Zelda Exploit - Run Unsigned Code w/o Modchip

[wraggster]

Via tehskeen

Here is a screen shot of an error in Zelda for the Nintendo Wii. So, what's so important about this particular error? Well, let's compare this to the GTA Exploit for the Sony PSP. Yes, that's right.

Bushing along with Segher have been able to modify a save game from Zelda to crash the machine and to run their own code on it. Note that you won't even need to "mod" your Nintendo Wii to run this exploit.

Yes, that's right - an exploit for the Nintendo Wii has been discovered and it allows you to run custom code. The method is pretty simple. Copy over a save file for Zelda, load it and the code runs. Don't get too excited yet. They have only been able to run 4 lines of code, but this is in a days work.

Segher was the one to find the exploit and Bushing has been testing it out with the aid of the USB Gecko. The process is far from simple as once you modify a save game it requires it be to signed with 3 keys. Here's some info from Bushing.

"Once the Wii decrypts the save game, it checks its signature. Every Wii has its own private key which is used to sign save games, and when you save a game, the Wii actually saves three bits of data:

* The encrypted save game
* The signature for the save game (using your console's private key)
* A copy of your console's public key, signed by Nintendo."

Of course, the end user wouldn't have to go through this process unless they were wanting to inject their own code into the save game, but that shouldn't be necessary because when I asked Bushing what his goal was he answered:

"Assuming we don't run into a wall, it should be able to lead to a homebrew loader. I hope. No promises. "

Screens Via Comments

[CoinCollector]

Oh man, this is exciting! Stuff is finally starting to happen in the Wii scene; first that one exploit at that hackers' conference and now this!

[DPyro]

Sweet. This looks promising, and with the recent PS3 exploit there should be some fun times ahead

[sappo]

Sweet. This looks promising, and with the recent PS3 exploit there should be some fun times ahead

That PS3 exploit is useless. Maybe even fake. Almost as the Warhawk one.

[Necro Star]

hes right, the wii exploit is so much more promising then the ps3.

[ryan2006]

lets just hope both will be sucessful exploits just imagine fullspeed n64 on ps3 and wii

[Shadowblind]

Wh00t! Great news, maybe even a PS2 emu on Wii? D(lol, no...) but as said before, let homebrew fill the world

[Zimond]

as the Terranian Marine said : "Hell...its about time!"

[VampDude]

lets just hope both will be sucessful exploits just imagine fullspeed n64 on ps3 and wii

N64 runs full speed anyway on VC, but an N64 emulator would be cool (wouldn't have to wait for VC releases).

Wh00t! Great news, maybe even a PS2 emu on Wii? D(lol, no...) but as said before, let homebrew fill the world

lol, the Wii is the least powerfullest console of this generation, PSone would be more likely and the best homebrew possible for the Wii's specifications

[TheLucster]

Very cool stuff!

There i already a PSone emulator for the GC: http://www.dcemu.co.uk/vbulletin/showthread.php?t=58809 (Not sure how playable it is though...)