Techno Eggnog: Updated the default text for the Autobooting step to match recent gbatemp guide update

2025-05-12T21:06:57Z

Updated the default text for the Autobooting step to match recent gbatemp guide update

← Older revision		Revision as of 21:06, 12 May 2025
Line 291:		Line 291:
	<syntaxhighlight>		<syntaxhighlight>
	[boot]		[boot]
	autoboot=1		autoboot=3
	autoboot_timeout=3		autoboot_timeout=0
	</syntaxhighlight>		</syntaxhighlight>

	You can adjust the timeout (in seconds) to your liking. The <code>autoboot</code> option corresponds to which option in the minute menu will be loaded. For instance, 1 corresponds to <code>Patch (~~slc~~) and boot IOS (slc)</code>. If you'd like to change this value to a different option in the minute menu, you may.		You can adjust the timeout (in seconds) to your liking. The <code>autoboot</code> option corresponds to which option in the minute menu will be loaded. For instance, 3 corresponds to <code>Patch (sd) and boot IOS (slc)</code>. If you'd like to change this value to a different option in the minute menu, you may.

	==Fastbooting without an SD Card==		==Fastbooting without an SD Card==

Techno Eggnog: god damn a third typo

2025-04-25T17:29:34Z

god damn a third typo

← Older revision		Revision as of 17:29, 25 April 2025
Line 122:		Line 122:
	┃ ┃ ┃ ┗ 📜payload.elf		┃ ┃ ┃ ┗ 📜payload.elf
	┃ ┗ 📜payload.elf		┃ ┗ 📜payload.elf
	┣ 📜boot1now.img (~~UDPOH~~ only)		┣ 📜boot1now.img (UDPIH only)
	┣ 📜recovery_menu (UDPIH only)		┣ 📜recovery_menu (UDPIH only)
	┣ 📜launch.rpx (DNSpresso only)		┣ 📜launch.rpx (DNSpresso only)

Techno Eggnog: Another typo... man I must've not proofread this back in February for this stuff.

2025-04-25T17:26:22Z

Another typo... man I must've not proofread this back in February for this stuff.

← Older revision		Revision as of 17:26, 25 April 2025
Line 236:		Line 236:
	<span>		<span>
	*On the [https://aroma.foryour.cafe/ Aroma] site, scroll down to the Download section. Read through all the steps and click on the checkboxes.		*On the [https://aroma.foryour.cafe/ Aroma] site, scroll down to the Download section. Read through all the steps and click on the checkboxes.
	*Ensure you download <code>EnvironmentLoader</code> and <code>Base-Aroma</code>, alongside any ~~addictional~~ plugins and modules you'd like to download at this stage.		*Ensure you download <code>EnvironmentLoader</code> and <code>Base-Aroma</code>, alongside any additional plugins and modules you'd like to download at this stage.
	*Insert your Wii U's SD card into your PC and extract the <code>wiiu</code> folder from each .zip file to the root of your SD.		*Insert your Wii U's SD card into your PC and extract the <code>wiiu</code> folder from each .zip file to the root of your SD.
	*Download the [https://github.com/jan-hofmeier/wafel_payloader/releases wafel payloader], and place the <code>5payldr.ipx</code> in the <code>wiiu/ios_plugins</code> folder.		*Download the [https://github.com/jan-hofmeier/wafel_payloader/releases wafel payloader], and place the <code>5payldr.ipx</code> in the <code>wiiu/ios_plugins</code> folder.

Techno Eggnog: Fixed a typo.

2025-04-25T17:23:34Z

Fixed a typo.

← Older revision		Revision as of 17:23, 25 April 2025
Line 68:		Line 68:
	\|<code>fw.img</code>		\|<code>fw.img</code>
	\|Root		\|Root
	\|This is minute_minute (abbreviated throughout the guide as '''minute.''' This gives you a menu after running the exploit and/or turning on the console that can be used for multiple purposes, such as creating and restoring backups.		\|This is minute_minute (abbreviated throughout the guide as '''minute).''' This gives you a menu after running the exploit and/or turning on the console that can be used for multiple purposes, such as creating and restoring backups.
	\|-		\|-
	\|Aroma, Browser, DNSpresso		\|Aroma, Browser, DNSpresso

Techno Eggnog: Temporary (possibly) location for the hacks.wiki guide port of the ISFShax guide. This can and will be taken down at the original guide author's request, or may be moved to another page.

2025-02-03T21:25:23Z

Temporary (possibly) location for the hacks.wiki guide port of the ISFShax guide. This can and will be taken down at the original guide author's request, or may be moved to another page.

