Hacking Now that theres IOSUHAX - can my USB drive be swapped between my WiiU's?

[Captain_N]

both wii u's would have to be hacked with full iosu support. isou could probably be used to emulate a wii u usb partition. a folder will be the mount point for the fake wii u formatted partition.
it should be able to do something simimlar to say wii ware simulated nand. its not encrypted and can be used on any hacked Wii. Since the wii u would be running fully on a custom iosu then it wont need encryption. it could even fake out the wii u's normal usb/system storage app. Then it no longer matters what wii u its on since its not encrypted. It wont be useable on a not hacked wii u

 

[bailli]

Is there any documentation on how to dump the SEEPROM contents? The description in the wii(u)brew wiki are very vague...

 

[Pachee]

The USB seeds are stored in the SEEPROM not in the OTP...
In the OTP you can find the key for ENCRYPT the seeds.
http://wiiubrew.org/wiki/Hardware/OTP
http://wiiubrew.org/wiki/Hardware/SEEPROM

Dimok just released a tool to dump the SEEPROM, which now means anyone could try https://github.com/yellows8/wiiu_wfsmount

You could do exactly what this does with the openssl command for AES-CBC decryption with iv=0, however with this tool you don't need to decrypt the entire image all at once.

I think this makes possible now to make an image of the drive and decrypt it.

 

[connectconnect]

Is there any documentation on how to dump the SEEPROM contents? The description in the wii(u)brew wiki are very vague...

https://github.com/dimok789/seeprom2sd

 

[peteruk]

Is there any documentation on how to dump the SEEPROM contents? The description in the wii(u)brew wiki are very vague...

Just run it through HBL and it dumps to the SD card root, use the link above from connectconnect

 

[bailli]

Ah! Last time I checked (last week) that tool did not exist...

Thank you.

 

[tivu100]

I am technical inept, so can't make much sense off OTP, SEEPROM... seeing how the conversation's gone, does this mean we may have Wii U universal hard drive hax in near future (days, weeks, couple months away)?

 

[lordelan]

As it seems there isn't any "real" IOSU exploit as it's still not possible to use USB drives for homebrews (Loadiine, redNAND and so on).

 

[Irastris]

I am technical inept, so can't make much sense off OTP, SEEPROM... seeing how the conversation's gone, does this mean we may have Wii U universal hard drive hax in near future (days, weeks, couple months away)?

<snip>

 

[DanTheMan827]

As it seems there isn't any "real" IOSU exploit as it's still not possible to use USB drives for homebrews (Loadiine, redNAND and so on).

Nope, the IOSU is "real"...

The thing is, the developers have to figure out how to make use of the newly accessible functions of the OS that it brings...

 

[tivu100]

If by universe hard drive hax you mean sharing HDDs between multiple Wii Us, then it's coming within the week. Dimok pulled it off with ease earlier today, and it working on an injector for public use now.

That's what I meant. I am so hyped.

 

[Irastris]

That's what I meant. I am so hyped.

Unfortunately, I was wrong. The first 4 bytes of the USB seed are always the console's ID, which can not safely be changed so the program Dimok released an hour ago isn't useful for your needs.

However, should you format your Wii U for any reason, then the program is usable for keeping your USB drive compatible with the system.

 

[75mak]

Unfortunately, I was wrong. The first 4 bytes of the USB seed are always the console's ID, which can not safely be changed so the program Dimok released an hour ago isn't useful for your needs.

However, should you format your Wii U for any reason, then the program is usable for keeping your USB drive compatible with the system.

That's good news. I want to be able to format my Wii u and still use my hard drive ad saves

 

[NWPlayer123]

If the seed is all that's unique, why not just get both seeds and then decrypt with A and encrypt with B, unless the USB drive's filesystem also has some console specific stuff, it won't be able to tell the difference, it has to be possible since it decrypts and encrypts itself in the first place. Don't transfer the seed, use the existing one

 

[tivu100]

Unfortunately, I was wrong. The first 4 bytes of the USB seed are always the console's ID, which can not safely be changed so the program Dimok released an hour ago isn't useful for your needs.

