BluUBomb - A primary Wii U entrypoint via bluetooth

H2x1_generic_WiiU_image1280w.jpg

BluUBomb exploits the Wii U's bluetooth stack to gain IOSU kernel access via bluetooth.

Not to be confused with BlueBomb for the Wii and Wii Mini.

What does this mean?
This means you can get IOSU code execution by only pairing an emulated Wii Remote to the system.

This should be useful to fix a few softbricks on the Wii U side.
You don't need a working browser or Mii Maker.
if you've messed up with regionhax and can no longer access the browser, BluUBomb can fix this as well.

The BluUBomb repository contains a few different kernel binaries for different purposes:

loadrpx.bin
Launches a launch.rpx from the root of your SD card on the next application launch.

regionfree.bin
Applies IOSU patches to temporarily remove region restrictions.
This should be helpful if you've locked yourself out of your applications due to permanent region modifications.

wupserver.bin
Launches a wupserver instance directly after using bluubomb.
This gets you full system access remotely via wupclient (replace the IP in line 29 with the one of your Wii U).
This works without having to leave the controller pairing screen.

Check out the repository for additional instructions:
https://github.com/GaryOderNichts/bluubomb

The write-up and technical details can be found here:
https://github.com/GaryOderNichts/bluubomb/blob/master/WRITEUP.md

Credits
  • GaryOderNichts - bluUbomb
  • rnconrad for the WiimoteEmulator
  • dimok789 and everyone else who made mocha possible
 
Last edited by GaryOderNichts,

shano

Well-Known Member
Member
Joined
Aug 27, 2012
Messages
219
Trophies
1
XP
1,855
Country
Australia
Great stuff Gary. :)

Regarding the buying a DS game for Haxchi Isn't there already an alternative in development already for this I remember hearing about a little while ago?
 

testing_this

Member
Newcomer
Joined
May 17, 2021
Messages
17
Trophies
0
Age
44
XP
666
Country
United States
I guess this isn't a solution for a SSL brick (I tried with no luck, connects but nothing changes on the console). Great work nonethless.
 

GaryOderNichts

Well-Known Member
OP
Member
Joined
Aug 9, 2018
Messages
792
Trophies
1
XP
5,500
Country
Germany
I guess this isn't a solution for a SSL brick (I tried with no luck, connects but nothing changes on the console). Great work nonethless.
After the initial pairing the exploit might fail. Try running it again and put the displayed bluetooth device address behind the command.
If you've used the loadfile payload the title will be launched on the next application change. So start up an application like Mii Maker.

Edit: if you aren't able to access an application you might be able to unbrick with a custom kernel bin. I'll take a look at this.
 
Last edited by GaryOderNichts,

eyeliner

Has an itch needing to be scratched.
Member
Joined
Feb 17, 2006
Messages
2,892
Trophies
2
Age
44
XP
5,546
Country
Portugal
Helpful tools like this is what homebrew is about.
Too bad those of us wanting a WiiU, now. Prices will soar even for soft bricked ones.

Good job, guys.
 

GerbilSoft

Well-Known Member
Member
Joined
Mar 8, 2012
Messages
2,395
Trophies
2
Age
34
XP
4,253
Country
United States
Great stuff Gary. :)

Regarding the buying a DS game for Haxchi Isn't there already an alternative in development already for this I remember hearing about a little while ago?
That's FailST, and while the exploit is technically already out, a convenient installer is not available yet.

On that note, I wonder how long it'll be until a certain someone starts claiming BluUBomb is the "last thing" needed to "fully unlock" the Wii U.
 

godreborn

Welcome to the Machine
Member
Joined
Oct 10, 2009
Messages
38,471
Trophies
3
XP
29,138
Country
United States
That's FailST, and while the exploit is technically already out, a convenient installer is not available yet.

On that note, I wonder how long it'll be until a certain someone starts claiming BluUBomb is the "last thing" needed to "fully unlock" the Wii U.

I think I know which person you're talking about. ;)

--------------------- MERGED ---------------------------

btw, is failst the same thing as aroma or is aroma using that exploit?
 

huma_dawii

Well-Known Member
Member
Joined
Apr 3, 2014
Messages
3,880
Trophies
2
Age
33
Location
Planet Earth
XP
4,270
Country
United States
who have a Wii U.
That's FailST, and while the exploit is technically already out, a convenient installer is not available yet.

