Tutorial Fix SSL module brick without a NAND backup using Bluubomb

testing_this

Member
OP
Newcomer
Joined
May 17, 2021
Messages
16
Trophies
0
Age
41
XP
159
Country
United States
header.png

I had my Wii U bricked since 2017 when I messed up the SSL module trying to bypass Miiverse restrictions. Everytime I turned on the console it freezed while loading the Wii U Menu.

I hadn't a NAND backup so it was dead with no hope of ever be revived... until now.

With the help of @GaryOderNichts I was able to fix it. He developed a custom version of his tool Bluubomb which is capable of reinstall the module. So, this is how we (he) did it:


First of all, please check the Bluubomb thread and get familiar with the tool. Also, neither me nor Gary are responsible for any further damage you could cause to your console.

You will need:

- A PC running Linux, in my case I used Ubuntu 21.10.
- A bluetooth adapter.
- A full sized SD card or a micro SD card with an adapter.

Step 1: Download and set the Bluubomb requirements.
  1. Run
    Bash:
    sudo apt install build-essential libbluetooth-dev libglib2.0-dev libdbus-1-dev git
    to install the required dependencies.
  2. Run
    Bash:
    git clone https://github.com/rnconrad/WiimoteEmulator && cd WiimoteEmulator
  3. Run
    Bash:
    source ./build-custom.sh
    to build BlueZ.
    Don't worry if building the emulator itself fails due to missing SDL headers. Just continue with the next steps.
  4. Stop the already running bluetooth service
    Bash:
    sudo systemctl disable --now bluetooth
  5. Reboot
  6. Run
    Bash:
    sudo hciconfig hci0 reset
  7. Run
    Bash:
    cd WiimoteEmulator && sudo ./bluez-4.101/dist/sbin/bluetoothd -d -n
Step 2: Download and set Bluubomb.
  1. Get the custom version of Bluubomb from here (it has a fix that Gary is preparing for a future release). Unzip it and copy it to the folder where you gonna exec it.
  2. Open a new terminal and make the bluubomb file executable by running
    Bash:
    chmod +x bluubomb
Step 3: Download and run JNUSTool
  1. Get JNUSTool from here, you have to download the 0005001b10054000 wup (I have a US console, check the corresponding wup for your region!).
Step 4: Download the custom Bluubomb kernel.
  1. Get the custom kernel bin from here, unzip it and rename it to bluu_kern.bin
Step 5: Copy the payload to your SD card.
  1. Format your SD card to FAT32.
  2. Copy the bluu_kern.bin to the root of your SD card.
  3. Create a folder named install to the root of your SD card. Copy the contents of the 0005001b10054000 wup to it.
Step 6: Set the console.
  1. Insert your SD card.
  2. Turn on your console, wait a couple of seconds and turn it off by long pressing the Power button. This will trigger the "Force the console to shut down" screen the next time you Power on.
  3. Power on the console again and when you reach this screen, press the Sync button on your console, this will display the Sync screen.
1.jpg
2.jpg



Step 7: Run bluubomb on your computer.
  1. Run
    Bash:
    sudo ./bluubomb
    and wait for the pairing process to complete.
    This might take a minute. If nothing occours after a while, press Ctrl + C and try again.
3.png



At this point Bluubomb should have sent the payload to the console and installed a fresh copy of the SSL module, if everything went right the console should reboot by itself and load correctly. If you copied the files wrong the console will Power off.

Thanks again to @GaryOderNichts for his help and patience.

dedicated.png
 

Attachments

  • bluubomb.zip
    13.5 KB · Views: 4
  • install_stuff.zip
    1.4 KB · Views: 2
Last edited by testing_this,

testing_this

Member
OP
Newcomer
Joined
May 17, 2021
Messages
16
Trophies
0
Age
41
XP
159
Country
United States
Nice guide, this should help some people to revive their lost Wii U.

I believe that there is a crucial word "neither" missing in that sentence^^
I am not a native speaker though, so correct me, if I am wrong

Me neither, haha. Please someone rephrase that portion so I can correct it.
 
Last edited by testing_this,

PalindromicBreadLoaf

Has ran into every thinkable error on the Wii
Member
Joined
Aug 22, 2018
Messages
380
Trophies
0
Age
20
Location
Canada
XP
1,417
Country
Canada
Me neither, haha. Please someone rephrase that portion so I can correct it.
Yes, as a native speaker, it should say "Also, neither me nor Gary are responsible for any further damage you could cause to your console." But people should get the idea anyways.
 
  • Like
Reactions: testing_this

mive

Well-Known Member
Member
Joined
Jul 19, 2018
Messages
247
Trophies
0
Age
38
XP
532
Country
Germany
....
  1. Stop the already running bluetooth service
    Bash:
    sudo systemctl disable --now bluetooth
  2. Reboot
...

Does just stopping bluetooth.service also work (systemctl stop) without reboot?

no arch support? :ohnoes:
this should also work with arch (as with any other linux disto)
but instead of hciconfig you'll probably have to use either bluetoothctl or btmgmt

if you really need hciconfig, see https://wiki.archlinux.org/title/bluetooth#Deprecated_BlueZ_tools

edit:
hciconfig tool will be built if you compile bluez
 
Last edited by mive,

testing_this

Member
OP
Newcomer
Joined
May 17, 2021
Messages
16
Trophies
0
Age
41
XP
159
Country
United States
....

...

Does just stopping bluetooth.service also work (systemctl stop) without reboot?


this should also work with arch (as with any other linux disto)
but instead of hciconfig you'll probably have to use either bluetoothctl or btmgmt

if you really need hciconfig, see https://wiki.archlinux.org/title/bluetooth#Deprecated_BlueZ_tools

You have to reboot in order to prevent Simple Paring Mode to be stuck on Enabled.

See:

https://github.com/GaryOderNichts/bluubomb#simple-pairing-mode

https://gbatemp.net/threads/bluubomb-a-primary-wii-u-entrypoint-via-bluetooth.588522/post-9654196
 
Last edited by testing_this,
  • Like
Reactions: mive

RGeeK

Member
Newcomer
Joined
May 13, 2021
Messages
5
Trophies
0
Age
21
XP
16
Country
France
Why exactly do you want to "replace" your SEEPROM?
I was wrong, I wanted to talk about the sysprod.xml file sry. I bricked my old wii u in 2018, I replaced the sysprod.xml of my wii u by that of my friend who doesn't have the same wii u (not the same serial number), the solution for the unbrick will be to recreate the sysprod.xml of this wii u using the serial number written on the console. I saw tutorials on the internet with NAND DUMPER (I need a tency 2 or something like that I think) but I don't want to buy something to solder it to my console.
 

GaryOderNichts

Well-Known Member
Member
Joined
Aug 9, 2018
Messages
465
Trophies
1
XP
2,738
Country
Germany
I was wrong, I wanted to talk about the sysprod.xml file sry. I bricked my old wii u in 2018, I replaced the sysprod.xml of my wii u by that of my friend who doesn't have the same wii u (not the same serial number), the solution for the unbrick will be to recreate the sysprod.xml of this wii u using the serial number written on the console. I saw tutorials on the internet with NAND DUMPER (I need a tency 2 or something like that I think) but I don't want to buy something to solder it to my console.
If you can get to the pairing screen to pair a Wiimote, it should be possible.
 
General chit-chat
Help Users
    Coto @ Coto: well... there you have it