However, should you format your Wii U for any reason, then the program is usable for keeping your USB drive compatible with the system.

Can you check with Dimok about what NWPlayer123 just said?

 

[Irastris]

If the seed is all that's unique, why not just get both seeds and then decrypt with A and encrypt with B, unless the USB drive's filesystem also has some console specific stuff, it won't be able to tell the difference, it has to be possible since it decrypts and encrypts itself in the first place. Don't transfer the seed, use the existing one

That's actually a very interesting concept. Maybe some day someone could create a PC program to do it on the fly, plug in a drive and it switches out the console that it's encrypted for. Awesome idea, NWPlayer!

 

[bennyman123abc]

If the seed is all that's unique, why not just get both seeds and then decrypt with A and encrypt with B, unless the USB drive's filesystem also has some console specific stuff, it won't be able to tell the difference, it has to be possible since it decrypts and encrypts itself in the first place. Don't transfer the seed, use the existing one

Doing something like that couldn't be TOO hard. Could it?

 

[AboodXD]

If the seed is all that's unique, why not just get both seeds and then decrypt with A and encrypt with B, unless the USB drive's filesystem also has some console specific stuff, it won't be able to tell the difference, it has to be possible since it decrypts and encrypts itself in the first place. Don't transfer the seed, use the existing one

That's exactly what I suggested, but that would be a gimmick... :/

 

[dimok]

If the seed is all that's unique, why not just get both seeds and then decrypt with A and encrypt with B, unless the USB drive's filesystem also has some console specific stuff, it won't be able to tell the difference, it has to be possible since it decrypts and encrypts itself in the first place. Don't transfer the seed, use the existing one

Can you check with Dimok about what NWPlayer123 just said?

Ehm....that's exactly what I said on here just using other words maybe:
https://gbatemp.net/threads/seeprom2sd-by-dimok.450172/page-2#post-6868333

I even gave some instructions how to do it on IRC yesterday. Since not everyone of you is on IRC probably, here is a log snippet:

[21:56] <@dimok> you have to decrypt the drive completely and re-encrypt it with the key of another console
[21:57] <@dimok> use this to get the usb key
[21:57] <@dimok> openssl enc -e -aes-128-cbc -nopad -K OTP_USB_KEY -iv 00000000000000000000000000000000 -in usb_seeprom_seed.bin -out usb_key.bin
[21:59] <@dimok> then with the key you get in usb_key.bin you can decrypt the usb drive
[21:59] <@dimok> and re-encrypt with another
[22:00] <@dimok> on linux you can use this command to decrypt usb
[22:00] <@dimok> sudo openssl enc -d -aes-128-cbc -nopad -K USB_KEY -iv 00000000000000000000000000000000 -in /dev/sdb -out output.img

 

[bennyman123abc]

Ehm....that's exactly what I said on here:
https://gbatemp.net/threads/seeprom2sd-by-dimok.450172/page-2#post-6868333

I even gave some instructions how to do it on IRC yesterday. Since not everyone of you is on IRC probably, here is a log snippet:

[21:56] <@dimok> you have to decrypt the drive completely and re-encrypt it with the key of another console
[21:57] <@dimok> use this to get the usb key
[21:57] <@dimok> openssl enc -e -aes-128-cbc -nopad -K OTP_USB_KEY -iv 00000000000000000000000000000000 -in usb_seeprom_seed.bin -out usb_key.bin
[21:59] <@dimok> then with the key you get in usb_key.bin you can decrypt the usb drive
[21:59] <@dimok> and re-encrypt with another
[22:00] <@dimok> on linux you can use this command to decrypt usb
[22:00] <@dimok> sudo openssl enc -d -aes-128-cbc -nopad -K USB_KEY -iv 00000000000000000000000000000000 -in /dev/sdb -out output.img

If I had a second Wii U console, I would test this to see if it works