5.4.0/5.5.0 MP4 Exploit

Discussion in 'Wii U - Hacking & Backup Loaders' started by Mathew_Wi, Jan 12, 2016.

Thread Status:
Not open for further replies.
Page 1 of 6
Share This Page

Share This Page

  1. Mathew_Wi
    OP

    Mathew_Wi bye

    Member
    7
    233
    Level 7
    Sep 29, 2009
    Since it was patched, there's no point in keeping this anymore. R.I.P StageFright.

    - Info -
    With this you can build (and in theory, run) homebrew for Wii U version 5.4.0 and 5.5.0. It is incredibly bad, and likely won't run any code for you whatsoever. Sounds good right? Yeah? Right on!

    - For Developers -
    We have been incredibly lazy about fixing this. However, I have a hint for you. Use the code spray code from previous HTML exploits, and embed the MP4 exploit to run code that way.

    In template540 and template550, at offset 0x79 to 0x7C contains the value that is in r30 when it crashes, which is an address to a point in the ROP buffer. Essentially leave the rest of the MP4 file unchanged if you plan on doing it via HTML/JS. If you want to use another ROP gadget, then the address that is spammed at the end of the file is the gadget that we initially jump to.

    - Download -
    http://puu.sh/mt6LQ/45a4ab7ae8.zip (Only builds 5.5.0 payloads, edit generate_mp4.py to generate 5.4.0 payloads.)

    - Credits -
    zhuowei - Pointing out the bug to Marionumber1 and I.
    Marionumber1 - All the fantastic ROP chain work. Plus all around masterful work. Wouldn't have been possible without him.
    Mathew_Wi - Shitty initial exploitation/debugging/5.5.0 ROP Gadgets
    MrRean - Helping in a way I can't quite remember.
    NWPlayer123 - Something!
    Hykem - I think he did something too, I can't remember, sue me.
    Original Crew - comex, Relys, TheKit, and of course Mr. Chadderz himself.

    - Special Thanks -
    NWPlayer123 for convincing Marionumber1 to allow me to participate in the group. <3

    If I forgot you, feel free to verbally abuse me on IRC or Skype.
     
    Last edited by Mathew_Wi, Jan 12, 2016
    Benuno, Korin, MiZ J0K3R and 31 others like this.
    #1 Jan 12, 2016
  2. WiiFoundLove

    WiiFoundLove GBAtemp Regular

    Member
    3
    267
    Level 3
    Jan 18, 2015
    Afghanistan
    YAY! Thanx! :D
     
    #2 Jan 12, 2016
  3. JohnathanMonkey

    JohnathanMonkey GBAtemp Advanced Fan

    Member
    4
    586
    Level 4
    Apr 26, 2013
    United States
    lol.jk nice touch
     
    MAXLEMPIRA likes this.
    #3 Jan 12, 2016
  4. OriginalHamster

    OriginalHamster UStealthy

    Member
    7
    3,381
    Level 7
    Nov 2, 2008
    Cote d'Ivoire
    Hykem exploit will make it compatible with 5.5.1, kappa.
     
    paulloeduardo likes this.
    #4 Jan 12, 2016
  5. Chuardo

    Chuardo GBAtemp Fan

    Member
    4
    343
    Level 4
    Oct 4, 2015
    Uruguay
    #5 Jan 12, 2016
  6. Droyd

    Droyd GBAtemp Regular

    Member
    2
    159
    Level 2
    Jan 3, 2016
    Antarctica
    So will 5.5.0 users be able to install homebrew channel without using any game for the exploit to run ?
     
    #6 Jan 12, 2016
  7. soniczx123

    soniczx123 GBAtemp Advanced Fan

    Member
    3
    574
    Level 3
    Jul 24, 2015
    What power does the End-User have with this?
     
    #7 Jan 12, 2016
  8. AboodXD

    AboodXD I hack NSMB games, and other shiz.

    Member
    10
    2,777
    Level 10
    Oct 11, 2014
    United Arab Emirates
    Not under a rock.
     
    #8 Jan 12, 2016
  9. kingraa777

    kingraa777 boom!

    Member
    5
    1,243
    Level 5
    Apr 17, 2015
    So what can I do with this ?
     
    #9 Jan 12, 2016
  10. shaneod

    shaneod GBAtemp Fan

    Member
    4
    348
    Level 4
    Mar 3, 2011
    5.5.0 users can't do much with this alone. 5.4.0 users will be able to do the same as 5.3.2 users basically, but 5.5.0 users won't be able to until an IOSU or kernel exploit is released
     
    #10 Jan 12, 2016
  11. KiiWii

    KiiWii Contributor

    pip Contributor
    17
    9,230
    Level 17
    Nov 17, 2008
    United Kingdom
    This is a great release of information, thank you and all involved.
     
