There been a lot going on in the WiiU scene lately from updates on the Homebrew channel and speak peaks of another kernel exploit working. Yesterday, developer smealum released his iosuhax for the WiiU, now everyone should know him from the 3DS scene for his Ninjahax and more.
A few month ago he did a youtube video on what he was working on but he warned everyone not to get all hyped up as he wasn’t going to release anything for the WiiU at that time, here a quick video what he was working on back in February.
Description:
This repo contains some of the tools I wrote when working on the wii u. iosuhax is essentially a set of patches for IOSU which provides extra features which can be useful for developers. I’m releasing this because I haven’t really touched it since the beginning of January and don’t plan on getting back to it.
iosuhax does not contain any exploits or information about vulns o anything. just a custom firmware kind of thing.
iosuhax current only supports FW 5.5.x i think.
I wrote all the code here but iosuhax would not have been possible without the support of plutoo, yellows8, naehrwert and derrek.
Features:
iosuhax is pretty barebones, it’s mainly just the following :
- software nand dumping (bunch of ways to do this, dumps slc, slccmpt and mlc, either raw or filetree or something in between)
- redNAND (redirection of nand read/writes to SD card instead of actual NAND chips)
- remote shell for development and experimentation (cf wupserver and wupclient, it’s super useful)
- some basic ARM debugging stuff (guru meditation screen)
How to use:
Honestly, I don’t even remember all the details so anyone who’s serious about using this will probably have to ask me for help if they can’t figure it out, but the gist of it is :
- decrypt your ancast image, prepend the raw signature header stuff to it and place it in ./bin/fw.img.full.bin
- open up ./scripts/anpack.py, add your ancast keys in there
- make
might be missing some steps, especially for building wupserver. you’re going to need devkitarm and latest armips (built from armips git probably, pretty sure this relies on some new features I asked Kingcom to add (blame nintendo for doing big endian arm)).
also, fair warning : do NOT blindly use this. read the patches. running this with the wrong options enabled can/will brick your console. this release is oriented towards devs, not end users.
The best way to contact smealum is via twitter or leave a comment on this github