Competitions / WC24

Zeusus · 22. Dezember 2014, 19:38

Digging this thread out

If a player like pistonfish recieves that message, wouldnt a network dump help to find the signature?

Leseratte · 22. Dezember 2014, 19:40

No.

I can easily grab those WC24 announcements directly from the Nintendo server. But they are signed ...

Zeusus · 22. Dezember 2014, 20:50

Maybe I didn´t get it but..
If you can get the signature, why can´t you use it for own purpose?

Leseratte · 22. Dezember 2014, 20:57

Do you know how asymmetric encryption / signatures work?

It's the same as if you say "I have a valid 3DS game from eShop on my SD so I extract the signature to download all other games from the internet".

Asymmetric encryption works with two keys - a public and a private one. The public one is built-in in the Wii, the private one is not published, only Nintendo knows it.
A text which is encrypted with the public key can only be read with the private one.
A text which is encrypted with the private key can only be read with the public one.

So, they have the actual data (unencrypted) inside the file, and a signature. The signature is like an encryption, but smaller. Just imagine there was no signature but an encryption.

When Nintendo publishes a new file, they crypt it with their private key, and every Wii (and me too) is able to decrypt it / to check if the file is actually made by nintendo.

To make own files, there are two (or three) ways to circumvent that:

- (very unlikely) get Nintendos private key somehow
- replace the public Nintendo key inside the Wii with an own key pair - with the result that no game will run any more because of wrong keys
- Find a hole like Trucha bug inside the WC24 library / patch the WC24 lib with Trucha.

Nochmal auf deutsch

Zeusus · 22. Dezember 2014, 21:20

Danke für die Mühe @Leseratte ! Ist interessant, aber warum macht man sowas..?

Interesting, but why does Nintendo do that?

So, i guess.. it´s not possible to replace WC24 in near future.

Leseratte · 22. Dezember 2014, 21:27

That would only be possible if someone finds out how to patch the WC24 engine with Trucha.

Why they do this?
Well, the WC24 server for announcement probably had a similar structure as the WC24 servers for mail exchange, wii shop, updates, ...

They probably just had this signing-library laying around and thought it would be good to sign those so no one can spoof a mail that looks like it came from Nintendo - even not with control over the internet traffic.

Billy549 · 6. Januar 2015, 00:53

Hey @Leseratte, gonna dig this out,
Is your test WC24 server up? If so, would I be able to send you my cfg file?
--Poke

dar-and · 1. Februar 2015, 00:24

Would a packet capture not be able to decode the signature?

Billy549 · 1. Februar 2015, 00:27

@dar-and you obviously don't know how it works..
We have the PUBLIC certificate for connecting and identifying as a Wii/DS but we need the PRIVATE key that the server uses to pair with that key. Changing it would mess up all games, and no packet dump contains it.

pistonfish · 1. Februar 2015, 00:46

PokemonAcer schrieb:

@dar-and you obviously don't know how it works..
We have the PUBLIC certificate for connecting and identifying as a Wii/DS but we need the PRIVATE key that the server uses to pair with that key. Changing it would mess up all games, and no packet dump contains it.

We need the Private key, or something like the trucha bug. The trucha bug allows to install stuff, without checking them.

Billy549 · 18. Mai 2015, 18:49

Just sayin...
ACCF saves contain wc24dl.vff and wc24pubk.mod

dar-and · 20. Mai 2015, 17:33

Yeah I understand now... Sorry I am not very technical.

Anyway to the point I noticed something about the gamestats server stopping a lot of games working on wiimmfi, is it that wiimmfi doesn't have one, if that is the case I do know people who have one up for a ps2 server that would be happy to help.

Sorry if this is off topic just wondering...

Billy549 · 20. Mai 2015, 17:45

dar-and schrieb:

Yeah I understand now... Sorry I am not very technical.

Anyway to the point I noticed something about the gamestats server stopping a lot of games working on wiimmfi, is it that wiimmfi doesn't have one, if that is the case I do know people who have one up for a ps2 server that would be happy to help.