New page

=ISFShax=

{{warning|text=You should use ISFShax '''at your own risk.''' Messing with ISFS superblocks is dangerous and can brick your Wii U. Make sure you have an SLC backup before installing ISFShax If something goes wrong, you will need de_Fuse to restore this backup.}}

{{info|text=If you are restoring an old SLC backup, ISFSHax will be removed. Newer versions of minute try to preserve ISFShax when restoring the SLC.}}

'''ISFShax''' exploits boot1 using a specially designed ISFS (SLC filesystem) superblock. Once installed, it offers similar capabilities to de_Fuse. Since it runs before IOSU, it can apply early patches to IOSU and repair most types of bricks. However, it cannot protect against bricks caused by boot1 corruption, seeprom issues, or installing a faulty ISFShax superblock. Additionally, ISFShax cannot help if the Wii U is already bricked.

==Features==

*Rebuilding or upgrading the MLC
*Removing the 64GB MLC limit and disabling SCFM
*Brick protection, such as before performing a region change
*Cold booting redNAND, which is helpful when the eMMC is failing
*Providing a minimal CFW that can launch old homebrew using the homebrew launcher (though this might be less useful with Aroma and Tiramisu available)
*Preventing the Wii U from turning on the GamePad during boot using a stroopwafel plugin
*Using partitioned USB storage devices/SD cards

{{info|text=To protect against Nintendo pushing a boot1 update, which would (probably) brick a console with ISFShax, '''boot1 updates are blocked''' by the <code>5isfshax.ipx</code> plugin. Other titles from a system update should still install normally.}}

==Choosing the Exploit==

There are multiple ways to launch the ISFShax installer.

*If you already have Tiramisu or Aroma installed and can launch it, follow the instructions for '''Aroma.'''
*If you already have Haxchi or CBHC installed, follow the instructions for '''Haxchi.'''
*If the browser is working, follow the instructions for '''Browser.'''
*If you cannot access the browser but can access System Settings, or your Wii U crashes during Mii creation during initial setup, follow the instructions for '''DNSpresso.'''
*If your Wii U cannot connect to the internet, follow the instructions for '''UDPIH.'''

==Preparing the SD Card==

In order to install ISFShax, you must have the following on your Fat32 formatted SD card:

{| class="wikitable"
!Method
!Download
!File Name
!Location on SD Card
!Notes
|-
|All
|[https://github.com/isfshax/isfshax_installer/releases ISFShax Installer]
|<code>ios.img</code>
|Root
|This is the ISFShax installer, installing the ISFShax superblocks to 4 existing superblocks. It also marks those superblocks as bad in the normal superblock, so they won't be overwritten.
|-
|All
|[https://github.com/isfshax/isfshax/releases ISFShax Superblock]
|<code>superblock.img</code>, <code>superblock.img.sha</code>
|Root
|This is the actual ISFShax superblock, exploiting a vulnerability in boot1 that allows for arbitrary code execution. Included with this is the checksum for the superblock, ensuring it doesn't get corrupted.
|-
|All
|[https://github.com/StroopwafelCFW/stroopwafel/releases Stroopwafel]
|<code>00core.ipx</code>
|<code>wiiu/ios_plugins</code>
|This is stroopwafel, which contains patches for handling IOSU reloads, redNAND, and other plugins for minute.
|-
|All
|[https://github.com/isfshax/wafel_isfshax_patch/releases ISFShax Patch]
|<code>5isfshax.ipx</code>
|<code>wiiu/ios_plugins</code>
|This is the specific patch that makes IOSU ignore the ISFShax superblock.
|-
|All
|[https://github.com/StroopwafelCFW/minute_minute/releases minute_minute]
|<code>fw.img</code>
|Root
|This is minute_minute (abbreviated throughout the guide as '''minute.''' This gives you a menu after running the exploit and/or turning on the console that can be used for multiple purposes, such as creating and restoring backups.
|-
|Aroma, Browser, DNSpresso
|[https://github.com/jan-hofmeier/unencrypted_fw_img_payload/releases fw.img Loader]
|<code>payload.elf</code>
|<code>wiiu/payloads/fw_img_loader</code>
|This is the fw_img loader, allowing the IOSU to load fw.img off the SD card. '''This must be replaced if it already exists on the SD card.'''
|-
|Aroma, Browser, DNSpresso
|[https://github.com/jan-hofmeier/PayloadLoaderPayload/releases PayloadLoaderPayload]
|<code>payload.elf</code>
|<code>wiiu</code>
|This is the standard payload loader, used by most exploits. This allows you to select a payload to load.
|-
|DNSpresso
|[https://github.com/wiiu-env/PayloadFromRPX/releases PayloadFromRPX]
|<code>root.rpx</code>
|Root, rename to <code>launch.rpx</code>
|This is loaded by DNSpresso, which loads the payload used by this exploit.
|-
|UDPIH
|[https://github.com/jan-hofmeier/minute_minute/releases minute boot1]
|<code>boot1.img</code>
|Root, rename to <code>boot1now.img</code>
|This is a mini version of minute_minute, loading the fw.img from the SD card. This also allows more hardware to initialize, since PRSHhax exploits boot1 early.
|-
|UDPIH
|[https://github.com/GaryOderNichts/recovery_menu/releases Recovery Menu]
|<code>recovery_menu</code>
|Root
|This is the recovery menu, loaded by UPDIH. This is used to load minute. By seeing the boot1now.img, this skips the menu and uses PRSHhax to reset the Wii U into said file.
|-
|Haxchi
|[https://github.com/jan-hofmeier/unencrypted_fw_img_payload/releases fw.img Loader]
|<code>fw_img_loader.elf</code>
|<code>wiiu/apps/fw_img_loader</code>
|This is a version of the fw_img_loader that can be launched through the Homebrew Launcher. This comes as a zip file, which you should extract to the SD card.
|}

