Hacking Eshop wii games Brazilian exploit

SakuraStarbur57

♾️AuDhD🏳️‍⚧️trans🌿stoner
Member
Joined
Jul 28, 2012
Messages
280
Reaction score
81
Trophies
2
XP
333
Country
Canada
Has anyone tried to backup the tickets for a Wii game on the eshop. I ask because I had skyward sword the Nintendo banned me from eshop and I can't redownload it. I would like to be able to play again.i have Mario galaxy for testing if someone wants to explain how to get eshop tickets with the wupclient and modified fw.img
 
Last edited by SakuraStarbur57,
Has anyone tried to backup the tickets for a Wii game on the eshop. I ask because I had skyward sword the Nintendo banned me from eshop and I can't redownload it. I would like to be able to play again.i have Mario galaxy for testing if someone wants to explain how to get eshop tickets with the wupclient and modified fw.img
You cant.
 
Has anyone tried to backup the tickets for a Wii game on the eshop. I ask because I had skyward sword the Nintendo banned me from eshop and I can't redownload it. I would like to be able to play again.i have Mario galaxy for testing if someone wants to explain how to get eshop tickets with the wupclient and modified fw.img

w.dldir("/vol/system_slc/rights/ticket/apps/")

I haven't had any reason to use it yet though, and I don't quite understand how it will help.
 
w.dldir("/vol/system_slc/rights/ticket/apps/")

I haven't had any reason to use it yet though, and I don't quite understand how it will help.
I think that is for eshop. Won't work on other consoles.

Here are my notes on dumping disc tickets to convert to eshop
Now, edit wupclient.py in iosuhax/wupserver/ with your Wii U's IP address. If you don't know your Wii U's IP address, You can get it from the internet browser with dev features on.
Code:

def __init__(self, ip='192.168.1.115', port=1337):

Do not change the port

Startup wupclient by going into the iosuhax/wupserver/ directory, shift+right click -> open command window, and then type: python -i wupclient.py

You should be given a couple short lines that look something like this:
Code:

E:\iosuhax\wupserver>python -i wupclient.py
0x43B38
0x0
0x0
>>>

You are now connected to your wupserver. Insert a game disc and type the following commands, separately, into this command prompt:

Code:

mount_odd_tickets()
w.dldir("/vol/storage_odd_tickets")

This will dump the tickets (and certs and tmds) of the disc that's inserted, and put them into your iosuhax/vol/ folder
 
w.dldir("/vol/system_slc/rights/ticket/apps/")

I haven't had any reason to use it yet though, and I don't quite understand how it will help.

I asume he will backup his ticket, grab the game from NUS and install with one of the WUD installers.
 
  • Like
Reactions: nexusmtz
Oh is see. Isn't the ticket deleted when deleted a game?
Someone posted no tickets will ever be deleted, but I didn't verify this myself.

On Wii they also were never deleted, unless you deinstalled using a WAD installer or AnyTitle Deleter.
 
It should work perfectly fine on the console on which he bought the game.
I have tried this for my paid DLC. Grabbed the ticket from DLC. Deleted the DLC from WiiU and tried to install the DLC with my own ticketon my own console. ERROR
Not one version of wupinstaller mods is installing DLC - with or without paid DLC ticket.
So I had to visit eShop and redownload my DLC.
It was for testing purposes - now I know it's not working.
 
Last edited by DaBlackDeath,
  • Like
Reactions: plyscho and xtheman
So Wii VC is now dumpable thanks to IOSU?
I'm wondering how are the Wii VC's actually stored.
Do they boot a DOL file?
If they do, we might be able to change the DOL file to boot another one.
Perhaps injected Lego game with the Homebrew Channel hack and then boot from there to HBC with the Cafe2Wii enabled to play all our Homebrew apps with the gamepad. :P
 
Thanks for the info! That's strange, is there any encryption mechanism at work other than the console bound ticket?
 
So Wii VC is now dumpable thanks to IOSU?
I'm wondering how are the Wii VC's actually stored.
Do they boot a DOL file?
If they do, we might be able to change the DOL file to boot another one.
Perhaps injected Lego game with the Homebrew Channel hack and then boot from there to HBC with the Cafe2Wii enabled to play all our Homebrew apps with the gamepad. :P
w.dldir("/vol/system_slc/rights/ticket/apps/") will dump ticket.

Why not just inject a homebrew instead of a game? That way we don't need 2 GB sd.
 
w.dldir("/vol/system_slc/rights/ticket/apps/") will dump ticket.

Why not just inject a homebrew instead of a game? That way we don't need 2 GB sd.
Well because you don't know how the Wii VC might react to homebrew apps.
It's certainly worth the shot for sure, but I said injecting a Lego game because those are somewhat small and we know it's a legit Wii game, unlike a homebrew app.
 
this is a list of all the folders that were in /vol/system_slc/rights/ticket/apps

--------------------- MERGED ---------------------------

i am using a modded wupclientgui.py for dumping if anyone is wondering
 

Attachments

  • 2016-10-27.png
    2016-10-27.png
    5.9 KB · Views: 307

Site & Scene News

Popular threads in this forum