Hacking Wii U Hacking & Homebrew Discussion

[Reecey]

Webkit is a much better attack vector imo anyways, because anyone with the ability to set up a webserver can host an exploit and the end user just has to point their wii u web browser at the right url to run it. Not to mention the webkit is open source and buggy as ever

I'm not shafting you from behind with this reply by the way TSK but yes much agreed, the webkit is the only way forward for the exploit entry also if an e-shop game was a possible method Nintendo could just simply take it off e-shop with immediate effect, if that was the case so it ends up being a useless way for everyone.

 

[NWPlayer123]

I'm not shafting you behind with this reply by the way TSK but yes much agreed, the webkit is the only way forward also if an e-shop game was a possible method Nintendo could just simply take it off e-shop with immediate effect if that was the case so it ends up a useless way for everyone.

*cough*Cubic Ninja*cough*

 

[Reecey]

*cough*Cubic Ninja*cough*

Nice one atNWP, sorry my bad I forgot about CN for a minute there but it was soon stopped by Niti unless of course you stayed on 9.2x so again Nintendo put the block on that one in the end so it does sort of refer to my comment in a fashion

 

[NWPlayer123]

Nice one atNWP, sorry my bad I forgot about CN for a minute there but it was soon stopped by Niti unless of course you stayed on 9.2x so again Nintendo put the block on that one in the end so it does sort of refer to my comment in a fashion

I know, I was just saying it could be something like that where it's on both physical copies and downloads so you can sort of fix it but not really.

 

[TeamScriptKiddies]

I know, I was just saying it could be something like that where it's on both physical copies and downloads so you can sort of fix it but not really.

Game exploits on wii u are difficult though to gain kernel access from because of NX.

Userland is (like cubic ninja) is much more likely to happen from a game based exploit on the U. Nothing crazy though....

 

[st4rk]

Game exploits on wii u are difficult though to gain kernel access from because of NX.

Userland is (like cubic ninja) is much more likely to happen from a game based exploit on the U. Nothing crazy though....

3DS has NX too.

 

[Bug_Checker_]

Can someone reupload this please ? Thanks in advance !

Try asking Relys or Marionumber1 . I don't recall the filename but I believe it was the work of Hykem the Demon.

 

[OncleJulien]

With Nintendo accepting crap like "The Letter" and "Meme Run" it should be fairly easy to get it accepted.

i've gotten ten times the enjoyment out of meme run than i have from zombiu.

 

[FPSRussi4]

^

 

[keine]

probably related to the timing of the spin lock that is released too early in coreinit.OSDriver_CopyToSaveArea
https://gbatemp.net/goto/post?id=5156281#post-5156281

If one wanted to dissemble that function or memory area in a disassembler.....where in memory does that function exist as to dump it with the rpc tool.


Is it possible at this time to dump the IOSU functions? I gotta rewatch failoverflow again.

 

[endoverend]

I'm currently chipping away at the browser, hopefully I can find something
Does anyone know if it is possible to malform a video file so that it does more than that boring "cannot play" error? I'm investigating crashes using video files sent over usendmii.

Why try something with the video? Why not look in webkit itself? There's no reason to take the long path when there are much easier to access holes. And crashmybroswer.com doesn't count, lol.

 

[VinsCool]

That's part of it, I'm also using the restricted vulnerability finder tool to try and find some stuff. I just thought I would try something else, especially since the last exploit had to do with a video file.

What? didn't rememver that.

 

[VinsCool]

It was a anime video streamed over plex, remember? The thread is buried now.

ah yeah this "exploit" lead to nowhere.

 

[VinsCool]

It was an exploit though.
Anyways, I'm back to webkit bug hunting. So far I have tried like 15 html files with "-crash" in their filename, but nothing's worked yet.

If you ever do find a crash, please keep it private instead giving it to nintendo on a silver plater.

 

[endoverend]

OOH! UPDATE!
I didn't find a freeze, but I finally got something to do something:

That's a very very simple error, not anything worth investigating as it is clearly handled.

 

[Twili]

I know, but so far nothing has been doing anything interesting- at least this picks up an error.

I get that error almost every time I use the browser. It's not special at all. Even checking your inbox (particularly Gmail) can trigger it.

 

[the_randomizer]

I just want to throw in that I am hosting the exploits on a public server- should I use a apache local server to prevent someone finding out, or the current setup for convience?

What exploits? I thought they weren't out yet...?

 

[FPSRussi4]

I get that error almost every time I use the browser. It's not special at all. Even checking your inbox (particularly Gmail) can trigger it.

That sentence triggered mine.

 

[VinsCool]

What exploits? I thought they weren't out yet...?

His "exploits" are html pages testing different vulnerabilities.

 

[the_randomizer]

His "exploits" are html pages testing different vulnerabilities.

Derp. Should have realized that