Hacking Hexkyz: "Anatomy of a Wii U: hexFW"

[Billy Acuña]

Hexkyz has been thoroughly documenting boot0 lately.

Holy s**t!!!! A true coldboothax is coming out!!!

 

[lordelan]

Holy s**t!!!! A true coldboothax is coming out!!!

This is great!

Isn't hexFW somehow usable with haxchi instead of going back to Internet Browser exploits?

 

[jorgehntx]

Okay so, very odd, I've been using Cygwin, so I tried installing msys2 and used it instead, and right away it got past that error perfectly fine.

Unfortunately, now it's failing on anpack.py. Ugg. (Yes, I did add the keys to the python file.)

Edit: Nevermind, fixed the error by replacing the anpack.py in hexFW with the anpack.py in dimok's iosuhax. Hopefully that doesn't break some stuff.

U has compiled all ready? i tryed but nothing...i think my problem is whit the variables :,-(

 

[Informix23]

I cant´t compile it I have this error

make[1]: Leaving directory `/c/hexFW-master/launcher/browserhax'
make[1]: Entering directory `/c/hexFW-master/firmware'
Traceback (most recent call last):
  File "scripts/anpack.py", line 255, in <module>
    fw = ancast(open(input_fn, "r+b"))
  File "scripts/anpack.py", line 148, in __init__
    self.decrypt(file, 0x200)
  File "scripts/anpack.py", line 197, in decrypt
    key = ancast_key.decode('hex')
AttributeError: 'str' object has no attribute 'decode'
make[1]: *** [patches/sections/0x08120000.bin] Error 1
make[1]: Leaving directory `/c/hexFW-master/firmware'
make: *** [all] Error 2

 

[connectconnect]

I cant´t compile it I have this error

make[1]: Leaving directory `/c/hexFW-master/launcher/browserhax'
make[1]: Entering directory `/c/hexFW-master/firmware'
Traceback (most recent call last):
  File "scripts/anpack.py", line 255, in <module>
    fw = ancast(open(input_fn, "r+b"))
  File "scripts/anpack.py", line 148, in __init__
    self.decrypt(file, 0x200)
  File "scripts/anpack.py", line 197, in decrypt
    key = ancast_key.decode('hex')
AttributeError: 'str' object has no attribute 'decode'
make[1]: *** [patches/sections/0x08120000.bin] Error 1
make[1]: Leaving directory `/c/hexFW-master/firmware'
make: *** [all] Error 2

You need to complete the firmware/scripts/anpack.py with the right values for

# Ancast keys (fill this manually)
ancast_key = "B5xxxxxxxxxxxxxxxxxxxxxxxxxxFD"
ancast_iv = "91xxxxxxxxxxxxxxxxxxxxxxxxxx22"

and copy the fw.img from the original nintendo source

For my compiled fw.img I get this hashes:

CRC32: 1B4CCD39
MD5: 6DF15CD0FC1EF80DC280E10F54DAFD14
SHA-1: D3C72D760315470BAC7EE926C4C0D90DEE7547D9

 

[Vappy]

I cant´t compile it I have this error

Try using python2 instead, worked fine for me. I got the same hashes and checksum as connectconnect when done.

 

[dojafoja]

I cant´t compile it I have this error

make[1]: Leaving directory `/c/hexFW-master/launcher/browserhax'
make[1]: Entering directory `/c/hexFW-master/firmware'
Traceback (most recent call last):
  File "scripts/anpack.py", line 255, in <module>
    fw = ancast(open(input_fn, "r+b"))
  File "scripts/anpack.py", line 148, in __init__
    self.decrypt(file, 0x200)
  File "scripts/anpack.py", line 197, in decrypt
    key = ancast_key.decode('hex')
AttributeError: 'str' object has no attribute 'decode'
make[1]: *** [patches/sections/0x08120000.bin] Error 1
make[1]: Leaving directory `/c/hexFW-master/firmware'
make: *** [all] Error 2

You need python 2 for sure. They removed the decode method for str objects in python 3 in favor of a global unicode implementation.

 

[Informix23]

Finally I did it with python 2 and uninstall python 3, this is what the cfw do for now

 

[Billy Acuña]

Finally I did it with python 2 and uninstall python 3, this is what the cfw do for now

Did you tried the hexFW's browser exploit?

 

[Informix23]

Did you tried the hexFW's browser exploit?

No I'm going to try but I think it would be the same, brb

 

[KiiWii]

Someone on a discord I browse has actually been trying to do this with his redNAND dump. I'm certainly interested to see how it turns out.

Did this get anywhere?

 

[Informix23]

Did you tried the hexFW's browser exploit?

Yeap it did the same but it shows some numbers in the screen, in the first try the wii u freezes but in the second try it lauch the same screen then I select wupserver and it returns into the sysmenu it has sign patches for vc games

 

[Irastris]

Did this get anywhere?

Unfortunately, no. He stopped talking about it. I can tell you how to unpack the System Menu .pack files yourself if you want, though.

 

[KiiWii]

Unfortunately, no. He stopped talking about it. I can tell you how to unpack the System Menu .pack files yourself if you want, though.

Perhaps make a tutorial thread to encompass all facets of redNAND menu modding?

This would be extremely useful

 

[Irastris]

Perhaps make a tutorial thread to encompass all facets of redNAND menu modding?

This would be extremely useful

There aren't any facets to discuss. All the guy and myself ever got around to is unpacking the PACK files. There aren't any plaintext or regular image formats within either, so it's not as simply as editing those and repacking the .pack.

 

[steven89]

any news on this i really hope progress hasnt come to a stop on this project was really looking forward to it, this looks like it has alot of potential.

 

[Billy Acuña]

any news on this i really hope progress hasnt come to a stop on this project was really looking forward to it, this looks like it has alot of potential.

Nothing new atm, just hexkyz blaming agaist dimok's work on twitter (Mocha CFW, to be exact...).

 

[steven89]

i thought they were working on different approaches to writing there firmwares, why do that over twitter when they could be working on there own stuff or even working together, hexkyz git hub had zero activity for 11 days im just concerned its stalled i really theres stuff going on behind the screens of computers at home.

 

[Billy Acuña]

i thought they were working on different approaches to writing there firmwares, why do that over twitter when they could be working on there own stuff or even working together, hexkyz git hub had zero activity for 11 days im just concerned its stalled i really theres stuff going on behind the screens of computers at home.

He literaly said that Mocha CFW "isn't a CFW and its code is bad". Idk what is his porpuse saying that kind of words... :/

 

[Irastris]

<snip>