    #11 Jan 12, 2016
  12. NexoCube

    NexoCube stop using piracy :(

    Member
    6
    1,219
    Level 6
    Nov 3, 2015
    France
    Stack Pointer
    it'a fake
     
    #12 Jan 12, 2016
  13. JohnathanMonkey

    JohnathanMonkey GBAtemp Advanced Fan

    Member
    4
    586
    Level 4
    Apr 26, 2013
    United States
    Could loadiine 5 come of this? Sorry if it's a stupid question and feel free to bash away! I'm a big boy and can handle it ;)
     
    #13 Jan 12, 2016
  14. Droyd

    Droyd GBAtemp Regular

    Member
    2
    159
    Level 2
    Jan 3, 2016
    Antarctica
    Aww, I was hoping to get a homebrew channel since I can't get the games needed for triggeing the exploit, but great reveal for 5.4 users, enjoy.
     
    #14 Jan 12, 2016
  15. Mathew_Wi
    OP

    Mathew_Wi bye

    Member
    7
    233
    Level 7
    Sep 29, 2009
    You could try it. However, chances are you won't be running code until someone else decides to fix it.
     
    ant888 likes this.
    #15 Jan 12, 2016
  16. oumoumad

    oumoumad GBAtemp Advanced Fan

    Member
    6
    798
    Level 6
    Apr 20, 2015
    France
    So you guys all abondoned this project and no one of you is planning to fix it ?
     
    #16 Jan 12, 2016
  17. MrKeplerton

    MrKeplerton Member

    Newcomer
    1
    17
    Level 1
    Dec 24, 2015
    but hey, it's someting :D
     
    #17 Jan 12, 2016
  18. NexoCube

    NexoCube stop using piracy :(

    Member
    6
    1,219
    Level 6
    Nov 3, 2015
    France
    Stack Pointer
    Oh my god. If w fix it, we can launch kexploit from a mp4 file :P
     
    #18 Jan 12, 2016
  19. Mathew_Wi
    OP

    Mathew_Wi bye

    Member
    7
    233
    Level 7
    Sep 29, 2009
    I forgot to replace build.py, I updated the download in the original post.
     
    MAXLEMPIRA likes this.
    #19 Jan 12, 2016
  20. NexoCube

    NexoCube stop using piracy :(

    Member
    6
    1,219
    Level 6
    Nov 3, 2015
    France
    Stack Pointer
    It didn't contain support for 5.5.0 ... If i compile it with the 5.4.0 format will it work in 550 ?
     
    MAXLEMPIRA likes this.
    #20 Jan 12, 2016
Page 1 of 6
Loading...
Similar threads with keywords: Exploit Hide similar threads
  1. shutterbug2000

    Memory Pit - A new DSi exploit for DSi camera!

    shutterbug2000, May 27, 2019, in forum: NDS - Emulation and Homebrew
    Replies:
    320
    Views:
    26,806
    alexander1970
    Jun 5, 2019 at 9:57 AM
  2. KiiWii

    [AIO] PS4 Exploit Guide

    KiiWii, Mar 2, 2018, in forum: PS4 - Tutorials
    Replies:
    6,042
    Views:
    730,451
    KiiWii
    Jun 5, 2019 at 9:56 AM
  3. shantaelover69420

    PSP3001: upgrading to a permanent exploit

    shantaelover69420, Jun 3, 2019 at 11:35 PM, in forum: PSP - Hacking & Homebrew
    Replies:
    5
    Views:
    194
    Ryccardo
    Jun 4, 2019 at 10:14 PM
  4. shantaelover69420

    PSP3001: upgrading to a permanent exploit

    shantaelover69420, Jun 3, 2019 at 11:35 PM, in forum: PSP - Hacking & Homebrew
    Replies:
    0
    Views:
    81
    shantaelover69420
    Jun 3, 2019 at 11:35 PM
  5. Leeful

    [RELEASE] Leeful Exploit Host Menu for Self Host and ESP devices.

    Leeful, Mar 26, 2019, in forum: PS4 - Hacking & Homebrew
    Replies:
    76
    Views:
    11,297
    Leeful
    Jun 2, 2019 at 4:11 PM
Thread Status:
Not open for further replies.