PSP 3000 Hacked?!

Status
Not open for further replies.

itsRANDELL

Well-Known Member
OP
Member
Joined
Jun 23, 2007
Messages
134
Trophies
0
Age
32
Location
Hercules,CA
Website
Visit site
XP
96
Country
United States
According to PSP Slim Hacks, the PSP 3000 has been hacked! But first, you gotta find a copy of the game GripShift.

QUOTE said:
GripShift has a buffer overflow vulnerability when loading savegames. The savegame contains the profile name which can be easily used to overwrite $ra. The savegame file is pretty big (25kB) so you have lots of space to put your code there. I wrote a simple blob of code to paint the framebuffer completely white (to just indicate that arbitrary code is running). The return address is located at offset 0xA9 in the file. In this poc it points to 0×08E4CD50 (which is only a few bytes after the return address), and the code starts at 0xCC in the file.

It was tested on 4.01M33-2 with US version of GripShift (ULUS10040), and psplink.prx, usbhostfs.prx and deemerh.prx loaded (also without psplink and usbhostfs). The decrypted savegame (sorry, couldn’t [be bothered to] get Shine’s savegame tool working so it’s in plaintext form) is in the SDDATA.BIN form which Hellcat’s Savegame-Deemer produces (thanks to him, if the program didn’t exist I wouldn’t have bothered with this). Just copy the ULUS10040SAVE00 directory to /PSP/SAVEPLAIN/ and run the game. EDIT: yeah, don’t forget to have Savegame-Deemer working, duh.

Source:PSPSlimHacks
Credit to: MaTiAz for finding the exploit



Posts merged

Oops, this news is old. Close please? Sorry.
 

kobykaan

Well-Known Member
Member
Joined
Aug 27, 2007
Messages
2,993
Trophies
0
Website
Visit site
XP
196
Country
NOT EXACTLY HACKED its achievements so far homebrew PONG and a screen wash of color and a HELLO WORLD MESSAGE! not exactly running CFW!

this may thread need merging / closing!
 
Status
Not open for further replies.

You may also like...

General chit-chat
Help Users
  • No one is chatting at the moment.
  • ZeroT21 @ ZeroT21:
    while i simply make stinkbombs with pingpong balls
  • ZeroT21 @ ZeroT21:
    cops got called while suspecting arson ,c'mon

    :rofl:
  • K3N1 @ K3N1:
    I stole their bag of Halloween candy last year and the parents said stop being a little bitch and go get it
    +1
  • ZeroT21 @ ZeroT21:
    is it still trick and treat? or steal and cheat?
  • K3N1 @ K3N1:
    I think it's like trick or get kidnapped these days
  • M4x1mumReZ @ M4x1mumReZ:
    Stealing is treating
  • ZeroT21 @ ZeroT21:
    honestly, i find lots of kids nowadays like devils that need to be locked up forever
    +1
  • M4x1mumReZ @ M4x1mumReZ:
    Blame the kind of music that's affecting them
  • K3N1 @ K3N1:
    Issue is we got beat as kids now days it's prison if you flick their head
  • ZeroT21 @ ZeroT21:
    and here i thought they were lacking brain supplements
  • ZeroT21 @ ZeroT21:
    no sheet
  • ZeroT21 @ ZeroT21:
    seeing brats simply calling the cops on the parents just cus they dont wanna do homework or take a friggin bath tsk
  • K3N1 @ K3N1:
    You can't blame technology or what they do it's how they're raised
  • ZeroT21 @ ZeroT21:
    having ''smart tech'' dont always make someone smarter
  • ZeroT21 @ ZeroT21:
    you can blame alexa for teaching weird shit
  • K3N1 @ K3N1:
    Kids are smart or they would get away with what they do
  • ZeroT21 @ ZeroT21:
    we're all taught in school to cheat
  • ZeroT21 @ ZeroT21:
    cheat while not getting caught is not a crime
  • K3N1 @ K3N1:
    If a kid doesn't have the right sponge to learn from then that's what they imitate
  • ZeroT21 @ ZeroT21:
    sounds like my old man who had like 10 flings he brought home and demanding i call them mum the following day
  • ZeroT21 @ ZeroT21:
    is that the current free game?
  • K3N1 @ K3N1:
    Ye
    K3N1 @ K3N1: https://youtube.com/shorts/STu5S3NWaYo?feature=share