Toggle sidebar

Hacking RELEASE biskeydump and HacDiskMount - Switch eMMC decryption/real-time mounting tools

  • Thread starter Thread starter rajkosto
  • Start date Start date
  • Views Views 175,214
  • Replies Replies 295
  • Likes Likes 33
I made a backup of my nand and then put the bis key 2 in the system partition. Now when I open rawnand bin, HacDiskMount says 'Loaded 1 keys from primary KeyStorage'. Does this mean I just broke my nand image?
Is there a way to get back to my original nand file wher it didn't have the key stored?
 
hi guys, on a friend of me pc who has windows 10 64bits , when we launch hacdiskmount it crash when we click on dump or on test bis0 keys
his pc has only usb 2.0 ports,
the tegrarcm works though
thanx in advance for your help ;)
 
Last edited by softstar,
Can i import my game SAVE DATA to the system, using HacDiskMount? I'm in 5.1 with SXOS and Checkpoint (latest) is not working (it says the process is successful but it's waaay too fast, and even after making a new save file from scratch and i use Checkpoint, it will just remove the newly made save data, so i need to start from scratch again.
 
I hope someone can help me. I owned a switch and dumped the full nand and boot0 and boot1. The switch had a charging issues and was sent back to Ninty. I forgot to dump the biskeys, is there any way to get them from the NAND as I dont have access to the switch anymore?
 
rajkosto said:
biskeydump - Dumps all your Switch BIS keys for eMMC contents decryption, to be used as a fusee payload (upload via the normal fusee-launcher or my TegraRcmSmash.exe).

HacDiskMount - use your BIS keys and your RawNand.bin (or the physical eMMC attached via microSD reader or using a mass storage gadget mode in u-boot/linux) to dump, restore or REAL-TIME MOUNT AND EXPLORE/MODIFY partitions from the dump file or attached physical device !

Binaries available at https://switchtools.sshnuke.net
When appropriate, README.txt file inside the archive points to the source code location

(Yes I know these have been out for a few days, but only since today was biskeydump redistributable as a precompiled binary)
Click to expand...



I need help i was on 5.1.0 i got a exfat 64gb sdhc card i tried to follow a youtube guuide with the hackdisk software and patching with a xci that is 5.1.0 now my system wont even boot its jst a blue screen help please
 
@rajkosto sorry to bump this.. never ran into this before.

trying to help a friend out, installing a chip, dumped the nand, and tried to dump the keys.. but getting this error.

biskeydump keyblob decrypted using current sbk and tseec keys not valid

reading around, looks like something happened to boot0 or boot1? (all i've done was load hekate and dump fw).. is there a fix for this? or is he pooched? switch still boots/and games still load so unsure? just worried if i mess something up won't be able to restore it.
 
Uhm, I hate to state the obvious, but you neglected to mention it so it has to be said outright: you don't have autorcm do you? Because it does, after all, intentionally corrupt boot.
 
  • Like
Reactions: Subtle Demise
rajkosto said:
biskeydump - Dumps all your Switch BIS keys for eMMC contents decryption, to be used as a fusee payload (upload via the normal fusee-launcher or my TegraRcmSmash.exe).

HacDiskMount - use your BIS keys and your RawNand.bin (or the physical eMMC attached via microSD reader or using a mass storage gadget mode in u-boot/linux) to dump, restore or REAL-TIME MOUNT AND EXPLORE/MODIFY partitions from the dump file or attached physical device !

Binaries available at https://switchtools.sshnuke.net
When appropriate, README.txt file inside the archive points to the source code location

(Yes I know these have been out for a few days, but only since today was biskeydump redistributable as a precompiled binary)
Click to expand...

Trying to use biskeydumpv6 and getting TSEC FW CRC32 bb2f382a - incorrect

Error getting tsec key (retval -11), cannot continue

Trying to dump a 6.2 console

Edit: Nevermind, did a downgrade using Coidujour (pc) and was able to continue)
 
Last edited by Adran_Marit,
rajkosto said:
HacDiskMount - use your BIS keys and your RawNand.bin (or the physical eMMC attached via microSD reader or using a mass storage gadget mode in u-boot/linux) to dump, restore or REAL-TIME MOUNT AND EXPLORE/MODIFY partitions from the dump file or attached physical device !
Click to expand...
I know this might sound stupid, but has anyone tried a full NAND restore using HacDiskMount and memloader? I've been having trouble getting my Switch exfat compatible so this might be the best way for me to restore a backup. However, I want to be sure that restoring by partition rather than the by the whole NAND at once in Hakate is safe and "clean".
 
use hex workshop (or dd, whatever can open a physical disk and restore raw images to it) to do full nand restores through memloader, no need for HacDiskMount which is a partition mounter/decryptor/cryptor which you need none of if just restoring RawNand/Boot0/Boot1 (or you can restore boot0/boot1/rawnand via hekate, which should be much faster actually)
 
Last edited by rajkosto,
  • Like
Reactions: Cynder
rajkosto said:
use hex workshop (or dd, whatever can open a physical disk and restore raw images to it) to do full nand restores through memloader, no need for HacDiskMount which is a partition mounter/decryptor/cryptor which you need none of if just restoring RawNand/Boot0/Boot1 (or you can restore boot0/boot1/rawnand via hekate, which should be much faster actually)
Click to expand...
Alright, I restored my rawnand, boot0, and boot1. However, after restoring boot0, when I went to go start memloader to get boot1 ready it booted normally (overwrote me autoRCM through ReiNX I'm guessing, I expected it but there wasn't much I could do besides putting my jig in anyways, which I thought might cause its own problems if I was wrong). I powered down and went into RCM manually to put in boot1, but will having loaded the firmware in between restoring boot0 and 1 cause issues or leave evidence?

EDIT: I'm gonna go ahead and manually RCM and redo boot0 and rawnand anyways. May take a while but better safe than sorry

EDIT 2: Okay, everything seems to be in order. News that was unread when I made the backup and read later were marked as unread again, so that's a good sign for my NAND, and it boots, so that probably means that my boot files at the very least aren't completely screwed. Thank you for your help (here and in that other thread where you suggested this)
 
Last edited by Cynder,
Adran_Marit said:
Trying to use biskeydumpv6 and getting TSEC FW CRC32 bb2f382a - incorrect

Error getting tsec key (retval -11), cannot continue

Trying to dump a 6.2 console

Edit: Nevermind, did a downgrade using Coidujour (pc) and was able to continue)
Click to expand...

I was able to dump keys on 6.2 without problems. I got problems when generating keys.txt with
"Using BOOT0.bin to get keys from package1...
Could not find keyblob_mac_key_source! Please check the integrity of the data used in the current stage!" message, tho.
 
Last edited by Manurocker95,

Site & Scene News

Go to forum More news

Popular threads in this forum

Homebrew Homebrew game  Chrono Trigger - Switch port

Emulation Homebrew PS1/2 Emulator  ARMSX2-NX Initial Release

Homebrew Homebrew game  Half Life 2 (Source Engine) - Switch Port

Homebrew Homebrew game  GTA: Chinatown Wars - Switch port

Homebrew Homebrew game  Final Fantasy IV 3D Remake - Switch port

Homebrew Homebrew game  Lego Star Wars: The Complete Saga · Switch Port

Hacking Homebrew Tutorial  New Switch Modpack, NX-ModPack

Homebrew Homebrew game  Castlevania Symphony of the Night - Switch port