First ever software homebrew loader for Wii released

[Zeus]

A group of hackers who go by the name of Team Twiizers have released a demo of the world's first homebrew loadering running on the Wii by utilizing a buffer overflow in Zelda: Twilight Princess.

<center><object width="425" height="355"><param name="movie" value="http://www.youtube.com/v/zaRhyEUOk44&rel=1"></param><param name="wmode" value="transparent"></param><embed src="http://www.youtube.com/v/zaRhyEUOk44&rel=1" type="application/x-shockwave-flash" wmode="transparent" width="425" height="355"></embed></object></center></a>

All the information can be found at <A href="http://wiibrew.org/index.php?title=Twilight_Hack" target="_blank">Wiibrew.org</a>

[XxBigP123xX]

Is this done without a modchip?

[Shambler2]

Yes, I've already run it on my PAL Wii

[darkmaster_101]

This is good news, cant wait to see what becomes of this

[col55]

works for me pal back up zelda and the hack. cant shut down the wii after running it unless hold power button down but i guess something will be implemented along the line.

just remember to rename the files to data.bin when they are in the correct folders as i didnt and thought what had i done wrong here. guess in my rush to run did not read the instructions fully.

thanks guys keep up the good work. looking forward to seeing someone code a good light saber game.

[manias]

Could everyone who tests it label what copy of zelda they have?
http://wiibrew.org/index.php?title=Twilight_Hack says:


This exploit does not work with every version of Zelda:TP. Easy way to check your version is to compare the text string which is on the inner cycle of the data surface with the ones below.

RVL-RZDP-0A-0 JPN - working
RVL-RZDE-0A-0 JPN - working
RVL-RZDE-0A-2 USA - reportedly not working
Retrieved from "http://wiibrew.org/index.php?title=Twilight_Hack"


so apparently the pal zelda does work n the ntsc doesn't?

[addmister]

Works fine on my original pal ver. disc number is RVL-RZDP-0A-0 JPN

[threatened]

Could everyone who tests it label what copy of zelda they have?
http://wiibrew.org/index.php?title=Twilight_Hack says:



so apparently the pal zelda does work n the ntsc doesn't?

i live in the usa and i have the RVL-RZDE-0A-0 one, didn't test cuz i dont have a card...

but its not the oa-2 one so it shoudl work?

grats to them xD

[manias]

Works fine on my original pal ver. disc number is RVL-RZDP-0A-0 JPN

Ah? the PAL version says JPN at the end? that's interesting

[krackpack]

just tryed it works but i have to unplug it to shut it down can you say no need for a mod chip now lol

[ritzbis]

WOW
can the whole game be played or just a few seconds

[Mithos]

Could everyone who tests it label what copy of zelda they have?
http://wiibrew.org/index.php?title=Twilight_Hack says:

so apparently the pal zelda does work n the ntsc doesn't?

RVL-RZDE-0A-2 USA - Might not be working

BUT
RVL-RZDE-0A-0 USA - do work just fine (NTSC-USA/Canada)

[lost4468]

WOW
can the whole game be played or just a few seconds

No, its not a burnt disc, its a save file that runs code.

[redsquirrell]

just tryed it works but i have to unplug it to shut it down can you say no need for a mod chip now lol

yeah but surely loading zelda up and doing that everytime to run some homebrew will be a pain in the ass after a few tries..

[shuggie69]

Working with pal wii and zelda disc id RVL-RZDP-0A-0 JPN:)

[ichiro51zr]

yeah but surely loading zelda up and doing that everytime to run some homebrew will be a pain in the ass after a few tries..

Thats why you install a custom firmware and it will be hacked like the psp!!!!!!

[ritzbis]

No, its not a burnt disc, its a save file that runs code

dose it play a backup of zelda then on disc

[manias]

dose it play a backup of zelda then on disc

you misunderstand what this is. The point here is NOT that you see zelda on the screen, but that from zelda you can load OTHER software.
They boot zelda from an official disc, then load a hacked savegame. The plan for the future is to load emulators, iso's of other games, etc.

[ritzbis]

i see i was hoping for to much to soon lol

Getting carried away with seeing Zelda running without a mod chip

[Angelus3K]

yeah but surely loading zelda up and doing that everytime to run some homebrew will be a pain in the ass after a few tries..

