Gaming First signed homebrew on PSP!

[Snailface]

This simple homebrew POC works on your PSP without any hacks!
Directions: Put EBOOT in PSP-->GAME-->ANYFOLDER

Link

BTW I'm using a PSP-3001, Firm. 6.35 (No hacks or cfw!)
BTWA I didn't write this brew -- credits in software

 

[Exaltys]

I suppose this may lead to booting .iso from OFW?

 

[rockstar99]

YES!! Now hopefully an ISO loader then no more god damn CHICKHEN

 

[Snailface]

I suppose this may lead to booting .iso from OFW?

Don't know, this is very new.

 

[MFDC12]

it might not lead to iso's. i would honestly rather have this lead to a cfw so we can run both signed and unsigned (and have access to the recovery menu and stuff) so we dont have to sign every single thing.

 

[rockstar99]

Try patching the Prome ISO loader

 

[Snailface]

The author of this landmark homebrew (in first post), kgsws, explains how he did it (among other juicy things):

How?
Simple, notice it contains ~PSP header from demo game (UCES00206), it is exactly same header.
It is easy to craft last 16 bytes of encrypted data block to match header CMAC - yes, that's the trick

There are some strange thigs, it can't run homebrews with bigger executable block (data block does not matter), and because of ~PSP header, it has to match exact size of original game.

This trick might be possible on firmware kernel modules to get permanent HEN on non-pandrorable PSPs, i was not able to do it but i was not trying that much.

PS: i am not only one who found this trick

 

[Jolan]

baw, that's kinda fail. I expected better from a signed homebrew, not a simple trick like that.

 

[rockstar99]

Just a vid to show it works if you guys are too lazy to test

 

[MasterMan]

Ok, now make me happy, make a tool to patch home made PSX eboots to look like PSN ones.

 

[thedicemaster]

I suppose this may lead to booting .iso from OFW?

not very likely.
this will work only with user mode homebrew, because it identifies itself as a game demo and those only have user-more access.
kernel-mode can be used, but that would mean building a kernel-mode exploit in every single homebrew app that needs kernel access.

 

[xakota]

As soon as someone can make a CFW installer for OFW, all will be well.

 

[Jamstruth]

So not exactly signed then...

 

[SifJar]

So not exactly signed then...

It IS signed, just not completely by kgsws. Bits of it are signed, and the bits which can't be are copied from a legit demo so they are still signed, even though they were properly signed by Sony. So everything IS signed.