Hacking Contenthax - a Vulnerability in Wii U File System Verification

[ppeterr]

just like linux and windows you can use the list command
w.ls("/vol/storage_mlc01/usr/title/00050000/10179C00/content/0010/")

thx, these are my contents, but doesnt work anyway

>>> w.ls("/vol/storage_mlc01/usr/title/00050000/10179C00/content/0010/")
assets/
configuration_cafe.json
data/
rom.zip

 

[BDS]

is there something wrong with my install of brain age training or is it me because if I look at the contents of the /0010/ folder I only see a rom.nds no rom.zip and uploading the zip those not boot content hax for me

You have an old version of the game (had that too), delete that and download it back from eShop, you'll have a nice rom.zip.

 

[KevinX8]

thx, these are my contents, but doesnt work anyway

>>> w.ls("/vol/storage_mlc01/usr/title/00050000/10179C00/content/0010/")
assets/
configuration_cafe.json
data/
rom.zip

assets/
configuration_cafe.json
rom.nds
rom.zip
WTF its completely different also the rom.zip only exists cause I injected it, it has no effect still boots game normally

--------------------- MERGED ---------------------------

You have an old version of the game (had that too), delete that and download it back from eShop, you'll have a nice rom.zip.

yeah was thinking that, if thats true why the hell thosent it auto update like the system those without permission lol

 

[VinsCool]

assets/
configuration_cafe.json
rom.nds
rom.zip
WTF its completely different also the rom.zip only exists cause I injected it, it has no effect still boots game normally

Woah now this is getting interesting!

So it IS possible to add more files, and not just replace stuff? That could be really useful someday.

 

[Afraidium]

just like linux and windows you can use the list command
w.ls("/vol/storage_mlc01/usr/title/00050000/10179C00/content/0010/")

Is there by chance a way to recursively download files? AKA directory download.

 

[joacosur15]

its a system title you insane bro also you can't perma mod the code directory otherwise it BRICKS if its a system title (which it is) or just blurts out corrupt title without sig patches on

But contenthax lets us changue the rom.zip without break the signature. I dont know the limits of this hax, smea said "all apps can be exploited in some way through contenthax".

 

[KevinX8]

Woah now this is getting interesting!

So it IS possible to add more files, and not just replace stuff? That could be really useful someday.

Yeah I was planning to inject "missing" dlc files for games that I have paid for some of the DLC and it should stay completely signed as sig only breaks if you modify /code/ or any critical directory

--------------------- MERGED ---------------------------

But contenthax lets us changue the rom.zip without break the signature. I dont know the limits of this hax, smea said "all apps can be exploited in some way through contenthax".

Mii maker thosen't have an exploit to lauch homebrew without temp modifying its code directory, perma modding it will lead to system brick since its a system title

 

[joacosur15]

Yeah I was planning to inject "missing" dlc files for games that I have paid for some of the DLC and it should stay completely signed as sig only breaks if you modify /code/ or any critical directory

--------------------- MERGED ---------------------------


Mii maker thosen't have an exploit to lauch homebrew without temp modifying its code directory, perma modding it will lead to system brick since its a system title

You are right, now i understand.

 

[subcon959]

Is there by chance a way to recursively download files? AKA directory download.

Yeah, Im not able to check right now but its something like w.dldir

 

[ppeterr]

would w.rm /.//....rom.zip work, to see if it actually gets uploaded the next time i transfer it with wupclient ?

 

[KevinX8]

would w.rm /.//....rom.zip work, to see if it actually gets uploaded the next time i transfer it with wupclient ?

check wupclient.py all the commands are contained in that, most are self explanatory and the others can be figured out by there function/name , I would say to reinstall brain age to get latest fresh install in case you had the same problem as me

--------------------- MERGED ---------------------------

Worked perfectly just have plug in and out system to flush memory before starting brain age

--------------------- MERGED ---------------------------

LOL yeah one problem HB Appstore doesn't work now because brain age has no Internet access XD

 

[ppeterr]

check wupclient.py all the commands are contained in that, most are self explanatory and the others can be figured out by there function/name , I would say to reinstall brain age to get latest fresh install in case you had the same problem as me

--------------------- MERGED ---------------------------

Worked perfectly just have plug in and out system to flush memory before starting brain age

--------------------- MERGED ---------------------------

LOL yeah one problem HB Appstore doesn't work now because brain age has no Internet access XD

great it works on your side i installed this morning so, its not about a old install

 

[KevinX8]

great it works on your side i installed this morning so, its not about a old install

if its brand new then just make sure its on system NAND, start iosuhax, perform the command to install,power off, plug out and make sure wii u red light disappear for atleast 5 secs, boot up again and should work just fine

 

[Afraidium]

Yeah, Im not able to check right now but its something like w.dldir

Thanks this was perfect! I took a look at the script and honestly I am failing to see these commands. I'll take another look. Might have to create a wrapper in c# once I figure them out, or even port it to c# and make a GUI for it.

 

[RemixDeluxe]

This is all the digital content I've ever purchased on my Wii U. Will any of this work with contenthax or does it have to be a virtual Console title?

- Pokémon Rumble U
- Dr. Luigi
- Pushmo World
- Mario vs. Donkey Kong: Tipping Stars
- Mini-Mario & Friends: amiibo Challenge
- Pirate Pop Plus

Also worth mentioning that amiibo tap: Nintendo's Greatest Bits has a collection of Limited time demo virtual Console games and it is free to download. Maybe the devs can explore this possibility too.

Sent from my phone using MyFatAss.

 

[xXDungeon_CrawlerXx]

Is it possible to boot directly iosuhax instead of homebrew_launcher with ContentHax?

EDIT: I bought Donkey Kong 64 (EUR) some time ago. Does ContentHax work with it?

 

[VinsCool]

Is it possible to boot directly iosuhax instead of homebrew_launcher with ContentHax?

EDIT: I bought Donkey Kong 64 (EUR) some time ago. Does ContentHax work with it?

If you replace the homebrew launcher.elf with boot fw.img.elf, it could work.

 

[ppeterr]

ow wtf........

if its brand new then just make sure its on system NAND, start iosuhax, perform the command to install,power off, plug out and make sure wii u red light disappear for atleast 5 secs, boot up again and should work just fine

hey man thx for your reply's, i am doing something wrong

i do everything, and surprise now it works on iosuhax fw, but when i powerdown, and boot it from sysnand it boots normal.

the game is on sysnand ofcourse, i am missing some step

 

[subcon959]

Thanks this was perfect! I took a look at the script and honestly I am failing to see these commands. I'll take another look. Might have to create a wrapper in c# once I figure them out, or even port it to c# and make a GUI for it.

Just look at line 295 onwards. They are all there under file management.

 

[KevinX8]

ow wtf........


hey man thx for your reply's, i am doing something wrong

i do everything, and surprise now it works on iosuhax fw, but when i powerdown, and boot it from sysnand it boots normal.

the game is on sysnand ofcourse, i am missing some step

are you waiting for the progress bar to finish lol forgot to mention that also you have to cold boot a normal reboot won't do, plug out the power for atleast 5 seconds from console end