Minor fix for libWiiPy v1.0.0 compatibility

ContentRecord is now a public type in libWiiPy.title.types rather than a private type in libWiiPy.types

README.md

@@ -1,3 +1,5 @@
+# NUSGet After Dark
+A modern and supercharged NUS downloader built with Python and Qt6. Powered by libWiiPy and libTWLPy. Fork with features not acceptable for prod. 
 <div align="center">
  <img src="https://github.com/user-attachments/assets/156eb949-93aa-4453-b7a0-99b784ec0c8c" alt="The icon for NUSGet" width=256 height=256>
  <h1>NUSGet</h1>
@@ -8,8 +10,8 @@
  </a>
 </div>
 
-![Linux Screenshot](https://github.com/user-attachments/assets/f9e0e6c4-6a04-4c2b-bffd-7a1dc58671ff)
+![Linux Screenshot](https://github.com/user-attachments/assets/220240bb-8119-4995-a5ce-00fac11d7d39)
- 
+
 ## Features
 NUSGet allows you to download any content from the Nintendo Update Servers. Free content (content with a Ticket freely available on the servers) can be decrypted or packed directly into an installable archive (WAD/TAD).
 
@@ -17,11 +19,12 @@ NUSGet also offers the ability to create vWii WADs that can be installed from wi
 
 The following features are available for all supported consoles:
 - Downloading encrypted contents (files like `00000000`, `00000001`, etc.) directly from the update servers for any title.
-- Creating decrypted contents (*.app files) from the encrypted contents on the servers. Only supported for free titles.
+- Creating decrypted contents (*.app files) from the encrypted contents on the servers.
 - Scripting support, allowing you to perform batch downloads of any titles for the Wii, vWii, or DSi in one script. (See `example-script.json` for an example of the scripting format.)
 
 **For Wii and vWii titles only:**
-- "Pack installable archive (WAD/TAD)": Pack the encrypted contents, TMD, and Ticket into a WAD file that can be installed on a Wii or in Dolphin Emulator. Only supported for free titles.
+- "Pack installable archive (WAD/TAD)": Pack the encrypted contents, TMD, and Ticket into a WAD file that can be installed on a Wii or in Dolphin Emulator.
+- Forging Tickets for titles without a common Ticket available on the NUS by using the Title Key algorithm to derive the key needed to decrypt the title.
 
 **For vWii titles only:**
 - "Re-encrypt title using the Wii Common Key": Re-encrypt the Title Key in a vWii title's Ticket before packing the WAD, so that the WAD can be installed via a normal WAD manager on the vWii, and can be extracted with legacy tools. **This also creates WADs that can be installed directly in Dolphin, allowing for running the vWii System Menu in Dolphin without a vWii NAND dump!**

modules/download_wii.py

@@ -2,8 +2,10 @@
 # Copyright 2024-2025 NinjaCheetah & Contributors
 
 import pathlib
-
+from typing import List, Tuple
+from .tkey import find_tkey
 import libWiiPy
+from libWiiPy.title.ticket import _TitleLimit
 
