Hacking Self-hosted payloads with only static HTML

[drizztbsd]

Yup, xampp /wamp / hax jar etc all work, and wiiubru.com etc... but ez share doesn't work. Has to be a PHP thing.

my payloads doesn't use PHP at all, just static hosting.
Some web servers just doesn't work

 

[Inaki]

I am at work now but I just thought I will play with MTU value in the wii u network settings later this afternoon... it *might* make a difference for us with these crappy wifi SD cards... it just *might*. The thing is lowering the MTU may change the timmings and buffering in the browser so it would make the whole .mp4 file be received in full before interpretting it... not really sure, just a hunch.

 

[Sakitoshi]

I set up iis on my win 7 notebook and worked at least as static mp4 files.
I just made some modifications and added the php alternative (nothing to do in job + teamviewer) but I'm in my job right now and can't test if it works

EDIT: forgot to say that I made it work first from my android phone and the mp4 files with this app.
https://play.google.com/store/apps/details?id=jp.ubi.common.http.server

 

[veggav]

I'm going home today and I'll give that a shot with OPEN WRT. This custom operational system is able to do simple http hosting. This would make things way easier

 

[Sakitoshi]

I'm going home today and I'll give that a shot with OPEN WRT. This custom operational system is able to do simple http hosting. This would make things way easier

I was thinking about doing the same thing, I also have a openwrt router (tp-link wr1043nd v1) working and now that I'm reading about it it can even do php, so it would be totally killer if it works. I could give it a try if I'm bored enough.

 

[drizztbsd]

using PHP on openwrt is overkill imho since you can use static hosting

 

[Sakitoshi]

using PHP on openwrt is overkill imho since you can use static hosting

I mean to use the php script for maximum success rate and easy payload update instead of using the pre-compiled mp4 files.

 

[MockyLock]

I'm using your package with kWS android server, and works perfect, selecting the route of the www in the app, and bookmark the ip + port do the trick.
Easy as fuck, thank you!!!

Hello !
Could you please explain a bit how you set up this server ?
I already installed kWS on my phone, and i would like some tips tp copy what needed where needed, and use it.
Thank you very much !

 

[drizztbsd]

Update:
After some tests and research I found that latency is very important in this exploit.
Having it selfhosted "in house" is the most reliable way, moreover using some "caching magic" with CloudFlare I think I increased the success ratio on 5.3.2 and 5.5.1 on http://git.io/wiiuhax too

 

[Patxinco]

Hello !
Could you please explain a bit how you set up this server ?
I already installed kWS on my phone, and i would like some tips tp copy what needed where needed, and use it.
Thank you very much !

1- Unzip "www" folder in the root of your phone SD card.
2- Start wifi hotspot of your phone (with or without data).
3- Configure the wifi connection in your WiiU.
4- Start kWS server, and set home directory to "/sdcard/www" in the settings menu.
5- Start server, and enter the host route on your WiiU browser, for example: http://192.168.1.1:8080 <--- In my case, and bookmark it.

And just that, is easy, good luck ^^

 

[Xplic1T]

I'm using your package with kWS android server, and works perfect, selecting the route of the www in the app, and bookmark the ip + port do the trick.
Easy as fuck, thank you!!!

1- Unzip "www" folder in the root of your phone SD card.
2- Start wifi hotspot of your phone (with or without data).
3- Configure the wifi connection in your WiiU.
4- Start kWS server, and set home directory to "/sdcard/www" in the settings menu.
5- Start server, and enter the host route on your WiiU browser, for example: http://192.168.1.1:8080 <--- In my case, and bookmark it.

And just that, is easy, good luck ^^

Triggering this way is the absolute best and most confined way to keep your system offline and host the payloads without the need of relying on wifi anywhere. (Still using this method and keeping my Wii U offline until emunand is released (Come on @smealum )

Buy an old tablet for 20 bucks and do this rather than any other self hosting trick. You can actually get use out of the tablet rather than hacking a usb flob or the self hosted sd card method which is expensive.

Note: Make sure its a tablet that supports CM 10.x or earlier ... CM 11+(Android 5+) nixed the hotspot option for tablets without cell capabilities (bought a used Kindle 7" 2015 edition and found that out the hard way -- No CM rom below 11)

 

[veggav]

It worked from my router using OpenWRT, since it has Luci web interface it already have uhttpd.

