Firmware file system access via wipeout browser

Discuss the development of new homebrew software, tools and libraries.

Moderators: cheriff, TyRaNiD

cheriff
Regular
Posts: 258
Joined: Wed Jun 23, 2004 5:35 pm
Location: Sydney.au

Post by cheriff »

Looks like output.appendchar() just chucks out the given char to whatever your output is. So maybe you could replace that with putc(xx) (is that right?) or even printf("%c",xx) or anything like that. and 0xf is just that, a literal value, so c++ would accept that.
Shoule be readily convertible to c... only ugly thing is dealing with char* instead of string datatypes..
Hope this helps...!
Damn, I need a decent signature!
rinco
Posts: 255
Joined: Fri Jan 21, 2005 2:12 pm
Location: Canberra, Australia

Post by rinco »

i believe this 'deciferer' doesn't understand "& 0xf"... ie bitmasks.
he probably skipped computer class as often as the english class.
iedoc
Posts: 18
Joined: Thu May 12, 2005 12:26 pm

Post by iedoc »

i don't know for sure, but is this the key?
(0.439791, 2.4186, 1.1413,)
is that the first three, i don't think it is now, so if im wrong, i don't want to keep this way up. but i will get it if this is wrong.
iedoc
Posts: 18
Joined: Thu May 12, 2005 12:26 pm

Post by iedoc »

dude!!!, thanks alot cheriff, that helps alot, i might be able to get this now.
iedoc
Posts: 18
Joined: Thu May 12, 2005 12:26 pm

Post by iedoc »

rinco, you could be right, cause this isn't working in c++. and i can't put it in java, cause i don't know anything about it, and i don't think i have the program.

ill try it again in c++ after school gets out.
zenjay
Posts: 12
Joined: Thu May 12, 2005 3:53 am

Post by zenjay »

iedoc wrote:i almost had it, but i guess not. i might be able to figure it out if i know what out.append((char) was and & 0xf was, im sorry, but i don't anything about java, except it seems to be alot like c++.
out.append appends the character "char" into the output. and "& 0xf" is a binary operation to "AND with 1000".
Shine
Posts: 728
Joined: Fri Dec 03, 2004 12:10 pm
Location: Germany

Post by Shine »

iedoc wrote:i don't know for sure, but is this the key?
(0.439791, 2.4186, 1.1413,)
is that the first three, i don't think it is now, so if im wrong, i don't want to keep this way up. but i will get it if this is wrong.
No, the key is 16 bytes long, encoded as signed char in Java (-128..127). But please do you and us a favor and don't waste more time with another useless message. First learn the basics, like mathematic and programming in general.
iedoc
Posts: 18
Joined: Thu May 12, 2005 12:26 pm

Post by iedoc »

i know how to program idiot. god, what the hecks your problem. ive been programming for years, a couple anyways. besides, i was only trying to help out decrypt the psp. i like to do this kind of stuff, so i thought i would give it a try. also, i knew the key was 16 bytes long, i only did the first three like i said. why do you have to be so negative, everybodies always negative. why couldn't you just say "dude, im sure you can do it, just keep trying" or something and give people a little motivation instead of saying, "your a piece of crap and can't do anything, so don't even try". oh ya, thanks zenjay, you helped me alot, i did not know what out.append did and what 0xf was. and im sorry, i did post too many times, i didn't notice you could edit your posts.
Shine
Posts: 728
Joined: Fri Dec 03, 2004 12:10 pm
Location: Germany

Post by Shine »

iedoc wrote:why do you have to be so negative, everybodies always negative. why couldn't you just say "dude, im sure you can do it, just keep trying" or something and give people a little motivation instead of saying, "your a piece of crap and can't do anything, so don't even try".
I'm sorry if I you feel offended, this was not my intention. My suggestion was meant positive: It looks like you are not able even to lookup the well documented Java class descriptions, how do you think you can do anything with undocumented, encrypted PSP firmware? And in which language did you program that you don't know computer basics, like bit operations? So if you learn more of the basics, it will be really good for you and perhaps for us, too, in some years, when you can work more professional on such topics.
iedoc
Posts: 18
Joined: Thu May 12, 2005 12:26 pm

Post by iedoc »

hey dude, its cool, i just thought you were some jerk, i don't really get offended that easily, and im not offended at all. so thanks for apologizing. and i know a lot about c++ and visual basic and a couple other little languages, i also knew about bit operators, i just thought that java might be a little different, and i know absolutetly nothing about java, only that its a lot like c++. i thought java might have certain commands, i know you took some things out. i don't want to type a very long message so i guess ill stop here, but thanks again for apologizing, your a way different person than i thought you were. just so you know, i will admit, i was running my mouth off a little, i just thought i could give it a try cause ive done little decryption things.

we should probably get back on topic, cause i want to get an emulator on my psp or something.
Vampire
Posts: 138
Joined: Tue Apr 12, 2005 8:16 am

Post by Vampire »

nem wrote:I should post some specimen.
Firmware version 1.00

release:1.00:
build:228,0,3,1,0:root@psp-vsh
system:17919@release_103a,0x01000300:
vsh:p4029@special_day1,v9972@special_day1,20041201:
Firmware version 1.50, updated from 1.00

release:1.50:
build:376,0,3,1,0:root@psp-vsh
system:20182@release_150,0x01050001:
vsh:p4201@release_150,v11079@release_150,20050201:
version.txt of Leaked firmware. Not obtained by browser. FYI :)

release:1.00:
build:106,1:root@psp-vsh
system:16214,0x00100000:
vsh:2004_1104_s16214_p3883_v8335:
some more
Firmware version 1.51

release:1.51:
build:513,0,3,1,0:root@psp-vsh
system:22984@release_151,0x01050100:
vsh:p4388@release_151_sc,v12875@release_151_sc,20050507:
Firmware version 1.52

release:1.52:
build:555,0,3,1,0:root@psp-vsh
system:23740@release_152,0x01050200:
vsh:p4421@release_152,v13394@release_152,20050525:
Firmware version 2.00

release:2.00:
build:725,0,3,1,0:root@psp-vsh
system:26084@release_200,0x02000010:
vsh:p4705@release_200,v15867@release_200,20050726:
target:1:WorldWide
/vsh/etc/index.dat is the encrypted version of /vsh/etc/version.txt

the vshell and the updater looks at index.dat to get the system version (version.txt isn't used)

sceKernelDevkitVersion returns the hex value at the end of the "system:" line (0x01000300 for 1.00, 0x01050001 for 1.50, ...)
Warren
Posts: 175
Joined: Sat Jan 24, 2004 8:26 am
Location: San Diego, CA

Post by Warren »

Vampire wrote:sceKernelDevkitVersion returns the hex value at the end of the "system:" line (0x01000300 for 1.00, 0x01050001 for 1.50, ...)
It may return the same value but at least in FW v1.50 it's hardcoded in the PRX.
Mangus
Posts: 33
Joined: Fri Jun 17, 2005 4:33 pm

Post by Mangus »

hey guys jsut wanted to mention you can access ftp through the browser by using this format:
ftp://username:password@ipaddress:port
example:
ftp://user:pass@192.0.021

could this be used to upload files to more easily I know crap about html and its limitations in psp.

sorry if this is already known, just a newb thought.
Post Reply