 
 def run_nus_download_wii(out_folder: pathlib.Path, tid: str, version: str, pack_wad_chkbox: bool, keep_enc_chkbox: bool,
@@ -53,6 +55,7 @@ def run_nus_download_wii(out_folder: pathlib.Path, tid: str, version: str, pack_
     # Write out the TMD to a file.
     version_dir.joinpath(f"tmd.{title_version}").write_bytes(title.tmd.dump())
     # Use a local ticket, if one exists and "use local files" is enabled.
+    forge_ticket = False
     if use_local_chkbox and version_dir.joinpath("tik").exists():
         progress_callback.emit(-1, -1, " - Parsing local copy of Ticket...")
         title.load_ticket(version_dir.joinpath("tik").read_bytes())
@@ -62,11 +65,10 @@ def run_nus_download_wii(out_folder: pathlib.Path, tid: str, version: str, pack_
             title.load_ticket(libWiiPy.title.download_ticket(tid, wiiu_endpoint=wiiu_nus_enabled, progress=progress_update))
             version_dir.joinpath("tik").write_bytes(title.ticket.dump())
         except ValueError:
-            # If libWiiPy returns an error, then no ticket is available. Log this, and disable options requiring a
+            # If libWiiPy returns an error, then no ticket is available. Try to forge a ticket after we download the
-            # ticket so that they aren't attempted later.
+            # content.
-            progress_callback.emit(0, 0, "  - No Ticket is available!")
+            progress_callback.emit(0, 0, "   - No Ticket is available! Will try forging a Ticket.")
-            pack_wad_enabled = False
+            forge_ticket = True
-            decrypt_contents_enabled = False
     # Load the content records from the TMD, and begin iterating over the records.
     title.load_content_records()
     content_list = []
@@ -88,6 +90,39 @@ def run_nus_download_wii(out_folder: pathlib.Path, tid: str, version: str, pack_
             if keep_enc_chkbox is True:
                 version_dir.joinpath(content_file_name).write_bytes(content_list[content])
     title.content.content_list = content_list
+    # Try to forge a Ticket, if a common one wasn't available.
+    if forge_ticket is True:
+        progress_callback.emit(0, 0, " - Attempting to forge Ticket...")
+        try:
+            title_key = find_tkey(tid, title.content.content_list[0], title.tmd.content_records[0])
+            title_key_enc = libWiiPy.title.encrypt_title_key(title_key, 0, tid)
+            ticket = libWiiPy.title.Ticket()
+            ticket.common_key_index = 0
+            ticket.console_id = 0
+            ticket.content_access_permissions = b'\xff' * 64
+            ticket.ecdh_data = b'\x00' * 60
+            ticket.permit_mask = b'\x00' * 4
+            ticket.permitted_titles = b'\x00' * 4
+            ticket.signature = b'\x00' * 256
+            ticket.signature_issuer = "Root-CA00000001-XS00000003" + ("\x00" * 38)
+            ticket.signature_type = b'\x00\x01' * 2
+            ticket.ticket_id = b'\x00' * 8
+            ticket.ticket_version = 0
+            ticket.title_export_allowed = 0
+            ticket.title_id = tid.encode()
+            ticket.title_key_enc = title_key_enc
+            ticket.title_limits_list = [_TitleLimit(0, 0) for _ in range(0, 8)]
+            ticket.title_version = 0
+            ticket.unknown1 = b'\xff' * 2
+            ticket.unknown2 = b'\x00' * 48
+            ticket.fakesign()
+            title.ticket = ticket
+            version_dir.joinpath("tik").write_bytes(title.ticket.dump())
+            progress_callback.emit(-1, -1, "   - Successfully forged Ticket!")
+        except Exception:
+            progress_callback.emit(-1, -1, " - Ticket could not be forged!")
+            pack_wad_enabled = False
+            decrypt_contents_enabled = False
     # If decrypt local contents is still true, decrypt each content and write out the decrypted file.
     if decrypt_contents_enabled is True:
         try:

