Hacking Virtual Console Hack Theory

[DGSystems]

.

 

[Xlom3000]

Actually there is a VC hack that was just discovered this morning using the exact method you are discribing here. I'm actually wondering if you aren't the guy who figured it out on these other forums. I"m not sure the rules on outside linking to other forums however.

 

[Digeman]

Waitwaitwaitwait a minute! There is a working VC hack!?

 

[_zZz_]

i think there is no problem to put external links here. its a free forum

 

[DGSystems]

.

 

[shaunj66]

You can link to other forums no problem, as long as they don't host or supply links to any illegal material.

 

[Dirtie]

Everything you just talked about is nothing new, the #wiidev guys figured that much out not long after the Wii was released. In fact, someone was supposedly able to do just as you said, and "emulate" the server - before the update came along that broke the DNS redirection trick (the exact method was not revealed publicly).

http://mozy.org/wii/

Edit: Links to the VC files have also been available for quite a while, check out Darkfader's site: http://darkfader.net/wii/vc/
(out of date now however).

 

[Xlom3000]

well then, here you go friend. You must have bought atleast one VC game for this to work

http://www.ps3news.com/forums/wii-chat/ins...html#post158591

 

[DGSystems]

.

 

[_zZz_]

Seems a nice guide.. but it only works for games that were already downloaded

How to Install Wii VC Games From Your PC

PC INSTRUCTIONS PART 1
1. Download the "PS3 ProxyServer GUI English" at http://www.ps3news.com/forums/downlo...o=file&id=3673
2. Install (obviously)
3. Find your network connection, right click it, click status, then the support tab, and take note of your computers IP Address and the Default Gateway

WII INSTRUCTIONS
4. Go to Wii System Settings, then to internet, under wii system settings 2, and choose connection settings.
5. Select a new connection, or one you can change.
6. Using wireless, search for an access point.
7. Pick your default point, and let it auto connect.
8. Then go back to that connection you just made and select change settings.
9. Leave the SSID the same, leave security the same
10. On Auto-Obtain IP select no, and then advanced settings.
11. Change your Wii's IP address to 192.168.1.xxx (xxx=any number you will remember) The subnet mask is 255.255.255.0 and the default router is the same as the default gateway from step 3.
12. Then on Auto-Obtain DNS select no, and advanced settings. For Primary DNS insert your default gateway from step 3 and leave secondary DNS blank (all zeros)
13. For Proxy Server Select use and then advanced settings.
14. Insert your computers IP Address from step 3. and make the port 8080, and select no for user name & password.
15. On MTU Value insert 1500
16. Then save and DON'T TEST YET!

PC INSTRUCTIONS PART 2
17. Open up PS3 ProxyServer GUI english (should be located on your hard drive under program files, but not on the start menu)
18. Click the big start button before doing anything
19. For IP address insert your wii's IP address you set in step 11, and leave the port at 8080.
20. Check the Wii box.

WII INSTRUCTIONS PART 2
21. Start the connection test, if all goes well it should connect, decline/cancel the system update.
22. Go to the Wii Store
23. Go to the VC games, and then to games you've purchased.
24. Take note of one of them, then go to the wii home, then to wii storage, then channels, and delete that games channel.
25. Now go back to the VC games that you've downloaded, and pick redownload on the game you just deleted, and confirm until the game is downloaded.

PC INSTUCTIONS PART 3
26. In the PS3 ProxyServer program, click the Logs tab.
27. You will see many address pop up.
28. The addresses you will need will end in tmd, 00000000, 0000001, 0000005, 000006 (only tested with NES, other systems may vary)
29. Once these show up, click each one and save into a folder (ex: Super Mario Bros. VC folder)
30. Once these have downloaded, take the addresses you obtained in step 28 for the downloads and put all of them into the third tab of the proxyserver program. (Do this by clicking add for each address (five in all), then place the website address on the left. Then to the right click that little dot, and direct it to the file that you downloaded via the address on the left on your computer. Do this for all five files.

WII INSTRUCTION PART 3
31. Go and delete whichever game you had just redownloaded, and then go and download it again. Instead of downloading from the net it will download from your computer. This can be verified by looking at the logs on the proxyserver program, and by the speed of the download (almost instant)

I have only tested this with NES games.

I have also found out how to find download links for games you haven't purchased. To do this you must go to the description page of the game. Then in the proxyserver take note of the website that shows up. Then compare it to your other address and you should see a pattern, especially if you redownload two NES games.

