

 

[gudenau]

Just need wireshark, eh?

Edit:
Anyone know if the game uses SSL? (It *should*, have to ask)

 

[Master0fBlunt]

Been trying for hours, nothin

 

[TeamScriptKiddies]

Hmmmmm well we appreciate your efforts. Perhaps somebody else with thhis game could also experiment with this. I mean it "should" be recreatable in theory...

Been trying for hours, nothin

 

[Duo8]

Hmm... Isn't this the built-in error screen in BLOPS2?

Anyone remember that exploit in SMW where you can reprogram the game live through inputs?

 

[nonameboy]

I have this game just tell me what I can do. I wanna help