modules/tkey.py

@@ -0,0 +1,53 @@
+# "tkey-gen.py", licensed under the MIT license
+# Copyright 2024 NinjaCheetah
+
+import binascii
+import hashlib
+import libWiiPy
+from libWiiPy.title.types import ContentRecord
+
+
+def _secret(start, length):
+    ret = b''
+    add = start + length
+    for _ in range(length):
+        unsigned_start = start & 0xFF  # Compensates for how Python handles negative values vs PHP.
+        ret += bytes.fromhex(f"{unsigned_start:02x}"[-2:])
+        nxt = start + add
+        add = start
+        start = nxt
+    return ret
+
+
+def _mungetid(tid):
+    # Remove leading zeroes from the TID.
+    while tid.startswith("00"):
+        tid = tid[2:]
+    if tid == "":
+        tid = "00"
+    # In PHP, the last character just gets dropped if you make a hex string from an odd-length input, so this
+    # replicates that functionality.
+    if len(tid) % 2 != 0:
+        tid = tid[:-1]
+    return bytes.fromhex(tid)
+
+
+def _derive_key(tid, passwd):
+    key_secret = _secret(-3, 10)
+    salt = hashlib.md5(key_secret + _mungetid(tid)).digest()
+    # Had to reduce the length here from 32 to 16 when converting to get the same length keys.
+    return hashlib.pbkdf2_hmac("sha1", passwd.encode(), salt, 20, 16).hex()
+
+
+def find_tkey(tid: str, banner_enc: bytes, content_record: ContentRecord) -> bytes:
+    # Find a working Title Key by generating a key with a password, then decrypting content 0 and comparing it to the
+    # expected hash. If the hash matches, then we generated the correct key.
+    passwds = ["nintendo", "mypass"]
+    for passwd in passwds:
+        key = binascii.unhexlify(_derive_key(tid, passwd).encode())
+        banner_dec = libWiiPy.title.decrypt_content(banner_enc, key, content_record.index, content_record.content_size)
+        banner_dec_hash = hashlib.sha1(banner_dec).hexdigest()
+        content_record_hash = content_record.content_hash.decode()
+        if banner_dec_hash == content_record_hash:
+            return key
+    raise Exception("Valid Title Key could not be generated")

resources/style_dark.qss

@@ -47,7 +47,7 @@ QMenuBar::item:selected {
 }
 
 QMenuBar::item:pressed {
-    background-color: #1a73e8;
+    background-color: #6c1ae8;
     color: white;
 }
 
@@ -68,7 +68,7 @@ QMenu::item {
 }
 
 QMenu::item:selected {
-    background-color: #1a73e8;
+    background-color: #6c1ae8;
     color: white;
 }
 
@@ -88,13 +88,13 @@ QRadioButton {
 
 QRadioButton:hover {
     background-color: rgba(60, 60, 60, 1);
-    border-color: #4a86e8;
+    border-color: #9c4ae8;
 }
 
 QRadioButton:checked {
     background-color: rgba(26, 115, 232, 0.08);
-    border: 1px solid #1a73e8;
+    border: 1px solid #6c1ae8;
-    color: #1a73e8;
+    color: #6c1ae8;
 }
 
 QRadioButton::indicator {
@@ -107,13 +107,13 @@ QRadioButton::indicator {
 }
 
 QRadioButton::indicator:checked {
-    background-color: #1a73e8;
+    background-color: #6c1ae8;
-    border: 1px solid #1a73e8;
+    border: 1px solid #6c1ae8;
     image: url("{IMAGE_PREFIX}/rounded_square.svg");
 }
 
 QRadioButton::indicator:hover {
-    border-color: #1a73e8;
+    border-color: #6c1ae8;
 }
 
 QLineEdit {
@@ -124,11 +124,11 @@ QLineEdit {
     margin: 4px 0px;
     font-size: 13px;
     color: #ffffff;
-    selection-background-color: #1a73e8;
+    selection-background-color: #6c1ae8;
 }
 
 QLineEdit:focus {
-    border-color: #1a73e8;
+    border-color: #6c1ae8;
 }
 
 QLineEdit:disabled {
@@ -187,11 +187,11 @@ QTreeView::item:hover {
 }
 
 QTreeView::item:focus {
-    background-color: rgba(26, 115, 232, 0.08);
+    background-color: rgba(64, 26, 232, 0.15);
 }
 
 QTreeView::item:selected {
-    background-color: #1a73e8;
+    background-color: #6c1ae8;
 }
 
 QTreeView QScrollBar:vertical {
@@ -211,7 +211,7 @@ QTreeView::branch:open:has-children:has-siblings  {
 QTextBrowser {
     color: white;
     background-color: #1a1a1a;
-    selection-background-color: #1a73e8;
+    selection-background-color: #6c1ae8;
 }
 
