Hacking Where are the user account files on my wii u?

[Awesome_neos145]

Just setup my PNID today and now I'm trying to put the account files on the Wii U storage. Which brings the question...

Where are the user account files for the Wii U?

I tried using FTPiiU Everywhere to look for it and I simply cannot find the files!

Where are they located? Thanks!

EDIT: Found it, but every time I inject it, the user account gets deleted.

 

[Laf111]

The files you're looking for are here :

ACCOUNTS_FOLDER="storage_mlc/usr/save/system/act"

But there is other locations that might interest you and might be "linked" to the account

FRIEND_LIST="/storage_mlc/sys/title/00050030/1001520A" ! EUR one here !
MIIS_HEAD="/storage_mlc/sys/title/0005001b/10056000"
CERTIFICATES_CCERTS="/storage_mlc/sys/title/0005001b/10054000/content/ccerts"
CERTIFICATES_SCERTS="/storage_mlc/sys/title/0005001b/10054000/content/scerts"

see https://github.com/Laf111/Cemu2Wii-U/blob/main/getWiiuOnlineFiles.bat#L155 to get the remote paths.



You have to use WiiUFtpServer (it fixes files injection by setting rights on files uploaded).

Make a backup of all the files you replace (if it is the case).
You might also activate the CRC32 calculation to be sure of the integrity of files transferred.

EDIT : the account you're trying to inject already exists on the console ?

 

[Awesome_neos145]

The files you're looking for are here :

ACCOUNTS_FOLDER="storage_mlc/usr/save/system/act"

But there is other locations that might interest you and might be "linked" to the account

FRIEND_LIST="/storage_mlc/sys/title/00050030/1001520A" ! EUR one here !
MIIS_HEAD="/storage_mlc/sys/title/0005001b/10056000"
CERTIFICATES_CCERTS="/storage_mlc/sys/title/0005001b/10054000/content/ccerts"
CERTIFICATES_SCERTS="/storage_mlc/sys/title/0005001b/10054000/content/scerts"

see https://github.com/Laf111/Cemu2Wii-U/blob/main/getWiiuOnlineFiles.bat#L155 to get the remote paths.



You have to use WiiUFtpServer (it fixes files injection by setting rights on files uploaded).

Make a backup of all the files you replace (if it is the case).
You might also activate the CRC32 calculation to be sure of the integrity of files transferred.

EDIT : the account you're trying to inject already exists on the console ?

Yes, The account exists.

 

[Awesome_neos145]

The files you're looking for are here :

ACCOUNTS_FOLDER="storage_mlc/usr/save/system/act"

But there is other locations that might interest you and might be "linked" to the account

FRIEND_LIST="/storage_mlc/sys/title/00050030/1001520A" ! EUR one here !
MIIS_HEAD="/storage_mlc/sys/title/0005001b/10056000"
CERTIFICATES_CCERTS="/storage_mlc/sys/title/0005001b/10054000/content/ccerts"
CERTIFICATES_SCERTS="/storage_mlc/sys/title/0005001b/10054000/content/scerts"

see https://github.com/Laf111/Cemu2Wii-U/blob/main/getWiiuOnlineFiles.bat#L155 to get the remote paths.



You have to use WiiUFtpServer (it fixes files injection by setting rights on files uploaded).

Make a backup of all the files you replace (if it is the case).
You might also activate the CRC32 calculation to be sure of the integrity of files transferred.

EDIT : the account you're trying to inject already exists on the console ?

It got deleted EVEN with Wii U Ftp Server!!!!

 

[Laf111]

It got deleted EVEN with Wii U Ftp Server!!!!

Well, maybe it is not simple as that or impossible.
I don't know what is done on the Wii-U when you create/update a profile.

Just setup my PNID

What are you trying to do exactlty?
and why you didn't do it on the Wii-U directly ?

 

[Awesome_neos145]

Well, maybe it is not simple as that or impossible.
I don't know what is done on the Wii-U when you create/update a profile.


What are you trying to do exactlty?
and why you didn't do it on the Wii-U directly ?

Case closed. I figured it out.

 

[Laf111]

I figured it out.

Did you manage to do what you wanted?
Could you please develop to share it with us ?

 

[Duamutef_MC]

I am trying to actually get the Wii U to 'reset' the user id name (e.g. 80000001) when adding a new account, but even after editing persisid.dat and common.dat in the folder mentioned above it will still continue adding numbers such as 80000009, 8000000a, etc.

Anybody with a solution?

 

[Deleted member 571007]

I am trying to actually get the Wii U to 'reset' the user id name (e.g. 80000001) when adding a new account, but even after editing persisid.dat and common.dat in the folder mentioned above it will still continue adding numbers such as 80000009, 8000000a, etc.

Anybody with a solution?

Never played around with that side of the files as I never saw a need to, but if it follows the trend of a lot of the other files in the Wii U this might not be possible. For example the first account you create will always be 80000001 right? Goes on to the next in the list when you create a second one.. That trend stays and I'm not sure that it's possible to change unless you're willing to delete an account then remake / relink it in the desired slot.

Why may I ask that you want to do this? Personally I dont see how it should affect most users, even modders as the only time you run into a directory with this dependancy is when looking through Save data for games, which shouldnt be too hard to pin-point even with multiple accounts. Ontop of that you can just use SaveMii to dump the Save directory of any user and on any game you choose. Did this for Terraria, dumped the save with SaveMii, edited it and injected it into a different user to have hacked items on both accounts. Easy.

 

[godreborn]

I am trying to actually get the Wii U to 'reset' the user id name (e.g. 80000001) when adding a new account, but even after editing persisid.dat and common.dat in the folder mentioned above it will still continue adding numbers such as 80000009, 8000000a, etc.

Anybody with a solution?

are you sure you're actually replacing the file? check that the file was actually replaced if using filezilla as the byte size will be the same. also, it looks like 80000000 is how to get 80000001 to work.

 

[Duamutef_MC]

Simple OCD. It looks like putting 80000000 will still give you the earliest free number, e.g. 80000002 - there must be a hidden registry somewhere that we simply ignore, as any modification to persisid.dat and common.dat are overwritten when creating a new username.

 

[Maq47]

How can I manually unlink a PNID? I added a user to my Wii U, and now my password doesn't work anymore...

 

[godreborn]

How can I manually unlink a PNID? I added a user to my Wii U, and now my password doesn't work anymore...

I'm not sure if you can unlink it, and the password is a hash on the system. it's in the persisid.dat.