{"id":11690,"date":"2016-10-16T14:01:24","date_gmt":"2016-10-16T12:01:24","guid":{"rendered":"https:\/\/www.customprotocol.com\/?p=11690"},"modified":"2016-10-16T14:01:24","modified_gmt":"2016-10-16T12:01:24","slug":"wiiu-demonstrations-exploit-kernel-iosu","status":"publish","type":"post","link":"https:\/\/www.customprotocol.com\/wiiu-demonstrations-exploit-kernel-iosu\/","title":{"rendered":"[WiiU] D\u00e9monstrations de l&#8217;exploit kernel IOSU"},"content":{"rendered":"<p style=\"text-align: justify;\">Vous \u00eates peut-\u00eatre au courant qu'un autre <strong>exploit kernel IOSU<\/strong> \u00e9tait en pr\u00e9paration pour le <em>firmware<\/em> actuel de la Wii U. Eh bien, deux nouveaux posts \u00e0 la fois int\u00e9ressants et prometteurs viennent d'\u00eatre publi\u00e9s sur les forums de <em>GBAtemp<\/em>. Esp\u00e9rons qu'ils annoncent un <strong>hack prochain<\/strong> pour la console de salon de <em>Nintendo<\/em>.<\/p>\n<p style=\"text-align: justify;\"><a href=\"https:\/\/www.customprotocol.com\/medias\/2016\/04\/Wii-U-eclair-noir-cest-dark-cest-hack-ouais.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-large wp-image-9783\" src=\"https:\/\/www.customprotocol.com\/medias\/2016\/04\/Wii-U-eclair-noir-cest-dark-cest-hack-ouais-764x430.png\" alt=\"Wii U \u00e9clair noir c'est dark c'est hack ouais\" width=\"764\" height=\"430\" \/><\/a><\/p>\n<hr \/>\n<p style=\"text-align: justify;\">Le premier <em>post<\/em> est un <a href=\"https:\/\/fr.wikipedia.org\/wiki\/Return-oriented_programming\" target=\"_blank\" rel=\"noopener noreferrer\"><em>ROP<\/em><\/a>. Post\u00e9 par un utilisateur sous le pseudonyme de <em>Hillary_Clinton<\/em> (non, \u00e7a n'est pas une blague), cette <em>release<\/em> est suivie d'un code de d\u00e9monstration montrant une chaine ROP simple qui appelle le <em>shutdown syscall<\/em> depuis <em>IOS_USB<\/em> et red\u00e9marre la console (seulement compatible avec les <em>firmwares<\/em> 5.5.1). L'auteur a post\u00e9 ceci dans l'espoir que quelqu'un puisse tirer parti de cette d\u00e9couverte et obtenir une \u00e9l\u00e9vation des privil\u00e8ges, peut-\u00eatre en impl\u00e9mentant l'<strong>exploit<\/strong> <em>IOS_CreateThread<\/em> d\u00e9taill\u00e9 sur le <em>wiki<\/em>.<\/p>\n<p style=\"text-align: justify;\"><div align=\"justify\" class=\"signoff\"><i class=\"fa fa-fw fa-arrow-right\"><\/i>Pour plus d'infos, lisez le topic GBAtemp <a href=\"https:\/\/gbatemp.net\/threads\/rop-from-within-ios_usb-5-5-1.444369\/\" target=\"_blank\" rel=\"noopener noreferrer\">par ici<\/a>&#8239;!&#8239;;) <\/div>\n<p style=\"text-align: justify;\">Le second, post\u00e9 par un certain <em>Donald_Trump<\/em> (si si, je vous le jure...), permet d'afficher la r\u00e9gion OTP \u00e0 l'\u00e9cran et donc de prouver que l'on peut acc\u00e9der \u00e0 l'OTP (<em>One Time Programmable memory<\/em>) via l'<strong>exploit kernel IOSU<\/strong>. Rappelez-vous qu'il ne faut partager ceci \u00e0 personne, car la r\u00e9gion OTP contient des des donn\u00e9es de cryptage sp\u00e9cifiques \u00e0 votre console (cl\u00e9s <em>NAND<\/em>, cl\u00e9 <em>Ankast<\/em>, cl\u00e9 commune, etc.), qui sont des propri\u00e9t\u00e9s de <em>Nintendo<\/em>.<\/p>\n<p style=\"text-align: justify;\"><div align=\"justify\" class=\"signoff\"><i class=\"fa fa-fw fa-arrow-right\"><\/i>Pour plus d'infos, lisez le topic GBAtemp <a href=\"https:\/\/gbatemp.net\/threads\/otp-access-via-iosu-kernel.445063\/\" target=\"_blank\" rel=\"noopener noreferrer\">par ici<\/a>&#8239;!