xboxscene.org forums

Author Topic: Could Someone Do Some User Agent Sniffing  (Read 141 times)

Hashmire420

  • Archived User
  • Jr. Member
  • *
  • Posts: 72
Could Someone Do Some User Agent Sniffing
« on: November 23, 2006, 07:31:00 PM »

I will be getting a Wii tomorrow if things go well for me(very doubtful), so that means in the meantime i cant do anything exploit related.

Now to what i mean, in an earlier post someone found out how to spoof the the wii into loading google instead of the store or whatever it is.  So could someone try sending it to one of those sites that tell you what the name of your browser is.  

I actually cant remember any of those sites right now, but I'm sure someone here does.

Then once you have that post it here, and try going to http://oss.shop.wii.com using the Firefox user agent switcher extension.

Thank you!
Logged

mrRobinson

  • Archived User
  • Hero Member
  • *
  • Posts: 1321
Could Someone Do Some User Agent Sniffing
« Reply #1 on: November 23, 2006, 07:48:00 PM »

CODE
Wii Shop Channel agent, runs when you're shopping the wii shop.
    Opera/9.00 (Nintendo Wii; U;; 1038-58; Wii Shop Channel/1.0; en)

Wii Updater, runs when the Wii is getting it's system (firmware) update.
    wii libnup/1.0

Virtual Console downloader, runs when the download for a VC game begins.
    libec-3.0.7.06111123

WiiConnect, checks for Updates and New content.
    WiiConnect24/1.0FC4plus1 (build 061114161108)

The user agents are all used in different instances (obviously). Sometimes the user agent doesnt even matter, but othertimes you get redirected to wii.com if your UA is wrong. I found all of these via packet sniffer.


All this info and more can be found here: http://mozy.org/wii/
Logged

ILLusions0fGrander

  • Archived User
  • Hero Member
  • *
  • Posts: 3560
Could Someone Do Some User Agent Sniffing
« Reply #2 on: November 23, 2006, 08:21:00 PM »

heh.. nice appearance mrRobinson.

the man whos guide helped solve my xbox 1 network troubleshooting smile.gif
Logged

{EH}Talon

  • Archived User
  • Newbie
  • *
  • Posts: 41
Could Someone Do Some User Agent Sniffing
« Reply #3 on: November 23, 2006, 08:27:00 PM »

QUOTE(Hashmire420 @ Nov 24 2006, 03:38 AM) View Post

I will be getting a Wii tomorrow if things go well for me(very doubtful), so that means in the meantime i cant do anything exploit related.

Now to what i mean, in an earlier post someone found out how to spoof the the wii into loading google instead of the store or whatever it is.  So could someone try sending it to one of those sites that tell you what the name of your browser is.  

I actually cant remember any of those sites right now, but I'm sure someone here does.

Then once you have that post it here, and try going to http://oss.shop.wii.com using the Firefox user agent switcher extension.

Thank you!



I have sucsfully done this just now,

If you visit  http://oss.shop.wii.com in Any regular browser it just redirects you to www.wii.com but with the switcher and these settings,

IPB Image

I have been able to trick wii.com into thinking i am a Wii console !

with this i can now see every peice of html and javascript they had put into the Wii shop channel and possibly the internet browser soon to be seen .

the best part is i can download the updates onto my pc and hex them , mabey with this we can edited the updates and put them on a website then download them onto the Wii to acctually hack the console to do what we want , when we want XD

I want to hack the mail system but i prolly wont beable to since i think its held on the Wii it self !
Logged

Hashmire420

  • Archived User
  • Jr. Member
  • *
  • Posts: 72
Could Someone Do Some User Agent Sniffing
« Reply #4 on: November 23, 2006, 10:10:00 PM »

I did that same thing earlier, but you were able to get the downloads? interesting.

When im at the VC downloads section it says ive got 1000 points, and if i click on anything theres a download link for about 1/8 of a second, which after a few tries i successfully clicked on.  It told me it was downloading and it would leave me with 200 points and 2077 blocks, but then afterwards it tells me its done downloading and then says you are left with 1000 points and 2167 blocks. odd
Logged

{EH}Talon

  • Archived User
  • Newbie
  • *
  • Posts: 41
Could Someone Do Some User Agent Sniffing
« Reply #5 on: November 23, 2006, 10:24:00 PM »

QUOTE(Hashmire420 @ Nov 24 2006, 06:17 AM) View Post

I did that same thing earlier, but you were able to get the downloads? interesting.

When im at the VC downloads section it says ive got 1000 points, and if i click on anything theres a download link for about 1/8 of a second, which after a few tries i successfully clicked on.  It told me it was downloading and it would leave me with 200 points and 2077 blocks, but then afterwards it tells me its done downloading and then says you are left with 1000 points and 2167 blocks. odd



No,


I havent downloaded anything but updates and *.js files to look at consol functions
Logged

mrRobinson

  • Archived User
  • Hero Member
  • *
  • Posts: 1321
Could Someone Do Some User Agent Sniffing
« Reply #6 on: November 24, 2006, 05:42:00 AM »

QUOTE(ILLusions0fGrander @ Nov 23 2006, 10:28 PM) View Post

heh.. nice appearance mrRobinson.

the man whos guide helped solve my xbox 1 network troubleshooting smile.gif


Not my site in case you think it is.  Though I did run my own ethereal wireshark trace last night.  Then used proxomitron ( <- highly recommended ) to browse around from my pc.
Nintendo just needs to implement what msft does, a kerberos type handshake between console and sites.  Then this spoofing can't happen.
Logged