forums.ps2dev.org

MindWall · Joined: 10 May 2005 Posts: 70

Just noticed that if you start any UMD, and when the flash screen shows, if you pop the UMD out (at the same time you are supposed to remove ms for the swap exploit) the system attempts to run files from the memory stick...

there could be alternative "exploit" without having to swap memory sticks, just pop the UMD...

I could not yet make it run, but it could be possible...

KILLER-X · Joined: 13 Jun 2005 Posts: 5

i tried this.
\more testing need.
_________________
soy el mejor de los mejores.

KILLER-X · Joined: 13 Jun 2005 Posts: 5

at work i am.
try rename the pbp on memstick to same name as on umd.
i did.
in theory it should be work.
more testing need.
_________________
soy el mejor de los mejores.

mrbrown · Joined: 17 Jan 2004 Posts: 1536

What makes you think it's trying to load files from the memory stick? Because the light flashes?

Remember, these are the guys that had everyone waiting 4 days so they could write a crappy VB.NET app for the "swaploit".

Agoln · Joined: 08 Jun 2005 Posts: 326 Location: Fort Wayne, IN

pfer1984 · Joined: 27 Mar 2005 Posts: 5

mr brown what have you done for psp development? apart from closing threads of course.Here in Spain we know you as "Mr Closer". Are you a bouncer?

rasmus · Joined: 21 Jul 2004 Posts: 17 Location: G�teborg, Sweden

You never expect the Spanish inquisition!

ooPo · Posted: Fri Jun 17, 2005 5:31 am Post subject:

Yeah, what has mrbrown ever done for pspdev?!

Slacker.

Squall333 · Joined: 28 Apr 2005 Posts: 91

What has Mrbrown done here its not like moderating these formus is hard anyway. As if there were anything he needed to know to do his job like say... know more then the majority so he can decide which posts need to be locked or moved.

mrbrown · Joined: 17 Jan 2004 Posts: 1536

I prefer to be modest about the things I work on, but since all of Spain thinks I am just a complete loser (I like the "Mr Closer" though), I'll give a brief list of what I have done for pspdev:
- Created a working PSP-specific GNU toolchain which folks are starting to use for homebrew development.
- Figured out that the 0x1000 module_info flag is responsible for loading a program in kernel mode (however, I did not discover how to get into kernel mode, nem did that). I even sacrificed my PSP to figure this out :).
- Discovered more name<->NID matches than any single person that I'm aware of (according to the forums). We're still cleaning up our "big NID list" and it'll be released RSN.

Anyway, my motivation for closing threads is to keep the forums clean and tidy for those who actually want to get work done as opposed to idly posting random brain farts.

And my apathy towards "psp-dev" is one felt and expressed by many on these and other boards. The way we work is, you either put up or shut up. We don't think it's necessary to spin rumors to get enough people to stroke our egos or to tell them "we told you so, we are l33t". Just the fact they used ps2ownz as their conduit tells us what they were all about.

Yes, it's good there's an exploit for 1.5. I'm not going to stroke their egos over finding it. And I will continue to tell it like it is.
_________________
"He was warned..."

Squall333 · Joined: 28 Apr 2005 Posts: 91

Now your just showin off.

MelGibson · Joined: 10 Apr 2005 Posts: 58

Agoln · Joined: 08 Jun 2005 Posts: 326 Location: Fort Wayne, IN

Warren · Joined: 24 Jan 2004 Posts: 173 Location: San Diego, CA

Pikoro · Joined: 13 Jan 2005 Posts: 56

On the same note, I seem to remember working with DrEggman on the swap thing almost a month ago anyways.

It wasn't really a new concept, all that he figured out was when exactly to swap the memory sticks out.

I agree with mr closer completely. Hence why my site wouldn't post anything until it was released anyways, just to avoid all the "hype" that surrounded it on all those "other" sites.

Thanks mrbrown btw for keeping these forums clean. Need someone like you on my forums.

Cheers

Lain_OTN · Joined: 01 Mar 2005 Posts: 17

I hate when people generalize about things.

Yeah I'm Spanish and i don't think like pfer1984

Vini · Joined: 18 May 2005 Posts: 12

Does anyone have a wipeout pure dump so we can find out the filename PSP is looking for when you insert the UMD and click on the UMD icon. Once the screen flashes, PSP is looking for a certain file on the UMD. If we can find out the file name of that file we can then name the folder on the Memory stick the same name and put a PBP file that we want to run in it.

steddy · Joined: 04 Apr 2005 Posts: 139

I think you are brushing close to the forum rules talking about UMD dumps.

All PSP's execute the following file when inserted:

/PSP_GAME/SYSDIR/EBOOT.BIN

This is an encrypted ELF executable.

Also on the disk is:

/PSP_GAME/SYSDIR/BOOT.BIN

This is the unencrypted version of the same file.

All disks have these two files.
Steddy

Warren · Joined: 24 Jan 2004 Posts: 173 Location: San Diego, CA

zigzag · Joined: 26 Jan 2005 Posts: 129

Why is everyone assuming that it will try and run it from the Memory Stick just because it does from the UMD... am I missing something?

talon · Joined: 17 Jun 2005 Posts: 2

nilum · Joined: 05 Jun 2005 Posts: 13

This will not work for obvious reasons. It's trying to access a UMD file and not a file from the memory stick.

Fluff · Joined: 22 Apr 2005 Posts: 35

if the psp blindly searched the same directory routes on other drives when the source drive could not be accessed, then this may be a viable 'exploit' but i seriously doubt it does, so its putting Test.exe on c:\ and d:\, typing in d:\test.exe in a command prompt, and deleting the file just before running the command, it wont look at c:\ for the file it will just not find the file thus return to the psp menu.

MrSiir[S] · Joined: 14 Sep 2004 Posts: 32

iedoc · Joined: 12 May 2005 Posts: 18

im pretty sure your an idiot, unless im missing something. VB.NET is visual basic.

Fluff · Joined: 22 Apr 2005 Posts: 35

less of the pointless flaming please, it will not get any of us anywhere

MrSiir[S] · Joined: 14 Sep 2004 Posts: 32

MindWall · Joined: 10 May 2005 Posts: 70

mrbrown: there's no more info or proof that this may work than what existed for the 2-ms exploit... well maybe a bit more info that points for such possibility.
So I just suggest we try and look if there's another "hole" in the system, it's not clear cut by any means, and if you have some proof that there's no attempt for file access when the UMB-load is interrupted please let us know.

the MS gets accessed in both cases, but when interrupted there is significant MS activity...

I haven't had time to play with this but if anything should start off the MS it needs to be (named) BOOT.BIN or EBOOT.BIN
and I have no idea where on the MS those files should reside.

for information on UMD structure and whatnot you may find this useful:
http://psplinux.sourceforge.net/forum/viewtopic.php?t=13&sid=0466afdff41c2f926fa92e8b2ef60c79

please don't make the thread ugly and keep to the topic and your finds...

g'luck to all :)

Fluff · Joined: 22 Apr 2005 Posts: 35

Squall333 · Joined: 28 Apr 2005 Posts: 91

I think everyone is overreacting if these guys wanna search for an exloit that may never be possible who cares? If they wanna involve everyone in this community who cares? As long as their not breaking any rules maybe people will get interested in this so called dead end and it will lead them to be interested in somthing else. Its one thing to say IMHO this doesnt seem to lead to anything useful but its another to start calling people stupid for trying.