&#8239;;) <\/div>\n<p style=\"text-align: justify;\">Que pensez-vous de ces deux nouvelles&#8239;?&nbsp;\ud83d\ude42<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Il est peut-\u00eatre bient\u00f4t l'heure de d\u00e9poussi\u00e9rer votre Wii U&#8239;!&nbsp;\ud83d\ude00<\/p>\n","protected":false},"author":481,"featured_media":9783,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,29,71,30],"tags":[2688,2689],"plateformes":[966],"genres":[2032,872,873,1524],"developpeurs":[2681,2683],"editeurs":[2682,2684],"types":[965,864],"sources":[2685,2686,2687],"class_list":["post-11690","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-news-underground","category-outils","category-underground","tag-otp","tag-rop","plateformes-wii-u","genres-exploit-iosu","genres-exploits","genres-exploits-kernel","genres-exploits-wii-u","developpeurs-donald_trump","developpeurs-hillary_clinton","editeurs-donald_trump","editeurs-hillary_clinton","types-hack-wii-u","types-news","sources-httphackinformer-com20161015wii-u-iosu-kernel-exploit-demonstration","sources-httpsgbatemp-netthreadsotp-access-via-iosu-kernel-445063","sources-httpsgbatemp-netthreadsrop-from-within-ios_usb-5-5-1-444369"],"yoast_head":"\n<title>[WiiU] D\u00e9monstrations de l&#039;exploit kernel IOSU - Custom Protocol<\/title>\n<meta name=\"description\" content=\"Il est peut-\u00eatre bient\u00f4t l&#039;heure de d\u00e9poussi\u00e9rer votre Wii U ! :D\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.customprotocol.com\/wiiu-demonstrations-exploit-kernel-iosu\/\" \/>\n<meta property=\"og:locale\" content=\"fr_CA\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"[WiiU] D\u00e9monstrations de l&#039;exploit kernel IOSU - Custom Protocol\" \/>\n<meta property=\"og:description\" content=\"Il est peut-\u00eatre bient\u00f4t l&#039;heure de d\u00e9poussi\u00e9rer votre Wii U ! :D\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.customprotocol.com\/wiiu-demonstrations-exploit-kernel-iosu\/\" \/>\n<meta property=\"og:site_name\" content=\"Custom Protocol\" \/>\n<meta property=\"article:published_time\" content=\"2016-10-16T12:01:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.customprotocol.com\/medias\/2016\/04\/Wii-U-eclair-noir-cest-dark-cest-hack-ouais.png\" \/>\n\t<meta property=\"og:image:width\" content=\"888\" \/>\n\t<meta property=\"og:image:height\" content=\"500\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Wirus\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/HackerGen\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"Wirus\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimation du temps de lecture\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.customprotocol.com\/wiiu-demonstrations-exploit-kernel-iosu\/\",\"url\":\"https:\/\/www.customprotocol.com\/wiiu-demonstrations-exploit-kernel-iosu\/\",\"name\":\"[WiiU] D\u00e9monstrations de l'exploit kernel IOSU - Custom Protocol\",\"isPartOf\":{\"@id\":\"https:\/\/www.customprotocol.com\/#website\"},\"datePublished\":\"2016-10-16T12:01:24+00:00\",\"dateModified\":\"2016-10-16T12:01:24+00:00\",\"author\":{\"@id\":\"https:\/\/www.customprotocol.com\/#\/schema\/person\/e2f5c3e6cbb948e59756b98bed512cf9\"},\"description\":\"Il est peut-\u00eatre bient\u00f4t l'heure de d\u00e9poussi\u00e9rer votre Wii U ! :D\",\"breadcrumb\":{\"@id\":\"https:\/\/www.customprotocol.com\/wiiu-demonstrations-exploit-kernel-iosu\/#breadcrumb\"},\"inLanguage\":\"fr-CA\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.customprotocol.com\/wiiu-demonstrations-exploit-kernel-iosu\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.customprotocol.com\/wiiu-demonstrations-exploit-kernel-iosu\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/www.customprotocol.