Hacking Eshop wii games Brazilian exploit

sammikins_th3_kitt3n

♾️Neurodivergent🏳️‍⚧️trans🍼crinklefur
OP
Member
Joined
Jul 28, 2012
Messages
279
Trophies
1
XP
1,955
Country
Canada
Has anyone tried to backup the tickets for a Wii game on the eshop. I ask because I had skyward sword the Nintendo banned me from eshop and I can't redownload it. I would like to be able to play again.i have Mario galaxy for testing if someone wants to explain how to get eshop tickets with the wupclient and modified fw.img
 
Last edited by sammikins_th3_kitt3n,

Kafluke

Well-Known Member
Member
Joined
May 6, 2006
Messages
5,474
Trophies
0
Age
47
XP
4,636
Country
United States
Has anyone tried to backup the tickets for a Wii game on the eshop. I ask because I had skyward sword the Nintendo banned me from eshop and I can't redownload it. I would like to be able to play again.i have Mario galaxy for testing if someone wants to explain how to get eshop tickets with the wupclient and modified fw.img
You cant.
 

nexusmtz

Well-Known Member
Member
Joined
Feb 17, 2016
Messages
1,386
Trophies
0
XP
1,425
Country
United States
Has anyone tried to backup the tickets for a Wii game on the eshop. I ask because I had skyward sword the Nintendo banned me from eshop and I can't redownload it. I would like to be able to play again.i have Mario galaxy for testing if someone wants to explain how to get eshop tickets with the wupclient and modified fw.img

w.dldir("/vol/system_slc/rights/ticket/apps/")

I haven't had any reason to use it yet though, and I don't quite understand how it will help.
 

xtheman

Well-Known Member
Member
Joined
Jan 28, 2016
Messages
5,837
Trophies
0
Location
???
XP
3,790
Country
United States
w.dldir("/vol/system_slc/rights/ticket/apps/")

I haven't had any reason to use it yet though, and I don't quite understand how it will help.
I think that is for eshop. Won't work on other consoles.

Here are my notes on dumping disc tickets to convert to eshop
Now, edit wupclient.py in iosuhax/wupserver/ with your Wii U's IP address. If you don't know your Wii U's IP address, You can get it from the internet browser with dev features on.
Code:

def __init__(self, ip='192.168.1.115', port=1337):

Do not change the port

Startup wupclient by going into the iosuhax/wupserver/ directory, shift+right click -> open command window, and then type: python -i wupclient.py

You should be given a couple short lines that look something like this:
Code:

E:\iosuhax\wupserver>python -i wupclient.py
0x43B38
0x0
0x0
>>>

You are now connected to your wupserver. Insert a game disc and type the following commands, separately, into this command prompt:

Code:

mount_odd_tickets()
w.dldir("/vol/storage_odd_tickets")

This will dump the tickets (and certs and tmds) of the disc that's inserted, and put them into your iosuhax/vol/ folder
 

plyscho

Well-Known Member
Member
Joined
Sep 22, 2016
Messages
155
Trophies
0
Age
41
XP
218
Country
Germany
Oh is see. Isn't the ticket deleted when deleted a game?
Someone posted no tickets will ever be deleted, but I didn't verify this myself.

On Wii they also were never deleted, unless you deinstalled using a WAD installer or AnyTitle Deleter.
 

DaBlackDeath

.::[ lone wolf ]::.
Member
Joined
Dec 22, 2007
Messages
928
Trophies
2
XP
4,454
Country
Germany
It should work perfectly fine on the console on which he bought the game.
I have tried this for my paid DLC. Grabbed the ticket from DLC. Deleted the DLC from WiiU and tried to install the DLC with my own ticketon my own console. ERROR
Not one version of wupinstaller mods is installing DLC - with or without paid DLC ticket.
So I had to visit eShop and redownload my DLC.
It was for testing purposes - now I know it's not working.
 