True but it'll be similar to the PSP, if they can inject a bootstrap then they can take over the boot process at startup.

[STKD]

Also working here with PAL Wii:
Disc id= RVL-RZDP-0A-0 JPN
I am EXTREMELY impressed at this hack and very much looking forward to seeing what the homebrew community comes up with.

Just a thought, I know my Wii and my copy of Zelda were from the very first UK batch, which had the infamous "Shad" save bug (where if you saved in the cannon room you were kind of screwed)... perhaps it is later disc revisions where this bug was fixed that don't work?

[ando2k5]

Hopefully this will lead to a softmod or somthing. So people with D2C chipsets dont have to worry about an expensive install.



ASH

ye cos ash is fed up making a fortune off it :p

[ShinoBboy]

great news. i guess it is worth the wait in getting a wii. hopefully we can run isos soon enough.

[STKD]

Sad how so many are alraedy looking at this as a means to piracy. I personally hope that they do take methods to stop it becoming used for that.
Contrary to popular mythology, you don't actually have the right - moral or otherwise - to get the games for free. They cost a fortune in the time it takes for a hell of a lot of people to create them, besides the money involved.

If a game is worth playing, PAY for it you cheapskate bastards.
Would you work every day if in the end nobody was doing the decent thing and paying for that work? It's business. It's how things work. That money dries up, developers go elsewhere.

Want the Wii to become another Dreamcast? Piracy killed it, plain and simple.

This is a means to an end for homebrew development, if you can't afford the games that is your problem and you are in the wrong. No debate there.

I personally want but can't afford a Ferrari. You won't find me going out and stealing one though.
Depressing that on such a wonderful development people don't see the potential for "Wii Media Center" or some truly inventive and clever apps or home-developed games... just piracy.

[msa]

Sad how so many are alraedy looking at this as a means to piracy. I personally hope that they do take methods to stop it becoming used for that.
Contrary to popular mythology, you don't actually have the right - moral or otherwise - to get the games for free. They cost a fortune in the time it takes for a hell of a lot of people to create them, besides the money involved.

If a game is worth playing, PAY for it you cheapskate bastards.
Would you work every day if in the end nobody was doing the decent thing and paying for that work? It's business. It's how things work. That money dries up, developers go elsewhere.

Want the Wii to become another Dreamcast? Piracy killed it, plain and simple.

This is a means to an end for homebrew development, if you can't afford the games that is your problem and you are in the wrong. No debate there.

I personally want but can't afford a Ferrari. You won't find me going out and stealing one though.
Depressing that on such a wonderful development people don't see the potential for "Wii Media Center" or some truly inventive and clever apps or home-developed games... just piracy.

if piracy killed the dreamcast, the ps2 should have died 10 times by now.
now guess why it didnt...

@ topic:
so does it mean that there can be some kind of soft-modchip that you can use to boot backups?

[tralalawala]

Want the Wii to become another Dreamcast?
Yes please. I can't think of anything gaming related I'd like more. unfortunately it will never happen, the DC will remain the best console ever and nothing will come close.

[Carlotta_Monroe]

How long, realistically, till we see this put to use?

Is it worth putting off buying a modchip and waiting for some sort of custom firmware? :confused:

[Knoxximus]

SO! I take it we'd better buy Zelda now before Nintendo gets the patched copies out, yes? Or, is it possible for Ninty to close this hole with a system firmware update? :confused:

[Rinny]

How long, realistically, till we see this put to use?

Is it worth putting off buying a modchip and waiting for some sort of custom firmware? :confused:

a lot of factors involved there but I'm sure we'll get a Hello World in a few days, and maybe a tetris or something within 2-3 weeks.

Completely new firmwares, and iso loading are probably a long way off.

PS3 took months to go from buffer overflow to even modest homebrew, and we still dont have custom firmwares or iso loaders.

