Hacking Project Lilygo-T-Dongle-S3-PS4-Payload-Launcher

Status
Not open for further replies.

mrdude

Developer
OP
Developer
Joined
Dec 11, 2015
Messages
3,071
Trophies
1
Age
56
XP
8,237
Hi mrdude.
I wonder if i can use your files on lilygo t7-s3
LCD stuff won't work, either will the onboard led. Also because that board has PSRam, you'd be crazy not to take advantage and use that. Probably the bin will work on most esp32-s3 boards,that have onboard flash, try and see. However I suggest you get the source from github and mod it for your own board.
 
Last edited by mrdude,

zazo

New Member
Newbie
Joined
Mar 13, 2023
Messages
3
Trophies
0
Age
43
XP
33
Country
Norway
LCD stuff won't work, either will the onboard led. Also because that board has PSRam, you'd be crazy not to take advantage and use that. Probably the bin will work on most esp32-s3 boards,that have onboard flash, try and see. However I suggest you get the source from github and mod it for your own board.
im runing it now on the board. jailbreak and pshive work but i dont know how to add payloads to the menu..
i wonder if you can help me to mod it for my board?
i really dont know how everthing work with this im soo new in this to setup and mod the files for the board
 

mrdude

Developer
OP
Developer
Joined
Dec 11, 2015
Messages
3,071
Trophies
1
Age
56
XP
8,237
im runing it now on the board. jailbreak and pshive work but i dont know how to add payloads to the menu..
i wonder if you can help me to mod it for my board?
i really dont know how everthing work with this im soo new in this to setup and mod the files for the board
I don't do custom firmware for other people and I don't do requests. I posted the source on github so can do this yourself, If you are unable to,I suggest you pay someone for their time and skill to do it for you.
 

zazo

New Member
Newbie
Joined
Mar 13, 2023
Messages
3
Trophies
0
Age
43
XP
33
Country
Norway
I don't do custom firmware for other people and I don't do requests. I posted the source on github so can do this yourself, If you are unable to,I suggest you pay someone for their time and skill to do it for you.
Ok. Thank you.
But i think you have done a nice work on this exploit and thank for all the help i got so far ;)
 

mrdude

Developer
OP
Developer
Joined
Dec 11, 2015
Messages
3,071
Trophies
1
Age
56
XP
8,237
FYI for those that like messing about with the source code, here's an old school starfield effect I made for the lcd screen....

Code:
#include"TFT_eSPI.h"

//Define LCD pins
#define TFT_CS_PIN     4 // Chip select control pin
#define TFT_SDA_PIN    3 // Serial Data pin
#define TFT_SCL_PIN    5 // Serial Clock pin
#define TFT_DC_PIN     2 // Data Command control pin
#define TFT_RES_PIN    1 // LCD Reset pin
#define TFT_LEDA_PIN   38 // LCD Backlight - set 0 for on and 1 for off

unsigned long nowMillis;
unsigned long startMillis;
uint8_t stardelay = 35; //higher the number the slower the stars

//Define LCD Screen Size
#define DISPLAY_WIDTH 160 //set tft screen width
#define DISPLAY_HEIGHT 80 //set tft screen height

#define STARS 80 //amount of stars to show on screen

float star_x[STARS], star_y[STARS], star_z[STARS];

void initStar(int i) {
  star_x[i] = random(-100, 100);
  star_y[i] = random(-100, 100);
  star_z[i] = random(100, 500);
}

TFT_eSPI tft = TFT_eSPI();

void showStarfield() {
  int x,y;
  int centrex,centrey;
 
  centrex = DISPLAY_WIDTH / 2;
  centrey = DISPLAY_HEIGHT / 2;
 
  for (int i = 0; i < STARS; i++) {
    star_z[i] = star_z[i] - 7;

    x = star_x[i] / star_z[i] * 100 + centrex;
    y = star_y[i] / star_z[i] * 100 + centrey;

    if(
      (x < 0)  ||        (x > DISPLAY_WIDTH) ||
      (y < 0)  ||        (y > DISPLAY_HEIGHT) ||
      (star_z[i] < 1)   
      )
    initStar(i);
    tft.drawPixel(x, y, TFT_WHITE);
  }
}

void setup(void) {
  tft.init();
  tft.fillScreen(TFT_BLACK);
  tft.setRotation(1);
  startMillis = millis();
  for (int i = 0; i < STARS; i++)
    initStar(i);
}

void loop() {
  nowMillis = millis();  //get the current "time" (actually the number of milliseconds since the program started)
  if (nowMillis - startMillis >= stardelay)
  {
    tft.fillScreen(TFT_BLACK);
    showStarfield();
    startMillis = nowMillis;
  }
}

