<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/">
<channel>
<title>Hacking the Channels</title>
<description> Do any of you think it is possible to save a channel to the SD card, edit it and inject the homebrew channel, and then put it back on your Wii? Since it&amp;#039;s already on your Wii normally, the Ticket should already be installed.</description><link>http://forum.wiibrew.org/read.php?21,1049,1049#msg-1049</link><lastBuildDate>Sun, 15 Mar 2026 18:55:27 +0100</lastBuildDate>
<generator>Phorum 5.2.23</generator>
<item>
<guid>http://forum.wiibrew.org/read.php?21,1049,2173#msg-2173</guid>
<title>Re: Hacking the Channels</title><link>http://forum.wiibrew.org/read.php?21,1049,2173#msg-2173</link><description><![CDATA[ the suggestion being made was that you edit a channel with a hex editor and then copy it to the Wii via system menu, so that you wouldn&#039;t need the Twilight Hack or modifications or any history of homebrew of any kind. This has been proven impossible within the first few posts.]]></description>
<dc:creator>strongfan</dc:creator>
<category>Homebrew General</category><pubDate>Fri, 26 Sep 2008 21:48:54 +0200</pubDate></item>
<item>
<guid>http://forum.wiibrew.org/read.php?21,1049,2165#msg-2165</guid>
<title>Re: Hacking the Channels</title><link>http://forum.wiibrew.org/read.php?21,1049,2165#msg-2165</link><description><![CDATA[ the hash/signature check is only done while installing the channels. you&#039;ll however need a signature (i.e. tik/tmd) for a title with a gid of zero to modify the nand contents. You&#039;ll most likely have to fakesign this signature. And if you can fakesign it you could also just fakesign your hacked channel.<br />Another possibility is - given that you can already run homebrew - just emulate the powerpc part of ES_LaunchTitle:<br />1) Load the TMD from the NAND and reload to the correct IOS version. Make sure that IOS actually gets reloaded (i.e. reload to a different version first and then reload to the title&#039;s version).<br />2) ES_Identify with the loaded TMD and a Ticket (either fakesigned or the original one)<br />3) Load the main executable (hint: it&#039;s a dol) using ES_ calls (do *not* load the content stated in the TMD&#039;s boot index because that one is just a small stub which loads the dol itself without any patches) and patch it while doing so.<br />4) Vector to the entry point - or switch to real addressing mode when loading the system menu (i.e. when the entry point is 0x3400) using the SRR0/1 registers and the rfi instruction.]]></description>
<dc:creator>svpe</dc:creator>
<category>Homebrew General</category><pubDate>Fri, 26 Sep 2008 15:16:50 +0200</pubDate></item>
<item>
<guid>http://forum.wiibrew.org/read.php?21,1049,2152#msg-2152</guid>
<title>Re: Hacking the Channels</title><link>http://forum.wiibrew.org/read.php?21,1049,2152#msg-2152</link><description><![CDATA[ I think the suggestion being made is if you installed a signed app, and then patched it on the NAND directly, you would effectively bypass the signature check that&#039;s only done at install time. However, I believe the check is done at launch time as well. Once you have NAND access, it&#039;s better to just patch the System Menu to remove the checks.]]></description>
<dc:creator>HyperHacker</dc:creator>
<category>Homebrew General</category><pubDate>Fri, 26 Sep 2008 01:37:21 +0200</pubDate></item>
<item>
<guid>http://forum.wiibrew.org/read.php?21,1049,2128#msg-2128</guid>
<title>Re: Hacking the Channels</title><link>http://forum.wiibrew.org/read.php?21,1049,2128#msg-2128</link><description><![CDATA[ <blockquote class="bbcode"><div><small>Quote<br /></small><strong>whodares</strong><br />....<br />Would that not work?</div></blockquote>
That does work, and people area already doing that in some applications. We can even install fakesigned content if we have homebrew working on 3.3. That&#039;s not really an issue.]]></description>
<dc:creator>tona</dc:creator>
<category>Homebrew General</category><pubDate>Thu, 25 Sep 2008 15:19:12 +0200</pubDate></item>
<item>
<guid>http://forum.wiibrew.org/read.php?21,1049,2127#msg-2127</guid>
<title>Re: Hacking the Channels</title><link>http://forum.wiibrew.org/read.php?21,1049,2127#msg-2127</link><description><![CDATA[ What about if you wrote a homebrew app to patch something already installed using ISFS? You wouldn&#039;t have to worry about the NAND encryption, because you&#039;re on the Wii and have decrypted access. It will have been valid when downloading, so the ticket data should match, and if it doesn&#039;t hash data, then it should still appear valid after patching, and you wouldn&#039;t need the fakesign.<br /><br />Would that not work?]]></description>
<dc:creator>whodares</dc:creator>
<category>Homebrew General</category><pubDate>Thu, 25 Sep 2008 09:50:24 +0200</pubDate></item>
<item>