On that note, I wonder how long it'll be until a certain someone starts claiming BluUBomb is the "last thing" needed to "fully unlock" the Wii U.
hahhahahhaha the guy that says USB can be unlocked and get SSD SPEEDS!! haahaha i remember that guy. Good times.
 

GerbilSoft

Well-Known Member
Member
Joined
Mar 8, 2012
Messages
2,395
Trophies
2
Age
34
XP
4,253
Country
United States
btw, is failst the same thing as aroma or is aroma using that exploit?
Aroma is a new homebrew environment that IIRC uses FailST for the persistent installed title (instead of requiring a DS VC title). FailST itself can be used for "anything", though as mentioned before, there isn't a convenient installer yet.
 
  • Like
Reactions: godreborn

godreborn

Welcome to the Machine
Member
Joined
Oct 10, 2009
Messages
38,471
Trophies
3
XP
29,138
Country
United States
What could this lead up to?

it's a way to get into the homebrew channel (or any rpx, I think) if you've messed up the browser or region hax, etc. it doesn't need the browser to correct the problem. it's good for partial bricks, because that part of the system is no longer usable usually due to user error.

--------------------- MERGED ---------------------------

iirc, the rpx is the main executable for games and apps on the wii u. I don't think they're all named the same though, just extension is the same.

--------------------- MERGED ---------------------------

can't be used to fix a cbhc brick though (already asked), since the system won't sync a wiimote at the error screen. most other bricks should be fixable as long as you can get to the home screen.

edit: you should be able to install haxchi with it if the browser is too screwed up, so it's an alternative to having to use the browser to get your foot in the door.
 
Last edited by godreborn,

Deleted member 546149

Well-Known Member
Member
Joined
Dec 18, 2020
Messages
2,000
Trophies
2
XP
6,972
it's a way to get into the homebrew channel (or any rpx, I think) if you've messed up the browser or region hax, etc. it doesn't need the browser to correct the problem. it's good for partial bricks, because that part of the system is no longer usable usually due to user error.

--------------------- MERGED ---------------------------

iirc, the rpx is the main executable for games and apps on the wii u. I don't think they're all named the same though, just extension is the same.

--------------------- MERGED ---------------------------

can't be used to fix a cbhc brick though (already asked), since the system won't sync a wiimote at the error screen. most other bricks should be fixable as long as you can get to the home screen.

edit: you should be able to install haxchi with it if the browser is too screwed up, so it's an alternative to having to use the browser to get your foot in the door.
Can't wait for BluuuuuueBomb for the switch
 
  • Like
Reactions: godreborn

raxadian

Well-Known Member
Member
Joined
Nov 10, 2018
Messages
4,380
Trophies
1
Age
41
XP
4,586
Country
Argentina
Well, give it a few years and the Wii Uh will be fully unlocked.

That being said, since the Xbox One is basically dead at this point, are there any hacks to it? Or everyone is just happy with developer mode?
 

godreborn

Welcome to the Machine
Member
Joined
Oct 10, 2009
Messages
38,471
Trophies
3
XP
29,138
Country
United States
Can't wait for BluuuuuueBomb for the switch

it may happen. I think this exploit is named after the bluebomb on the wii. however, Nintendo seems to be at the top of their game with switch security, so who knows. I'm not a part of that scene, but after the first exploit coming out within days of release (pegaswitch or something, I think, then cdn working until they patched it), Nintendo has patched all loopholes it would seem. because the switch is even more a success than the wii, with both hardware and software, that may be why Nintendo is so aggressive with the lawsuits. that would be my guess/opinion anyway without knowing much about switch security or exploits.

--------------------- MERGED ---------------------------

I don't know if the ps5 is this way, but both ps3 and ps4 require no verification when downloading, unlike the switch now, so you can download content on the pc, just can't use it without a license. I read that the ps4 is designed to use 4GB chunks, because that's the max it can, then it uses a manifest file to combine all chunks into a working pkg (learned that on psdevwiki thanks to a link by @KiiWii ). that's why games on psn for the ps4 are in 4GB chunks. the system can't read any larger for some reason, so it combines them using the manifest file. if you go to to the patch sites, they also have 4GB chunks at max due to this. I also remember downloading final fantasy vii remake via the pc, and it was the same way.

