Hacking Wii U Hacking & Homebrew Discussion

[endoverend]

His "exploits" are html pages testing different vulnerabilities.

So basically, not in any way exploits.

 

[RCJayce]

Potential vulnerabillities is more accurate.

Hmmm, let's just call them "Maybe potential vulnerabilities". Anyway I have a doubt, MN1 has a USB Gecko?

 

[RCJayce]

What does MN1 having a USB Gecko have to do with anything? The Wii U can't even fit a USB Gecko, if I remember correctly they go in the GC memory card slot...

Hmmm, let me show you a video: have fun.

 

[Marionumber1]

It was an exploit though.

An exploit kind of has to exploit something.

 

[FPSRussi4]

An exploit kind of has to exploit something.

Pfft, what do YOU know?

 

[Bug_Checker_]

Hmmm, let me show you a video: have fun.

Perhaps you missed the part where it was revealed it was a hardware AND software(unreleased) combo.

Hardware stuff starts @ like 19:20 in this version of video.

 

[RCJayce]

Perhaps you missed the part where it was revealed it was a hardware AND software(unreleased) combo.

Yup clearly, I missed that. So until today the software is unreleased? only F0F have it? btw: Thanks for the info.

 

[dojafoja]

I'm webkit bug hunting with that restricted bug finder program. I need a place to host the layout test (potential vulnerability) html files...

Any reason that you aren't just using the built in file hosting? Just wondering because I haven't done extensive testing with it, is there something wrong with it?
Just seems easy to copy/paste, host right from within the program that you are finding the layout tests with. Plus you never have to provide a file name to the console browser. It's always your_local_ip:8000 regardless of which file you are hosting. BTW, you do know that some of those html files depend on other html files within the LayoutTests directory right? Make sure whatever you use to host the files can find ALL the files. I think you said in a video that you are 10 years old? I have two kids your age LOL... Don't get too excited and get ahead of yourself, people can be quick to bash other people on internet forums. Keep doing what you are doing with the browser though and learn as much as you can. Be selective about what and when you post and people won't flame

 

[WulfyStylez]

A bunch of f0f's particular exploits are patched already, for what it's worth. Also their hardware stuff was just them using GPIOs for communication since they weren't exploiting cafeos. We're exploiting the browser so we can just use networking to do RPC-type stuff.

 

[Ray Lewis]

A bunch of f0f's particular exploits are patched already, for what it's worth. Also their hardware stuff was just them using GPIOs for communication since they weren't exploiting cafeos. We're exploiting the browser so we can just use networking to do RPC-type stuff.

Thanks for sharing that Wulfy. That is something that I've thought of as potentially being annoying; needing to use the browser online and then the kernel exploit from there. It would be great if there was another way to launch the kernel exploit. By "not exploiting cafeos" are you saying they used hardware to bypass that to get what they were after? Along with nwplayer1234 and marionumber1 (a few others also) it seems your posts are from a more informed perspective. I am so naive it is not even funny. Like my mind is wondering, "Communicating with what?" Lol, please don't laugh too hard

 

[rumblpak]

Thanks for sharing that Wulfy. That is something that I've thought of as potentially being annoying; needing to use the browser online and then the kernel exploit from there. It would be great if there was another way to launch the kernel exploit. By "not exploiting cafeos" are you saying they used hardware to bypass that to get what they were after? Along with nwplayer1234 and marionumber1 (a few others also) it seems your posts are from a more informed perspective. I am so naive it is not even funny. Like my mind is wondering, "Communicating with what?" Lol, please don't laugh too hard

From what I understand, it really didn't have much to do with doing it this way over the other. At some point can someone find a different entry point, probably, but is it really worth the time to invest when there are literally thousands of unpatched webkit bugs? The reason that they didn't exploit CafeOS is because they had no interest in piracy, it was as simple as that.

 

[the_randomizer]

A bunch of f0f's particular exploits are patched already, for what it's worth. Also their hardware stuff was just them using GPIOs for communication since they weren't exploiting cafeos. We're exploiting the browser so we can just use networking to do RPC-type stuff.

About that, there are some people, like myself, whose router has no ability to blacklist Nintendo's update servers whatsoever (damn you, Google Fiber). Are those people totally screwed when it comes to avoiding inadvertent updates when using the browser exploit?

 

[fatsquirrel]

About that, there are some people, like myself, whose router has no ability to blacklist Nintendo's update servers whatsoever (damn you, Google Fiber). Are those people totally screwed when it comes to avoiding inadvertent updates when using the browser exploit?

Id like to know that too if possible :o

 

[the_randomizer]

Id like to know that too if possible :o

Worse case scenario, one could get a router; I spoke with the Google rep and he told me that with their network box (which acts as a modem/router combo), connect another router through that, then tie the Wii U to the router then blacklist the update server IP addresses, but that is a bit too much trouble since I shouldn't have to but additional hardware just to prevent the Wii U from updating when using the exploit. So far, none of the those involved have taken the time to answer my question.

 

[uyjulian]

About that, there are some people, like myself, whose router has no ability to blacklist Nintendo's update servers whatsoever (damn you, Google Fiber). Are those people totally screwed when it comes to avoiding inadvertent updates when using the browser exploit?

Get a better router (I have Netgear R6300), and go connect that to your modem/router combination (aka the box the ISP rents to you). Install DD-WRT on your router you bought.
Or if your computer has an ethernet port + wifi card, you could set up a network using that.

 

[the_randomizer]

Get a better router (I have Netgear R6300), and go connect that to your modem/router combination (aka the box the ISP rents to you). Install DD-WRT on your router you bought.
Or if your computer has an ethernet port + wifi card, you could set up a network using that.

No way in hell can I get a router to hook up to the modem. One, I don't have a job, buying a router is kind of, well, impossible for me until I get a job, makes things kind of hard to obtain. Two, I shouldn't have to pay for additional hardware (See: post #2797 above) just so I can prevent the Wii U from updating. Three, I do have a laptop that has Ethernet port as well as WiFi I also have a desktop but that just has an Ethernet port. Couldn't I just use my laptop instead? If only Wii U hackers could find a way to permanently spoof firmware to make the console never update again, but, I don't see that ever happening for a very long time.

 

[jammybudga777]

really random idea and probable wouldnt work. but just thought what if you had a android device that you can turn into a hotspot? couldnt you then block it via the android device? just and idea before anyone moans n tbh i doubt it would work

 

[the_randomizer]

really random idea and probable wouldnt work. but just thought what if you had a android device that you can turn into a hotspot? couldnt you then block it via the android device? just and idea before anyone moans n tbh i doubt it would work

Then why did you suggest it? lol. Is that supposed to make those who can't blacklist IP addresses feel better?

 

[jammybudga777]

Then why did you suggest it? lol. Is that supposed to make those who can't blacklist IP addresses feel better?

i suggested it because its called an idea. which i clearly said i doubt would work. but im like u and no next to nothing so thought ide put it out there.

 

[the_randomizer]

i suggested it because its called an idea. which i clearly said i doubt would work. but im like u and no next to nothing so thought ide put it out there.

Ah, well, then that means for those who can't block IP address are shit out of luck. That's just fan-freaking-tastic, really screwed the pooch on that one. Yup, we're screwed all right.