Ce vendredi 5 juin 2015 sera surement une date à retenir pour la Scène du Hack PS3.
Zecoxao un membre du forum "playstationhax" vient de publier ceci :
Instructions:
1- Change the pointer unk2 in rsx_bug.cpp (there's a comment there)
2- Compile with visual studio 2010 AND OFFICIAL SONY SDK (don't ask where to get it, google is your friend)
3- Load on proDG and analyze
4- ?
5- ProfitExplanation in the database, that comes along with the src.
Pros:
The only true lv2 kernel exploit on 4.xx that has been publically PoC'd and released
Cons:
This only works on < 4.45 (So only useful for DECH3K/4K, because you can downgrade at will on those to minver)
PS: This is completely useless for CECH3K/4K, due to the nature of NPDRM and Debug Selfs. The only thing useful one can get out of this is obtaining the .2 keys on a DECH3K/4K which on their own are completely useless.
Une conversation postée sur "psx-place" de Habib donne d'autre information sur un résultat possible :
might not work in 3.56++
[5:47:42 AM] Habib: with the syscall exploit you got, you can probably poke in lv1
[5:47:48 AM] Habib: might not work in 3.56++
[5:48:15 AM] Habib: *(u64 * )(HV_BASE+addr)
[5:48:30 AM] Habib: in short
[5:48:43 AM] Habib: using lv2_poke
[5:48:58 AM] Habib: lv2_poke(addr, hv_base+value);
[5:49:23 AM] Habib: you guys can try that
[5:49:58 AM] Habib: sony did fixed the regioning shit
[5:50:12 AM] Habib: but it still might work, who knows....
[5:52:39 AM] Habib: Request for Multiman to support DRL/CRL hash fix to restore Blu-ray Playback [Archive] - MaxConsole v2.0 Forums
[5:52:52 AM] Habib: deank attempts on 4.21, really old
[5:53:01 AM] Habib: it does actually work on rex 4.21
[5:53:07 AM] Habib: worth a try guys
[5:53:20 AM] Habib: if it works, you have a cfw
[5:54:00 AM] Habib: zec, you also used lv1 peek for different regions, for bootldr
[5:54:12 AM] Habib: sony might not have fixed that shit just yet
[5:54:31 AM] Habib: regioning may still be ****** up
[6:05:14 AM] Habib: IF ANYONE LIKES TO GIVE IT A SHOT
[6:05:17 AM] Habib: lis r0, -0x8000
sldi r0, r0, 32
oris r0, r0, 0x1400
stdx r4, r3, r0
blr
[6:05:33 AM] Habib: replace lv1_poke with this
[6:07:43 AM] Habib: 3C 00 80 00 78 00 07 C6 64 00 14 00 7C 83 01 2A 4E 80 00 20
[6:11:20 AM] Habib: I do assume the exploit of sc does allow writing in lv2 memory without a panic
[6:12:02 AM] Habib: if you can tell that where it pokes and get control of it, you might use that with hv_base+addras i said, im lazy
if this works, cfw FOR ALL PS3S!!!!!!
On conclut donc que la Scène PS3 ne se contente pas juste de mettre à jour leur CFW pour les consoles compabibles actuelles, mais ils cherchent bien de nouvelles failles sur les modèles de consoles plus récentes et apparement c'est belle et bien trouvé !!!!
Encore un peu de patience et nous aurons de quoi profiter de tous les modèles de PS3.