I was just messing about to see how it looked, I might implement it with a starwars style text scroller just for the fun off it.
Post automatically merged:

Here's an oldschool fire effect;

Code:
#include "Arduino.h"
#include"TFT_eSPI.h"

//Define LCD pins
#define TFT_CS_PIN     4 // Chip select control pin
#define TFT_SDA_PIN    3 // Serial Data pin
#define TFT_SCL_PIN    5 // Serial Clock pin
#define TFT_DC_PIN     2 // Data Command control pin
#define TFT_RES_PIN    1 // LCD Reset pin
#define TFT_LEDA_PIN   38 // LCD Backlight - set 0 for on and 1 for off
#define DISPLAY_WIDTH 160 //set tft screen width
#define DISPLAY_HEIGHT 80 //set tft screen height
#define MAXPAL 4

TFT_eSPI tft = TFT_eSPI();

uint16_t matrix[16384 + DISPLAY_WIDTH];
uint16_t backBuffer565[16384];
uint16_t color[200 * (MAXPAL + 1)]; // 2 palettes and current pallet space.
uint8_t pallet = 1;
uint8_t maxPal = 0;
uint32_t XORRand = 0;

// A standard XOR Shift PRNG but with a floating point twist.
// https://www.doornik.com/research/randomdouble.pdf
float random2(){
  XORRand ^= XORRand << 13;
  XORRand ^= XORRand >> 17;
  XORRand ^= XORRand << 5;
  return (float)((float)XORRand * 2.32830643653869628906e-010f);
}

void makePallets(){
  // 0b00011111 00000000 : blue
  // 0b00000000 11111000 : red
  // 0blll00000 00000hhh : green
  // Flame effect pallet
  for (int i = 0; i < 64; i++){
    uint8_t r = i * 4;
    uint8_t g = 0;
    uint8_t b = 0;
    color[200 + i] = ((g & 0b00011100) << 11) | ((g & 0b11100000) >> 5) | ((b & 0b11111000) << 5) | ((r & 0b11111000));
    r = 255;
    g = i * 4;
    b = 0;
    color[200 + i + 64] = ((g & 0b00011100) << 11) | ((g & 0b11100000) >> 5) | ((b & 0b11111000) << 5) | ((r & 0b11111000));
    r = 255;
    g = 255;
    b = i * 2;
    color[200 + i + 128] = ((g & 0b00011100) << 11) | ((g & 0b11100000) >> 5) | ((b & 0b11111000) << 5) | ((r & 0b11111000));
  }
  uint8_t r = 255;
  uint8_t g = 255;
  uint8_t b = 64 * 2;
  for (int i = 192; i < 200; i++){
    color[200 + i] = ((g & 0b00011100) << 11) | ((g & 0b11100000) >> 5) | ((b & 0b11111000) << 5) | ((r & 0b11111000));;
  }  
  // Cold flame effect pallet
  for (int i = 0; i < 200; i++){
    uint8_t r = (i > 100) ? (float)(i-100) * 1.775f: i / 3.0f;
    uint8_t g = (i > 100) ? (float)(i-100) * 1.775f: i / 3.0f;
    uint8_t b = (float)i * 1.275f;
    color[400 + i] = ((g & 0b00011100) << 11) | ((g & 0b11100000) >> 5) | ((b & 0b11111000) << 5) | ((r & 0b11111000));
  }
  // Black and white pallet
  for (int i = 0; i < 200; i++){
    uint8_t r = (float)i * 1.275f;
    uint8_t g = (float)i * 1.275f;
    uint8_t b = (float)i * 1.275f;
    color[600 + i] = ((g & 0b00011100) << 11) | ((g & 0b11100000) >> 5) | ((b & 0b11111000) << 5) | ((r & 0b11111000));
  }
  // Green flame effect pallet
  for (int i = 0; i < 200; i++){
    uint8_t r = (i > 100) ? (float)(i-100) * 1.175f: i / 5.0f;
    uint8_t g = (float)i * 1.275f;
    uint8_t b = (i > 100) ? (float)(i-100) * 1.775f: i / 3.0f;
    color[800 + i] = ((g & 0b00011100) << 11) | ((g & 0b11100000) >> 5) | ((b & 0b11111000) << 5) | ((r & 0b11111000));
  }
}

void usePalette(uint8_t pal){
  uint16_t palOffset = pal * 200;
  for(uint16_t i = 0; i < 200; i++){
    color[i] = color[palOffset + i];
  }
}

void setup(){
  tft.init();
  tft.setRotation(1);
  tft.fillScreen(TFT_BLACK);
  XORRand = esp_random();
  makePallets();
  usePalette(1); //1-4
}