I haven't been able to check the checksum from the one on my System to the one on my computer due to my memory card reader on my pc acting up.

Also haven't been able to get any unpaid games to install. I think the TMD file holds the information we need though.


Here are some links to games:

Solomon's Key
http://ccs.cdn.shop.wii.com/ccs/down...14F45/00000006
http://ccs.cdn.shop.wii.com/ccs/down...14F45/00000005
http://ccs.cdn.shop.wii.com/ccs/down...14F45/00000001
http://ccs.cdn.shop.wii.com/ccs/down...14F45/00000000
http://ccs.shop.wii.com/ccs/download...0100000001/crl
http://ccs.shop.wii.com/ccs/download...0146414F45/tmd

SUPER MARIO BROS.
http://ccs.cdn.shop.wii.com/ccs/down...14745/00000006
http://ccs.cdn.shop.wii.com/ccs/down...14745/00000005
http://ccs.cdn.shop.wii.com/ccs/down...14745/00000001
http://ccs.cdn.shop.wii.com/ccs/down...14745/00000000
http://ccs.shop.wii.com/ccs/download...0100000001/crl
http://ccs.shop.wii.com/ccs/download...0146414745/tmd

The Legend of Kage
http://ccs.cdn.shop.wii.com/ccs/down...15445/00000006
http://ccs.cdn.shop.wii.com/ccs/down...15445/00000005
http://ccs.cdn.shop.wii.com/ccs/down...15445/00000001
http://ccs.cdn.shop.wii.com/ccs/down...15445/00000000
http://ccs.shop.wii.com/ccs/download...0100000001/crl
http://ccs.shop.wii.com/ccs/download...0146415445/tmd

Also note the CRL file. it is 0kb and if downloaded is blank under notepad. Also note it is downloaded from the same place in each file.

Happy Hacking!

P.S. Sorry if this is crappy, it's late, and I'm tired.

btw, if you post this guide someplace else, at least give me credit and link back to PS3news.com thanks.

 

[DGSystems]

.

 

[Dirtie]

As far as I can see, the information in the posted link still won't let you play games you don't own. Like I said, there doesn't look like there's anything new here :/

 

[Xlom3000]

No it doesn't. You are missing what he's saying.


Basically, You use the program to make the wii think it's redownloading a game you already have, while it tells your pc to intercept that request and send it a different game. The wii recompiles the data you are sending it, and presto, you have a game you didn't have before.

 

[DGSystems]

.

 

[Xlom3000]

bah I'm an idiot. I missed the line about not having unpaid games work. but it's a start anyway now that info is out on how to do this

 

[Dirtie]

No it doesn't. You are missing what he's saying.


Basically, You use the program to make the wii think it's redownloading a game you already have, while it tells your pc to intercept that request and send it a different game. The wii recompiles the data you are sending it, and presto, you have a game you didn't have before.

Then why does he make this little statement?:
"Also haven't been able to get any unpaid games to install. I think the TMD file holds the information we need though."

I'll repeat myself - this has been gone over again and again, so unless there's a real loophole or the encryption algorithm is discovered, the likelihood of being able to get free VC games is slim.

I think I remember now that when roto was able to do it, it was achieved by some sort of packet injection (at router level).


By the way, each major version of .NET is standalone - even if you had 2.0 or 3.0 installed you'd have to install 1.1

 

[shaunj66]

Exactly, the guy is only re-downloading games he's already purchased. The only difference is the Wii is downloading them directly from his PC.

 

[DGSystems]

.

 

[Xlom3000]

Yeah, I'm sorry, I missed that line. Feel like a jerk for creating this false hope for everyone now. Thanks for the info about .net however. I figured having 2 would count for all of them.

 

[Dirtie]

Then why does he make this little statement?:
"Also haven't been able to get any unpaid games to install. I think the TMD file holds the information we need though."

I'll repeat myself - this has been gone over again and again, so unless there's a real loophole or the encryption algorithm is discovered, the likelihood of being able to get free VC games is slim.


I dont agree, the wii shop is just a normal website and all console-locking is done client side (from what I can see, please tell me if im wrong here) so in theory sending the correct commands to the client "Download FAGP" would make the client believe it is connected to a real server and downloading a real game?

I may be completely off here, but please give me a reason why this theory is incorrect then I can forget it

It's not that simple. There's secure server queries, encryption keys, etc. all involved. Theoretically it might be possible, but it'd take some pretty major hacking to run a server that would allow you to do that sort of thing from what I can gather.