Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Exploiting the Wii U's USB Descriptor parsing

garyodernichts.blogspot.com

Post reply on HN
Print view View original

1–10 of 11 posts

Re: Exploiting the Wii U's USB Descriptor parsing

#2

Post by shakna »

Where did the Wii-U source extract come from? I know there was some Wii source code dumped in May, 2020, but that was for the original Wii and nothing really that wasn't already known. That the source extract is s casually dumped suggests access to the code that the average person really couldn't dream of.

Re: Exploiting the Wii U's USB Descriptor parsing

#3

Post by Operyl »

shakna wrote: post #2

Where did the Wii-U source extract come from? I know there was some Wii source code dumped in May, 2020, but that was for the original Wii and nothing really that wasn't already known. That the source extract is s casually dumped suggests access to the code that the average person really couldn't dream of.

It's all reverse engineered and manually re-labeled code from assembly. It's just .. an insane amount of work from the community :).

Re: Exploiting the Wii U's USB Descriptor parsing

#4

Post by flatiron »

shakna wrote: post #2

Where did the Wii-U source extract come from? I know there was some Wii source code dumped in May, 2020, but that was for the original Wii and nothing really that wasn't already known. That the source extract is s casually dumped suggests access to the code that the average person really couldn't dream of.

this isn't the first time the wii u has been hacked. the most common wii u hack was simply because only code was encrypted, not the assets. so someone was able to buffer overflow the Nintendo DS emulator by replacing the assets. You run the DS game, wii u reboots jailbroken. My guess is part of the initial jailbreak the OS was dumped and decrypted and what you are seeing is from ghidra not from C source.

Re: Exploiting the Wii U's USB Descriptor parsing

#8

Post by GaryOderNichts »

mrguyorama wrote: post #5

I believe this is the exact same exploit that was used to eventually jailbreak the PS3 using USB dongles.

Edit: After looking through the PSJailbreak writeup it seems like they are really similar after all. Both target the descriptors allocated on the heap.

Re: Exploiting the Wii U's USB Descriptor parsing

#9

Post by GaryOderNichts »

shakna wrote: post #2

Where did the Wii-U source extract come from? I know there was some Wii source code dumped in May, 2020, but that was for the original Wii and nothing really that wasn't already known. That the source extract is s casually dumped suggests access to the code that the average person really couldn't dream of.

Like the other two comments mention this was all reverse engineered by hand using ghidra. I don't think there was ever a source code leak for the Wii U anyways.
Post reply on HN