Hacking Eshop wii games Brazilian exploit

sammikins_th3_kitt3n

♾️Neurodivergent🏳️‍⚧️trans🍼crinklefur
OP
Member
Joined
Jul 28, 2012
Messages
279
Trophies
1
XP
1,955
Country
Canada
Has anyone tried to backup the tickets for a Wii game on the eshop. I ask because I had skyward sword the Nintendo banned me from eshop and I can't redownload it. I would like to be able to play again.i have Mario galaxy for testing if someone wants to explain how to get eshop tickets with the wupclient and modified fw.img
 
Last edited by sammikins_th3_kitt3n,

Kafluke

Well-Known Member
Member
Joined
May 6, 2006
Messages
5,474
Trophies
0
Age
47
XP
4,636
Country
United States
Has anyone tried to backup the tickets for a Wii game on the eshop. I ask because I had skyward sword the Nintendo banned me from eshop and I can't redownload it. I would like to be able to play again.i have Mario galaxy for testing if someone wants to explain how to get eshop tickets with the wupclient and modified fw.img
You cant.
 

nexusmtz

Well-Known Member
Member
Joined
Feb 17, 2016
Messages
1,386
Trophies
0
XP
1,425
Country
United States
Has anyone tried to backup the tickets for a Wii game on the eshop. I ask because I had skyward sword the Nintendo banned me from eshop and I can't redownload it. I would like to be able to play again.i have Mario galaxy for testing if someone wants to explain how to get eshop tickets with the wupclient and modified fw.img

w.dldir("/vol/system_slc/rights/ticket/apps/")

I haven't had any reason to use it yet though, and I don't quite understand how it will help.
 

xtheman

Well-Known Member
Member
Joined
Jan 28, 2016
Messages
5,837
Trophies
0
Location
???
XP
3,790
Country
United States
w.dldir("/vol/system_slc/rights/ticket/apps/")

I haven't had any reason to use it yet though, and I don't quite understand how it will help.
I think that is for eshop. Won't work on other consoles.

Here are my notes on dumping disc tickets to convert to eshop
Now, edit wupclient.py in iosuhax/wupserver/ with your Wii U's IP address. If you don't know your Wii U's IP address, You can get it from the internet browser with dev features on.
Code:

def __init__(self, ip='192.168.1.115', port=1337):

Do not change the port

Startup wupclient by going into the iosuhax/wupserver/ directory, shift+right click -> open command window, and then type: python -i wupclient.py

You should be given a couple short lines that look something like this:
Code:

E:\iosuhax\wupserver>python -i wupclient.py
0x43B38
0x0
0x0
>>>

You are now connected to your wupserver. Insert a game disc and type the following commands, separately, into this command prompt:

Code:

mount_odd_tickets()
w.dldir("/vol/storage_odd_tickets")

This will dump the tickets (and certs and tmds) of the disc that's inserted, and put them into your iosuhax/vol/ folder
 

plyscho

Well-Known Member
Member
Joined
Sep 22, 2016
Messages
155
Trophies
0
Age
41
XP
218
Country
Germany
Oh is see. Isn't the ticket deleted when deleted a game?
Someone posted no tickets will ever be deleted, but I didn't verify this myself.

On Wii they also were never deleted, unless you deinstalled using a WAD installer or AnyTitle Deleter.
 

DaBlackDeath

.::[ lone wolf ]::.
Member
Joined
Dec 22, 2007
Messages
928
Trophies
2
XP
4,454
Country
Germany
It should work perfectly fine on the console on which he bought the game.
I have tried this for my paid DLC. Grabbed the ticket from DLC. Deleted the DLC from WiiU and tried to install the DLC with my own ticketon my own console. ERROR
Not one version of wupinstaller mods is installing DLC - with or without paid DLC ticket.
So I had to visit eShop and redownload my DLC.
It was for testing purposes - now I know it's not working.
 
Last edited by DaBlackDeath,
  • Like
Reactions: plyscho and xtheman

ShadowOne333

QVID PRO QVO
Editorial Team
Joined
Jan 17, 2013
Messages
12,212
Trophies
2
XP
34,129
Country
Mexico
So Wii VC is now dumpable thanks to IOSU?
I'm wondering how are the Wii VC's actually stored.
Do they boot a DOL file?
If they do, we might be able to change the DOL file to boot another one.
Perhaps injected Lego game with the Homebrew Channel hack and then boot from there to HBC with the Cafe2Wii enabled to play all our Homebrew apps with the gamepad. :P
 

plyscho

Well-Known Member
Member
Joined
Sep 22, 2016
Messages
155
Trophies
0
Age
41
XP
218
Country
Germany
Thanks for the info! That's strange, is there any encryption mechanism at work other than the console bound ticket?
 

xtheman

Well-Known Member
Member
Joined
Jan 28, 2016
Messages
5,837
Trophies
0
Location
???
XP
3,790
Country
United States
So Wii VC is now dumpable thanks to IOSU?
I'm wondering how are the Wii VC's actually stored.
Do they boot a DOL file?
If they do, we might be able to change the DOL file to boot another one.
Perhaps injected Lego game with the Homebrew Channel hack and then boot from there to HBC with the Cafe2Wii enabled to play all our Homebrew apps with the gamepad. :P
w.dldir("/vol/system_slc/rights/ticket/apps/") will dump ticket.

Why not just inject a homebrew instead of a game? That way we don't need 2 GB sd.
 

ShadowOne333

QVID PRO QVO
Editorial Team
Joined
Jan 17, 2013
Messages
12,212
Trophies
2
XP
34,129
Country
Mexico
w.dldir("/vol/system_slc/rights/ticket/apps/") will dump ticket.

Why not just inject a homebrew instead of a game? That way we don't need 2 GB sd.
Well because you don't know how the Wii VC might react to homebrew apps.
It's certainly worth the shot for sure, but I said injecting a Lego game because those are somewhat small and we know it's a legit Wii game, unlike a homebrew app.
 

sammikins_th3_kitt3n

♾️Neurodivergent🏳️‍⚧️trans🍼crinklefur
OP
Member
Joined
Jul 28, 2012
Messages
279
Trophies
1
XP
1,955
Country
Canada
this is a list of all the folders that were in /vol/system_slc/rights/ticket/apps

--------------------- MERGED ---------------------------

i am using a modded wupclientgui.py for dumping if anyone is wondering
 

Attachments

  • 2016-10-27.png
    2016-10-27.png
    5.9 KB · Views: 281

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    Psionic Roshambo @ Psionic Roshambo: https://www.youtube.com/watch?v=-Eo3Bh06drc