Your SD card structure should look like this:
💾SD:
┣ 📂wiiu
┃ ┣ 📂apps (Haxchi only)
┃ ┃ ┣ 📂fw_img_loader
┃ ┃ ┃ ┣ 📜fw_img_loader.elf
┃ ┃ ┃ ┣ 📜icon.png
┃ ┃ ┃ ┗ 📜meta.xml
┃ ┣ 📂ios_plugins
┃ ┃ ┣ 📜00core.ipx
┃ ┃ ┗ 📜5isfshax.ipx
┃ ┣ 📂payloads (Aroma, Browser, and DNSpresso only)
┃ ┃ ┣ 📂fw_img_loader
┃ ┃ ┃ ┗ 📜payload.elf
┃ ┗ 📜payload.elf
┣ 📜boot1now.img (UDPOH only)
┣ 📜recovery_menu (UDPIH only)
┣ 📜launch.rpx (DNSpresso only)
┣ 📜fw.img
┣ 📜ios.img
┣ 📜superblock.img
┗ 📜superblock.img.sha

==Launching into minute==

There are multiple different exploits you can perform to launch into minute. Choose one from the selection below.

<tabber>
|-|Aroma=


*Hold B on the GamePad while booting or launching the Health and Safety app, depending on if you have autobooting enabled.
*A black and white menu should appear. In this menu, select <code>fw_img_loader</code>.

|-|Haxchi=


Simply load the Homebrew Launcher and select the fw.img loader app.


|-|Browser=


*Open the browser, and navigate to wiiuexploit.xyz
*Tap on "Run Exploit!" and immediately hold the B button until you see a black and white menu.
*Select <code>fw_img_loader</code>.


|-|DNSpresso=


The first set of instructions will pertain to users who still have access to the System Settings app.

*Navigate to '''System Settings > Internet > Connect to the Internet'''.
*Set up a new connection, if necessary.
*Press the X button to access the connection list, selecting your network.
*Navigate to '''Change Settings > DNS > Do not auto-obtain'''
*Enter <code>85.215.57.182</code> as the primary DNS, then hit '''Confirm'''.
*Press the B button to go back, then select '''Connection Test'''.
*Immediately hold the B button after starting the connection test until you see a black and white menu.
*Select <code>fw_img_loader</code>.

The next set of instructions will pertain to users who are facing crashes during the Mii creation phase in the initial setup process.

*If you already connected your Wii U to your AP / Router, turn the AP / Router or the Wifi on it off.
*When the setup asks you if you already have a NNID, say yes (even if you don't have one).
*It'll try to connect to the internet, but it should fail. This will prompt you back to setting up an internet connection.
*Turn your Router / AP on again and give it time to start.
*If you don't already have your conection configured there, connect to it now, but enter a wrong password.
*When prompted, navigate to '''Change Settings > DNS > Do not auto-obtain'''.
*Enter <code>85.215.57.182</code> as the primary DNS, then hit '''Confirm'''.
*Press the B button to go back, then select '''Connection Test'''.
*Immediately hold the B button after starting the connection test until you see a black and white menu.
*Select <code>fw_img_loader</code>.


|-|UDPIH=


*Power on the console and insert the UDPIH device as soon as you see the Wii U icon on either the GamePad or TV screen.
*The LED should turn purple, and a countdown timer for loading <code>boot1now.img</code> should appear. Wait 5 seconds before unplugging your UDPIH device.

</tabber>

You should now see the minute main menu.

