Hacking Testing WiiU Browser Exploit on 5.1.0

[Tgames]

Specials thanks to :

• Marionumber1 - ROP chain design/implementation
• TheKit - WebKit bug finding, ROP chain implementation
• Hykem - Finding ROP gadgets
• bubba - Testing WebKit bug candidates
• comex - Access to the coreinit and WebKit binaries
• Chadderz - Blind memory dumping on 5.0.0
• Relys - Testing exploits

To quick test the exploit use my server, i have compiled a hello world with the tools provided (from Marionumber1).

1) Start the Wii U (5.1.0 Version maximum)
2) Open the web browser
3) Got to http://tgames.fr/tgames/wiiu
4) Wait few seconds...
5) The Wii U launch the hello world

Edit : The same but in english : http://tgames.fr/tgames/wiiu-eng

 

[darkseekerliu]

Great to see it is working on the newest firmware. Thanks for the step by step.

 

[btoast777]

Cool, just tried it out on my Wii U! Now if only I knew French...

 

[Tgames]

English version here (but not interesting because it's just a hello world) :

http://tgames.fr/tgames/wiiu-eng

 

[Huntereb]

So it's safe to update to 5.1? I'm looking at you, Marionumber1.

Where is the discussion thread where all this information is being put out at?

 

[Bug_Checker_]

Specials thanks to :

• Marionumber1 - ROP chain design/implementation
• TheKit - WebKit bug finding, ROP chain implementation
• Hykem - Finding ROP gadgets
• bubba - Testing WebKit bug candidates
• comex - Access to the coreinit and WebKit binaries

To quick test the exploit use my server, i have compiled a hello world with the tools provided (from Marionumber1).


1) Start the Wii U (5.1.0 Version maximum)
2) Open the web browser
3) Got to http://tgames.fr/tgames/wiiu
4) Wait few seconds...
5) The Wii U launch the hello world

Edit : The same but in english : http://tgames.fr/tgames/wiiu-eng

So it's safe to update to 5.1? I'm looking at you, Marionumber1.

Where is the discussion thread where all this information is being put out at?

http://gbatemp.net/threads/wii-u-browser-exploit-updated-works-on-5-1-0.369436

 

[purechaos996]

Awesome, My WiiU updated itself to 5.1.0 before I had a chance to block the update server so I'm glad I didn't miss out Good job.

 

[btoast777]

So it's safe to update to 5.1? I'm looking at you, Marionumber1.

Where is the discussion thread where all this information is being put out at?

It looks like the Web exploit itself is A-OK in 5.1. As far as the kernel exploit that's been talked about, Chadderz hasn't confirmed it, but *believes* Nintendo hasn't patched it up. You can follow the action in this thread for the official word (the last couple of pages are the new updates). http://gbatemp.net/threads/wii-u-hacking-discussion.367489/

 

[Huntereb]

AFAIK, the Web exploit itself is A-OK in 5.1. As far as the kernel exploit that's been talked about, Chadderz hasn't confirmed it, but *believes* Nintendo hasn't patched it up. You can follow the action in this thread for the official word (the last couple of pages are the new updates). http://gbatemp.net/threads/wii-u-hacking-discussion.367489/

I'll stick with 5.0 for now, then. Thanks for the info!

 

[Tgames]

@Bug_Checker, it's fixed

 

[the-green]

but now, what we could wait to see in the near futur ?? we still need a kernel exploit !

 

[VinsCool]

My WiiU is updating I will test it later and report my results

 

[razielleonhart]

i am still sticking with 4.X just be on the safe side just because it was the magic number for the 3ds

 

[the_randomizer]

i am still sticking with 4.X just be on the safe side just because it was the magic number for the 3ds

5.1 is perfectly safe though, so it's nothing like the 3DS and being severely limited with a specific firmware

 

[VinsCool]

5.1 is perfectly safe though, so it's nothing like the 3DS and being severely limited with a specific firmware

I am pretty sure he meant piracy...

 

[WaryLouka]

I can confirm it works.

By the way, if you want to block Nintendo automatic updates:

Go into the router and block the following ip's:

• 96.17.161.145
• 184.50.229.158
• 184.50.229.137
• nus.cdn.wup.shop.nintendo.net

I blocked them, and it effectively blocks the updates. Yay!
( It also blocks Nintendo 3DS updates )

 

[VinsCool]

Your picture is SOOO sharp I can see fingerprints and dust XD

 

[WaryLouka]

Your picture is SOOO sharp I can see fingerprints and dust XD

I have an incredibly good camera.

 

[WaryLouka]

Sorry for double posting, but how does the expoit works? I never heard of it.1

 

[FireGrey]

I have an incredibly good camera.

You can't just take a picture of an exploit with a quality camera, where's all the blur and low resolution?