<guid>http://forum.wiibrew.org/read.php?21,1049,1891#msg-1891</guid>
<title>Re: Hacking the Channels</title><link>http://forum.wiibrew.org/read.php?21,1049,1891#msg-1891</link><description><![CDATA[ Actually, no, the ticket doesn&#039;t hash any data. Although I haven&#039;t examined the SD channel backup format, this sounds like it could be a valid idea. However, I&#039;m pretty sure the channels are also signed with the Wii&#039;s private key (on SD), and I&#039;m not sure if it will accept any valid Wii cert or only its own.<br /><br />And of course, this is useless on 3.3 with no fakesigning bug.]]></description>
<dc:creator>marcan</dc:creator>
<category>Homebrew General</category><pubDate>Fri, 12 Sep 2008 20:59:19 +0200</pubDate></item>
<item>
<guid>http://forum.wiibrew.org/read.php?21,1049,1168#msg-1168</guid>
<title>Re: Hacking the Channels</title><link>http://forum.wiibrew.org/read.php?21,1049,1168#msg-1168</link><description><![CDATA[ I see... so, the Hash is determined by the contents of the WAD file. And if you change the WAD file, then it changes the Hash. And the Ticket has a copy of the Hash in it, and if it doesn&#039;t match it won&#039;t accept it. Well that makes my Idea useless...]]></description>
<dc:creator>strongfan</dc:creator>
<category>Homebrew General</category><pubDate>Sun, 24 Aug 2008 22:10:20 +0200</pubDate></item>
<item>
<guid>http://forum.wiibrew.org/read.php?21,1049,1107#msg-1107</guid>
<title>Re: Hacking the Channels</title><link>http://forum.wiibrew.org/read.php?21,1049,1107#msg-1107</link><description><![CDATA[ It wouldn&#039;t work, each ticket has the "<a href="http://en.wikipedia.org/wiki/Cryptographic_hash_function" rel="nofollow">Hash</a>" of the channel it&#039;s for and regardless of how much or little you modified a channel, it will cause it&#039;s Hash to change making the ticket useless.]]></description>
<dc:creator>stevey</dc:creator>
<category>Homebrew General</category><pubDate>Sat, 23 Aug 2008 17:59:26 +0200</pubDate></item>
<item>
<guid>http://forum.wiibrew.org/read.php?21,1049,1102#msg-1102</guid>
<title>Re: Hacking the Channels</title><link>http://forum.wiibrew.org/read.php?21,1049,1102#msg-1102</link><description><![CDATA[ If you put a channel on an SD card, doesn&#039;t it copy the WAD file? If you get it on your computer via SD card, all you have to do is edit it with a hex editor or something to CHANGE the code in the the WAD. That way, you wouldn&#039;t even need the Twilight Hack!]]></description>
<dc:creator>strongfan</dc:creator>
<category>Homebrew General</category><pubDate>Sat, 23 Aug 2008 15:48:54 +0200</pubDate></item>
<item>
<guid>http://forum.wiibrew.org/read.php?21,1049,1086#msg-1086</guid>
<title>Re: Hacking the Channels</title><link>http://forum.wiibrew.org/read.php?21,1049,1086#msg-1086</link><description><![CDATA[ Well . . . if you took a channel off the Wii using the Wii menu, I dont think it copys everything to the SD card so you might not be able to inject something into only half of something, but i dont know. Also, im not sure what your talking about, so explain more.]]></description>
<dc:creator>CLXrsist</dc:creator>
<category>Homebrew General</category><pubDate>Sat, 23 Aug 2008 13:51:18 +0200</pubDate></item>
<item>
<guid>http://forum.wiibrew.org/read.php?21,1049,1059#msg-1059</guid>
<title>Re: Hacking the Channels</title><link>http://forum.wiibrew.org/read.php?21,1049,1059#msg-1059</link><description><![CDATA[ but we can already copy a channel to our SD card via the Wii Menu! And why do we need to install the channel if a normal version is ALREADY ON THE WII? Since the Ticket is installed when you download it, you needn&#039;t install it again!]]></description>
<dc:creator>strongfan</dc:creator>
<category>Homebrew General</category><pubDate>Sat, 23 Aug 2008 00:53:16 +0200</pubDate></item>
<item>
<guid>http://forum.wiibrew.org/read.php?21,1049,1053#msg-1053</guid>
<title>Re: Hacking the Channels</title><link>http://forum.wiibrew.org/read.php?21,1049,1053#msg-1053</link><description><![CDATA[ We would probably need to have someone release an app that can extract and install channels.]]></description>
<dc:creator>Arikado</dc:creator>
<category>Homebrew General</category><pubDate>Sat, 23 Aug 2008 00:34:59 +0200</pubDate></item>
<item>
<guid>http://forum.wiibrew.org/read.php?21,1049,1049#msg-1049</guid>
<title>Hacking the Channels</title><link>http://forum.wiibrew.org/read.php?21,1049,1049#msg-1049</link><description><![CDATA[ Do any of you think it is possible to save a channel to the SD card, edit it and inject the homebrew channel, and then put it back on your Wii? Since it&#039;s already on your Wii normally, the Ticket should already be installed.]]></description>
<dc:creator>strongfan</dc:creator>
<category>Homebrew General</category><pubDate>Fri, 22 Aug 2008 23:57:47 +0200</pubDate></item>
</channel>
</rss>