Hacking Reverse engineer WiiKeyU for Homebrew?

Ryanrocks462

Wii U/3DS Hacker.. Will test anything, A Pirate
Banned
Joined
Jun 18, 2014
Messages
566
Reaction score
222
Trophies
0
Location
California
XP
162
Country
United States
would it be possible to reverse engineer wiikeyu for establishing code execution for running homebrew on WiiU?
 
would it be possible to reverse engineer wiikeyu for establishing code execution for running homebrew on WiiU?


Hold that thought! Out of the box, no, as emokid stated above, its simply a drive emulator. However, we "could" theoretically utilize it for launching homebrew, once we are able to fakesign isos. Of course, we're a long way off from that, but if we can fakesign isos homebrew apps could be released as disc images for use with ODE's. Of course, this could easily be stamped out by an update, but just throwing it out there :P.
 
Even then, it wouldn't be much help. Fakesigning disc images (that are actually homebrew apps) seems like the only plausible way to do it with a drive emulator. Again, Nintendo could easily stamp out running fakesigned isos with an update. Remember the trucha bug scenario for the wii? Although you could restore the trucha bug on later system menus, but without a full blown exploit for Wii U mode, we wouldn't be able to restore such a bug
 
Hold that thought! Out of the box, no, as emokid stated above, its simply a drive emulator. However, we "could" theoretically utilize it for launching homebrew, once we are able to fakesign isos. Of course, we're a long way off from that, but if we can fakesign isos homebrew apps could be released as disc images for use with ODE's. Of course, this could easily be stamped out by an update, but just throwing it out there :P.

would it possible to create a home-brew based UDE and then start developing a launcher inside that UDE ?
 
maybe but even then, fakesigning would need to play a role in this. As far as the console is concerned, it sees the drive emulator as a completely unmodified original disc drive, technically leaving all security still intact. The ODE has to compensate for the security still being there, so it has to emulate all the necessary authentication steps (one of them being to make sure the "disc" encrypted properly). An ODE launching method, isn't impossible, just impractical, but it might be a good solution for some who refuse to tamper with their Wii U firmware (which we will be able to do eventually). Again though, if you go this route, don't plan on updating your console ever again, at least until a full blown Wii U exploit is out in the open. Because if you need to re-enable running fakesigned "discs" (isos) down the road, its not going to be possible without said exploit.
 
is that even for sale? cobra announced an ODE but nothing else....
i believe they are waiting for more games to come out, so it would make any sense to pirate it.

i mean, i got gw bc there's a looot of great games, but on wiiu? i have WW and pikmin collecting dust for months
 
you cant run unsigned code on the console through the wiiu disc drive. simple. i think isos are signed as well so if you modify the iso you break the signature.
 
  • Like
Reactions: Marionumber1
The WiiUKey
you cant run unsigned code on the console through the wiiu disc drive. simple. i think isos are signed as well so if you modify the iso you break the signature.

Remember when Nintendo completed ****** up RSA implementation on the Wii? XD
 
lol who doesn't remember xD


Sony's ECDSA "random number" implementation was funnier though. haha

If anyone who's interested in history of poorly implemented cryptography algorithms on game consoles you should check out:

Writeup on Trucha Signing Bug

KaKaRoTo's Blog on Sony ECDSA algorithm

Also, if you enjoyed the Trucha Signing bug write up you should look at how previous consoles without signature checks were hacked through game ROMs/ISOs. For example: You could softmod the Sony Placestation 2 by injecting your own .elf into a game which has 2 elf files by editing and burning a new ISO and then use swap disk method.

Console developers have gotten better at implementing cryptography, but we find other ways in, for example through web browser. ;)
 
Sony were just really bad when it came to disc swapping for some reason... even Saturn was secure years before... and PSP had a memory stick swap method very early on! I bet if you could mod a PSP to have a different UMD loader and we could actually burn them you could probably swap them too.. poorly encrypted isn't even the word for simply having the decrypted executable right in the directory with the encrypted one... wtf was that?
 

Site & Scene News

Popular threads in this forum