Hacking OTP access via IOSU kernel

[vanartic]

Are you on 5.5.1, if not you'll have to update before it works.

yeah, 5.5.1E here, what exactly am i supposed to update?

 

[callmebob]

Doubt they´ll patch anything till Zelda if at all. They still want to push as much hardware as possible. Which probably still won´t be much.

 

[MRJPGames]

yeah, 5.5.1E here

Just try again then, you're just having bad luck.

 

[jbuck1975]

tried both selfhosting iosu.elf and loadiine.ovh to launch the OTP viewer

still getting zeroes after dozens of tries

First try worked with loadiine.ovh. second try didn't. 3rd try did.

 

[smileyhead]

Worked first try.

 

[vanartic]

well hot damn as soon as i mention it not working, it does

 

[AboodXD]

So you're gong to hurt Nintendo by sharing a code that is used by only your console?

He WILL hurt Nintendo badly, because IIRC this data includes a lot of important keys, like the Common Key. [emoji14]

BTW, this is legit. Tried it with my Wii U, it worked from the 1st try.

 

[EclipseSin]

He WILL hurt Nintendo badly, because IIRC this data includes a lot of important keys, like the Common Key.[emoji14]
BTW, this is legit. Tried it with my Wii U, it worked from the 1st try.

Guys, the end of the data is always different, because the data ends with a console-specific key!

The end of the data should be 000000E1, for JTAG status (E1 on retail)

800000E1 for dev units iirc.

 

[AboodXD]

You sure?

 

[EclipseSin]

You sure?

7 (Misc bank) 0x3FC (0xFF * 4) 0x04 bytes JTAG status.
Set to 0xE1 in retail.
If bit 0x80 is set, JTAG is disabled.

http://wiiubrew.org/wiki/Hardware/OTP

 

[AboodXD]

Oops, double checked, you're right...[emoji14]

 

[baselhamad]

guys, Donald trump is trusted, i compared my Data with my friend Data and it wasn't the same (some of the codes are the same but it's actually the same for all) Donald trump in right, donald trump is trusted, no fakes, no photo fake or anything about the fake results, everything is real with that guy

--------------------- MERGED ---------------------------

Oh....

i think that you didn't saw peach colors on super smash bros wii u, she have the daisy color and hair color

--------------------- MERGED ---------------------------

yeah, 5.5.1E here, what exactly am i supposed to update?

do you have homebrew app store? if you have, try to install iosu otp there and test it, it will work like a charm, if it didn't work, try again, that's what happened to me, it worked with me. give it a try.

 

[Reecey]

The end of the data should be 000000E1, for JTAG status (E1 on retail)

800000E1 for dev units iirc.

Mine says 8000000E1 at the end everytime? is that correct, dev unit? how is all this supposed to come together with Hilary & Trumps links, "Hilary & Trump" omg must be the same person logging in I just cannot see why they cant leave the political bit out though.

 

[migles]

It won't, and anyone with a brain would advise against doing it. If you make a single mistake, your OTP is invalid and it WILL brick your console.

This is a Proof of Concept, nothing more. Once we actually have something to do with OTP, there will be a tool for dumping an accurate .bin file and not just displaying it on screen.

i guessed that it didn't automatically dump to the sd card was lack of sd drivers\access or something like that..
thus the only output was the screen...

 

[EclipseSin]

Mine says 8000000E1 at the end? is that correct, dev unit?

Well, it's believed that it is set to 800000E1 in dev units according to discussion yesterday, so that point is still in question I guess. I suppose it's possible they have 'JTAG disabled' on some retail Wii U's as well.

Someone would probably know more than me though.

--------------------- MERGED ---------------------------

i guessed that it didn't automatically dump to the sd card was lack of sd drivers\access or something like that..
thus the only output was the screen...

The program was stuck in an arm interrupt (or something) I believe is what I was told, and thus no net or sd access. I think that'll change though eventually.

 

[Reecey]

Well, it's believed that it is set to 800000E1 in dev units according to discussion yesterday, so that point is still in question I guess. I suppose it's possible they have 'JTAG disabled' on some retail Wii U's as well.

Someone would probably know more than me though.

--------------------- MERGED ---------------------------


The program was stuck in an arm interrupt (or something) I believe is what I was told, and thus no net or sd access. I think that'll change though eventually.

Thanks I didn't know what was better a Jtag unit or a Dev unit but very interesting even so.

Edit: Can you dump the otp now to sd? I have missed something in the thread?

 

[migles]

The program was stuck in an arm interrupt (or something) I believe is what I was told, and thus no net or sd access. I think that'll change though eventually.

heh, i guess nowadays modem noise through headphone jack isn't a good option right?

 

[Dylon99]

Mine says 8000000E1 at the end everytime? is that correct, dev unit? how is all this supposed to come together with Hilary & Trumps links, "Hilary & Trump" omg must be the same person logging in I just cannot see why they cant leave the political bit out though.

Mine also says 0x800000E1 at the end and I don't have a dev unit too.

 

[EclipseSin]

More to look into :3

 

[Reecey]

More to look into :3

Sorry to report, my mistake I just thought I should double check those numbers again I wasn't too sure and no it doesn't, it says 000000E1 at the end!

--------------------- MERGED ---------------------------

Mine also says 0x800000E1 at the end and I don't have a dev unit too.

I misread it says 000000E1 at the end I just checked again to be sure