[ichiro51zr]

dont update, buy TP

[Gundalf]

Yes that is right. Now all people who are interessted in homebrew should buy zelda. With the PSP was the same thing, after a couple of time, there was only patched version in the retail.
However, lets see how much time it takes for the first homebrew or better, a hacked firmware :)

[shuggie69]

Any 1 else notice when using the pal version that the wii pointer races to the bottom of the screen and no longer works when they load the save?Just that in the video its still fully functional.:confused:Hack works fine except for that:)

[djkatarat]

hopefully, we will be able to use an external hdd with what ever comes out. because, it would be nice to have a whole bunch of divx videos as well as mp3s to play through the wii. (i dont have an xbox..) so this would be my first media center:) (besides my pc).

also, i prefer one large hdd, over a million sd cards. :) its cheaper too, to have one hdd. plus, a hdd can be used for everything (music, video, pictures, isos, roms of other systems:)), whereas a 2gb sd card can be used for small things (a few at a time)

[ichiro51zr]

welll, i just want loadable isos and a wii media center, idc about other stuff.

maybe hacking at online wii games would be cool like psp

[STKD]

maybe hacking at online wii games would be cool like psp

We don't call that "hacking". We call it what it is - cheating. Why not just be good enough at the game to win without it?

[[ACF]Umax]

This is really cool!

Would have been cool if they included a small homebrew, tho.

[jester55]

Not sure if this helps, but my NTSC Console with DMS chip and Cyclowiz works great! What an exciting surprise to see the hack boot! Anyway, I don't know which TP disk I have. My friend is borrowing my original, so I booted the hack from my backup!:D

-Jester

[ichiro51zr]

the only discs that may not work are TPs bought after September...

[crono]

The wii have some great emu's already,whit homebrew we can load our own roms :) that would be great,finaly a good working N64 emu. :D

[Ichinisan]

a lot of factors involved there but I'm sure we'll get a Hello World in a few days, and maybe a tetris or something within 2-3 weeks.

Completely new firmwares, and iso loading are probably a long way off.

PS3 took months to go from buffer overflow to even modest homebrew, and we still dont have custom firmwares or iso loaders.

We aren't waiting for a "Hello, World"; this *IS* the "Hello, World!"

It works. I've tried it (NTSC USA Wii with original disc version).

the only discs that may not work are TPs bought after September...

Yeah. Zelda was revised to fix a game-breaking bug that was caused from saving in the canon room. Even the revised version crashes with this exploit, so it's obvious that Nintendo didn't discover or try to fix the exploitable hole. It's likely that the exploit can be revised to work on those too.

Some comments from the "Team Twiizers" crew in #wiidev indicate that this was released instead of something more functional; specifically to identify compatibility issues with different console / software regional versions and software revisions. That means that a demonstration with some neat functionality and compatibility with all Zelda revisions may be in the works, almost ready to release.

[Notorious9i6]

fuggin sweet


WORKS with USA wii, got my TP on JAN 07

[crypysmoker]

WOW, topics like these defanately bring out all the kids that think they know everything about what it actuly takes to get a consoles to run unsigned code since they have custom firmware on their psp lol.

They all come out of the woodwork begging and demanding the hackers that do this on their own time do it now.

[Ichinisan]

I was running it moments after Bushing posted it on IRC. Great stuff.

Team Twiizers includes Bushing, Segher, and Tmbinc.

They were involved in the "tweezer attack" that revealed Nintendo's signatures and allowed them to run their own code, leading to a zelda exploit. The video of Bushing and Tmbinc at the hacker conference running homebrew code injected into Lego Star Wars: That was these guys.

[imoneofthem]

Haha thank god I returned to maxconsole and stumbled upon this thread

....and I just purchased a Wiikey + Triwing screwdriver
(Y) I will be monitoring the progress of this exploit daily now haahaa:D

I remember when they first released the exploit for lumines on the PSP....and now (like people have mentioned) there's custom firmware and an even better exploit i.e. Pandora's Battery.

Nintendo will not be distraught by the exploit + they will respond to this just like sony have by releasing a new update thus plugging the hole and for the scene to wait until a. custom firmware is released (that may take a while) b. another exploit is discovered.

Sometimes I think that there are people 'out there' who knows the exploits but are waiting for the correct time to release them. Kudos to those people :)

[ichiro51zr]

WOW, topics like these defanately bring out all the kids that think they know everything about what it actuly takes to get a consoles to run unsigned code since they have custom firmware on their psp lol.

