| View previous topic :: View next topic |
| Author |
Message |
Dariusc123456
Joined: 12 Aug 2008 Posts: 394
|
Posted: Mon Aug 10, 2009 11:35 pm Post subject: 5.51-5.55 Explot - Medal of Honor : Any good? |
|
|
As one current exploit couldnt be patch that was in 5.51, it seems like it works in 5.55 ofw.
http://www.psp-hacks.com/2009/08/09/psp-firmware-5-55-still-vulnerable-to-mohh-exploit/
Is there any use of this exploit to users? Could it help to aleast make a HEN version of 5.55 so users can run it on there psp along with other things? _________________ PSHN - Playstation Hacking Network
PSX/PS1 - HACK - Game Shark
PS2 - HACK - Swap
PSP - HACK - Pandora
PS3 - ? |
|
| Back to top |
|
 |
ab5000
Joined: 06 May 2008 Posts: 74
|
Posted: Tue Aug 11, 2009 2:54 am Post subject: Re: 5.51-5.55 Explot - Medal of Honor : Any good? |
|
|
it isn't possible to make an HEN without a kernel exploit. and we haven't got any kernel exploit on 5.55... _________________
| Code: | %:include<stdio.h>
int _(int __,int ___,int ____,int _____)
<%for(;____<___;_____=_____*__,____++);
return _____;%>main()<%printf
("%d\n",_(2,5,0,1));%> |
|
|
| Back to top |
|
 |
slasher2661996
Joined: 22 Feb 2009 Posts: 91 Location: Melbourne Australia ZOMG
|
Posted: Tue Aug 11, 2009 7:35 am Post subject: Re: 5.51-5.55 Explot - Medal of Honor : Any good? |
|
|
| ab5000 wrote: |
it isn't possible to make an HEN without a kernel exploit. and we haven't got any kernel exploit on 5.55... |
There is a 90% chance someone has found one but not released it, they are waiting for the Go! and if they release it Sony would patch it |
|
| Back to top |
|
 |
Dariusc123456
Joined: 12 Aug 2008 Posts: 394
|
Posted: Tue Aug 11, 2009 9:13 am Post subject: |
|
|
Sony PSP Go could have some new security features build within it. Medal of Honor Exploit is good, but we must find a away to use the kernal mode. For now, usermode is good for developers to make emulators. You can also access the ram in VSH mode (if the exploit even allow thats), or someone can make a kernel prx to install hen onto the psp.
Sony wouldve patch this exploit, but maybe they havent know that the wifi can be use as a exploit. Maybe other games that support for wifi can also do the same.
EDIT:
I think that they didnt patch it because they are releasing the PSP Go soon. _________________ PSHN - Playstation Hacking Network
PSX/PS1 - HACK - Game Shark
PS2 - HACK - Swap
PSP - HACK - Pandora
PS3 - ? |
|
| Back to top |
|
 |
m0skit0
Joined: 02 Jun 2009 Posts: 226
|
Posted: Tue Aug 11, 2009 7:40 pm Post subject: |
|
|
DariusC... xD
| Quote: | | usermode is good for developers to make emulators |
I would rather make an eloader to make use of existing emulators. Pretty useless to adapt each emultor to a new exploit, don't you think?
| Quote: | | You can also access the ram in VSH mode |
How would you do that? It's a game exploit, I remind you :P
| Quote: | | someone can make a kernel prx to install hen onto the psp |
Huh? How would you run a non-signed PRX? If you can, how would you load it on kernel mode? :P
| Quote: | | Sony wouldve patch this exploit, but maybe they havent know that the wifi can be use as a exploit |
Sony can't patch a thing as it is a MOHH exploit, not a FW one. The vulnerability is a format-string one on MoHH code. So EA should patch it, not Sony. And I doubt that's going to happen. You can even expect the same vulnerability on MoHH2. _________________
| The Incredible Bill Gates wrote: | | The obvious mathematical breakthrough would be development of an easy way to factor large prime numbers. |
|
|
| Back to top |
|
 |
ab5000
Joined: 06 May 2008 Posts: 74
|
Posted: Tue Aug 11, 2009 7:55 pm Post subject: |
|
|
| m0skit0 wrote: | | Sony can't patch a thing as it is a MOHH exploit, not a FW one. The vulnerability is a format-string one on MoHH code. So EA should patch it, not Sony. And I doubt that's going to happen. You can even expect the same vulnerability on MoHH2. |
that's true, but i saw references to some hackable games (lumines, gta, ecc) in umdman.prx. strange thing... _________________
| Code: | %:include<stdio.h>
int _(int __,int ___,int ____,int _____)
<%for(;____<___;_____=_____*__,____++);
return _____;%>main()<%printf
("%d\n",_(2,5,0,1));%> |
|
|
| Back to top |
|
 |
Bubbletune
Joined: 03 Jan 2009 Posts: 28
|
Posted: Tue Aug 11, 2009 9:26 pm Post subject: |
|
|
| ab500 wrote: | | that's true, but i saw references to some hackable games (lumines, gta, ecc) in umdman.prx. strange thing... |
Sony also patches games themselfs with firmware updates, they just haven't bothered yet with Medal of Honour. I'm pretty sure that by the time the PSP Go is released, they will have bothered. |
|
| Back to top |
|
 |
Dariusc123456
Joined: 12 Aug 2008 Posts: 394
|
Posted: Tue Aug 11, 2009 9:59 pm Post subject: |
|
|
It just might be that Sony never expected wifi games to be an exploit. I wonder how they patch the UMD exploits. _________________ PSHN - Playstation Hacking Network
PSX/PS1 - HACK - Game Shark
PS2 - HACK - Swap
PSP - HACK - Pandora
PS3 - ? |
|
| Back to top |
|
 |
Bubbletune
Joined: 03 Jan 2009 Posts: 28
|
Posted: Tue Aug 11, 2009 10:09 pm Post subject: |
|
|
I have just the perfect reply for you.
