Hacking Hykem's 5.5 iosu Exploit

  • Thread starter Thread starter SonyUSA
  • Start date Start date
  • Views Views 1,767,322
  • Replies Replies 6,864
  • Likes Likes 85
Status
Not open for further replies.
giphy.gif
53705938.jpg
 
Welp, time to buy me a Wii U! I just hope someday that Gamecube games and emulators can be played on the tablet, for even more comfy game play. I think I want that more than Wii U piracy tbh. :P
 
Was unfortunate that I found out about the whole exploit stuff after I updated to 5.5.0, but I've used TubeHax ever since (and should probably disable Standby mode) in hopes something would turn up, and it seems there has, and this soon too. Thank you.
 
Welp, time to buy me a Wii U! I just hope someday that Gamecube games and emulators can be played on the tablet, for even more comfy game play. I think I want that more than Wii U piracy tbh. :P

I'm pretty sure you can already do this. vWii can be set to output to Gamepad.

--------------------- MERGED ---------------------------

Hmm, anyone want to explain what this exploit can do? I have a 5.5.0 Wii U if it matters.

It'll open up the Wii U like the Wii was opened.
 
  • Like
Reactions: SomeGamer
lets keep in mind this is not a definite "OMG IOSU SUPER HAXZORS ON XMAS" Hykem himself said he WANTS to do an xmas suprise. That does NOT mean the entire thing with perfect compatibillity, no glitches or bugs, etc. That means he will try but he alse said "i can't promise"

yes it would be a good idea to prepare yourselves and your wiius. however dont take this as guarunteed either.

I want to do some kind of Christmas surprise yes, but take that with a grain of salt. I can't promise I will have the time to get everything ready by then
 
Yes, the IOSU can manipulate all the PPC kernel memory.
[...snip...]
The IOSU is a custom OS running on a separate ARM processor and is indeed related to hardware access, crypto, title management and all that. It's also responsible for launching the PPC kernel binary, so it had to be able to access it.
IOSU also has a userland and a kernel and, in fact, the first thing I attempted was to overwrite PPC kernel memory with IOSU userland access (kernel access is not even needed to mess with the PPC processor).

Does anyone know if this means the Wii U will be able to decrypt or install files downloaded from NUS without knowing the key? aka having the encrypted files and the Wii U has some master key/patched function which decrypts them much like with what happened on a few of the other consoles?
 
Does anyone know if this means the Wii U will be able to decrypt or install files downloaded from NUS without knowing the key? aka having the encrypted files and the Wii U has some master key/patched function which decrypts them much like with what happened on a few of the other consoles?
nope afaik each Wiiu/3DS title (these are separated into update/DLC/Game categories, each having their own key) has its own unique titlekey which is used for encryption, you cant just patch something that suddenly strips out the whole layer of encryption without knowing the encryption key (unless you work for the NSA *x-files music* yadda yadda)

without knowing exactly what console your talking about i couldn't say for sure, but most previous generations have relied on the whole common key to decrypt stuff, one key leaks and you can decrypt pretty much everything else, with the wiiu its more like you have the common key still, but now each title thing has 2 passwords, the common key combined with the title specific key are what is required to decrypt wiiu/3DS games, and the 3DS is actually taking the security a step further by adding a key scrambler which means rom decryption has to take place on the 3DS itself, just be glad the wiiu isnt using any of that crap
 
Last edited by gamesquest1,
Just me being skeptical here, but doesn't an IOSU exploit still need a usermode exploit (of which is not out yet for 5.4/5.5) to run? Because I read somewhere that IOSU, kernel, and usermode are three things all needed for total control.
 
Just me being skeptical here, but doesn't an IOSU exploit still need a usermode exploit (of which is not out yet for 5.4/5.5) to run? Because I read somewhere that IOSU, kernel, and usermode are three things all needed for total control.

That's what he is trying to work on finishing for release.
 
Just me being skeptical here, but doesn't an IOSU exploit still need a usermode exploit (of which is not out yet for 5.4/5.5) to run? Because I read somewhere that IOSU, kernel, and usermode are three things all needed for total control.

It will require a separate WebKit exploit first. It's not a problem for firmwares 2.0.0 to 5.3.2, but firmware versions 5.4.0 and 5.5.0 still need to have a proper exploit done. This is being worked on as well (it would be a bit pointless to release a working IOSU exploit without the WebKit entry points for 5.4.0/5.5.0).
In other words, the goal is to release everything at once, giving people more than enough time to prepare themselves. It wouldn't be fair to release the exploit only for up to 5.3.2 and leave 5.4.0/5.5.0 users in the dust.
 
If he's been a good boy Santa will give him a usermode exploit on Christmas.
Don't be like that, he will give us the exploit when it's done, he's in a battle against time and it's not just like it's an easy thing to do.

It would be cool if we can get it on Christmas, but he said that this was a hard task, if he doesn't have it ready please nobody start complaining and whining like crazy.
 
yes hyken said he already had up to 5.3.2 working but he was still delevoping acess for 5.4.0 and 5.5.0 and he wouldnt release them until everyone has iosu acess.

Btw for end users this mean nothing you will have iosu without any apps, which means for most people here it will be used until someone starts making something imagine having homebrew channel without any apps produced this is what will happen when iosu is released most likley, dont think you will be able to use loadiine on 5.4.0 or 5.5.0 since iosu acess doesnt even use kernel wich means loadiine wont work and will need to be built using iosu entry points and such so it will take some time to even port loadiine to iosu mode if possible, they might need to make a completely diferent code that will make it calling loadiine pointless and be a totaly diferent app.
 
We had Christmas yesterday. Where's my leet hax you promised??? This is crap. Lol,,,,
No really though, IOSU does not need webkit to break it. Just maybe the method Hykem is going about it might need userland webkit
 
  • Like
Reactions: Jahruze
We had Christmas yesterday. Where's my leet hax you promised??? This is crap. Lol,,,,
No really though, IOSU does not need webkit to break it. Just maybe the method Hykem is going about it might need userland webkit
hyken said to enter his iosu bug it needs a totaly diferent webkit exploit other than the ones released so its a diferent entry but he did say he needed the bowser and a webkit exploit to run iosu.
 
  • Like
Reactions: paulloeduardo
Status
Not open for further replies.

Site & Scene News

Popular threads in this forum