They all come out of the woodwork begging and demanding the hackers that do this on their own time do it now.

I hacked DC so ik about this stuff ;) and i made a solderless mod chip ;)

[mrbigjonstud]

sweet, can't wait for my wii to play blu-ray and HD dvds :)

j/k

yay for the hackers though, keep up the good work

It would be cool to eventually see some homebrew wii games

[zerophoenix]

love the linux tease....can not wait! good work all around.

[cloudspear]

which zelda tp do we need? the wii or the gc version? i just got a wii so i'm very excited

[zerophoenix]

which zelda tp do we need? the wii or the gc version? i just got a wii so i'm very excited

wii, you can tell in the video.

[Z80]

Incase some of you didn't know this already, the Wii unlike the GC doesn't seem to let you hack the drive through software. That's why GCOS doesn't work on the Wii without a modchip. So to play pirated Wii games with this exploit will require a loader of some kind similar to the Starcube loader or the PS2 HDLoader.

What this exploit really means more than anything is the opening door for homebrew like Media Players, Emulators, and Linux. If you want pirated games, you want a modchip.

[hollowpnt]

Incase some of you didn't know this already, the Wii unlike the GC doesn't seem to let you hack the drive through software. That's why GCOS doesn't work on the Wii without a modchip. So to play pirated Wii games with this exploit will require a loader of some kind similar to the Starcube loader or the PS2 HDLoader.

What this exploit really means more than anything is the opening door for homebrew like Media Players, Emulators, and Linux. If you want pirated games, you want a modchip.

Bushing has already stated that it's possible for someone to create a loader to play pirated games, he just won't do it himself. Obviously, if homebrew can be booted, than there is a strong possibility we will see a boot disk to run pirated games without a modchip.

[DaFireStarter]

I like penquins :D.............. LOLZ

[svfusion]

this is great news!

[HowardC]

The exploit appears to check your gamecube slots for an sd card with dols on it. Has anyone with a sd adaptor tried putting it in and running the exploit? I'm wondering if it's actually launching dols or just detecting them to show that it will be possible to launch them in the future.

[gonepostl]

cp rzdp.bin $MOUNT/private/wii/title/RZDP/data.bin

-- or --

cp rzde.bin $MOUNT/private/wii/title/RZDE/data.bin

Enjoy!

-- Team Twiizers

If that's not enough help, perhaps you should read http://wiisave.com/faq/index.php -- but then again, this likely isn't for you.


I don't understand these instructions. The video didn't help either. Somebody please help out a desperate n00b and I'm sure others would like a quick run me down as well so you'd be contributing a lot if you'd just give me a shove in the right direction. Thanks in advance!!!!

[threatened]

if this somehow eventually becomes able to run isos with cheats, then people start CHEATING on super smash brother brawl, i'll curse this forever.

[shuggie69]

I don't understand these instructions. The video didn't help either. Somebody please help out a desperate n00b and I'm sure others would like a quick run me down as well so you'd be contributing a lot if you'd just give me a shove in the right direction. Thanks in advance!!!!

You have to rename rzde.bin or rzdp.bin to data.bin depending on the version of zelda u have and overwrite ur zelda save with it,load the game load the save and bam!!:)Hope this helps.

[HaloBenish]

Did some testing on launch Wii NTSC-U no mod chip, along with an original copy of launch TP.
1: Cursor works fine even after booting hacked save file.
2: You do not need to talk to that guy, leaving the area makes it crash and boot into the new code.
3: When pausing the game and attempting to enter options the game crashes without booting the new code.
4: A new save game can be created on Slot 2 or 3 and will run normally.

[imoneofthem]

if this somehow eventually becomes able to run isos with cheats, then people start CHEATING on super smash brother brawl, i'll curse this forever.

Cheating with Brawl online could be fun :D hehe

[msa]

I was running it moments after Bushing posted it on IRC.
your **** is SO big.

[STKD]

Cheating with Brawl online could be fun :D hehe

...but not half as fun as laughing hysterically when they start banning losers who consider that fun.

[RuneEdge]

if piracy killed the dreamcast, the ps2 should have died 10 times by now.
now guess why it didnt...
Maybe because you didnt need to buy a modchip/accessory or some kind of swap disc to play backups on a Dreamcast. Just like what's about to happen on the Wii.

