Hacking Contenthax - a Vulnerability in Wii U File System Verification

[KevinX8]

Wait are you launching the Homebrew Launcher directly from sysNAND after a fresh boot?
If so, how did you do that?

Its a skin to replace the meta files for brain age

 

[xXDungeon_CrawlerXx]

Wait are you launching the Homebrew Launcher directly from sysNAND after a fresh boot?
If so, how did you do that?

yep, that'S what I do, too

 

[KevinX8]

Whose fork is your wupclient.py from? Mine simply says:

            buffer += data[:ret]
            sys.stdout.write(hex(len(buffer)) + "\r"); sys.stdout.flush();

That just prints out the current length of the byte array buffer that the file is being copied into. In other words, it's how much has been transferred, and isn't aware of how large the source is. (But progress would be pretty easy to add)

well didn't actually check what it was, I just noticed that with all the files I have transfered it always stops at 0xfffff so now I'm assuming it thosent count up once it reaches that point

 

[BurningDesire]

Could you PM me this.... Plz

 

[BIFFTAZ]

Wait are you launching the Homebrew Launcher directly from sysNAND after a fresh boot?
If so, how did you do that?

Look at the thread your in right now.

 

[KevinX8]

I think you can upload your custom launchers here without worry, unless you borrowed the resources in them from somone else

 

[DaBlackDeath]

yay, now it's working with german too
I've also added my custom images

 

[Maschell]

Wait are you launching the Homebrew Launcher directly from sysNAND after a fresh boot?
If so, how did you do that?

Its brainage with the HBL meta data. You can exchange everything except the code folder + bootMovie.h264 and bootLogo.tga. So basicliy is just this haxchi with exchanged graphics

 

[xXDungeon_CrawlerXx]

I think you can upload your custom launchers here without worry, unless you borrowed the resources in them from somone else

The btsnd and tga's were made with Nintendo Web Framework so I can't post them here

 

[ShadowOne333]

Look at the thread your in right now.

Yeah but I didn't know contenthax actually made it possible to launch and even reskin a VC title to make it Homebrew Launcher completely.

 

[xXDungeon_CrawlerXx]

I guess my Skin is the best so far :3

 

[KevinX8]

The btsnd and tga's were made with Nintendo Web Framework so I can't post them here

ah k I thought it was the same deal with cia thought nintendo owns the copyright to the file but if it contains no copyright material its aok to put here, using the correct format for wii u I don't think is banned from posting here

 

[ShadowOne333]

Its brainage with the HBL meta data. You can exchange everything except the code folder + bootMovie.h264 and bootLogo.tga. So basicliy is just this haxchi with exchanged graphics

Awesome!
Thanks for explaining.
I'll wait a little bit until everything gets more polished to actually try it out myself. (and for a proper tuto xD)

 

[VinsCool]

If someone could build FIX94's loader implementation into the original Kirby version, that would be greatly appreaciated

I have no compiling stuff set up and I'm not on my pc right now

 

[Columbo2811]

What was the command line in python wupclient to change icon and bakground you guys used? Ive just had to redownload and up the rom.zip back to the game cause it corrupted? I must of put it in the wrong directory. Thanks

 

[KevinX8]

If someone could build FIX94's loader implementation into the original Kirby version, that would be greatly appreaciated

I have no compiling stuff set up and I'm not on my pc right now

I'm pretty sure injecting the rom file should work since the Wii U DS VC is just an emulator

 

[xXDungeon_CrawlerXx]

What was the command line in python wupclient to change icon and bakground you guys used? Ive just had to redownload and up the rom.zip back to the game cause it corrupted? I must of put it in the wrong directory. Thanks

w.up("meta.xml", "/vol/storage_mlc01/usr/title/00050000/10179c00/meta/meta.xml")
w.up("bootDrcTex.tga", "/vol/storage_mlc01/usr/title/00050000/10179c00/meta/bootDrcTex.tga")
w.up("iconTex.tga", "/vol/storage_mlc01/usr/title/00050000/10179c00/meta/iconTex.tga")
w.up("bootTvTex.tga", "/vol/storage_mlc01/usr/title/00050000/10179c00/meta/bootTvTex.tga")
w.up("bootSound.btsnd", "/vol/storage_mlc01/usr/title/00050000/10179c00/meta/bootSound.btsnd")

 

[huma_dawii]

Can I use MK DS USA?

 

[VinsCool]

I'm pretty sure injecting the rom file should work since the Wii U DS VC is just an emulator

It won't because some memory adresses are different.

I know because I had to give to FIX some debugging stuff from my wiiu running Kirby so he could port it to Brain age

 

[Columbo2811]

w.up("meta.xml", "/vol/storage_mlc01/usr/title/00050000/10179c00/meta/meta.xml")
w.up("bootDrcTex.tga", "/vol/storage_mlc01/usr/title/00050000/10179c00/meta/bootDrcTex.tga")
w.up("iconTex.tga", "/vol/storage_mlc01/usr/title/00050000/10179c00/meta/iconTex.tga")
w.up("bootTvTex.tga", "/vol/storage_mlc01/usr/title/00050000/10179c00/meta/bootTvTex.tga")
w.up("bootSound.btsnd", "/vol/storage_mlc01/usr/title/00050000/10179c00/meta/bootSound.btsnd")

Hmmm strange thats what i thought i did. I tested the icon and background first in loadiine on a game and it was fine. Thanks very much