Hacking Wii U Hacking & Homebrew Discussion

[LawnMeower]

There is no writable code area, unless you map it in the 0xA0000000 area or change the permissions of the 0x01000000 area.

i mean in the 10 (not 01) range but i think it's read/write only. non executable

 

[Onion_Knight]

okay. I'm confused as to the process to getting the codehandler on the wii u. I compile the code for handler from the pygecko github. It generates the shellcode? that I need to put where?

 

[Marionumber1]

i mean in the 10 (not 01) range but i think it's read/write only. non executable

Exactly, the 10 range doesn't have code.

 

[Pounou]

I have injected my first custom level in new super mario. Thanks to everyone who make this possible : all people behind kernel exploit, cafiine, reggienext and tcpgeko ! Thanks also to golden45, markus95, wj44, mr ream and Vinscool to help me for setup and use all this tool.

 

[Samwix]

I haven't read the topic for a looo(...)oong (July) so what happened on Wii U scene? Any exploit? Any backup loader?

 

[deformyer]

I haven't read the topic for a looo(...)oong (July) so what happened on Wii U scene? Any exploit? Any backup loader?

Userland+kernel exploit until fw 5.3.2. File replacement and RAM editing is possible, no backup loaders yet.

 

[LawnMeower]

Exactly, the 10 range doesn't have code.

Will there ever be a kernel exploit mapping the 01 range as writable?

 

[BullyWiiPlaza]

[...] if you use the pyGecko script interactively, you can use OSEffectiveToPhysical() to check if an address is mapped (if not, it will return 0).

Any guides on doing an interactive pyGecko session so that I can keep invoking the OSEffectiveToPhysical() command to figure out the memory bounds of a game? Sure, I need to run the kernel exploit and pyGecko installer but then what on the computer? Either way, is there a wiiubrew wiki page dedicated to this? If not, it should be made.

 

[OreNPluS]

someone update the main post, the latest online frimwere right now is 5.5.0

 

[soniczx123]

The japanese seem to have figured out File Replacement as well... @soneek

 

[nastys]

Just found some tools left in game files (.exe and .bat). They seem to convert .csv to .bin and probably also .wav to a nintendo proprietary file audio format, but i can't get them to work as now.
I'm sure it's copyrighted material so i can't share it here, but if anyone it's interested it's located on PartyU game files at content/sound/...
Tell me if you need more infos

Please send me the links to the HTML files you used for the exploit, the codehandler and the version of Gecko dNET you used, because mine don't work with Wii Party U...

 

[wj44]

No, It doesn't include the FSA Fix.

FSA Tab works now too.

 

[Pounou]

FSA Tab works now too.

works great thks

 

[LawnMeower]

FSA Tab works now too.

awesome!

Will we see breakpoints anytime soon?

 

[Mega-Mew]

awesome!

Will we see breakpoints anytime soon?

Also need the GCTWizard for use ASM code !
Great work wj44 !

 

[nastys]

FSA Tab works now too.

Source code?

 

[wj44]

awesome!

Will we see breakpoints anytime soon?

maybe?(I don't know yet).

Also need the GCTWizard for use ASM code !
Great work wj44 !

See answer above.

Source code?

https://github.com/wj444/tcp-gecko-dotnet

 

[Lory171]

Please send me the links to the HTML files you used for the exploit, the codehandler and the version of Gecko dNET you used, because mine don't work with Wii Party U...

I used the kexploit and codehandler hosted by wj44 (http://wj44.bplaced.com), the version of GeckodotNET that support FSA posted here many times. Just make sure to run the codehandler outside of the game and get the FSA while you are on a menu inside a minigame. If you try getting it while a file is used by the game it will crash.

 

[nastys]

I used the kexploit and codehandler hosted by wj44 (http://wj44.bplaced.com), the version of GeckodotNET that support FSA posted here many times. Just make sure to run the codehandler outside of the game and get the FSA while you are on a menu inside a minigame. If you try getting it while a file is used by the game it will crash.

Thanks, I'll try

EDIT: it worked

 

[BullyWiiPlaza]

@wj44
Can you please make the default address range for the search tab to be 10000000 to 45000000 (or something similarly high)?