Hacking Contenthax - a Vulnerability in Wii U File System Verification

[ShadowOne333]

No sorry I didnt where do I get the config txt from and instructions?

Simply create a .txt file from scratch and name it "config.txt" (without quotes).
Then put in the following inside the txt:

a=fw.img
b=rednand/fw.img
x=wiiu/apps/ftpiiu/ftpiiu.elf
down=wiiu/apps/snes9x2010_libretro/snes9x2010_libretro.elf
default=wiiu/apps/homebrew_launcher/homebrew_launcher.elf

YOu can change the buttons and the apps which boot to your liking, just be sure that they match in name and path.

 

[Reecey]

Simply create a .txt file from scratch and name it "config.txt" (without quotes).
Then put in the following inside the txt:

a=fw.img
b=rednand/fw.img
x=wiiu/apps/ftpiiu/ftpiiu.elf
down=wiiu/apps/snes9x2010_libretro/snes9x2010_libretro.elf
default=wiiu/apps/homebrew_launcher/homebrew_launcher.elf

YOu can change the buttons and the apps which boot to your liking, just be sure that they match in name and path.

Thanks How do I upload it to the rom? or does it just go on the route of your sd card?

 

[ShadowOne333]

Thanks How do I upload it to the rom? or does it just go on the route of your sd card?

Open up wupclient.py by typing "python -i wupclient.py" in Windows' cmd, then follow these instructions:

To upload a config.txt as well you will have to do the following if the title is installed on NAND:

w.up("config.txt", "/vol/storage_mlc01/usr/title/00050000/YOUR_GAME_TITLE_ID/content/config.txt")
w.chmod("/vol/storage_mlc01/usr/title/00050000/YOUR_GAME_TITLE_ID/content/config.txt", 0x644)

and for the title being installed to USB you do the following:

w.up("config.txt", "/vol/storage_usb01/usr/title/00050000/YOUR_GAME_TITLE_ID/content/config.txt")
w.chmod("/vol/storage_usb01/usr/title/00050000/YOUR_GAME_TITLE_ID/content/config.txt", 0x644)

 

[Reecey]

Open up wupclient.py by typing "python -i wupclient.py" in Windows' cmd, then follow these instructions:

Thanks also can we change the configuration like below or does it have to be as you say and not be changed.

a=wupserver/fw.img
b=rednand/fw.img
x=wiiu/apps/wupinstaller/wupinstaller.elf
y=wiiu/apps/saviine/saviine.elf
down=wiiu/apps/nnupatcher/nnupatcher.elf
up=wiiu/apps/loadiine_gx2/loadiine_gx2.elf
default=wiiu/apps/homebrew_launcher/homebrew_launcher.elf

 

[ShadowOne333]

Thanks also can we change the configuration like below or does it have to be as you say and not be changed.

a=wupserver/fw.img
b=rednand/fw.img
x=wiiu/apps/wupinstaller/wupinstaller.elf
y=wiiu/apps/saviine/saviine.elf
down=wiiu/apps/nnupatcher/nnupatcher.elf
up=wiiu/apps/loadiine_gx2/loadiine_gx2.elf
default=wiiu/apps/homebrew_launcher/homebrew_launcher.elf

Yes, that looks about right
It should work.

Now just remember that the config.txt file goes inside GAMEID/content/config.txt, NOT inside the 0010 folder.

 

[Reecey]

Yes, that looks about right
It should work.

Now just remember that the config.txt file goes inside GAMEID/content/config.txt, NOT inside the 0010 folder.

OK got it, thanks for the help!

 

[ShadowOne333]

OK got it, thanks for the help!

Sure, you're welcome!

On a side note, does someone have the bootSound.btsnd file which plays a short 3 sec or so jingle instead of the one with the Homebrew Channel song from the Wii?
That's the only file I'm missing to finish my custom VC injection

 

[Reecey]

Sure, you're welcome!

On a side note, does someone have the bootSound.btsnd file which plays a short 3 sec or so jingle instead of the one with the Homebrew Channel song from the Wii?
That's the only file I'm missing to finish my custom VC injection

I only have the wii jingle I would like something shorter, its a bit annoying and overhangs the intro screen.

--------------------- MERGED ---------------------------

@ShadowOne333 Just checking with you are you sure you are supposed to put both of these commands below in wupserver for the config txt like you said for usb are these correct before I do it:-

w.up("config.txt", "/vol/storage_usb01/usr/title/00050000/10179C00/content/config.txt")
w.chmod("/vol/storage_usb01/usr/title/00050000/10179C00/content/config.txt", 0x644)

 

[Xuman]

Unrelated side note, but is it possible to use wupclient to inject vc games? Thought id ask before doing it

 

[VinsCool]

Unrelated side note, but is it possible to use wupclient to inject vc games? Thought id ask before doing it

Yes, I tested that and it works.

 

[Xuman]

Yes, I tested that and it works.

Interesting, I'm going to try it with Dk64 and something else then.

 

[Reecey]

@ShadowOne333 When I put this line in wupserver> w.chmod("/vol/storage_usb01/usr/title/00050000/10179C00/content/config.txt", 0x644) it says there is no such attribute?

 

[ShadowOne333]

I only have the wii jingle I would like something shorter, its a bit annoying and overhangs the intro screen.

--------------------- MERGED ---------------------------

@ShadowOne333 Just checking with you are you sure you are supposed to put both of these commands below in wupserver for the config txt like you said for usb are these correct before I do it:-

w.up("config.txt", "/vol/storage_usb01/usr/title/00050000/10179C00/content/config.txt")
w.chmod("/vol/storage_usb01/usr/title/00050000/10179C00/content/config.txt", 0x644)

Yes that's correct!

--------------------- MERGED ---------------------------

@ShadowOne333 When I put this line in wupserver> w.chmod("/vol/storage_usb01/usr/title/00050000/10179C00/content/config.txt", 0x644) it says there is no such attribute?

Did you download haxchi's latest wupclient.py file?
That's the one with chmod in it.

 

[Reecey]

Yes that's correct!

--------------------- MERGED ---------------------------


Did you download haxchi's latest wupclient.py file?
That's the one with chmod in it.

Have you got a link to it please?

 

[ShadowOne333]

Have you got a link to it please?

Here
https://github.com/FIX94/iosuhax/tree/master/wupserver
Get the wupclient.py from there.

 

[Reecey]

Here
https://github.com/FIX94/iosuhax/tree/master/wupserver
Get the wupclient.py from there.

Thanks that worked. You have been a great help!

 

[wolf_]

now I'm regretting listing to a woman on what game I should download lol I debating on new super Mario,mario kart ds or super Mario 64 and she says super Mario 64 damn lol oh well

 

[ShadowOne333]

Thanks that worked. You have been a great help!

Welcome

 

[moops44]

now I'm regretting listing to a woman on what game I should download lol I debating on new super Mario,mario kart ds or super Mario 64 and she says super Mario 64 damn lol oh well

one of the best mario game bro

 

[sj33]

you did not need to go that far, as long as you backup the meta first you can always use loadiine.ovh to boot HBL then launch CFWBooter. From there you can restore the original meta or try custom meta again.

those 3MB files take 15-20 to copy, it takes a really long time for a file that small.

Does anybody know how to back up our existing meta using wupserver? I'm not really familiar with how it or Python works in great detail.