[imoneofthem]

Maybe because you didnt need to buy a modchip/accessory or some kind of swap disc to play backups on a Dreamcast. Just like what's about to happen on the Wii.


They are going to release a new patch ASAP which prevents the exploit from happening.....and then it'll be a little wait until the next exploit is found hehe. That's the way it goes :D

[HaloBenish]

Maybe because you didnt need to buy a modchip/accessory or some kind of swap disc to play backups on a Dreamcast. Just like what's about to happen on the Wii.

PSP is far from dead and you can run backups without any mod chip

[UltraPic]

This is a means to an end for homebrew development

Yeah, it's just sad homebrew means emulators,roms and sprite ripped crap.

[catfish24]

PSP is far from dead and you can run backups without any mod chip
It may not be dead, but it's definitely not doing to hot.

[Absorbent Llama]

The exploit appears to check your gamecube slots for an sd card with dols on it. Has anyone with a sd adaptor tried putting it in and running the exploit? I'm wondering if it's actually launching dols or just detecting them to show that it will be possible to launch them in the future.

tried it didnt seem to want to find my SD card even though i know it works fine with SD loader and ****..... wouldnt have anything to do with the fact My SD geko is wired to the internal front SD reader of the Wii would it?

refer to my video of my Wii if you dont know what i mean

http://au.youtube.com/watch?v=ymDte8nxK3U

[cls]

tried it didnt seem to want to find my SD card even though i know it works fine with SD loader and ****..... wouldnt have anything to do with the fact My SD geko is wired to the internal front SD reader of the Wii would it?

refer to my video of my Wii if you dont know what i mean

http://au.youtube.com/watch?v=ymDte8nxK3U

Problems
If you have a USBGecko, try unplugging it from the Wii before running the exploit. There's a bug in the USBGecko code used in the exploit that will make the game hang if you have a USBGecko plugged in to the wii, but not connected to any program on your computer.

[Absorbent Llama]

Problems
If you have a USBGecko, try unplugging it from the Wii before running the exploit. There's a bug in the USBGecko code used in the exploit that will make the game hang if you have a USBGecko plugged in to the wii, but not connected to any program on your computer.

yea but this is a SD GECKO

[imoneofthem]

Ah wow..
I thought the file itself was a save file which you can copy onto an SD card and copy from the SD card slot in the Wii to its internal memory.

Is it not possible to do it that way or do you have to use a SD/USB Gecko?

[col55]

i had the same problem on the "choosing the save slot screen" the curser locks at the bottom of the screen and no curser why hack runs.
running pal zelda back up of my origional.

[CZroe]

Incase some of you didn't know this already, the Wii unlike the GC doesn't seem to let you hack the drive through software. That's why GCOS doesn't work on the Wii without a modchip. So to play pirated Wii games with this exploit will require a loader of some kind similar to the Starcube loader or the PS2 HDLoader.

What this exploit really means more than anything is the opening door for homebrew like Media Players, Emulators, and Linux. If you want pirated games, you want a modchip.

I dunno... I thought people were able to run GC backups with GCOS + Action Replay before Nintendo blocked the Action Replay. They were able to boot GC homebrew that way.

[CZroe]

Bushing has already stated that it's possible for someone to create a loader to play pirated games, he just won't do it himself. Obviously, if homebrew can be booted, than there is a strong possibility we will see a boot disk to run pirated games without a modchip.

That would require the knowledge to make a disc like Bushing did with Lego Star Wars and a pressing facility like Thin Ice Media (Datel) to make it, but he is not releasing how he did the LSW trick so that they will still have an avenue for working on the Wii once Nintendo patches this out (*IF* they do). Of course, this exploit puts us in position to make those same discoveries without the hassel of doing our own tweezer attack, so Datel or some illegitimate Chinese place could probably re-discover it themselves.

[CZroe]

Maybe because you didnt need to buy a modchip/accessory or some kind of swap disc to play backups on a Dreamcast. Just like what's about to happen on the Wii.

