Xyzzy Wiibrew program from Bushing: returns encryption keys
No, it’s not the Wii exploit, so don’t ask when he’ll release it. Bushing has slapped together a new program called xyzzy that returns the encryption keys of hacked IOS address spaces. Developers may find this extremely useful in their work. More in the full article.
Download: xyzzy v1.0
Visit: QJ.NET Wii Forums, Discussion on Bushing’s xyzzy code
Stalwart Wiibrew developer bushing has released a new program called xyzzy, which other Wii homebrew developers may find extremely useful for their work. No, it’s not the Wii exploit, so don’t ask when he’ll release it.
Xyzzy is a quick code that bushing slapped together in a few minutes. It returns private key structures of IOS address spaces. It should automatically save the keys to a text file on the SD card, but it also displays it on screen for a minute (to the second) to allow you to copy them by hand if necessary.
Here’s what the program does, step by step, as enumerated in the readme:
- Download IOS11 from the Nintendo Update Server
- Patch it to remove the MEM2 protection (so the PPC can access all 64MB of it)
- Patch it to allow it to delete itself later using ES_DeleteTitle()
- Find an unused IOS slot (counting downward from IOS255)
- Install the hacked IOS11 there
- Reboot into the hacked IOS
- Copy the private key structure from the IOS address space into MEM1
- Reboot back into a sane IOS
- Delete the temporary, hacked IOS
- Display the keys on screen
- Try to write them to a file on the SD card — keys.txt
- Pause for 60 seconds to allow you to copy the keys down using pen and paper,if necessary
And here’s what Bushing has to say about the program:
I wrote this a week or two after I killed a Wii trying to reproduce tmbincÂ’s original Tweezer Hack. May it rest in peace.
The first version of this code just used a patched version of IOS, which was an ugly hack. ItÂ’s still an ugly hack, but at least it no longer contains copyrighted code. You should only really need to run it once on any given Wii, but it should be safe to run as much as you want.
If nothing else, it demonstrates the kinds of ways you can use PatchMii_core to do something useful (as opposed to just running it and then packaging the result up as cIOS).
Download: xyzzy v1.0
Visit: QJ.NET Wii Forums, Discussion on Bushing’s xyzzy code
Related Wiibrew Articles:
- Nintendo finally responds to Bushing about Wii exploit discovery
- Bushing discovers exploit that allows ISOs to run on unmodified Wiis
- Wii System Menu v3.3 update workaround already in the works
Via hackmii
About The Author
