Hacking Wii U Hacking & Homebrew Discussion

[VinsCool]

...I feel like we need separate threads for homebrew development/discussion and actual discussion of system exploitation/hacking.

Sorry about that That wasn't meant for offtopic.

 

[FPSRussi4]

...I feel like we need separate threads for homebrew development/discussion and actual discussion of system exploitation/hacking.

We should wait until we can LAUNCH the homebrew to open a new thread/category.

 

[WulfyStylez]

We should wait until we can LAUNCH the homebrew to open a new thread/category.

The issue is that homebrew isn't a thing yet, and all the theoretical talk of homebrew clouds up people talking about actual things they're presently working on/trying to get help with.

 

[FPSRussi4]

The issue is that homebrew isn't a thing yet, and all the theoretical talk of homebrew clouds up people talking about actual things they're presently working on/trying to get help with.

Fair; I don't understand why we're talking about WHAT we're going to do, since the way to do it is not available yet. People should have learned by now that they should announce things once they're either started work on or are relevant. And it shouldn't be done here.

To quote Filfat(Creator of thread):
This thread is created for us Hackers/Developers to discuss possible hacking vectors and possibly in the future enable real homebrew. The exploit is currently almost completely useless if not fully useless for the normal consumer, however check back here often we will sooner or latter find a Kernel exploit and developer a Homebrew launcher(Probably Kernel Exploit before launcher, but I can be wrong). Under this block of text so will you find useful information, if you want something added please contact me either via this topic (if its relevant to the discussion) or via PM. Have a nice discussion

 

[Onion_Knight]

I think you're right, actually! I'll look into it.



Download all the titles too. If you have the tmd, cetk, and all the titles in the same folder, CDecrypt will decrypt and sort all the files from the titles for you. Then you'll have all the system binaries with proper names and such.

I'm using the NUS downloader and it's downloading all the titles. It spits out my title version, count, encrypted key, titled id, and decrypted title key. Than says:

"I'm getting a Failed to open content: C750119E"

 

[WulfyStylez]

Fair; I don't understand why we're talking about WHAT we're going to do, since the way to do it is not available yet. People should have learned by now that they should announce things once they're either started work on or are relevant. And it shouldn't be done here.

Yyyyep. Anyways, when I get a chance (doing FFXIV static stuff tonight, woohoo I guess) I'd like to go through and make a proper title ID database for Wii U system stuff. I know people have started these, but they almost always have a lot of gaps.

I'm using the NUS downloader and it's downloading all the titles. It spits out my title version, count, encrypted key, titled id, and decrypted title key. Than says:


"I'm getting a Failed to open content: C750119E"

You need the title 'C750119E' in the same folder as CDecrypt.

 

[FPSRussi4]

Yyyyep. Anyways, when I get a chance (doing FFXIV static stuff tonight, woohoo I guess) I'd like to go through and make a proper title ID database for Wii U system stuff. I know people have started these, but they almost always have a lot of gaps.

That'll come in handy later for sure, for identifying game rips and cheats and whatnot.

 

[WulfyStylez]

That'll come in handy later for sure, for identifying game rips and cheats and whatnot.

I said "for Wii U system stuff" as a list of game title IDs already exists and people think they can use it for piracy I guess? I need mine for reference for reverse engineering and stuff.

 

[Onion_Knight]

Yyyyep. Anyways, when I get a chance (doing FFXIV static stuff tonight, woohoo I guess) I'd like to go through and make a proper title ID database for Wii U system stuff. I know people have started these, but they almost always have a lot of gaps.



You need the title 'C750119E' in the same folder as CDecrypt.

screen capture of what I'm getting from NUSD v1.9. Maybe I compiled it incorrectly?

 

[WulfyStylez]

screen capture of what I'm getting from NUSD v1.9. Maybe I compiled it incorrectly?

Your common key might not be right. Make sure its MD5 is A243BC56DA48BD4EB55C726ECD758D49.

 

[Onion_Knight]

Your common key might not be right. Make sure its MD5 is A243BC56DA48BD4EB55C726ECD758D49.

A243BC56DA48BD4EB55C726ECD758D49 is a direct match. Can you download 000500101000400A from nus and dump the md5s for the tmd and cetk. It might be something that is happening during the download.

 

[WulfyStylez]

TMD: 08A6B04F4768B673C2A534806AD1D95D
CETK: 86221DEB0D2C2DDBDF034AA7319BA88C
Make sure you're pulling the right tmd. It'd be tmd.version, probably tmd.11464 if you're pulling the newest.

 

[Onion_Knight]

TMD: 08A6B04F4768B673C2A534806AD1D95D
CETK: 86221DEB0D2C2DDBDF034AA7319BA88C
Make sure you're pulling the right tmd. It'd be tmd.version, probably tmd.11464 if you're pulling the newest.

TMD: 6C28C095AC99B8F9C2FBE752B739FF1D
TMD.11464: 6C28C095AC99B8F9C2FBE752B739FF1D
CETK: 86221DEB0D2C2DDBDF034AA7319BA88C


Seems my TMD is not matching....so its a NUS issue

 

[Bug_Checker_]

TMD: 6C28C095AC99B8F9C2FBE752B739FF1D
TMD.11464: 6C28C095AC99B8F9C2FBE752B739FF1D
CETK: 86221DEB0D2C2DDBDF034AA7319BA88C


Seems my TMD is not matching....so its a NUS issue

Just download it manually. It's most likely a bug in NUSD v1.9

 

[WulfyStylez]

Just download it manually. It's most likely a bug in NUSD v1.9

+1, this is what I do.

 

[Bug_Checker_]

+1, this is what I do.

Also boot1(1 megabit/128kb) is available on NUS but it is an ancast image similiar to fw.img

Oh and it is difficult to use CDecrypt to decrypt(boot1/0005001010000100) so use openssl.

Also wiiubrew title database does not list v8354 from update 4.0.0(ContentID 00000007)

 

[WulfyStylez]

Also boot1(1 megabit/128kb) is available on NUS but it is an ancast image similiar to fw.img

Yeah, I was about to mention that I'd figured that out. I mean, there's no reason for it not to be an ancast image since it gets plopped straight onto NAND probably. Oh well.

 

[Onion_Knight]

Just download it manually. It's most likely a bug in NUSD v1.9

How does one go about downloading it manually? I feel like the idiot of the thread right now...

 

[Onion_Knight]

Also boot1(1 megabit/128kb) is available on NUS but it is an ancast image similiar to fw.img

Oh and it is difficult to use CDecrypt to decrypt so use openssl.

I go CDecrypt working without issues, well if my tmd was right.

 

[WulfyStylez]

How does one go about downloading it manually? I feel like the idiot of the thread right now...

I answered this privately in a bit more detail, but for the sake of not keeping stuff needlessly private:
To grab stuff from NUS, the URL format is: http://nus.cdn.shop.wii.com/ccs/download/TITLEID/TITLE
for cetk, just request cetk at the end instead. for tmds, specify tmd.version, where version is decimal.