Hacking 5.4.0 progress

[Nortix]

Same here, crashed with media player

 

[Xalyy]

It still freezing this much?

 

[memomo]

It still freezing this much?

I feel it's close don't worry

 

[ikarius031]

* Seeing the progress made, even though the difficulty of the task, they feel stronger.
* Feeling the community gathering to help...
* ...fills them with DETERMINATION !

(In other words, keep up the good work guys, I really like what I see here. I wish I was on 5.4 to help you guys out... Unfortunately 5.5.0 here -_-; )

 

[Onion_Knight]

I'm assuming there's a curl issue here?

No

 

[EclipseSin]

No

I assumed it was curl, because yesterday it was requesting a wrong url when I checked the thread, and today it's not "finding the url". But, since your answer was so short. Have fun.

 

[[email protected]]

/* find address left in ram */
    for(str = (unsigned char*)0x1A000000; str < (unsigned char*)0x20000000; str++)
    { /* Search for /payload which indicates the current address */
        if(*(unsigned int*)str == 0x2F706179 && *(unsigned int*)(str+4) == 0x6C6F6164)
        {
            leaddr = (char*)str;
            while(*leaddr)
                leaddr--;
            leaddr++;
            /* If string starts with http its likely to be correct */
            if(*(unsigned int*)leaddr == 0x68747470)
                break;
            leaddr = (char*)0;
        }
    }
    if(leaddr == (char*)0)
        OSFatal("URL not found");

The loop can't find the word /payload in the memory.
Maybe it's a good idea to find a other solution how we can search in the memory for this word. /payload = hex(2f7061796c6f6164) = 0x2F706179 and 0x6C6F6164

I state that I do not remember the C, then sorry.

            if(*(unsigned int*)leaddr == 0x68747470)
                break;

we do first to get out of the cycle? how many "http.../payload" do we need?

            if(*(unsigned int*)leaddr == 0x68747470)
                str=(unsigned char*)0x20000000; // We go out when it was found.

could solve the problem of the loop. I'm sorry I work in .net, I do not remember the C.

 

[Onion_Knight]

/* find address left in ram */
    for(str = (unsigned char*)0x1A000000; str < (unsigned char*)0x20000000; str++)
    { /* Search for /payload which indicates the current address */
        if(*(unsigned int*)str == 0x2F706179 && *(unsigned int*)(str+4) == 0x6C6F6164)
        {
            leaddr = (char*)str;
            while(*leaddr)
                leaddr--;
            leaddr++;
            /* If string starts with http its likely to be correct */
            if(*(unsigned int*)leaddr == 0x68747470)
                break;
            leaddr = (char*)0;
        }
    }
    if(leaddr == (char*)0)
        OSFatal("URL not found");

The loop can't find the word /payload in the memory.
Maybe it's a good idea to find a other solution how we can search in the memory for this word. /payload = hex(2f7061796c6f6164) = 0x2F706179 and 0x6C6F6164

I'm looking for ?sysver=

It could be simply set to point at eclipse sins site to fetch and it should work

 

[Scuba156]

I assumed it was curl, because yesterday it was requesting a wrong url when I checked the thread, and today it's not "finding the url". But, since your answer was so short. Have fun.

That is exactly how I feel at the moment, tried helping. Oh well

 

[Lawletto]

Thanks for your hard work I'm sure we'll run lastest versions of Loadiine on 5.4.0 today or tomorrow !

 

[josh87402]

I guess there's not much we can do about 5.5.0 then...

 

[JFalcon]

I guess there's not much we can do about 5.5.0 then...

Not until we get a kexploit, we are likely to get the iosu exploit before we get the kernel for the webkit.

 

[josh87402]

Not until we get a kexploit, we are likely to get the iosu exploit before we get the kernel for the webkit.

Well now that you say it, yeah you're totally right on that point. That'll most likely happen

 

[Lichtblick]

Does the System supports string functions? (i guess not)

 

[EclipseSin]

Does the System supports string functions? (i guess not)

? You mean like strcmp, strlen, memset? You can do this. Elaborate if I'm misunderstanding your question.

 

[BootsLoader]

I have faith to everyone here and I'll think we can get at least loadiine v3 run clean on 5.4.0 but I also hope that iosu exploit comes tomorrow. In an other thread I made a prediction that the iosu exploit will be released January 16. I hope I am right

 

[Lichtblick]

Ok. You were right, thats what my question was.
Maybe i think a bit about it tonight.

 

[Margen67]

Well now that you say it, yeah you're totally right on that point. That'll most likely happen

The Exploit Isn't Stable Yet™

 

[Onion_Knight]

Allright,

I've set it to automagically fetch from eclipsesins site, so lets see if that works.

Thanks
@EclipseSin

 

[Dylon99]

The Exploit Isn't Stable Yet™

It will be Soon™