Wii homebrew - Xyzzy v1.1

Posted Nov 26, 2008 at 4:36PM EST by Glenn M.

Listed in: Wii Tags: Bushing, nand

Bushing is back, and he brings the very useful Xyzzy v1.1 with him. Wii homebrew devs out there may want to give this thing a shot, 'cause it's very useful in extracting OTP encryption keys. It should automatically save the keys to a text file on your SD, but it also displays them on-screen if ever you need to write them down by hand.

xyzzy extracts the following data:

ECC Private Key - used for signatures in various places
Console ID - the unique identifier for your Wii
NAND AES key - used to encrypt and decrypt the Wii's NAND
NAND HMAC - used to generate or verify a hash of the NAND, and therefore judge its integrity
Common key (AES) - used to decrypt keys found on items distributed from Nintendo
PRNG seed - a random seed
SD key (AES) - used to encrypt and decrypt anything being written to/read from the SD card
Device cert - you Wii's personal cert

You've probably seen this before, but for information's sake, I'll put it here. This is what xyzzy does automatically.

Download IOS11 from the Nintendo Update Server
Patch it to remove the MEM2 protection (so the PPC can access all 64MB of it)
Patch it to allow it to delete itself later using ES_DeleteTitle()
Find an unused IOS slot (counting downward from IOS255)
Install the hacked IOS11 there
Reboot into the hacked IOS
Copy the private key structure from the IOS address space into MEM1
Reboot back into a sane IOS
Delete the temporary, hacked IOS
Display the keys on screen
Try to write them to a file on the SD card Â— keys.txt
Pause for 60 seconds to allow you to copy the keys down using pen and paper,if necessary

One last thing. It ain't pretty, but at least it no longer contains copyrighted code. Bushing reckons you only need to run this once on any given Wii, but it should be safe to run multiple times.

Download: Xyzzy v1.1

Newest Downloads

05/22/2012 - 06/01/2012

WiiFlow Mod 3.0 r431	05/31/2012
XeBuild GUI 2.061	05/30/2012
edicpopDS v0.3.01	05/29/2012
RGLoader 0v290 Beta	05/27/2012
WiiMod 3.2	05/27/2012
WiiMC v1.2.7	05/25/2012
True Blue Firmeware v2.7	05/24/2012
3DS Video Converter v2.3	05/24/2012
Mobile Assault 1.8.2	05/24/2012
PSP Tools Alpha 0.1	05/22/2012
Newton War	05/22/2012
DaedalusX64 r766	05/22/2012
PSPMarble	05/22/2012
The Undead 4 - Nazi Zombies	05/21/2012
3DSExplorer v1.2.1	05/21/2012

Most Comments this Month
Japan Says No To Pirates	(2)
Rumor: Modern Warfare 4 to..	(1)
3D On Your Vita, iPhone an..	(1)
Get a Load of the Doom 3:..	(1)
Watch This: The Elder Scro..	(1)
Party like Rockstar—But..	(1)

Top Jumps this Month
Pokemon Liquid Cryst..	(3)
Wii homebrew - HackM..	(1)
Some Cyber in Your P..	(1)
Naruto Shippuden: Ul..	(1)
Total War: Shogun 2..	(1)
PSP Is Back, Whiter,..	(1)
PSP homebrew - LameC..	(1)
Custom Firmware PRO-..	(1)
Daedalus R12 preview..	(1)
CWCheat Universal Ch..	(1)
PSP Go!Explore GPS N..	(1)
USBCAM.PRX legal mod..	(1)
PlayStation 3: Now F..	(1)

Quick Jump Daily Digest

Wii homebrew - Xyzzy v1.1

Related Stories:

Comments