--------------------- MERGED ---------------------------

I just had a thought with this exploit (don't think it will work), but I'm wondering, since I think it's an iosu hack, if you could wup server to fix a cbhc brick. you may have to be on the home menu, but what that does is it allows ftp while on the home menu. this is the original way to install haxchi. it's slow as hell though, but it works, just might have to be on the home menu to initiate it.

nm, I don't think it will work, because the wiimote won't connect, but it was just a traveling thought.
 
  • Like
Reactions: KiiWii

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • TwoSpikedHands @ TwoSpikedHands:
    Do I restart now using what i've learned on the EU version since it's a better overall experience? or do I continue with the US version since that is what ive been using, and if someone decides to play my hack, it would most likely be that version?
  • Sicklyboy @ Sicklyboy:
    @TwoSpikedHands, I'll preface this with the fact that I know nothing about the game, but, I think it depends on what your goals are. Are you trying to make a definitive version of the game? You may want to refocus your efforts on the EU version then. Or, are you trying to make a better US version? In which case, the only way to make a better US version is to keep on plugging away at that one ;)
  • Sicklyboy @ Sicklyboy:
    I'm not familiar with the technicalities of the differences between the two versions, but I'm wondering if at least some of those differences are things that you could port over to the US version in your patch without having to include copyrighted assets from the EU version
  • TwoSpikedHands @ TwoSpikedHands:
    @Sicklyboy I am wanting to fully change the game and bend it to my will lol. I would like to eventually have the ability to add more characters, enemies, even have a completely different story if i wanted. I already have the ability to change the tilemaps in the US version, so I can basically make my own map and warp to it in game - so I'm pretty far into it!
  • TwoSpikedHands @ TwoSpikedHands:
    I really would like to make a hack that I would enjoy playing, and maybe other people would too. swapping to the EU version would also mean my US friends could not legally play it
  • TwoSpikedHands @ TwoSpikedHands:
    I am definitely considering porting over some of the EU features without using the actual ROM itself, tbh that would probably be the best way to go about it... but i'm sad that the voice acting is so.... not good on the US version. May not be a way around that though
  • TwoSpikedHands @ TwoSpikedHands:
    I appreciate the insight!
  • The Real Jdbye @ The Real Jdbye:
    @TwoSpikedHands just switch, all the knowledge you learned still applies and most of the code and assets should be the same anyway
  • The Real Jdbye @ The Real Jdbye:
    and realistically they wouldn't

    be able to play it legally anyway since they need a ROM and they probably don't have the means to dump it themselves
  • The Real Jdbye @ The Real Jdbye:
    why the shit does the shitbox randomly insert newlines in my messages
  • Veho @ Veho:
    It does that when I edit a post.
  • Veho @ Veho:
    It inserts a newline in a random spot.
  • The Real Jdbye @ The Real Jdbye:
    never had that i don't think
  • Karma177 @ Karma177:
    do y'all think having an sd card that has a write speed of 700kb/s is a bad idea?
    trying to restore emunand rn but it's taking ages... (also when I finished the first time hekate decided to delete all my fucking files :wacko:)
  • The Real Jdbye @ The Real Jdbye:
    @Karma177 that sd card is 100% faulty so yes, its a bad idea
  • The Real Jdbye @ The Real Jdbye:
    even the slowest non-sdhc sd cards are a few MB/s
  • Karma177 @ Karma177:
    @The Real Jdbye it hasn't given me any error trying to write things on it so I don't really think it's faulty (pasted 40/50gb+ folders and no write errors)
  • DinohScene @ DinohScene:
    run h2testw on it
    +1
  • DinohScene @ DinohScene:
    when SD cards/microSD write speeds drop below a meg a sec, they're usually on the verge of dying
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    Samsung SD format can sometimes fix them too
  • Purple_Heart @ Purple_Heart:
    yes looks like an faulty sd
  • Purple_Heart @ Purple_Heart:
    @Psionic Roshambo i may try that with my dead sd cards
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    It's always worth a shot
  • TwoSpikedHands @ TwoSpikedHands:
    @The Real Jdbye, I considered that, but i'll have to wait until i can get the eu version in the mail lol
    TwoSpikedHands @ TwoSpikedHands: @The Real Jdbye, I considered that, but i'll have to wait until i can get the eu version in the...