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"[WiiU] D\u00e9monstrations de l&#8217;exploit kernel IOSU\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.customprotocol.com\/#website\",\"url\":\"https:\/\/www.customprotocol.com\/\",\"name\":\"Custom Protocol\",\"description\":\"Site d&#039;hack-tualit\u00e9 et de tutoriels sur la customisation de consoles et appareils (homebrews, plugins, \u00e9mulation...)\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.customprotocol.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"fr-CA\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.customprotocol.com\/#\/schema\/person\/e2f5c3e6cbb948e59756b98bed512cf9\",\"name\":\"Wirus\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-CA\",\"@id\":\"https:\/\/www.customprotocol.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/ff65bb0fba0be9639885c04a3ed7d8a895a98260fc23f283286dc9cf20bf3871?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/ff65bb0fba0be9639885c04a3ed7d8a895a98260fc23f283286dc9cf20bf3871?s=96&d=mm&r=g\",\"caption\":\"Wirus\"},\"description\":\"Avez-vous d\u00e9j\u00e0 vu un gentil virus ? Maintenant, oui.\",\"sameAs\":[\"https:\/\/hackergen.com\",\"https:\/\/twitter.com\/https:\/\/twitter.com\/HackerGen\",\"https:\/\/www.youtube.com\/user\/Wirusalization\"],\"url\":\"https:\/\/www.customprotocol.com\/auteur\/wirus\/\"}]}<\/script>\n","yoast_head_json":{"title":"[WiiU] D\u00e9monstrations de l'exploit kernel IOSU - Custom Protocol","description":"Il est peut-\u00eatre bient\u00f4t l'heure de d\u00e9poussi\u00e9rer votre Wii U ! :D","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.customprotocol.com\/wiiu-demonstrations-exploit-kernel-iosu\/","og_locale":"fr_CA","og_type":"article","og_title":"[WiiU] D\u00e9monstrations de l'exploit kernel IOSU - Custom Protocol","og_description":"Il est peut-\u00eatre bient\u00f4t l'heure de d\u00e9poussi\u00e9rer votre Wii U ! :D","og_url":"https:\/\/www.customprotocol.com\/wiiu-demonstrations-exploit-kernel-iosu\/","og_site_name":"Custom Protocol","article_published_time":"2016-10-16T12:01:24+00:00","og_image":[{"width":888,"height":500,"url":"https:\/\/www.customprotocol.com\/medias\/2016\/04\/Wii-U-eclair-noir-cest-dark-cest-hack-ouais.png","type":"image\/png"}],"author":"Wirus","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/twitter.com\/HackerGen","twitter_misc":{"\u00c9crit par":"Wirus","Estimation du temps de lecture":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.customprotocol.com\/wiiu-demonstrations-exploit-kernel-iosu\/","url":"https:\/\/www.customprotocol.com\/wiiu-demonstrations-exploit-kernel-iosu\/","name":"[WiiU] D\u00e9monstrations de l'exploit kernel IOSU - Custom Protocol","isPartOf":{"@id":"https:\/\/www.customprotocol.com\/#website"},"datePublished":"2016-10-16T12:01:24+00:00","dateModified":"2016-10-16T12:01:24+00:00","author":{"@id":"https:\/\/www.customprotocol.com\/#\/schema\/person\/e2f5c3e6cbb948e59756b98bed512cf9"},"description":"Il est peut-\u00eatre bient\u00f4t l'heure de d\u00e9poussi\u00e9rer votre Wii U ! :D","breadcrumb":{"@id":"https:\/\/www.customprotocol.com\/wiiu-demonstrations-exploit-kernel-iosu\/#breadcrumb"},"inLanguage":"fr-CA","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.customprotocol.com\/wiiu-demonstrations-exploit-kernel-iosu\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.customprotocol.com\/wiiu-demonstrations-exploit-kernel-iosu\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.customprotocol.com\/"},{"@type":"ListItem","position":2,"name":"[WiiU] D\u00e9monstrations de l&#8217;exploit kernel IOSU"}]},{"@type":"WebSite","@id":"https:\/\/www.customprotocol.com\/#website","url":"https:\/\/www.customprotocol.com\/","name":"Custom Protocol","description":"Site d&#039;hack-tualit\u00e9 et de tutoriels sur la customisation de consoles et appareils (homebrews, plugins, \u00e9mulation...)","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.customprotocol.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"fr-CA"},{"@type":"Person","@id":"https:\/\/www.customprotocol.com\/#\/schema\/person\/e2f5c3e6cbb948e59756b98bed512cf9","name":"Wirus","image":{"@type":"ImageObject","inLanguage":"fr-CA","@id":"https:\/\/www.customprotocol.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/ff65bb0fba0be9639885c04a3ed7d8a895a98260fc23f283286dc9cf20bf3871?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ff65bb0fba0be9639885c04a3ed7d8a895a98260fc23f283286dc9cf20bf3871?s=96&d=mm&r=g","caption":"Wirus"},"description":"Avez-vous d\u00e9j\u00e0 vu un gentil virus ? Maintenant, oui.","sameAs":["https:\/\/hackergen.com","https:\/\/twitter.com\/https:\/\/twitter.com\/HackerGen","https:\/\/www.youtube.com\/user\/Wirusalization"],"url":"https:\/\/www.customprotocol.com\/auteur\/wirus\/"}]}},"_links":{"self":[{"href":"https:\/\/www.customprotocol.com\/api\/wp\/v2\/posts\/11690","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.customprotocol.com\/api\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.customprotocol.com\/api\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.customprotocol.com\/api\/wp\/v2\/users\/481"}],"replies":[{"embeddable":true,"href":"https:\/\/www.customprotocol.com\/api\/wp\/v2\/comments?post=11690"}],"version-history":[{"count":0,"href":"https:\/\/www.customprotocol.com\/api\/wp\/v2\/posts\/11690\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.customprotocol.com\/api\/wp\/v2\/media\/9783"}],"wp:attachment":[{"href":"https:\/\/www.customprotocol.com\/api\/wp\/v2\/media?parent=11690"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.customprotocol.com\/api\/wp\/v2\/categories?post=11690"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.customprotocol.com\/api\/wp\/v2\/tags?post=11690"},{"taxonomy":"plateformes","embeddable":true,"href":"https:\/\/www.customprotocol.com\/api\/wp\/v2\/plateformes?post=11690"},{"taxonomy":"genres","embeddable":true,"href":"https:\/\/www.customprotocol.com\/api\/wp\/v2\/genres?post=11690"},{"taxonomy":"developpeurs","embeddable":true,"href":"https:\/\/www.customprotocol.com\/api\/wp\/v2\/developpeurs?post=11690"},{"taxonomy":"editeurs","embeddable":true,"href":"https:\/\/www.customprotocol.com\/api\/wp\/v2\/editeurs?post=11690"},{"taxonomy":"types","embeddable":true,"href":"https:\/\/www.customprotocol.com\/api\/wp\/v2\/types?post=11690"},{"taxonomy":"sources","embeddable":true,"href":"https:\/\/www.customprotocol.com\/api\/wp\/v2\/sources?post=11690"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}