Hacking COMPLETED CDNSP - Download & repack your games, updates, and DLC's to NSP!

[Deleted-451877]

[EDIT]

• I have changed the way my script generates tiks and certs. It seems more games will install, but some reportedly won't launch. Attached files have been updated.
  
• It seems Nintendo is monitoring the situation. See later in the thread for more details

NOTE: Using this script to download unowned content (and most probably owned too) will lead to a ban. Don't hold me responsible for decisions YOU decided to take.

CDNSP is a Python3 CDN downloader. It needs the requests library (pip install request). tqdm (pip install tqdm) is optional and will make your progress bars look better. Maybe some more, I'm not sure.

What it can do:

• Print useful info about a titleid (name, available updates)
• Download games, updates, DLC's and even system update, in their entirety (that means all the available content, logo, legal info, ...) is downloaded
  
• Batch download everything explicited further up
• Resume downloads right were you left them at
• Repack games, DLC's, updates as ready-for-install NSP's

What it does:

• Download and extract the CNMT (content metadata) NCA, and parse it to find the other content to download
• If you want to repack your download as NSP, it will generate a CNMT.XML file
• Generate the TIK and CERT:
  
• for private content the CERT (non console nor game-unique) will be copied and renamed appropriately. The TIK will be generated using a blanked out file taken from BBB's Yooka-Laylee dump, and plug in the titlekey and titleid. To generate the TIK for private content, the titlekey is REQUIRED
• for public content, it will directly download the CETK from Nintendo's servers, and extract the TIK and CERT.
• Download everything else
• And finally, repack everything to an NSP

To get started, you need:

• hactool, and its keys
• A console-unique certificate, in PEM format (I have included a PFX to PEM converter script, simply drag your PFX over it)
• The ShopN certificate, in PEM format (this one is included in the zip)
• Edit your config in the CDNSPconfig.json

Use the command prompt to download your titles. Example are provided below, and a help message is included

Examples:

Spoiler: Print info

Spoiler: Download games/updates/DLC's

Spoiler: Download system updates

Spoiler: Config

Spoiler: Usage

Cheers! To get you started, I have also included a small list of 859 TitleID's.

 

[Draxzelex]

Should have been called BanShop

 

[XerSec]

Damn, nice job @rkk. Really good progress

 

[datahoarder]

It's too bad this requires a console-unique cert. I see you added one more listing from 858 to 859.
It's funny that I had to wait less than 12 hours for this request to be made:
https://gbatemp.net/threads/manually-updating-romfs-bin-for-backups.509834/page-4#post-8113092
Thank you!

 

[cearp]

even game updates require a console unique cert?
because game update are not console unique, the ticket is generic (like wiiu, unlike 3ds)
anyway, this is really cool! very happy thanks

 

[Deleted-451877]

Should have been called BanShop

Heh, that's how the CDN works, not my doing.

It's too bad this requires a console-unique cert. I see you added one more listing from 858 to 859.
It's funny that I had to wait less than 12 hours for this request to be made:
https://gbatemp.net/threads/manually-updating-romfs-bin-for-backups.509834/page-4#post-8113092
Thank you!

Yeah, that was 01006a600623e000: 70010000001564 - Yodanji. Not sure why it slipped through my script.

--------------------- MERGED ---------------------------

even game updates require a console unique cert?
because game update are not console unique, the ticket is generic (like wiiu, unlike 3ds)
anyway, this is really cool! very happy thanks

Like I said in the OP, TIK and CERT are directly downloaded from Nintendo in the case of updates.
Downloading anything REQUIRES a console-unique cert. Updates, Sysupdates, ...

 

[Jaimy]

I get module not found error for 'requests' and 'urllib3' despite having installed required packages.

 

[Deleted-451877]

I get module not found error for 'requests' and 'urllib3' despite having installed required packages.

Are you using python 3?

 

[huma_dawii]

This but to .Nca thanks

 

[Deleted-451877]

This but to .Nca thanks

Files are already downloaded as NCA (that's what the CDN returns). The script will let them sit in your folder.

 

[huma_dawii]

Files are already downloaded as NCA (that's what the CDN returns). The script will let them sit in your folder.

So I can download an update and all I will get is one .nca? Cause I need that to merge them with the stockgame.nca and get an updated romfs.bin for LAYEREDFS

 

[Deleted-451877]

So I can download an update and all I will get is one .nca? Cause I need that to merge them with the stockgame.nca and get an updated romfs.bin for LAYEREDFS

Merging NCA's is technically impossible. Downloading an update will get you several NCA's.

 

[huma_dawii]

Merging NCA's is technically impossible. Downloading an update will get you several NCA's.

But you can extract them and get a single romfs.bin it's been confirmed by a lot of people xD

 

[Mat37]

Are you using python 3?

I get "no module named openSSL" when trying to convert my certificate. How do i install it ?

 

[Jaimy]

Are you using python 3?

Think I'm on 2.7, will try with 3.

 

[Deleted-451877]

But you can extract them and get a single romfs.bin it's been confirmed by a lot of people xD

Extracting != Repacking. NCA's are signed using a private key(s?) we don't have access to.

I get "no module named openSSL" when trying to convert my certificate. How do i install it ?

pip install pyOpenSSL

 

[Mat37]

Extracting != Repacking. NCA's are signed using a private key(s?) we don't have access to.


pip install pyOpenSSL

I was missing the py before OpenSSL thank you

 

[Omno]

Working great here, thanks very much.

 

[Deleted-451877]

Working great here, thanks very much.

Cool, good to know.
While we're at it, it's technically possible to add 'support' for pfx certs by converting them in a tempfile everytime the script is launched. I didn't add it because it would bloat you AppData/Local/Temp folder.
I'm also looking at listing available DLC's when printing info about a file.

 

[Xenon Hacks]

This is needed now more than ever due to SX 1.3, glad I have a solid VPN.