Twilight hack
The Twilight hack is the name given to the exploit found by Team Twiizers of Wiibrew.org in The Legend of Zelda: Twilight Princess that permits homebrew developers and everyday users to run unofficial homebrew software from a Secure Digital card inserted into the slot on the front of the Wii. Notably, this is the first way found to boot homebrew software without the use of hardware modifications to the Wii console.
How IT Works
The hack exploits a buffer overflow error caused by loading a specially crafted save file for Twilight Princess. The save file stores the name of the player's horse in the game (originally "Epona"). This save file presents a name much longer than expected to the Twilight Princess game, which causes the Wii system to crash when it tries to load the horse's name. With this crash, the system is made to run a loader program (which was loaded by the game as part of the name) instead of Twilight Princess's code which then proceeds to load a program from the Wii's front SD card slot. Any program that is placed on the root of the SD card, with the filename "boot.elf" or "boot.dol", will run.
What it was used for
Numerous applications have been written that can be run using this method. Since the hack loads an application through a glitch in Twilight Princess, in the past the game had to be loaded each time the user wished to run a homebrew application. This is no longer the case. Certain programs have been made to install custom Wii Menu channels such as the Homebrew Channel so that the applications can be run from the Wii Menu instead of through the Twilight hack every time.
Nintendo's Response
On June 16, 2008, Nintendo released Wii Menu update 3.3 which automatically deletes and prevents the further storage of the unauthorized save files. However, within eight hours of the update's release, community members found two bugs in the update that in conjunction can allow a slightly modified Twilight Hack to operate and have released a new version of the hack that will work on machines that have updated to 3.3. A release for 3.4 firmware was later released for the general public to be able to run the Twilight Hack, even though each time you startup your Wii it will delete the 'hacked' savefile from the system memory. Although this won't prevent you from copying the file from the SD card to the system memory back each time the Wii is turned on and running the exploit without restarting the Wii first.
System Menu 4.0 blocks any current version of the hack from being copied. It has been replaced by BannerBomb, which works with all System Menus.
See also
- Wii homebrew
- Homebrew Channel