{{info|text=minute only outputs 1080p through HDMI, with no picture on the gamepad nor on analog inputs. If you cannot access a television with 1080p HDMI support, or it otherwise does not show on the TV screen, you can follow the instructions blindly. In minute, you move the cursor using the power button and enter with the eject button. '''Skip the backup and immediately go to installing ISFShax if this is the case.'''}}

{{info|text=ISFShax isn't installed yet! minute is just loaded temporarily, and it will disappear after a reboot unless you continue with the guide.}}

==Initial Backup==
{{warning|text=You should only perform the backup steps if you are able to see video output through minute!}}

Before installing ISFShax, you should make a fresh backup. You can do this through minute by following the instructions below.

*Navigate to <code>Backup and Restore</code>
*Select <code>Dump SEEPROM and OTP</code> and wait for it to complete. It should only take a few seconds or less.
*Go back to Backup and Restore, this time selecting <code>Dump SLC.RAW</code>. This should take a few minutes.
*Return to the main menu.

==Installing ISFShax==

Here are the steps to properly install ISFShax.

*From the main menu, navigate to <code>Boot `ios.img`</code> (Power 6x, Eject 1x).
*After a few seconds, the ISFShax installer should launch. It uses the same controls as minute.
*Follow the instructions on screen (otherwise, Eject 3x, Power 1x, Eject 3x).
*After installation is completed, the console will turn off.

If installation was successful, the Wii U should boot directly into minute once the console is turned back on.

{{info|text=If you wish to backup ISFShax, dump the SLC.RAW again. This will overwrite the previous file on the SD. This is '''required''' if you need to restore the SLC for unbricking without losing ISFShax.}}

==Booting with ISFShax==

For now, the console is booting into minute, which then applies the required patches from the SD card so that IOSU doesn't fall over the ISFShax superblock. To boot into the Wii U OS, select <code>Patch (sd) and boot IOS (slc)</code> (Power 3x, Eject 1x). ''This is the third option, not the first!''

{{info|text=If your console bootloops through minute, you're likely autobooting Aroma/Tiramisu and accidentally replaced the <code>wiiu/payload.elf</code> with the fw_img loader. Simply replace it with the [https://github.com/wiiu-env/PayloadLoaderPayload/releases PayloadLoader Payload] to fix this.}}

==Booting Aroma/Tiramisu with ISFShax==

ISFShax can also be used to autoboot into Aroma/Tiramisu. This is done through a specialized payloader that's loaded alongside ISFShax itself. This can replace autobooting with the PayloadLoader. If you'd like to do this, or you're installing Aroma/Tiramisu for the first time, follow the steps below:

{{warning|text=If you're already autobooting Aroma/Tiramisu, undo the autobooting by following [https://wiiu.hacks.guide/uninstall-payloadloader.html this guide].}}

<tabber>
|-|Aroma=

*On the [https://aroma.foryour.cafe/ Aroma] site, scroll down to the Download section. Read through all the steps and click on the checkboxes.
*Ensure you download <code>EnvironmentLoader</code> and <code>Base-Aroma</code>, alongside any addictional plugins and modules you'd like to download at this stage.
*Insert your Wii U's SD card into your PC and extract the <code>wiiu</code> folder from each .zip file to the root of your SD.
*Download the [https://github.com/jan-hofmeier/wafel_payloader/releases wafel payloader], and place the <code>5payldr.ipx</code> in the <code>wiiu/ios_plugins</code> folder.

|-|Tiramisu=

{{info|text=In most cases, Tiramisu has been superseded by Aroma. If you'd like to install Tiramisu for use with legacy homebrew, you can follow the steps below.}}

*On the [https://tiramisu.foryour.cafe/ Tiramisu] site, click on <code>Download Tiramisu</code>. This should include all of the necessary files needed to use Tiramisu.
*Insert your Wii U's SD card into your PC and extract the <code>wiiu</code> folder from the .zip file to the root of your SD.
*Download the [https://github.com/jan-hofmeier/wafel_payloader/releases wafel payloader], and place the <code>5payldr.ipx</code> in the <code>wiiu/ios_plugins</code> folder.

</tabber>

==Booting without an SD Card==

This step is optional but recommended. The Wii U will boot like normal without the SD card, as ISFShax applies a minimal set of patches to the system in order for it to tolerate the modified superblock. Since these patches are kept minimal, they are not optimized, and some actions, like leaving System Settings, will take longer.

To make the full minute, as well as any plugins, run from the internal memory, you can install them to the SLC. This can be accomplished through FTPiiU or [https://github.com/isfshax/haxcopy/releases haxcopy]. Using haxcopy is recommended for most users.

