Hacking Wii U Hacking & Homebrew Discussion

  • Thread starter Thread starter filfat
  • Start date Start date
  • Views Views 5,079,673
  • Replies Replies 21,104
  • Likes Likes 29
I have a different question. I don't know if it was answered somewhere or not but, just for my curiosity. Is the webkit exploit somehow related to the kernel or iosu exploits? or are those a totally separate thing? I guess you have to perform the webkit exploit to gain access to the kernel one or thats not the case?
Or you don't want to tell such details by now :P
Kernel and IOSU exploits are separate projects, but yes, this webkit exploit is the first step needed to launch those exploits.
 
  • Like
Reactions: pelago
I have a different question. I don't know if it was answered somewhere or not but, just for my curiosity. Is the webkit exploit somehow related to the kernel or iosu exploits? or are those a totally separate thing? I guess you have to perform the webkit exploit to gain access to the kernel one or thats not the case?
Or you don't want to tell such details by now :P

The WebKit exploit is necessary to gain initial code execution on the system, but it will only give us that in userspace. Once we can run unsigned code in userspace, it's possible to use another exploit (kernel or IOSU) to break out of userspace and gain higher permissions.
 
  • Like
Reactions: pelago
I have a different question. I don't know if it was answered somewhere or not but, just for my curiosity. Is the webkit exploit somehow related to the kernel or iosu exploits? or are those a totally separate thing? I guess you have to perform the webkit exploit to gain access to the kernel one or thats not the case?
Or you don't want to tell such details by now :P
Think of the Webkit exploit as just being able to do anything at all. The Webkit exploit sets up and loads the kernel exploit which does its magic, and installs stuff that other programs can use, then kicks you out to map some memory stuff for coreinit and the loader. Then you can use the Webkit exploit again to install Cafiine, which does its own magic replacing functions in coreinit, and then controlling any game you boot. The Webkit is just our hole to get in to do stuff.
 
  • Like
Reactions: pelago
(In no relation to the current conversation.)

Recommended reading on how AES works: http://www.adamberent.com/documents/aesbyexample.pdf

That's what I'm referencing to code my tools. It has everything you need, except explanations on the different modes. e.g. CBC (Cipher Block Chaining) which is what Nintendo uses on Wii U software. But I know how that works.
 
  • Like
Reactions: Cyan
That being said, wasn't the kernel exploit planned to be released with webkit one? Does that mean we might get in a day or two?
listen here, maybe if you (and all others asking about releasing) stop bothering the devs about it, they do not have to spend time to answer you all every single time and can spend more time on the actual exploits...i think you agree that is what matters the most..
 
how will you when you're blocked from doing stuff in usermode? are there certain things that if owill just do nothing? is kernel access it's own deal entirely? or do you still use build.py and just run different c projects? it's still ppc right?
 
(In no relation to the current conversation.)

Recommended reading on how AES works: http://www.adamberent.com/documents/aesbyexample.pdf

That's what I'm referencing to code my tools. It has everything you need, except explanations on the different modes. e.g. CBC (Cipher Block Chaining) which is what Nintendo uses on Wii U software. But I know how that works.
https://tls.mbed.org/
https://tls.mbed.org/api/aes_8h.html
just use a library to avoid unnecessary work :)
 
how will you when you're blocked from doing stuff in usermode? are there certain things that if owill just do nothing? is kernel access it's own deal entirely? or do you still use build.py and just run different c projects? it's still ppc right?

The PPC kernel exploit is just another libwiiu application running in userspace, which exploits a bug in the kernel to install memory access syscalls. Once we have these syscalls, any userspace code can use them to do whatever they want to memory, with kernel permissions.
 
So...
I just tried running Pong and Hello World twice from wiiulib.arndroid.nl...
None of them boot.

If this helps, I'm on 5.3.2U with OpenDNS for blocking purposes.

All I get is just a crash in the browser with a white screen on the TV and the Gamepad frozen loading payload532.html.
Any reason why that happens?
 
So...
I just tried running Pong and Hello World twice from wiiulib.arndroid.nl...
None of the boot.

If this helps, I'm on 5.3.2U with OpenDNS for blocking purposes.

All I get is just a crash in the browser with a white screen on the TV and the Gamepad frozen loading payload532.html.
Any reason why that happens?
Dunno, but for me, it's a black screen on tv with no signal detected and the WiiU gamepad image stuck on loading payload 5.3.2 :P
 
  • Like
Reactions: ShadowOne333
Me too same on 5.3.2 E when loading the payload.
Sometimes block on a white screen, sometimes block on black screen (my TV said changed resolution).
 
Because the 5.3.2 exploit is not totally reliable and I did make this clear. It works reasonably well for most of us, especially when testing locally, but that's not necessarily applicable to other people using it from a remote server.
Fair enough XD
 
listen here, maybe if you (and all others asking about releasing) stop bothering the devs about it, they do not have to spend time to answer you all every single time and can spend more time on the actual exploits...i think you agree that is what matters the most..

Hey E. Long time no see. I miss you man.

Just my little rebuttal. The dev's do not have to look on these forums and read the newest posts. TT did not bother much with the forums while they were working on the wii, they instead kept developing. No one is forcing these dev's to respond to posts or to even read them. Maybe they want to take a break from the tedious developing every once in a while so they choose to go to the forums. I feel that it is bad on their part to spend so much time on the forums bc all these other people really put the pressure on them and they feel that they have to make deadlines and such. But TT didn't say much at all until they finally came out with their first exploit and HBC. These devs probably should have done the same and maybe would have been further along by now without wasting so much time in the forums answering the same questions. But to each his own, and I can understand them wanting to take a break every 15 mintutes or so from coding and analyzing bc it can be hard on the mind.

TL;DR
Don't blame to community for what the devs have allowed themselves to do.

P.S. Did I mention I miss chatting with you. Those were good times back then. Do you have an IRC # that you frequent anymore?
 
  • Like
Reactions: Etheboss and bache
Still gonna do it for practice and fun.

If you want to practice, why not make a WUD2udf program? Convert a WUD image into an udf image as identical to the original layout/time stamps/etc. as possible. You can then use any standard tool to manipulate the WUD image/extract files/etc. since it's now a standard UDF image.
 
  • Like
Reactions: ChrisMurray
Or create a custom WBFS format for Wii U discs so it doesn't take up so much storage space. Also, being able to pack files into one. Kinda like Wiimm's ISO Tools does.
That I'm looking forward to. :D
Would be neat if I could store my whole Wii U/Wii/NGC collection in one HDD...

Without the format nag. :P
 
  • Like
Reactions: 2Hack
That I'm looking forward to. :D
Would be neat if I could store my whole Wii U/Wii/NGC collection in one HDD...

Without the format nag. :P
this would be very nice so i can store all my wii/wii u games on one drive. i dont like hearing my ROM drive spinning when i load up a disk base game
 

Site & Scene News

Popular threads in this forum