Exploits the Wii U's bluetooth stack to gain IOSU kernel access via bluetooth.
For a more detailed write-up see WRITEUP.md.
Not to be confused with BlueBomb for the Wii and Wii Mini.
- A Wii U which is able to pair a Wii Remote
- A PC with bluetooth
- A PC or VM running a version of Linux which is able to run the custom build of BlueZ
How to use
sudo apt install build-essential libbluetooth-dev libglib2.0-dev libdbus-1-devto install the required dependencies.
- Clone https://github.com/rnconrad/WiimoteEmulator
source ./build-custom.shto build BlueZ.
Don't worry if building the emulator itself fails due to missing SDL headers. Just continue with the next steps.
- Stop the already running bluetooth service
sudo systemctl disable --now bluetooth
- Run the custom built bluetoothd
sudo ./bluez-4.101/dist/sbin/bluetoothd -d -n
- Download the
bluubombbinary and the kernel binary of your choice from the releases page. Take a look at Kernel binaries for more information.
- Make the bluubomb file executable by running
sudo chmod +x bluubomb
- Power on the Wii U and press the sync button.
sudo ./bluubomb arm_kernel.binand wait for the pairing process to complete.
This might take a minute.
If you get a warning about Simple Pairing mode read the Simple Pairing mode section below.
Write down the Wii U's bd address that should be displayed after the pairing is complete.
You can now run
sudo ./bluubomb arm_kernel.bin <bdaddr here> to connect directly to the Wii U and skip the pairing process.
Launches a launch.rpx from the root of your SD card on the next application launch.
Launches a fw.img from the root of your SD card on the next OS relaunch (for example when exiting System Settings).
Applies IOSU patches to temporarily remove region restrictions.
This should be helpful if you've locked yourself out of your applications due to permanent region modifications.
Simple Pairing mode
On some devices the simple pairing mode can't be disabled by bluubomb.
You can check the current Simple Pairing mode by running
hciconfig hci0 sspmode.
Make sure it says
Simple Pairing mode: Disabled.
If not run
sudo hciconfig hci0 sspmode disabled and
sudo hciconfig hci0 reset.
Then check the mode again.
To build you need to have gcc and devkitARM installed.
- GaryOderNichts - bluubomb
- rnconrad for the WiimoteEmulator
- dimok789 and everyone else who made mocha possible