If you are referring to the kernel exploit, I can port that myself once I see how you guys are doing it on 5.3.2. Typically finding new addresses isn't too hard when you have the full disasm.
I am quite aware what versions are exploitable, I was asking specifically what version he was looking to target. What he is wanting to run can be run on 4.1.0 with the old browser exploit.
NWPlayer123 while yes they are general purpose that doesn't tell me which registers are used for what. For instance, r28-r31 are promise save registers, commonly used to save variables prior to leafing instead of on the stack. Other registers have specific purposes even though they are not...
Marionumber1, have any attempts been made to mount /dev/mlc01 (NAND)? From reading some of the documentation, apps might be allowed access to it. It isn't clear however, whether that is indirectly thought the emulated file system, or directly.
Just out of curiosity has anyone tried playing around with the reboot or shutdown callback functions? I haven't had the time to set something up, but I'm curious if any shutdown methods get executed prior to callback, possibly allowing us outside of the browser sandbox.
keine, are you 4.00 or 4.10? Did you have to do anything else to get the rpc working properly? I'm showing "Connected by"(albeit on a port other than 12345), but it's not accepting any of my commands. Any thoughts?
TeamScriptKiddies, you need to modify your build.sh inside the build folder to point at your devkitPro/devkitPPC/bin folder or add it as a PATH variable.