Hackers Tease at Wii U 5.5.2 Exploit

[incidentallyscribble]

After less than a week since the Wii U was (suprisingly) given an update, some hackers tease the possibility of a homebrew entrypoint through the Wii U app, Crunchyroll. It is unknown at this point if the exploit is confirmed, but many sources very much hint at it.
Failed to fetch tweet https://twitter.com/WiiUbru/status/889303560655175684
This is good news to Wii U users everywhere, as people that want to get into hacking their Wii U would now be able to do it. If you are on 5.5.2 with no entrypoint, DOWNLOAD CRUNCHYROLL! Make sure to disable updates, too.
Source
Crunchyroll Wii U Download

 

[dpad_5678]

Oooh sexy

 

[the_randomizer]

I thought the Crunchy Roll app wasn't available in the NA eShop.

 

[incidentallyscribble]

I thought the Crunchy Roll app wasn't available in the NA eShop.

Looks like it is

 

[the_randomizer]

Looks like it is

Huh, weird, okay then.

 

[incidentallyscribble]

Huh, weird, okay then.

The app can now be downloaded in the Americas, with worldwide availability, as supported by the Nintendo eShop

yep. It's worldwide

 

[Valery0p]

That's, like, the third thread about that...stop creating useless hype!!!

 

[incidentallyscribble]

That's, like, the third thread about that...stop creating useless hype!!!

This Thread is the first in submitted news, in a news format. Sorry about that.

 

[Abdou_Lahyani]

should i update crunchy roll ?

 

[incidentallyscribble]

should i update crunchy roll ?

I would, if the hack gets released, it most probably would work on the newest version as of today

 

[Relys]

Yeah I remember looking at this years ago when I was writing libwiiu. IIRC they use an older version of web kit and it's trivial to inject an iframe with dns poisoning.

 

[Reecey]

I was thinking about this, its all very well having an exploit within this app but wont they just force an update, close the hole in the exploit and roll it out? and then you will have to update the app to start it again.

 

[incidentallyscribble]

I was thinking about this, its all very well having an exploit within this app but wont they just force an update roll out? and then you will have to update the app to start it.

This might be what happens but in that case it would give users that do not have CHBC a chance to install it.

 

[Valery0p]

This Thread is the first in submitted news, in a news format. Sorry about that.

Sorry if I look angry, but I think that this will generate a lot of pressure to the developer, if it takes more time that we think.

 

[Reecey]

This might be what happens but in that case it would give users that do not have CHBC a chance to install it.

Yes but remember soon as that exploit becomes general knowledge, that second, the app makers will know now, this minute there is vulnerability within the app so they will just wait then, close the hole and force an update, which wont even give users the chance to even access it. Also Nintendo will work now alongside the app makers hard and they will know and prepare that split second on that single tweet to close it tight shut and roll out a new update asap, you can guarantee it happening!

 

[the_randomizer]

Wouldn't it have been better if the exploit was announced AFTER it was completed?

 

[Relys]

Sorry if I look angry, but I think that this will generate a lot of pressure to the developer, if it takes more time that we think.

I'm guessing all that really needs to be done is to port ROP gadgets from the browser to the crunchyroll app (if it is indeed using an older WebKit version as I suspect). xD I'm sure it won't take long for someone to release something, but if not I might take a look at it when I'm back from BlackHat/Defcon.

 

[TotalInsanity4]

Wouldn't it have been better if the exploit was announced AFTER it was completed?

Technically it wasn't formally announced, it's just being teased

 

[the_randomizer]

Technically it wasn't formally announced, it's just being teased

Which is also a bad idea, because this will just cause the app developers to patch it with a forced update. It'd be better to just wait till it's done then release it IMO, delaying the inevitable.

 

[incidentallyscribble]

Which is also a bad idea, because this will just cause the app developers to patch it with a forced update. It'd be better to just wait till it's done then release it IMO, delaying the inevitable.

Well, that just means the exploit will probably be released soon™er than later. Also, technically, nobody said anything about how the exploit will run, so you can't patch something if you don't know what you're patching