Hacking comex's brawl haxx

[icefireicefire]

Just because something loads data means you can exploit it. There has to be a BUG in the data loading.

 

[DeMoN]

Sorry I'm a Wii hacking noob but how is this any different from the Twilight Hack? (besides the fact the games are different)
I tried to get Twilight hack to work but it never did so this Brawl hack is definitely of importance to me.

 

[OSW]

Sorry I'm a Wii hacking noob but how is this any different from the Twilight Hack? (besides the fact the games are different)
I tried to get Twilight hack to work but it never did so this Brawl hack is definitely of importance to me.

That's weird, but have you also tried bannerbomb? Surely one of them must work for you?

The difference is,

twilight hack is a savegame hack. Nintendo fixed it by adding a check into the system menu for this hacked savegame and then deleting it if found.

brawl hack works off brawls stage builder, loading the hack from SD card.

Nintendo can't patch this through system menu, because when you are in-game, system menu is not running, so you could just insert the SD card with the hack in it after you boot the game.

I think... LOL

 

[triassic911]

Like I said on wiinewz, Nintendo should just sit down and cry.

 

[SifJar]

I've been thinking. Surely Nintendo can patch this. System Menu 4.0 blocked swearing in Animal Crossing, which is a patch I believe, done by updating an IOS or something, so surely they could use the same method to block this, no?

 

[Slowking]

The more of you say that Nintendo won't be able to patch it or that they won't do it because it's to complecated, the more I'll laugh when they aptch it with the next update. So please continue. ^^

 

[BlackEnigma]

Like I said on wiinewz, Nintendo should just sit down and cry.

I'd be crying tears of joy if I had sold over 50 million consoles in 2 and a half years without a price drop after what happened with the Nintendo 64 and Gamecube.

And surely everyone won't be continuing to play games after this generation of consoles but it might just be the hackers who are crying when the next gen rolls around.

PS: I'm sorry for using "rolls around" such a used and abused phrase... oh no I did it again...

 

[feidhlim1986]

Its great that Comex had found a new exploit but I think he should have kept it to himself until Nintendo patch BannerBomb.

 

[clownz]

This is awesome. I dont think anything will ever be perfect. Every system that comes out people will find ways to modify it. It's just electronics and no one is perfect so there will always be flaws. I think the fact the wii might be easier to modify then other systems is a benefit because it makes me personally want to buy more wiis just to tinker with.

so if i understand correctly this exploit is based on the way ios 36 handles brawl? I was under the assumption the exploits have been taking advantage of a buffer overflow exploit, meaning the games themselves cannot handle large names causing it to crash thus allowing the code to be run?

If its the games themselves, then there's got to be plenty of them left out there. and if I am thinking correctly whenever nintendo patches an IOS it's telling the game to handle the crashes differently.

I am also thinking if everyone even just started messing around with a hex editor and start changing values in game saves downloaded from online the possibilities might be endless to what can be done causing the IOS not being able to handle and process the information correctly.

I am kinda getting old not and haven't done much but I was around for the great years of PHP/PERL exploits, DC emulation scene, the xbox 1 softmod scene and I just stopped. you guys are really bringing my motivation back

.

just babbling thinking on this and thanx for making my wii the best system to play on.

 

[Dantarion]

comex was working on this weeks before bannerbomb was released, if not longer. Its old news already

katana

 

[icefireicefire]

Just because something loads data means you can exploit it. There has to be a BUG in the data loading.

I know what you mean, I think I might have found an exploit after playing with the ID3v1 tag of a certain NIN mp3 that is "-4" seconds track length. I've been able to crash excite truck from creating a string in the tag beyond what ID3v1 tags allow, but I dont know coding enough to add on code after the crash. Maybe I should chat with the folks that know best how to do this, because I do think I might be onto something. I've been dicking with this for a few months just believing that I can make something work and so far I kinda have.