So all I did was copy the payload, in my case payload550.mp4 to the /www folder.
After that I accessed it with http://my home ip address/payload.mp4.
I even added it as a bookmark, in the end I need 3 clicks to load loadiine from my home network

 

[lordelan]

1- Unzip "www" folder in the root of your phone SD card.
2- Start wifi hotspot of your phone (with or without data).
3- Configure the wifi connection in your WiiU.
4- Start kWS server, and set home directory to "/sdcard/www" in the settings menu.
5- Start server, and enter the host route on your WiiU browser, for example: http://192.168.1.1:8080 <--- In my case, and bookmark it.

And just that, is easy, good luck ^^

At 2. take care to turn off data in any case. Otherwise the Wii U would get an update through your android device!

 

[MockyLock]

1- Unzip "www" folder in the root of your phone SD card.
2- Start wifi hotspot of your phone (with or without data).
3- Configure the wifi connection in your WiiU.
4- Start kWS server, and set home directory to "/sdcard/www" in the settings menu.
5- Start server, and enter the host route on your WiiU browser, for example: http://192.168.1.1:8080 <--- In my case, and bookmark it.

And just that, is easy, good luck ^^

Yeah thank you !
I'll give a try today hopefully.
I already set the kWS server. It seems that kWS didn't want to find the SD card of my phone, but only its internal storage (known as sdcard0, while my real µSD is external_sd)
Anyway, now i'll have to set the WiiU (my son is playing right now... 'have to wait ^^).
Do the IP have to be 192.168.1.1 like a box ?

--------------------- MERGED ---------------------------

At 2. take care to turn off data in any case. Otherwise the Wii U would get an update through your android device!

I'm actually learning how to set the WiFi hotspot according to your both tips.

 

[lordelan]

Yeah thank you !
I'll give a try today hopefully.
I already set the kWS server. It seems that kWS didn't want to find the SD card of my phone, but only its internal storage (known as sdcard0, while my real µSD is external_sd)
Anyway, now i'll have to set the WiiU (my son is playing right now... 'have to wait ^^).
Do the IP have to be 192.168.1.1 like a box ?

1. Use ES File Explorer to place the www folder ANYWHERE on your phone.
2. Hold on that folder through ES and go to properties or details. Write down the exact written path (like /emulated/0/www) or wherever it lays to put it in by hand into "home directory" at kWS settings.
3. Make sure to have Wifi and Data disabled while using kWS via Hotspot or you'll get an update through your phone/tablet!

 

[MockyLock]

YEAAAHHHHH
Thank you all of you !
Got it working ! I'm a totally noob in Android/Server/WiiU hack and got it working.
You're kings !
There's one thing left : i'm not sure if i really disabled Data in my WiFi hotspot settings...
Could we set Tubehax in the WiiU Connection settings ? (if it's a huUuge noob bullsh*t, please don't laugh...)

 

[Jow Banks]

YEAAAHHHHH
Thank you all of you !
Got it working ! I'm a totally noob in Android/Server/WiiU hack and got it working.
You're kings !
There's one thing left : i'm not sure if i really disabled Data in my WiFi hotspot settings...
Could we set Tubehax in the WiiU Connection settings ? (if it's a huUuge noob bullsh*t, please don't laugh...)

I'm hoping that you turned off the Wii-U, unplugged it, turned off the phone and removed the battery while you wait for an answer.
I'd be sad to see you come back and post an "I got Updated" post

 

[Xplic1T]

YEAAAHHHHH
Thank you all of you !
Got it working ! I'm a totally noob in Android/Server/WiiU hack and got it working.
You're kings !
There's one thing left : i'm not sure if i really disabled Data in my WiFi hotspot settings...
Could we set Tubehax in the WiiU Connection settings ? (if it's a huUuge noob bullsh*t, please don't laugh...)

As long as you aren't on cell you should be fine. No tablets out there have 2 wifi cards internally built in so as long as you are broadcasting your AP you should be fine... but just in case follow the first comment here http://stackoverflow.com/questions/...roxy-settings-in-android-especially-in-chrome and put in put in the tubehax dns ip address if you aren't certain ...

 

[Patxinco]

@MockyLock Glad you got it working.
@lordelan I placed that in 2, cause that depends now if you're up to date right now or not, like my case.
Since i set up this on my personal phone, and i cannot play as much as i would, there's no chance it can go updated without me knowing it, and still access eshop when need it, via this or home wifi (just changing the ssid makes it unavailable, and i can change it back when needed fast)
And i browse the temp enough times per day to know when a new update is released.

Sorry for the long read

 

[lordelan]

While Hotspot is turned on the phone shouldn't be able to go online. Just check to open www.google.com or something.
If not you're good to go.
Wifi is automatically turned off when you launch your Hotspot. So only your sim card can be responsible for a Wii U update.