| Davee wrote: | | Right, I'mma be blunt. You need to stop pretending you know what your talking about because the shit coming out of your mouth is disgusting. I constantly see you posting acting like you know what your talking about and it is really annoying. It's also misleading to developers. |
|
|
| Back to top |
|
 |
Dariusc123456
Joined: 12 Aug 2008 Posts: 394
|
Posted: Tue Aug 11, 2009 11:35 pm Post subject: |
|
|
| Bubbletune wrote: | I have just the perfect reply for you.
| Davee wrote: | | Right, I'mma be blunt. You need to stop pretending you know what your talking about because the shit coming out of your mouth is disgusting. I constantly see you posting acting like you know what your talking about and it is really annoying. It's also misleading to developers. |
|
Does it look like I care what anyone says? _________________ PSHN - Playstation Hacking Network
PSX/PS1 - HACK - Game Shark
PS2 - HACK - Swap
PSP - HACK - Pandora
PS3 - ? |
|
| Back to top |
|
 |
cloudhunter
Joined: 17 Aug 2006 Posts: 86
|
Posted: Wed Aug 12, 2009 3:31 am Post subject: |
|
|
| Dariusc123456 wrote: | | Does it look like I care what anyone says? |
Sadly not...
Anyway, Sony can't patch the UMD once it has been printed, granted, but they can (and have, in all the previous user mode exploits) patch the firmware so that the exploit doesn't work.
And also, the reason that it works in 5.55 is probably the same reason that the tiff exploit worked on 5.05 - It is probably just a release to fix SDK bugs as required by some games. _________________ :) |
|
| Back to top |
|
 |
Dariusc123456
Joined: 12 Aug 2008 Posts: 394
|
Posted: Wed Aug 12, 2009 11:10 am Post subject: |
|
|
| cloudhunter wrote: | | Dariusc123456 wrote: | | Does it look like I care what anyone says? |
Sadly not...
Anyway, Sony can't patch the UMD once it has been printed, granted, but they can (and have, in all the previous user mode exploits) patch the firmware so that the exploit doesn't work.
And also, the reason that it works in 5.55 is probably the same reason that the tiff exploit worked on 5.05 - It is probably just a release to fix SDK bugs as required by some games. | Do you know where they patch it at? UMD eboot.bin and boot.bin are patch by Sony so it can do different things. _________________ PSHN - Playstation Hacking Network
PSX/PS1 - HACK - Game Shark
PS2 - HACK - Swap
PSP - HACK - Pandora
PS3 - ? |
|
| Back to top |
|
 |
m0skit0
Joined: 02 Jun 2009 Posts: 226
|
Posted: Wed Aug 12, 2009 8:11 pm Post subject: |
|
|
How can you patch the game's code? That's not possible, unless they patch it on the fly when loading the game into memory... Which I don't think they do (or do they? xD)
I think you're talking about patching kernel exploits found through those games, or maybe those game exploits rely on a FW code vulnerability, which is not the case here. Cannot see how Sony can patch other developers' code without having the code in question, retire all UMDs from market and printing them again. Or radically change the firmware inner working (for example marking stack as non-executable, which cannot be done on PSP, afaik), which is not an option because they'll lose compatibility.
Btw, did they patch the Gripshift exploit? _________________
| The Incredible Bill Gates wrote: | | The obvious mathematical breakthrough would be development of an easy way to factor large prime numbers. |
|
|
| Back to top |
|
 |
Bubbletune
Joined: 03 Jan 2009 Posts: 28
|
Posted: Wed Aug 12, 2009 9:25 pm Post subject: |
|
|
| m0skit0 wrote: | How can you patch the game's code? That's not possible, unless they patch it on the fly when loading the game into memory... Which I don't think they do (or do they? xD)
I think you're talking about patching kernel exploits found through those games, or maybe those game exploits rely on a FW code vulnerability, which is not the case here. Cannot see how Sony can patch other developers' code without having the code in question, retire all UMDs from market and printing them again. Or radically change the firmware inner working (for example marking stack as non-executable, which cannot be done on PSP, afaik), which is not an option because they'll lose compatibility.
Btw, did they patch the Gripshift exploit? |
No, they modify the savedata modules in order to check for eg. the buffer overflowfor a specific game in the savedata, and tell the game that it's corrupt if they find it. And yes, they fixed the GripShift exploit in 5.03. |
|
| Back to top |
|
 |
m0skit0
Joined: 02 Jun 2009 Posts: 226
|
Posted: Thu Aug 13, 2009 1:47 am Post subject: |
|
|
Ok I got it. Weird behaviour anyway. That savedata module will be a couple of megs bigger in a couple of years xD _________________
| The Incredible Bill Gates wrote: | | The obvious mathematical breakthrough would be development of an easy way to factor large prime numbers. |
|
|
| Back to top |
|
 |
Dariusc123456
Joined: 12 Aug 2008 Posts: 394
|
Posted: Thu Aug 13, 2009 10:51 am Post subject: |
|
|
| m0skit0 wrote: | | How can you patch the game's code? | Sorry, let me make it clearer.
In the pass, they patch the eboot.bin and boot.bin in the umd to stop exploits. Now these days, they make a patch for the psp it self to stop UMD exploits (or the one been founded). _________________ PSHN - Playstation Hacking Network
PSX/PS1 - HACK - Game Shark
PS2 - HACK - Swap
PSP - HACK - Pandora
PS3 - ? |
|
| Back to top |
|
 |
|