Wow, that MIGHT be something that could work. I actually would go into like #wiidev and ask around, since you have done some work there they probably will be more than willing to tell you what might be possible. I'd ask around.

 

[pspmte]

Internet CHannel

 

[FenrirWolf]

What about it?

 

[pelago]

Yeah, someone mentioned that they might be able to have IOS36 updated to stop the stack smash. I didn't know that an IOS could be made to do that.

Should be doable. For Example they could add a check, so files on SD get checked for a specific signature when beeing executed.

[NO NINTENDO. STOP READING HERE AND DON'T COPY THIS IDEA!

]

haha, doubt nintendo will be reading GBATemp

I'm sure they do.

Posts merged

QUOTE(icefireicefire @ Jun 6 2009, 01:55 AM)

Just because something loads data means you can exploit it. There has to be a BUG in the data loading.

You mean, "Just because something loads data doesn't mean you can exploit it", surely?

 

[Zeek03]

Wow I knew this was going to happen! A hack in stage builder... I knew it!

Ice fire you were wrong when you called us idiots for thinking that a brawl exploit wouldn'd be possible!

 

[yin666]

Any news or updates on this? I have a banner brick, and this seems to be my only option to fix it, (besides buying a new motherboard or something like that) I think this will be useful to a lot of users with this problems, hope this comes out soon, thanks anyway comex, you're the man!!

 

[djda]

Any news or updates on this? I have a banner brick, and this seems to be my only option to fix it, (besides buying a new motherboard or something like that) I think this will be useful to a lot of users with this problems, hope this comes out soon, thanks anyway comex, you're the man!!

If what i heard was correct then this will not be released any time soon. It was said that not till bannerbomb is patched (which might not be any time soon) that this will be released as that ensures as it is patched that there will be something to take the place of it immediately. And this way nintendo cant patch both exploits in one update.

 

[Dteyn]

I'm sure there are some other coders out there that could discover a new bug in another game as well. Team Twiizers (and others) have said that many games out there have bugs similar to the Twilight Hack, and could be exploited in a similar manner like a savegame exploit.

Considering that they've released the source code for the Twilight hack, all someone really needs to do is sit down with IDA Pro, disassemble the main.dol for Twilight Princess and trace how the savegame hack works... then disassemble the game executable for some other popular game like maybe Super Mario Galaxy or Guitar Hero, and find a similar exploit.

The nice thing is, this time around there is the Twilight hack source code to analyze, and plenty of tools available for decrypting/encrypting save game files. There is enough info out there that a skilled Wii homebrew coder could figure out and release their own savegame exploit. If only I had more time and Wii coding skills, I would give it a shot... I used to be good at finding exploits (different scene, nothing related to Wii) but unfortunately real life has gotten in the way of my coding time.

Of course, as others have mentioned there's really no need for another public exploit at this time, until Nintendo patches bannerbomb. There's no reason to give them the ammo to kill two birds with one stone. (or, as Ricky would say, 'get two birds stoned at once').

 

[frenchderf]

I just wonder but i think it is "yes" if SMBB launched with a chipped DVD drive will allow to run that Exploit (bravo !). If yes, i will use my spare dvd drive (with chip) to soft mod the others... ha ha ha.

Bravo

Frenchderf :oops:

 

[yin666]

Any news or updates on this? I have a banner brick, and this seems to be my only option to fix it, (besides buying a new motherboard or something like that) I think this will be useful to a lot of users with this problems, hope this comes out soon, thanks anyway comex, you're the man!!

If what i heard was correct then this will not be released any time soon. It was said that not till bannerbomb is patched (which might not be any time soon) that this will be released as that ensures as it is patched that there will be something to take the place of it immediately. And this way nintendo cant patch both exploits in one update.

That's a shame, I know actually bannerbomb is perfect for installing homebrew on any wii, but this hack could save many users without preloader or any trucha cIOS with a banner brick, I've been doing a research, and the problem with banner bricks is, that most of the people who got this, doesn't even now about bootmii or preloadert, thanks anyway!!