<tabber>
|-|Haxcopy=

{{warning|text=If you're using haxcopy to update an existing install, make sure the plugins have the same name as before. You may install duplicate files, which can cause problems.}}

*Create a folder on the root of your SD card and rename it to <code>hax</code>. This will be what's copied to the SLC.
*Copy the <code>fw.img</code> to the newly created directory.
*Inside the <code>hax</code> folder, create a subfolder and name it <code>ios_plugins</code>
*Copy any plugins you have in the <code>wiiu/ios_plugins</code> folder to this one.
*Copy the <code>haxcopy.wuhb</code> or <code>haxcopy.rpx</code> to the <code>wiiu/apps</code> folder.
*Place the SD card back into the Wii U and run haxcopy to copy the hax folder to the SLC.

|-|FTPiiU=

{{info|text=On Aroma, make sure you have enabled access to system files for FTPiiU. Otherwise, you'll only see the files on your SD card.}}

*Using an FTP client, navigate to <code>/storage_slc/sys</code>
*Inside this folder, create a subfolder and name it <code>hax</code>.
*Make sure your FTP client is in binary mode, '''not ASCII mode'''.
*Upload the <code>fw.img</code> to the newly created directory.
*Inside the <code>hax</code> folder, create a subfolder and name it <code>ios_plugins</code>
*Upload any plugins you have in the <code>wiiu/ios_plugins</code> folder to this one.

</tabber>

Now, the Wii U should autoboot if no SD card is inserted. If an SD card is inserted, the minute menu should show up, even if <code>fw.img</code> is not present. You can now select <code>Patch (slc) and boot IOS (slc)</code> to load the plugins from SLC and boot. There's no need to have them on your SD card anymore.

Since ISFShax v5.0, it'll first try to load the minute image from the SD first, then fallback to the SLC. Previous versions will first try to load the minute image from the SLC first, then fallback to the SD.

{{warning|text=A factory reset will delete the <code>hax</code> folder, leaving you with only the basic patches ISFShax applies!}}

==Autobooting with an SD Card==
To make the Wii U autoboot with an SD card inserted, you need to create a configuration file called <code>minute.ini</code> located in the <code>sd:/minute</code> directory. Inside of said file, insert the following content:
<syntaxhighlight>
[boot]
autoboot=1
autoboot_timeout=3
</syntaxhighlight>

You can adjust the timeout (in seconds) to your liking. The <code>autoboot</code> option corresponds to which option in the minute menu will be loaded. For instance, 1 corresponds to <code>Patch (slc) and boot IOS (slc)</code>. If you'd like to change this value to a different option in the minute menu, you may.

==Fastbooting without an SD Card==

As an alternative to autobooting, fastbooting makes the Wii U boot as fast as possible, without showing minute. This will not work with redNAND, since it's hardcoded to go to the first option (booting the SLC, loading patches from SLC). It won't display anything and ignore any autoboot configuration present.

*Make sure the system can boot using the first option in minute.
*Replace the <code>fw.img</code> in the hax folder on the SLC with the [https://github.com/StroopwafelCFW/minute_minute/releases/download/v1.0/fw_fastboot.img fw_fastboot.img] renamed to the former file's name.

{{info|text=In case you get stuck and need to load the full minute from the SD card, you can simply place the minute image on the SD card.}}

==Uninstalling ISFShax==

{{warning|text=DON'T just restore an older SLC backup, as that would break SCFM! You also do not need to uninstall ISFShax to update it, as simply reinstalling the new superblock over the old one replaces it completely.}}

If for any reason you need to uninstall ISFShax, follow the steps below:

*Make sure your Wii U doesn't depend on any patches (like <code>wafel_unlimit_mlc.ipx</code> or redNAND).
**You can check that by booting with only the <code>00core.ipx</code> and the <code>5isfshax.ipx</code> plugins in the <code>wiiu/ios_plugins</code> directory on the SD and using the <code>Patch (sd) and boot IOS (slc)</code> option.
*Delete the <code>/storage_slc/sys/hax</code> folder if you set up SLC booting.
*Run the ISFShax installer again from minute and follow the on-screen instructions to uninstall.

User:Techno Eggnog/sandbox - Revision history

Techno Eggnog: Updated the default text for the Autobooting step to match recent gbatemp guide update

Techno Eggnog: god damn a third typo

Techno Eggnog: Another typo... man I must've not proofread this back in February for this stuff.

Techno Eggnog: Fixed a typo.

Techno Eggnog: Temporary (possibly) location for the hacks.wiki guide port of the ISFShax guide. This can and will be taken down at the original guide author's request, or may be moved to another page.