Hacking Contenthax - a Vulnerability in Wii U File System Verification

[KevinX8]

It won't because some memory adresses are different.

I know because I had to give to FIX some debugging stuff from my wiiu running Kirby so he could port it to Brain age

thats more than likey region specific then, N probably didn't make their emu region free just like any of their other titles. BTW I'm just guessing lol

 

[hippy dave]

I get an error whenever I try to upload:

>>> w.up("rom.zip", "/vol/storage_usb01/usr/title/00050000/10179C00/content/0010/rom.zip")

up error : could not open /vol/storage_usb01/usr/title/00050000/10179C00/content/0010/rom.zip

-1

Any ideas? Cheers

 

[KevinX8]

I get an error whenever I try to upload:

>>> w.up("rom.zip", "/vol/storage_usb01/usr/title/00050000/10179C00/content/0010/rom.zip")

up error : could not open /vol/storage_usb01/usr/title/00050000/10179C00/content/0010/rom.zip

-1

Any ideas? Cheers

old version of brain age just like me, re download it from eshop should give you latest version

 

[hippy dave]

old version of brain age just like me, re download it from eshop should give you latest version

Thanks, but no it's the newest version, freshly installed. I downloaded the original rom.zip as a backup, that worked fine, but I can't upload the new one.

 

[Afraidium]

Anyone tinkering with files on mlc? I say that the wiiU comes with "Netflex" by default. I'd like to get my hands on this app.

 

[VinsCool]

thats more than likey region specific then, N probably didn't make their emu region free just like any of their other titles

I don't know, to be honest. I guess I could investigate and compare my DS games RPX. Maybe I could find a pattern.

 

[KevinX8]

Thanks, but no it's the newest version, freshly installed. I downloaded the original rom.zip as a backup, that worked fine, but I can't upload the new one.

oh wait just noticed you were installing to usb, it errored out for me too when I tried that, just gave up and put it on NAND instead

 

[Afraidium]

I don't know, to be honest. I guess I could investigate and compare my DS games RPX. Maybe I could find a pattern.

Do we know if the DS game original and the VC version is the same "rom"?

 

[hippy dave]

oh wait just noticed you were installing to usb, it errored out for me too when I tried that, just gave up and put it on NAND instead

I tried it on nand first, and got the same error, ugh.

 

[VinsCool]

Do we know if the DS game original and the VC version is the same "rom"?

Some games feature changes compared to current scene releases. But they work once extraced and thrown in an emulator.

 

[KevinX8]

Do we know if the DS game original and the VC version is the same "rom"?

I can confirm it is, ripped it for backup and tested it with emu nds extractor came up with identical id and files

 

[Dr.Aardvark]

I get an error whenever I try to upload:

>>> w.up("rom.zip", "/vol/storage_usb01/usr/title/00050000/10179C00/content/0010/rom.zip")

up error : could not open /vol/storage_usb01/usr/title/00050000/10179C00/content/0010/rom.zip

-1

Any ideas? Cheers

try
vol/storage_usb
instead of
vol/storage_usb01

 

[joacosur15]

B

yay, now it's working with german too
I've also added my custom images

Beautiful

 

[Afraidium]

This is from a meta.xml file

<direct_boot type="unsignedInt" length="4">0</direct_boot>

Anyone have thoughts on what this could mean or be used for?

 

[xXDungeon_CrawlerXx]

This is from a meta.xml file

<direct_boot type="unsignedInt" length="4">0</direct_boot>

Anyone have thoughts on what this could mean or be used for?

This should determine if an app can be set as AutoBoot or not (SystemConfigTool checks this. And if this one is set to 1, you can set this app as Autoboot)

 

[Afraidium]

This should determine if an app can be set as AutoBoot or not (SystemConfigTool checks this. And if this one is set to 1, you can set this app as Autoboot)

Sorry for being daft here, but what is the context of "AutoBoot"? Does this set this as a cold launch boot? Or has some other context?

 

[KevinX8]

Sorry for being daft here, but what is the context of "AutoBoot"? Does this set this as a cold launch boot? Or has some other context?

in the OP it talks about the system.xml file that automatically lauched whatever title you put in the default title place, you are pretty much guarranteed to brick thought as It's more than likely hash checked

 

[xXDungeon_CrawlerXx]

Sorry for being daft here, but what is the context of "AutoBoot"? Does this set this as a cold launch boot? Or has some other context?

I guess you can set HomebrewLauncher as Autoboot if you set this Value to 1 AND edit the Autoboot Title in system.xml in /vol/system/config . This is just a speculation and I wouldn't try it on SysNAND.

--------------------- MERGED ---------------------------

I guess you can set HomebrewLauncher as Autoboot if you set this Value to 1 AND edit the Autoboot Title in system.xml in /vol/system/config . This is just a speculation and I wouldn't try it on SysNAND.

in the OP it talks about the system.xml file that automatically lauched whatever title you put in the default title place, you are pretty much guarranteed to brick thought as It's more than likely hash checked

Probably it bricked for the guy because in the meta.xml of the App he wanted to use as Autoboot had the value 0 instead of 1 in <direct_boottype="unsignedInt"length="4">0</direct_boot>
Probably it will work if the value is set to 1?

Would try it on RedNAND but not on SysNAND

 

[KevinX8]

whatever nintendo changed @Afraidium they did a really good job hiding it, same file sizes and everything not even a byte of a difference extracted however the MD5 never lies:
WII U ROM: F30707665AF444433945328D9D1E5446
REAL EU ROM: 588B392DFD20E8C670AB3A2B2EE79CD8

 

[Afraidium]

The reason I am asking is because this is inside of "\vol\storage_mlc01\sys\title\00050010\10040100\meta\meta.xml"
Which I believe is the wiiU system menu title. It's set 0 on the directboot attrib.