Skip to content

Commit

Permalink
Haxchi v2.0 - now with its own installer!
Browse files Browse the repository at this point in the history
  • Loading branch information
FIX94 committed Nov 28, 2016
1 parent 97fa900 commit 527d39d
Show file tree
Hide file tree
Showing 194 changed files with 22,063 additions and 566 deletions.
20 changes: 20 additions & 0 deletions Build.bat
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
@echo off

cd installer
mkdir data 2>/nul
cd ../dsrom
echo.
echo Building DS ROMs
echo.
make clean
make

cd ../installer
echo.
echo Building WiiU Installer
echo.
make clean
make

echo.
pause
48 changes: 7 additions & 41 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,31 +1,13 @@
# haxchi
# Haxchi

This is a ported version of the haxchi exploit created by smea and others for all sorts of different ds vc games.
In addition to being ported it also includes a homebrew launcher loader as its payload so you can use it for a lot of things.
This is the continuation of the POC Haxchi exploit by smea.
It features compatibility with a lot of DS VC and can be easly installed and further configured.

## install process
## Installation

haxchi can be very easily installed using iosuhax's wupclient. for example, if hachihachi is installed to the MLC, it suffices to do:
```
w.up("rom.zip", "/vol/storage_mlc01/usr/title/00050000/YOUR_GAME_TITLE_ID/content/0010/rom.zip")
```
of course, using wupclient to install haxchi permanently requires that redNAND be disabled, unless hachihachi is installed to USB, in which case it can be installed from redNAND using:
```
w.up("rom.zip", "/vol/storage_usb01/usr/title/00050000/YOUR_GAME_TITLE_ID/content/0010/rom.zip")
```

To upload a config.txt as well you will have to do the following if the title is installed on NAND:
```
w.up("config.txt", "/vol/storage_mlc01/usr/title/00050000/YOUR_GAME_TITLE_ID/content/config.txt")
w.chmod("/vol/storage_mlc01/usr/title/00050000/YOUR_GAME_TITLE_ID/content/config.txt", 0x644)
```
and for the title being installed to USB you do the following:
```
w.up("config.txt", "/vol/storage_usb01/usr/title/00050000/YOUR_GAME_TITLE_ID/content/config.txt")
w.chmod("/vol/storage_usb01/usr/title/00050000/YOUR_GAME_TITLE_ID/content/config.txt", 0x644)
```

make sure to replace YOUR_GAME_TITLE_ID with one of the following:
Grab the current .elf from the release tab and put it into sd:/wiiu/apps so it can be run by the homebrew launcher later.
For extras such as replaced icon, startup logo, startup sound, game title and button configuration download the "haxchi" archive and put its content into a folder on your sd called "sd:/haxchi". This folder will be used during installation to set up the game of your choice and you can adjust its content to your liking.
The following games right now are supported by the installer:

| Game | JPN | US | PAL |
|---|:---:|:---:|:---:|
Expand All @@ -47,22 +29,6 @@ make sure to replace YOUR_GAME_TITLE_ID with one of the following:
|Zelda Phantom Hourglass|101C3600|101C3700|101C3800|
|Kirby Mass Attack|101C8600|101C8700|101C8800|

a config.txt can look like this for example:
```
a=fw.img
b=rednand/fw.img
x=wiiu/apps/ftpiiu/ftpiiu.elf
down=wiiu/apps/snes9x2010_libretro/snes9x2010_libretro.elf
default=wiiu/apps/homebrew_launcher/homebrew_launcher.elf
```
please note though that if you want to load a fw.img the name HAS to be named fw.img in whatever folder you use, nothing else will work.

## contents

* hbl_loader: a loader which will load up the homebrew launcher from sd card
* haxchi_rop.s: hachihachi process ROP which will emit hbl_loader as executable
* haxchi.s: generates a malicious SRL file

## credit

smea, plutoo, yellows8, naehrwert, derrek, FIX94 and dimok
Loading

0 comments on commit 527d39d

Please sign in to comment.