void loop(){
  // Heat up the bottom of the fire.
  for (uint16_t i = 16384; i < 16384 + DISPLAY_WIDTH; i++) {
    matrix[i] = 300.0f * random2();
  }
  // Nasty floating point maths to produce the billowing and nice blending.
  for (uint16_t i = 0; i < 16384; i++) {
    uint16_t pixel = (float)i + 160.0f - random2() + 0.8f;
    float sum = matrix[pixel] + matrix[pixel + 1] + matrix[pixel - DISPLAY_WIDTH] + matrix[pixel - DISPLAY_WIDTH + 1];
    uint16_t value = sum * 0.49f * random2() + 0.5f;
    matrix[i] = value;
    if(value > 199) value = 199;
    backBuffer565[i] = color[value];
  }
  backBuffer565[0] = 0;
  backBuffer565[1] = 0;
  backBuffer565[2] = 0;
  backBuffer565[3] = 0;
  tft.pushImage(0, 0, DISPLAY_WIDTH, DISPLAY_HEIGHT, backBuffer565, 16384);
}
Post automatically merged:

FYI for those that want to code the lcd colours themselves you need to use RGB565 hex codes. I couldn't find a decent offline convertor so I ended up just making one myself (64bit version).

UDEij7V.jpg


I've attached it to the first post for those with an interest in these things.
 
Last edited by mrdude,

mrdude

Developer
OP
Developer
Joined
Dec 11, 2015
Messages
3,071
Trophies
1
Age
56
XP
8,237
OP - firmware updated, the following error checks added to the loader.

USB Wait time - minimum time is capped at over 1800 milliseconds, less than this will give a trigger warning so has been limited. I suggest 2000 if using the inbuilt goldhen, or 3000 if using PS-Phive files.

If the default payload name or payload bin is blanked in the config page - the onboard goldhen will still be used.

After usb disable code is run (same as unplugging a usb stick), the exploit code will wait 0.5 seconds before continuing, this is to give the chip time to reboot (unmount the usb), before the glitch code continues when the payload is sent.
 
Last edited by mrdude,

mrdude

Developer
OP
Developer
Joined
Dec 11, 2015
Messages
3,071
Trophies
1
Age
56
XP
8,237
OP Firmware updated.

Moved exfat hax and some strings into PROGMEM to allow more space in SRAM for variables. Added fire effect to lcd display to prevent lcd screen burn when on for a long time, Added get internet date and time (GMT) to display, probably I'll add an option to the config page so you can set to your own timezone (but at a later date). Some random code mods/cleanup. Added file caching.
 

wolf_

Well-Known Member
Member
Joined
Jan 22, 2012
Messages
519
Trophies
1
Age
42
XP
1,602
Country
United States
Can anyone tell me if this will work on this chip?
Post automatically merged:

Everything I find is for the s2 model
 

Attachments

  • Screenshot_20230405-173523.png
    Screenshot_20230405-173523.png
    867.6 KB · Views: 41

mrdude

Developer
OP
Developer
Joined
Dec 11, 2015
Messages
3,071
Trophies
1
Age
56
XP
8,237
Can anyone tell me if this will work on this chip?
Post automatically merged:

Everything I find is for the s2 model
No, the code in the OP is specifically made for this dongle, if you want code for that other chip in the photo have a look at @Leeful code he made for esp32-s2, that should work on your chip but you will probably need to mod it for your pin mapping such as onboard led.
 

OniAle

Member
Newcomer
Joined
Nov 7, 2014
Messages
10
Trophies
0
XP
356
Country
Italy
First i want to thank you for you amazing work!
I managed to start goldhen correctly but I didn't understand how to access the PS-Phive menu.
 

Nullinga

Active Member
Newcomer
Joined
Dec 1, 2018
Messages
26
Trophies
0
Age
45
XP
204
Country
Germany
Great Work ! Thanks for all

i update yesterday but now the Display is rotate to the other Side...

can you add an option to rotate the display in Settings ?
 
  • Like
Reactions: bigking94

bigking94

Well-Known Member
Newcomer
Joined
Jun 5, 2020
Messages
69
Trophies
0
Age
37
XP
329
Country
Germany
An option to rotate the display would be really great.
Could you please install something like that?

Thank you very much for your great work.
Post automatically merged:

First i want to thank you for you amazing work!
I managed to start goldhen correctly but I didn't understand how to access the PS-Phive menu.
Here please for you a full dump for the S3 with PS-PHIVE + GoldHen 2.4b5 ^^ Just flash done.

Download : https://magentacloud.de/s/TD53qyxGEcYfPSk

Have fun
 
Last edited by bigking94,
  • Like
Reactions: Nullinga

mrdude

Developer
OP
Developer
Joined
Dec 11, 2015
Messages
3,071
Trophies
1
Age
56
XP
8,237
Great Work ! Thanks for all

i update yesterday but now the Display is rotate to the other Side...

can you add an option to rotate the display in Settings ?
I rotated it because when the dongle is in the PS4 or a USB hub it's easier to read for me.
 
