Hacking Wii U USB loading - install WiiU games to USB or internal memory

apt4893

Well-Known Member
Newcomer
Joined
Oct 19, 2016
Messages
51
Trophies
0
Age
31
XP
91
Country
Canada
ddd is dumping the game files in extracted format, not the encrypted installable packages from Nintendo servers used by WUP installer.

Ok is there a way to repackage it back to the encrypted installable packages for it to work for this? Or am I just better to download it and follow the steps?
 

pedro702

Well-Known Member
Member
Joined
Mar 3, 2014
Messages
12,722
Trophies
2
Age
33
XP
8,713
Country
Portugal
So is there a way to dump a ticket froma vc title? since there is no wuds for them the tickets dont exist im guessing, and the only way would be for someone who legit has teh game to dump their ticket right?
 

Kohmei

Well-Known Member
Member
Joined
Feb 17, 2013
Messages
824
Trophies
0
XP
1,039
Country
United States
the "SD:/install/" folder
it's not the "/install/ folder" folder
I made it bold so it's less confusing to read.


Could someone who knows the ticket format and AES explain what these changes are doing?
This is Wii format but it still applies: http://wiibrew.org/wiki/Ticket

x0000 to x0003 is the signature type which I'm guessing is different for disc and NUS. Disc is x00030004 where NUS is x00010004. IOSU probably refuses to install disc tickets to NAND so the disc ticket is invalid as is

However, both the disc and NUS ticket have the same initialization vector (which is verifiably true for the TMD files as well) causing the RSA-2048 signature (located from x0004 to x0103) to vary only by a single byte when the ticket itself (the signature type, in this case) is changed by a single byte

So, in order to generate a valid NUS ticket, you change the signature type and modify the signature accordingly, such that your new signature is what would have been generated by Nintendo for the NUS files
 
  • Like
Reactions: Cybernatus and Cyan

peteruk

Well-Known Member
Member
Joined
Jun 26, 2015
Messages
3,003
Trophies
2
XP
7,346
Country
United Kingdom
Any way to move the saves from loadiine to the newly installed digital games ?

I would like to know this too, I am told go read the Saviine thread, which is obvious, i watched some tutorials but it looks quite complex

A lot of people are going to want to do this, would be nice for a step by step
 

Nikki_swap

The Lewdest
Member
Joined
Aug 18, 2015
Messages
400
Trophies
0
Age
33
XP
594
Country
United States
found out how to use disc save data without the need of saviine, if it wasnt obvious tho:

Just copy over everything from nand to hdd before installing the game.
 

Cyan

GBATemp's lurking knight
Former Staff
Joined
Oct 27, 2002
Messages
23,749
Trophies
4
Age
46
Location
Engine room, learning
XP
15,662
Country
France
causing the RSA-2048 signatureto vary only by a single byte when the ticket itself is changed by a single byte
That's a RSA flaw? changing only one byte for another single changed bytes.

found out how to use disc save data without the need of saviine, if it wasnt obvious tho:

Just copy over everything from nand to hdd before installing the game.
It was explained on the first post.

either reading Saviine thread's first post, or loadiine thread's first post.

the "8000000x" X part is user account dependent.
You need to first dump one of your existing save to know your X value.
 
  • Like
Reactions: Ghassen-ga

Kohmei

Well-Known Member
Member
Joined
Feb 17, 2013
Messages
824
Trophies
0
XP
1,039
Country
United States
That's a RSA flaw? changing only one byte for another single changed bytes.
I don't know that much I'm afraid. I know the IV is the same, which functions basically as a seed. RSA in wikipedia does list IV-based attack vulnerabilities but it's a bit too high brow for me
 

JorgeSalgado

Well-Known Member
Member
Joined
Sep 5, 2012
Messages
107
Trophies
0
XP
112
By the way, the youtube tutorial in the original post says to press X to install the game on the USB. Is it dangerous to press A and install in the system memory? I
 

Ghassen-ga

Well-Known Member
Member
Joined
Jul 21, 2016
Messages
794
Trophies
0
XP
2,030
Country
That's a RSA flaw? changing only one byte for another single changed bytes.


It was explained on the first post.


either reading Saviine thread's first post, or loadiine thread's first post.

the "8000000x" X part is user account dependent.
You need to first dump one of your existing save to know your X value.
Thank you !
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    Psionic Roshambo @ Psionic Roshambo: Lol