Actually, most people did need the Utopia boot loader disc until self-boot arrived and, even then, many drives could not burn Utopia or self-boot discs correctly (mine included). Everyone sold Dreamcast boot discs... even Lik-Sang.

[CZroe]

Problems
If you have a USBGecko, try unplugging it from the Wii before running the exploit. There's a bug in the USBGecko code used in the exploit that will make the game hang if you have a USBGecko plugged in to the wii, but not connected to any program on your computer.

I don't think it's a bug. I overheard the team telling someone to open their terminal or something and read the message they were getting from it... they said it with a ";)" so I know it must've been something special/intentional.

[jayneo8]

This is great news! Wish I didnt lend my copy of TP to a friend so i could try it out. Good job Team Twiizers!!!!

[Kyrue]

I wish I didn't sell my copy of Zelda, I just might have to buy it back :D

[crono]

Whehe just buy all zelda's and sell them on ebay for 10 time's more money now. ;)

[RuneEdge]

PSP is far from dead and you can run backups without any mod chip
But you're missing the point. The PSP still needs to be hacked and have a modified firmware installed onto it.
Lets assume you're someone who only buys their games from stores, and someone who doesnt visit websites like this one where people find out the kind of information we get here. I can't walk up to you and sell you some ISOs or tell you how you can get your own cuz you probably wouldnt have an idea of what ISOs even are. But if you had a Dreamcast and paid for all your games, and I came up to you on the street and said "hey! I have 20 Dreamcast games here and I'll sell them to you for the price of one" or I explained how you can burn your own, it would be so much easier for you to do it cuz all you have to do is pop them into your console and play them.
I actually have someone at work who wanted to play ISOs on his PSP but couldnt be bothered to go through the process of downgrading his firmware cuz he thought it was too confusing. But with the Dreamcast, ANYONE can just hand you a game and you can play it without having to do anything.

[kallek]

Could everyone who tests it label what copy of zelda they have?
http://wiibrew.org/index.php?title=Twilight_Hack says:



so apparently the pal zelda does work n the ntsc doesn't?

Does all PAL versions of Zelda work? I just want to make sure that I get a working version when I go out and buy a copy. I can't open the case and look at the disc.

[FoxForceFive]

If you have a modded wii (WiiKey in my case), then can you run a back-up (of my legally owned original of course!) Zelda & try this exploit?

[moneydog96]

If you have a modded wii (WiiKey in my case), then can you run a back-up (of my legally owned original of course!) Zelda & try this exploit?

I don't see why not, but if you own the original why not just use that?

[HaloBenish]

But you're missing the point. The PSP still needs to be hacked and have a modified firmware installed onto it.
Lets assume you're someone who only buys their games from stores, and someone who doesnt visit websites like this one where people find out the kind of information we get here. I can't walk up to you and sell you some ISOs or tell you how you can get your own cuz you probably wouldnt have an idea of what ISOs even are. But if you had a Dreamcast and paid for all your games, and I came up to you on the street and said "hey! I have 20 Dreamcast games here and I'll sell them to you for the price of one" or I explained how you can burn your own, it would be so much easier for you to do it cuz all you have to do is pop them into your console and play them.
I actually have someone at work who wanted to play ISOs on his PSP but couldnt be bothered to go through the process of downgrading his firmware cuz he thought it was too confusing. But with the Dreamcast, ANYONE can just hand you a game and you can play it without having to do anything.
I know, and I know the dreamcast died because of it, but I think the WIi will turn out more like the PSP and would require more more effort than the dreamcast to allow backups to be run. I do not belive that this will hurt the Wii's, or it's games, sales.

[lenitao]

sounds cool!!

but i don't know how to do it...

do i copy the save file in an sd card and then load it on twilight princess?

[josho]

Impressive with the work! Its gonna be like another PSP. A sad thing was that I gotten a Japan set where I can get the disc to load in. I will always prefer like PSP method.

But the issue was, does anyone know how to convert the entire Jap to Eng??? Quite confuse seeing the foreign language all over.. :p

[vanrock]

awesome i cant wait for things to start getting better fir the wii

[CZroe]

awesome i cant wait for things to start getting better fir the wii

Thread is over a year old. The Wii got better, MUCH better, but they are starting to go back (Nintendo changed Boot 2 so no BootMii).