Hacking RELEASE biskeydump and HacDiskMount - Switch eMMC decryption/real-time mounting tools

[ytmodzmaster]

Thank youu Anyone who has issues needs to come to this guy hes frekin awesome highly suggest him @mattytrog

 

[mattytrog]

Cheers young man. Glad you got it sorted. Any more problems PM me. Happy MK8!

 

[leons09]

nvm i got the keys to work now im having the issue of ill inject the payload and select fsxx_*** but it will just boot the switch back to rcm mode im on 6.1.0 i just flashed last night and allready tried removing and replacing the system files any help on this?

Hi, somehow my keys also failed on PRODINFO. Do you have any tip on this ?

 

[lordelan]

Is there a way to open my emuMMC that is on a hidden partition on my SD card with HacDiskMount?

 

[jellybeangreen2]

Has anyone had any issues entering your BIS KEY 0 in to PRODINFO? Wen i l click on test through HacDiskMount, i get "Fail! Entropy: 7.987 (tested 16384 out of 16384bytes)"

However, When i enter the other BIS KEYS in to SAFE, SYSTEM & USER i get an OK and green when i click test. HacDiskMount version is: 1055

Thanks for any help

 

[Xyphoseos]

biskeydump - Dumps all your Switch BIS keys for eMMC contents decryption, to be used as a fusee payload (upload via the normal fusee-launcher or my TegraRcmSmash.exe).

HacDiskMount - use your BIS keys and your RawNand.bin (or the physical eMMC attached via microSD reader or using a mass storage gadget mode in u-boot/linux) to dump, restore or REAL-TIME MOUNT AND EXPLORE/MODIFY partitions from the dump file or attached physical device !

Binaries available at https://switchtools.sshnuke.net
When appropriate, README.txt file inside the archive points to the source code location

(Yes I know these have been out for a few days, but only since today was biskeydump redistributable as a precompiled binary)

Should I dump this key each time I update my switch or are they stay unchanged ?

 

[kostaz]

Is there any way to recover deleted data (ie via data recovery software) from the emuMMC when using HacDiskMount?
Had a huge save (hadn't been backed up via either Checkpoint or Edizon) deleted by mistake, and I'm hoping to recover it

 

[jellybeangreen2]

Is there any way to recover deleted data (ie via data recovery software) from the emuMMC when using HacDiskMount?
Had a huge save (hadn't been backed up via either Checkpoint or Edizon) deleted by mistake, and I'm hoping to recover it

Recuva- As long as you haven’t wrote anything else to the partition. The partition attaches as USB storage which you can scan and recover your file

 

[Xyphoseos]

Should I dump this key each time I update my switch or are they stay unchanged ?

 

[hippy dave]

Should I dump this key each time I update my switch or are they stay unchanged ?

Unchanged.

 

[kostaz]

Recuva- As long as you haven’t wrote anything else to the partition. The partition attaches as USB storage which you can scan and recover your file

Yeah that's what I thought would work. But Recuva finds like a handful of files. Something is clearly blocking its scan/retrieval.

 

[jellybeangreen2]

Yeah that's what I thought would work. But Recuva finds like a handful of files. Something is clearly blocking its scan/retrieval.

Try GetDataBack

 

[Mikeltii]

I'm not sure what it was. Rebuilt my NAND image and used another PC. Works fine now. Maybe something isn't stable on my main.

Thanks for clarification though.

I'm having problems with my biskey to decrypt my switch partitions you reckon if I try on other PC they will work? Because I cant access any on my encrypted partitions of my rawnand or straight of my switch and the biskey is of my console I used biskeydump v9

 

[risq]

Is there a way to open my emuMMC that is on a hidden partition on my SD card with HacDiskMount?

I'd like to support that question. I can say that HacDiskMount is not opening the emuMMC, is there a way to alter HacDiskMount to do it?

 

[lordelan]

I'd like to support that question. I can say that HacDiskMount is not opening the emuMMC, is there a way to alter HacDiskMount to do it?

Maybe this could help:
https://gbatemp.net/threads/sxos-hidden-emunand-backup-tool.549971/

 

[Nyancoe]

Hi, any ideas why i keep getting this msg in hacdiskmount when i try to mount the drive?, i'm running it as admin and already installed and reinstalled drivers

[info] Mounted USER to 'A:' with physical sector size mismatch (file: 4096 part: 512) - FORCING READ ONLY

 

[bjaxx87]

Hi, any ideas why i keep getting this msg in hacdiskmount when i try to mount the drive?, i'm running it as admin and already installed and reinstalled drivers

[info] Mounted USER to 'A:' with physical sector size mismatch (file: 4096 part: 512) - FORCING READ ONLY

I second this. I'm experiencing the same problem right now.
The mounted drive is showing up but it's not even readable (it asks me to insert a data medium if I click it). I tested different backups (so a corruption is unlikely), my BIS key 03 is tested by HacDiskMount successfully, the driver has been installed and I run the tool as an admin. No idea what's wrong here...

 

[lpoolm]

Hi, could anyone help. Have another thread going but thought I would ask in here as its more specific.
I have been trying to get an old faulty switch going agin, i can get into Hekate but can not load anything so have been trying to re-build the nand.
When I try and input the Biskeys I get an error:

FAIL! Entropy: 7.988 (tested 16384 out of 16384 bytes)

I am using the correct keys, it has the same error on each one I try, I have tried copy and pasting and typing each one in.
I have read through all 14 pages and there has been an odd mention but no solutions. I am using windows 10.

Any ideas would be great, will try everything!

 

[shchmue]

Hi, could anyone help. Have another thread going but thought I would ask in here as its more specific.
I have been trying to get an old faulty switch going agin, i can get into Hekate but can not load anything so have been trying to re-build the nand.
When I try and input the Biskeys I get an error:

FAIL! Entropy: 7.988 (tested 16384 out of 16384 bytes)

I am using the correct keys, it has the same error on each one I try, I have tried copy and pasting and typing each one in.
I have read through all 14 pages and there has been an odd mention but no solutions. I am using windows 10.

Any ideas would be great, will try everything!

if you don’t have a specific reason you think the NAND is hosed you’re better off not doing that but anyhow some consoles have a newer BIS key generation algorithm. have you tried using the latest Lockpick_RCM to dump them

 

[lpoolm]

if you don’t have a specific reason you think the NAND is hosed you’re better off not doing that but anyhow some consoles have a newer BIS key generation algorithm. have you tried using the latest Lockpick_RCM to dump them

Hi, long story short have a switch that fails to boot, starts Hekate but then will not boot anything after that so thought I would try and rebuild the nand.
I had a hard time dumping the Biskeys they would not show up using Biskeydump, kept saying errors so ended up having to use this https://sdsetup.com/biskeygen
This generated the keys but unfortunately get the above error.
I suspect a corruption somewhere, I might have to try another route now.