Hacking Major Problems Using Webkit Exploit on 5.5.1

[JimmyZ]

how do I get mongoose to use that? it went straight to the payload 5.5.1, then it did nothing.

I guess you put the mp4 file in the www folder? if so the index.html took priority, just point wii u browser directly at that mp4 file, like "http://192.168.0.233/550.mp4" instead of just "http://192.168.0.233/"

 

[Deleted User]

I never understand why they choose to generate the mp4 file by php on the fly while a static file is clearly better in every way.

If you are using a webhost, some people may not notice any difference between PHP and MP4 builds of the exploit.
Though if you are using a localhost, the MP4 exploit is unstable. This is because the entire file is downloaded to the Wii U before the video player even fully opens, which can sometimes crash. The latest PHP builds add a one second delay to allow the player to fully load, resulting in almost 100% accuracy.

 

[JimmyZ]

If you are using a webhost, some people may not notice any difference between PHP and MP4 builds of the exploit.
Though if you are using a localhost, the MP4 exploit is unstable. This is because the entire file is downloaded to the Wii U before the video player even fully opens, which can sometimes crash. The latest PHP builds add a one second delay to allow the player to fully load, resulting in almost 100% accuracy.

Actually I am using it on a localhost, it failed only one time for me IIRC, with PHP I get about 2/3 success rate, tested in June, when exactly do you mean by "latest"?

And, if the one second delay is only introduced later, why do they choose that in the first place?

update: just checked hbl repo, it was 27 days ago: https://github.com/dimok789/homebre...a8026c6#diff-a4b30a4843761a85242a7284404445d5

while I already got almost 100% in June, pretty sure I won't see any substantial advantage here.

 

[Deleted User]

Actually I am using it on a localhost, it failed only one time for me IIRC, with PHP I get about 2/3 success rate, tested in June, when exactly do you mean by "latest"?

And, if the one second delay is only introduced later, why do they choose that in the first place?

I'm referring to "latest" as the PHP scripts used by Loadiine.ovh and @Kafluke's local host. I refer to it as "latest" because dimok pushed it to the HBL repo a while ago.

 

[JimmyZ]

I'm referring to "latest" as the PHP scripts used by Loadiine.ovh and @Kafluke's local host. I refer to it as "latest" because dimok pushed it to the HBL repo a while ago.

loadiine.ovh used a somehow different payload, you can save them to disk and compare, Kafluke once claimed he got a break through to 100% boot rate, that's him switching to loadiine.ovh's mp4, and that's 3 months ago, I'll check the new ones.

 

[mame_au]

I find using XAMPP is good and reasonably easy to setup

 

[JimmyZ]

I find using XAMPP is good and reasonably easy to setup

for what it's worth, if using mp4 file, only two file is needed, mongoose.exe and a static mp4 file.

 

[JimmyZ]

Just tried the new one from hbl with the 1 sec delay, failed on the first try, while static mp4 from loadiine still works, and they haven't updated in the last three month.
@CreeperMario

 

[Kafluke]

loadiine.ovh used a somehow different payload, you can save them to disk and compare, Kafluke once claimed he got a break through to 100% boot rate, that's him switching to loadiine.ovh's mp4, and that's 3 months ago, I'll check the new ones.

It was a lot more that went into it than just switching to php from loadiine.ovh. We spent weeks hunting down the specific payloads that give better results from the browser. So it wasn't JUST Cybernatus's PHP but that was big help!