 QPushButton {
@@ -229,17 +229,17 @@ QPushButton {
 
 QPushButton:hover {
     background-color: rgba(60, 60, 60, 1);
-    border-color: #4a86e8;
+    border-color: #9c4ae8;
 }
 
 QPushButton:focus {
     background-color: rgba(60, 60, 60, 1);
-    border-color: #4a86e8;
+    border-color: #9c4ae8;
 }
 
 QPushButton:pressed {
-    background-color: rgba(26, 115, 232, 0.15);
+    background-color: rgba(64, 26, 232, 0.15);
-    border: 1px solid #1a73e8;
+    border: 1px solid #6c1ae8;
 }
 
 QPushButton:disabled {
@@ -261,18 +261,18 @@ QComboBox {
 }
 
 QComboBox:on {
-    background-color: rgba(26, 115, 232, 0.15);
+    background-color: rgba(64, 26, 232, 0.15);
-    border: 1px solid #1a73e8;
+    border: 1px solid #6c1ae8;
 }
 
 QComboBox:hover {
     background-color: rgba(60, 60, 60, 1);
-    border-color: #4a86e8;
+    border-color: #9c4ae8;
 }
 
 QComboBox:focus {
     background-color: rgba(60, 60, 60, 1);
-    border-color: #4a86e8;
+    border-color: #9c4ae8;
 }
 
 QComboBox::drop-down {
@@ -301,7 +301,7 @@ QComboBox QAbstractItemView::item {
 }
 
 QComboBox QAbstractItemView::item:hover {
-    background-color: #1a73e8;
+    background-color: #6c1ae8;
 }
 
 QScrollBar:vertical {
@@ -320,7 +320,7 @@ QScrollBar::handle:vertical {
 }
 
 QScrollBar::handle:vertical:hover {
-    background-color: rgba(26, 115, 232, 0.4);
+    background-color: rgba(71, 26, 232, 0.4);
 }
 
 QScrollBar::add-line:vertical {
@@ -350,7 +350,7 @@ QScrollBar::handle:horizontal {
 }
 
 QScrollBar::handle:horizontal:hover {
-    background-color: rgba(26, 115, 232, 0.4);
+    background-color: rgba(71, 26, 232, 0.4);
 }
 
 QScrollBar::add-line:horizontal {
@@ -381,7 +381,7 @@ QProgressBar {
 QProgressBar::chunk {
     background-color: qlineargradient(
         x1: 0, y1: 0, x2: 1, y2: 0,
-        stop: 0 #1a73e8, stop: 1 #5596f4
+        stop: 0 #6c1ae8, stop: 1 #8941ec
     );
     border-radius: 5px;
     margin: 0.5px;
@@ -401,7 +401,7 @@ WrapCheckboxWidget {
 
 WrapCheckboxWidget:hover {
     background-color: rgba(60, 60, 60, 1);
-    border-color: #4a86e8;
+    border-color: #9c4ae8;
 }
 
 WrapCheckboxWidget:disabled {
@@ -421,16 +421,20 @@ WrapCheckboxWidget QCheckBox::indicator {
     border: 1px solid #5f6368;
 }
 
+WrapCheckboxWidget QCheckBox::indicator::focus {
+    background-color: rgba(64, 26, 232, 0.15);
+}
+
 WrapCheckboxWidget QCheckBox::indicator:checked {
-    background-color: #1a73e8;
+    background-color: #6c1ae8;
-    border: 1px solid #1a73e8;
+    border: 1px solid #6c1ae8;
     image: url("{IMAGE_PREFIX}/check.svg");
 }
 
 WrapCheckboxWidget QCheckBox::indicator:hover {
-    border-color: #1a73e8;
+    border-color: #6c1ae8;
 }
 
 WrapCheckboxWidget QCheckBox:checked {
-    color: #1a73e8;
+    color: #6c1ae8;
 }