Last edited by DaBlackDeath,
  • Like
Reactions: plyscho and xtheman

ShadowOne333

QVID PRO QVO
Editorial Team
Joined
Jan 17, 2013
Messages
12,218
Trophies
2
XP
34,280
Country
Mexico
So Wii VC is now dumpable thanks to IOSU?
I'm wondering how are the Wii VC's actually stored.
Do they boot a DOL file?
If they do, we might be able to change the DOL file to boot another one.
Perhaps injected Lego game with the Homebrew Channel hack and then boot from there to HBC with the Cafe2Wii enabled to play all our Homebrew apps with the gamepad. :P
 

plyscho

Well-Known Member
Member
Joined
Sep 22, 2016
Messages
155
Trophies
0
Age
41
XP
218
Country
Germany
Thanks for the info! That's strange, is there any encryption mechanism at work other than the console bound ticket?
 

xtheman

Well-Known Member
Member
Joined
Jan 28, 2016
Messages
5,837
Trophies
0
Location
???
XP
3,790
Country
United States
So Wii VC is now dumpable thanks to IOSU?
I'm wondering how are the Wii VC's actually stored.
Do they boot a DOL file?
If they do, we might be able to change the DOL file to boot another one.
Perhaps injected Lego game with the Homebrew Channel hack and then boot from there to HBC with the Cafe2Wii enabled to play all our Homebrew apps with the gamepad. :P
w.dldir("/vol/system_slc/rights/ticket/apps/") will dump ticket.

Why not just inject a homebrew instead of a game? That way we don't need 2 GB sd.
 

ShadowOne333

QVID PRO QVO
Editorial Team
Joined
Jan 17, 2013
Messages
12,218
Trophies
2
XP
34,280
Country
Mexico
w.dldir("/vol/system_slc/rights/ticket/apps/") will dump ticket.

Why not just inject a homebrew instead of a game? That way we don't need 2 GB sd.
Well because you don't know how the Wii VC might react to homebrew apps.
It's certainly worth the shot for sure, but I said injecting a Lego game because those are somewhat small and we know it's a legit Wii game, unlike a homebrew app.
 

sammikins_th3_kitt3n

♾️Neurodivergent🏳️‍⚧️trans🍼crinklefur
OP
Member
Joined
Jul 28, 2012
Messages
279
Trophies
1
XP
1,955
Country
Canada
this is a list of all the folders that were in /vol/system_slc/rights/ticket/apps

--------------------- MERGED ---------------------------

i am using a modded wupclientgui.py for dumping if anyone is wondering
 

Attachments

  • 2016-10-27.png
    2016-10-27.png
    5.9 KB · Views: 281

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • Materia_tofu @ Materia_tofu:
    im not a very bright individual, but we live and we learn
  • SylverReZ @ SylverReZ:
    @Materia_tofu, We do learn a lot from plenty of talented individuals.
  • Materia_tofu @ Materia_tofu:
    this is true! i learned how to make soundfont remixes from a friend back in 2021
    +1
  • BakerMan @ BakerMan:
    Update on my brother: He's home now, tired and hungry, obviously, but other than that, seems to be doing fine.
    +2
  • Veho @ Veho:
    That's a relief to hear. Do you know what happened?
  • SylverReZ @ SylverReZ:
    @BakerMan, Any idea what happened? I hope that your brother's doing good.
  • BakerMan @ BakerMan:
    Well, from what I've heard from my parents, he had a seizure last night, perhaps an epileptic episode, fucking died, had a near death experience, my dad called the paramedics, they showed up, took him to the hospital, and he woke up covered in tubes, and started complaining.
  • BakerMan @ BakerMan:
    He couldn't eat until after his MRI, when he had a bomb pop.
  • BakerMan @ BakerMan:
    What matters now is that he's doing alright.
  • Veho @ Veho:
    But you still don't know what it was?
  • Veho @ Veho:
    Has he had seizures before?
  • The Real Jdbye @ The Real Jdbye:
    apparently stress can cause seizures, my brother had one during a test once
  • The Real Jdbye @ The Real Jdbye:
    never had one before that, and never had one since
  • Redleviboy123 @ Redleviboy123:
    Question about game texture chanching Do i need an own game id?
  • The Real Jdbye @ The Real Jdbye:
    @Veho for those that want to
    experience being sonic the hedgehog
  • Veho @ Veho:
    Ah, you mean
    furries.
  • The Real Jdbye @ The Real Jdbye:
    well, sonic fans are a whole separate thing from furries
  • The Real Jdbye @ The Real Jdbye:
    like bronys
  • The Real Jdbye @ The Real Jdbye:
    sonic porn is too weird even for me
  • Dumpflam @ Dumpflam:
    bruh
  • Dumpflam @ Dumpflam:
    guys how do i delete a post
  • The Real Jdbye @ The Real Jdbye:
    you don't
  • The Real Jdbye @ The Real Jdbye:
    you can report it and request deletion
    The Real Jdbye @ The Real Jdbye: you can report it and request deletion