Hacking Idea for new Wii exploits?

[XICO2KX]

Hello!

I was reading something about the Photo Channel on Wikipedia, and it says that it can read the following formats:

JPEG, JPG, MOV, AVI, MP3, AAC, M4A
And it also mentions that the current version v1.1 was last updated on December 10, 2007...

So, in theory, all the vulnerabilities discovered for those file formats since then should still be unfixed!

Here's just a few examples:

• WAV
• MJPEG
• M4A
• AAC

I know that all these exploits are application/platform/implementation dependent...

But who knows, maybe the programmers at Nintendo made similar mistakes!

Has anyone tried testing something like this yet?

 

[Crass]

No, Windows exploits don't work on the Wii.

 

[bjorno]

Lol. This reminds me 'like' the PSP. Getting it into HEN mode by using TIFF exploits. Well maybe its possible to play some kind of video, or some kind of photos
to make the wii crash and start the exploit. Not sure though if its possible.

 

[steveo1978]

Yeah its possible that it might be possible. Like bjorno said they did something like that on the psp.

 

[linuxares]

It is a good idea, but the problem is that they are OS and software dependent. But yes, maybe Nintendo have some error there.

Hmm... you guys know viruses can be embedded in jpeg files etc. I wonder if its possible to implent Hackmii installer in one too.

 

[XICO2KX]

Lol. This reminds me 'like' the PSP. Getting it into HEN mode by using TIFF exploits. Well maybe its possible to play some kind of video, or some kind of photos
to make the wii crash and start the exploit. Not sure though if its possible.

You mean something like this?

 

[bjorno]

Lol. This reminds me 'like' the PSP. Getting it into HEN mode by using TIFF exploits. Well maybe its possible to play some kind of video, or some kind of photos
to make the wii crash and start the exploit. Not sure though if its possible.

You mean something like this?

yup. That is the ChickHen exploit. You go to photos and the photos will crash your psp and reboot it in HEN mode.

 

[XICO2KX]

Unfortunately I don't have the necessary skills or knowledge to do this...

But is someone willing to give this a try?

 

[SifJar]

The formats it supports are well established and therefore more stable formats. Depending on whether they used open libraries or not will affect how easy it is to find exploits (Sony used an open TIFF library, and that's how there have been 2 or 3 TIFF exploits for the PSP AFAIK). TIFF is generally a fairly unstable and uncommon format, never actually seen an TIFF images that WEREN'T exploits, but JPEG (and JPG is JPEG) is more common and therefore most libraries to handle it are more developed and hence more stable.

 

[thesund0g]

TIFF is still pretty common for some scanners and parts of the printing industry. Then there's fax. Kinda sad really, but it's easier (cheaper) to implement than PS or PDF, and more reliable across interpretations.

 

[XICO2KX]

(...) and JPG is JPEG (...)

You're right, sorry! I should have written "can read the following file extensions" instead of "formats"!

Anyway, I wonder if the Bannerbomb exploit was based on a Heap Overflow similar to this one!

 

[steveo1978]

I kinda wonder if it could possible done by sending an email to the wii.

 

[XICO2KX]

I kinda wonder if it could possible done by sending an email to the wii.

Yes, nice idea!

Or even by transferring "infected" Miis on a Wii Remote from a hacked console to an un-hacked one!!!

 

[steveo1978]

the email thing probably never gonna happen. Just sent an email to my wii since I had not done it in a while and it was pretty basic not sure if it can get pics or anything else other then just words.

The Mii thing is kinda funny though get one that looks like a little gremlin that launches an exploit.

 

[XICO2KX]

The Mii thing is kinda funny though get one that looks like a little gremlin that launches an exploit.

lol

That would be awesome!!!

 

[Deleted User]

You can actually import mii's to your pc. All mii data is actually XML data. So it could be possible to find an exploit I think.

Edit: I mixed some things up, so I was mistaken with what I said. My comment is incorrect so don't quote me. Sorry for that.

 

[megazig]

before people keep making up stuff:
http://wiibrew.org/wiki/Wiimote/Mii_Data

it's not xml data

 

[OriginalHamster]

Who is she?