Hacking Crash WiiU via browser. Exploitable?

[OreNPluS]

I uploaded a smaller file already (~70kb). If you want to check it: DOWNLOAD

i cant load it from mega using the wii u, and if you trying to upload it to youtube, the code is changing so the bug is not happning, what to do ?

ok, i am trying to upload it to somewhere but i am getting error that the wii u cant load to file, ugh

 

[josiascaignard]

I'm sorry if this question is already answered but, what version of plex is used for the crash? I've read that the newest one had problems to duplicate the trick.

 

[Thirty3Three]

I'm sorry if this question is already answered but, what version of plex is used for the crash? I've read that the newest one had problems to duplicate the trick.

It's a web-based thing, and it worked for me

 

[ChrisX930]

You should install PLEX 2.2.4 on your PC and Put the video into the library. After this, Open the Video via browser (http://yourip:32400/web)

 

[rctgamer3]

Here's the 60.4kb one: Link

 

[ChrisX930]

Here's the 60.4kb one: Link

I don't think that you need to post a video that's only ~10kb smaller than my one. :/
There's already a official link provided in the first post

 

[rctgamer3]

I don't think that you need to post a video that's only ~10kb smaller than my one. :/
There's already a official link provided in the first post

Didn't notice, but, I thought, the smaller the size, the better

 

[ChrisX930]

Didn't notice, but, I thought, the smaller the size, the better

w're already under 100kb, that should be enough to the original "220MB" file^^

 

[OreNPluS]

ok i did it, got the crash thing, using plex myself

so weird ....

 

[WulfyStylez]

Can you guys find exactly how Plex is transcoding it? are the streams just being remuxed, or is one or both of them being transcoded?

 

[ChrisX930]

Can you guys find exactly how Plex is transcoding it? are the streams just being remuxed, or is one or both of them being transcoded?

I really don't know. I only noticed the crash but idk why it happens.

 

[OreNPluS]

so, this plex crash is exploitable or not ?

 

[Thirty3Three]

We dont know yet.

 

[WulfyStylez]

We'll likely look into this and other userspace exploits once we're done with, uh, other stuff. I'd look into it right now but I'm at school and I only brought my 360 and Dreamcast to the dorms. I regret nothing.

 

[Thirty3Three]

So the next step would be...?

 

[WulfyStylez]

So the next step would be...?

I mean, if you or someone else wants to look into it more, there's a few ways you can do it. Try seeing if Plex is transcoding the media, and if so what streams are being transcoded into what, and what streams are just being remuxed. Then you should be able to create your own crash file without having to use Plex. That helps with finding the reason it's crashing, if only just the tiniest bit. Still not much you can do from that front though. There's lower-level stuff we'd like to try in order to to diagnose what's causing this bug and if it's exploitable, but I'd have Marionumber1 explain that if he feels like it.

 

[ChrisX930]

So the next step would be...?

I think someone should dom something with Return Oriented Programming.
Unfortunately, I'm not able to do something like this. I don't know what I have to do and how to work with something

 

[Thirty3Three]

I mean, if you or someone else wants to look into it more, there's a few ways you can do it. Try seeing if Plex is transcoding the media, and if so what streams are being transcoded into what, and what streams are just being remuxed. Then you should be able to create your own crash file without having to use Plex. That helps with finding the reason it's crashing, if only just the tiniest bit. Still not much you can do from that front though. There's lower-level stuff we'd like to try in order to to diagnose what's causing this bug and if it's exploitable, but I'd have Marionumber1 explain that if he feels like it.

Thanks guys! Yeah, we may need to find a way to do this without Plex. What if Nintendo notifies Plex to "fix it"? You know, if it's from their end?
And using ROP was how they got the original one to work right? I'm not very knowledgeable in that respect either.

I tested the crash on my Vita and my PS4, and on the Vita, it just says after while, "This media cannot be played", and the browser crashes; just the browser though, then exits to the main menu. On the PS4, when entering the URL, it just says, "the PS4 cannot display this content" or something.

 

[linuxares]

What about the 3DS?

 

[OreNPluS]

Thanks guys! Yeah, we may need to find a way to do this without Plex. What if Nintendo notifies Plex to "fix it"? You know, if it's from their end?
And using ROP was how they got the original one to work right? I'm not very knowledgeable in that respect either.

I tested the crash on my Vita and my PS4, and on the Vita, it just says after while, "This media cannot be played", and the browser crashes; just the browser though, then exits to the main menu. On the PS4, when entering the URL, it just says, "the PS4 cannot display this content" or something.

so now we need to hack plex codes ?
we cant just save the install files of the version that make the crash of and work with it ?