Sorry if this is off topic just wondering...

It's not really offtopic. However, gamestats servers are different per game. for example, pokemon platinum is pokeplatds.gamestats.***.wiimmfi.de
and it has different code to pokemon d/p gamestats

dar-and · 20. Mai 2015, 17:50

ahh ok, I do alot of testing with ps2 gamespy games and we had an issue with gamestats but the guy sorted within seconds so I don't know, have you tried wildcards?

dar-and · 20. Mai 2015, 17:57

just noticed the date... A year has already gone by. Also demonware is owned by Activision isn't it? It is used for cod 3 ps2 which works on a a fan server (and it is actually still on official ones), so would that help out for cod waw?

Billy549 · 20. Mai 2015, 18:23

And w/ the ps2 ones maybe they used the same code. We actually have the code for pokemon ones, that's why I used it as an example. I've looked at the code, it *is* different. Also, NDS code =/= Wii code

dar-and · 20. Mai 2015, 18:39

I will have a look at it and also ask the guy who hosts the server as he knows alot about gamespy so might have a workaround for all gamestats games.

Am I right in saying I can just change the dns to connect to a server if it accepts gamespy.com, if so I will have a look into cod waw.

Billy549 · 20. Mai 2015, 18:47

Short: no.
Long: If the game used HTTP for connections, yes
If it used HTTPS, you have to hex edit it then use DNS

dar-and · 20. Mai 2015, 18:53

ah ps2 is just dns so that is annoying, I will still see if that guy can help me look into it

dar-and · 21. Mai 2015, 18:03

he said, "
My gamestats server will support any valid gamespy gamename, so you should be fine using for wii games. I can’t guarantee it, but it should work.

That being said, you do have to authenticate with it using a valid profile, so they would also need to use the gpsp and gpcm servers, otherwise authentication will fail. This means they will have to create new accounts when they switch to use my gpsp and gpcm servers. But that would happen automatically for them if they used my dns server."

Tock · 21. Mai 2015, 18:12

What was the URL PS2 games used? Then I can change nintendowifi.net to that one and test his server for Mario Strikers Charged.

dar-and · 21. Mai 2015, 18:16

Dns is 63.239.170.150, give it a shot if you want

As for the url I will ask

Is there any other info you would need?

NintendoFan · 21. Mai 2015, 18:44

Was that triple post really necessary? Seriously, all of that could have just been put in one post...

Edit by Leseratte:
I've merged the posts.

dar-and · 21. Mai 2015, 18:50

sorry I meant to put them all together but it wouldn't let me edit my previous post (and still wont) and I forgot to ask if what he needed in the 2nd post so needed to post again

lets me edit it now!

what url you looking for he asks, here is a link to his site if that helps qtracker.com/master-gamespy.php

Leseratte · 25. Mai 2015, 08:39

I found out an interesting thing in a new WC24 network dump and need a tester with bootmii@boot2 to verify it.

If someone has bootmii@boot2 and the ability to make network dumps, it would be great if one could do the following:

1. Make a NAND-Backup
2. Initialize your Wii
3. Softmod the Wii again
4. Start a network dump
5. Go to the Wii settings, configure the internet connection (first start the dump!) and enable WC24
6. Open up the USB-Loader and start the Wiimmfi-Patched MKWii ISO
7. Create a new save game and connect to Wiimmfi once.
8. Drive one time trial, go to the MKWii Channel and try to view the rankings (it will fail)
9. Connect to Wiimmfi again and stay on the online screen (where you choose between global, continental and friends) for 5 minutes
10. Shut down the Wii into WC24 standby (yellow power LED)
11. Leave the network dump running (with your Wii in Standby) for at least 8-10 hours
12. Shut down the Wii and send me the network dump

The following things are important:

- Use a USB-Loader and the MKWii-specific Image patcher. Not the generic image patcher and not the automatic disc patcher!
- Never start the original, un-patched MKWii during steps 3 to 11. If you accidently do so, you need to restart at step 2.

Zusammenfassung auf Deutsch

Teilen