Search found 9 matches

by tnt
Tue Oct 31, 2006 10:54 pm
Forum: PSP Development
Topic: SecKernelLoadExec in PRX with devhook(FW2.xx)?
Replies: 7
Views: 2817

Do you have USE_KERNEL_LIBS in your prx makefile ?
I think it's needed to use the kernel version of sceKernelLoadExec ...
by tnt
Sun Oct 22, 2006 8:31 pm
Forum: PSP Development
Topic: Decrypt 2.6 PRX on 2.6 itself
Replies: 5
Views: 2806

Thanks for the link and the explanation. I decrypted the modules from a previous dump, not from the flash directly so it worked fine. I just had to change the exploit code to the vsh version to use it from eloader (tiff) For the memlmd, I just didn't see it in the loaded module list, but there are 1...
by tnt
Sun Oct 22, 2006 1:48 am
Forum: PSP Development
Topic: Decrypt 2.6 PRX on 2.6 itself
Replies: 5
Views: 2806

Thanks but I still have to find how to launch a kernel thread from an exploited vsh ... just calling sceCreateThread doesn't do it ;)
by tnt
Thu Oct 19, 2006 4:29 pm
Forum: PSP Development
Topic: Decrypt 2.6 PRX on 2.6 itself
Replies: 5
Views: 2806

Decrypt 2.6 PRX on 2.6 itself

Hello, I'm trying to decrypt the 2.6 PRX on a PSP running a 2.6 fw. To do that, I'm using the PSARDump source code (the Dark_AleX's version), eloader 0.98 and the kernel exploit of 2.6. The first step to decrypt is to find the address of the functions to use, and I have some problems with that : * s...
by tnt
Fri Oct 13, 2006 7:20 pm
Forum: PSP Development
Topic: Kernel access with 2.6 (hitchhikr and Ookm codes)
Replies: 6
Views: 3514

Re: Kernel access with 2.6 (hitchhikr and Ookm codes)

The 0x09f02020 address will be part of the overflow string so each byte of that address needs not to be zero (and doesn't contain 0x3a as this char is needed to control the length of that string). Ok, thanks. Damn it was so simple ... I thought there was just something special in memory at that loc...
by tnt
Thu Oct 12, 2006 6:20 pm
Forum: PSP Development
Topic: Kernel access with 2.6 (hitchhikr and Ookm codes)
Replies: 6
Views: 3514

Another question is about the magic addresses in those code :

* Like why 0x09f02020 is a "safe place"
* And what are the 0x880bdcc4 and 0x880be2ac functions
(or where to find this infos)

Thanks for any insight you may have ...
by tnt
Thu Oct 12, 2006 5:09 am
Forum: PSP Development
Topic: Kernel access with 2.6 (hitchhikr and Ookm codes)
Replies: 6
Views: 3514

Re: Kernel access with 2.6 (hitchhikr and Ookm codes)

Hi 0okm0000, thanks for the answer. * I've never been able to execute successfully the hitchhikr code. Either with eloader 0.98 and 0.99 (both tiff version), it just freeze the PSP. It is said it should be run using GTA eloader but what's the difference ? What should be done to make it compatible wi...
by tnt
Wed Oct 11, 2006 10:08 pm
Forum: PSP Development
Topic: Kernel access with 2.6 (hitchhikr and Ookm codes)
Replies: 6
Views: 3514

Kernel access with 2.6 (hitchhikr and Ookm codes)

I'm trying to understand what is currently possible in 2.6 and how. When searching for kernel mode access in 2.6, I found mainly : - The proof of concept 2.6 ( Exploit_2.6.zip ) written by hitchhikr / Neural. - The code posted by Ookm ( 25_26_VSH_KA.zip ) named "Kernel access under FW2.50/2.60 ...
by tnt
Wed Oct 11, 2006 8:28 am
Forum: PSP Development
Topic: Homebrew Enabler for 2.71
Replies: 23
Views: 10590

What about support for other fw revision like 2.6 ?