  • Like
Reactions: peteruk

OniAle

Member
Newcomer
Joined
Nov 7, 2014
Messages
10
Trophies
0
XP
356
Country
Italy
An option to rotate the display would be really great.
Could you please install something like that?

Thank you very much for your great work.
Post automatically merged:


Here please for you a full dump for the S3 with PS-PHIVE + GoldHen 2.4b5 ^^ Just flash done.

Download : https://magentacloud.de/s/TD53qyxGEcYfPSk

Have fun
Oh great thanks!
Do i have to flash the dump.bin file with FlashingTool?
Could you explain me how to make this kind of .bin file?
 

bigking94

Well-Known Member
Newcomer
Joined
Jun 5, 2020
Messages
69
Trophies
0
Age
37
XP
329
Country
Germany
Oh great thanks!
Do i have to flash the dump.bin file with FlashingTool?
Could you explain me how to make this kind of .bin file?
Just flash the Dump.bin and have fun.
Post automatically merged:

I rotated it because when the dongle is in the PS4 or a USB hub it's easier to read for me.
An option to rotate the display would be perfect.

I would like to have it the other way around.

Thank you.
 
  • Like
Reactions: Nullinga

mrdude

Developer
OP
Developer
Joined
Dec 11, 2015
Messages
3,071
Trophies
1
Age
56
XP
8,237
OP firmware updated, added option to rotate the LCD display in the web interface config page. NOTE: Flash mode has been changed from DIO to QIO (for faster flash read/writes) so you will probably need to flash the bootloader as well as the firmware, check in the config page after you flash to make sure you are showing fat fs Total Size: 11.75 MB, if not flash the partitions bin as well.
 
Last edited by mrdude,
Status
Not open for further replies.

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • Psionic Roshambo @ Psionic Roshambo:
    Tine? One gram?
  • BigOnYa @ BigOnYa:
    Sixteenth
  • Psionic Roshambo @ Psionic Roshambo:
    Also it was literally out of a kilo when I got it off the boat so absolutely pure
  • Psionic Roshambo @ Psionic Roshambo:
    Holy shiz that's a lot
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    I was getting 3.5 Grams for 320 could have stepped on it and doubled my money easy lol
    +1
  • BigOnYa @ BigOnYa:
    I'd be afraid to it nowdays, my heart would explode prob. I just stick beers n buds nowdays.
  • Psionic Roshambo @ Psionic Roshambo:
    I would get to drive from tarpon springs to like Miami a thousand bucks lol do that twice a week and back in 92 that was good money
  • Xdqwerty @ Xdqwerty:
    @BigOnYa,
    @Psionic Roshambo what are you guys talking about?
  • Psionic Roshambo @ Psionic Roshambo:
    Blew it on women and muscle cars lol
    +1
  • BigOnYa @ BigOnYa:
    @Xdqwerty Hamster food, its pricey nowadays to keep PCs running.
    +2
  • Psionic Roshambo @ Psionic Roshambo:
    I don't do anything except cigarettes and gotta stop eventually lol
    +1
  • BigOnYa @ BigOnYa:
    I'd do shrooms again if could find, and I was outside camping/fishing, and had a cooler full of beer.
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    I wouldn't mind some LSD, laughing until my face hurt sounds fun lol
    +1
  • BigOnYa @ BigOnYa:
    You ever try soaper powder/qauludes? I did once and like a dumbass drank beer on top of taking, I woke up laying in my backyard in the pouring rain, it knocked me out. I have not seen it around in many many years.
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    No never tried a lot of things but never that lol
  • Psionic Roshambo @ Psionic Roshambo:
    I did pass out one time on a floor after taking a bunch of Ambien lol thought it would help me sleep and did it lol
  • Psionic Roshambo @ Psionic Roshambo:
    Girlfriend was working at a pharmacy and stole like 500 of them, was and still is the biggest pill bottle I have ever seen lol
  • K3Nv2 @ K3Nv2:
    Ativan is pretty legit
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    The last time I had to take something to help me sleep, I was prescribed Trazadone it was pretty OK to be honest.
  • Psionic Roshambo @ Psionic Roshambo:
    Not something I need at all these days, doing a lot better lol
  • BigOnYa @ BigOnYa:
    That Nuka Cola video with old ice grinder is cool, I want one.
    +1
  • K3Nv2 @ K3Nv2:
    @BigOnYa, ANSWER HIS DAMN QUESTION
    K3Nv2 @ K3Nv2: @BigOnYa, ANSWER HIS DAMN QUESTION