Hacking Self-hosted payloads with only static HTML

[drizztbsd]

This is a mod of the www directory present on homebrew_launcher and loadiine, but with mp4 payloads precompiled using bin2mp4.

This mod allows you to host the payloads ony *any* webserver.

Supported Wii U version:
Loadiine: 4.0.0, 4.1.0, 5.0.0, 5.3.2, 5.5.0, 5.5.1
Homebrew Launcher: 3.0.0, 3.1.0, 4.0.0, 4.1.0, 5.0.0, 5.3.2, 5.5.0, 5.5.1

Just download https://github.com/drizzt/wiiu-payloads/archive/www.zip, extract it and copy wiiu-payloads-www in your webserver.

No PHP, Python, Java, JavaScript, etc, required. Just a pure webserver.

Update:
Added a CloudFlare cached, GitHub hosted version of the site.
You just need to open http://git.io/wiiuhax on your Wii U.

 

[MattKimura]

This would be great for using wifi SD cards to host the exploit, right? Someone should test that out. To me it's like an easy way out of setting up your own server on a computer.

 

[drizztbsd]

This would be great for using wifi SD cards to host the exploit, right? Someone should test that out. To me it's like an easy way out of setting up your own server on a computer.

It should work, if the WiFi SD doesn't properly support fully hosting HTML websites you can just host your needed payload.mp4

 

[LinkFan16]

Sounds like a great solution for easy self hosting using an android phone, thanks for this. Gonna try it out and report my results later.

Edit:
Hosting the files on my android phone works like a charm, thanks again.

 

[drizztbsd]

Update:
Added a GitHub hosted version of the site: http://git.io/wiiuhax

 

[Xplic1T]

This works for 5.5.x also ?

 

[drizztbsd]

This works for 5.5.x also ?

Updated first post with list of supported Wii U version

 

[Xplic1T]

Why did they go the .jar route with the 5.5.x exploit if you can just serve it up simply like the 5.3.2 exploit via packages like these?

 

[drizztbsd]

Why did they go the .jar route with the 5.5.x exploit if you can just serve it up simply like the 5.3.2 exploit via packages like these?

I don't know, I only know this (static) implementation works

 

[urherenow]

Why did they go the .jar route with the 5.5.x exploit if you can just serve it up simply like the 5.3.2 exploit via packages like these?

because there are a lot of "they"s. The easiest method (disclaimer: I didn't feel the need to take a look at this one) is the one packaged with xampp. Nice web page that you can bookmark in the Wii U browser and just click(tap) a single button (after picking your firmware version... which I'm sure could be made automatic with a bit of php) to load the homebrew launcher or loadiine, and other buttons for things that require more than one button press, such as pygekco and such...

 

[The Real Jdbye]

Why did they go the .jar route with the 5.5.x exploit if you can just serve it up simply like the 5.3.2 exploit via packages like these?

Because the JAR negates the need for a big webserver, and it's easier to update payloads or add new ones (just replace/add the bin to the payloads folder)
They're both valid options, both will do the job fine, so it's just a matter of personal preference. But the JAR is very simple to use and requires no setup (as long as you already have Java) plus it's portable.

 

[drizztbsd]

because there are a lot of "they"s. The easiest method (disclaimer: I didn't feel the need to take a look at this one) is the one packaged with xampp. Nice web page that you can bookmark in the Wii U browser and just click(tap) a single button (after picking your firmware version... which I'm sure could be made automatic with a bit of php) to load the homebrew launcher or loadiine, and other buttons for things that require more than one button press, such as pygekco and such...

This select the correct Wii U version without the needs of PHP nor server side. Just (client-side) javascript

--------------------- MERGED ---------------------------

Because the JAR negates the need for a big webserver, and it's easier to update payloads or add new ones (just replace/add the bin to the payloads folder)
They're both valid options, both will do the job fine, so it's just a matter of personal preference. But the JAR is very simple to use and requires no setup (as long as you already have Java) plus it's portable.

HTML is more portable than Java

 

[The Real Jdbye]

This select the correct Wii U version without the needs of PHP nor server side. Just (client-side) javascript

--------------------- MERGED ---------------------------


HTML is more portable than Java

No... it really isn't. For the purposes of selfhosting, Java is far more portable and easier to use.

 

[drizztbsd]

No... it really isn't. For the purposes of selfhosting, Java is far more portable and easier to use.

you can't use the released jars on WiFi SD cards or on Android, but you can host static html or static mp4 files

 

[urherenow]

This select the correct Wii U version without the needs of PHP nor server side.

Nice, but is it 1 click to load homebrew launcher and 1 click to directly load loadiine?

and... I hate to go off topic, but other threads are getting big. Whatever games that require SSB to run (I guess I need to go out and buy that game in the morning, even though I'll never play. I hate that game), does it matter if you install updates for SSB or not?

 

[drizztbsd]

Nice, but is it 1 click to load homebrew launcher and 1 click to directly load loadiine?

and... I hate to go off topic, but other threads are getting big. Whatever games that require SSB to run (I guess I need to go out and buy that game in the morning, even though I'll never play. I hate that game), does it matter if you install updates for SSB or not?

You can see the 2 buttons on http://git.io/wiiuhax
If you click on Loadiine it will launch loadiine payload (aka SD:/wiiu/apps/loadiine_gx2/loadiine_gx2.elf)
If you click on Launcher it will launch homebrew launcher payload (aka SD:/wiiu/apps/homebrew_launcher/homebrew_launcher.elf)

 

[urherenow]

Not sure what the difference is between loading stuff from the launcher, or direct loading, but the package I speak of also has buttons for SD cafiine, dumpiine, and pygecko as well.

 

[drizztbsd]

Obviously I'm open for any suggestion about the site.
I chose to include only Loadiine and Homebrew Launcher because they are the only 2 homebrews that you can launch directly without the needs to click on the kernel exploit by hand

--------------------- MERGED ---------------------------

Not sure what the difference is between loading stuff from the launcher, or direct loading, but the package I speak of also has buttons for SD cafine, dumpiine, and pygecko as well.

dumpiine is deprecated by ddd, and ddd can be launched by Homebrew Launcher, pygecko is integrated in Loadiine gx2.
Cafiine for 5.5.1 is released today, I can consider including it if needed

 

[urherenow]

pygecko is integrated in Loadiine gx2.

I must search around for this. Been on 5.5 since the day it was pushed, so I'm very new to this scene. Loving life so far. Looking forward to CFW so I don't need to host a site or connect to the 'net in the future.

 

[drizztbsd]

I must search around for this. Been on 5.5 since the day it was pushed, so I'm very new to this scene. Loving life so far. Looking forward to CFW so I don't need to host a site or connect to the 'net in the future.

Me too, but I think we need an IOSU exploit to do that