Commit Graph
108 Commits
Author SHA1 Message Date
Sergey Lisov 0a5d89a008 ps5-kstuff: fix dbgregs restore on syscall exit 2023-08-13 00:57:42 +03:00
Sergey Lisov b5ab863695 prosper0gdb: fix manual tracing 2023-08-13 00:09:12 +03:00
Sergey Lisov 571474576c ps5-kstuff: rewrite in C
This version seems to no longer crash the well-known cubic game
2023-08-12 23:15:39 +03:00
Sergey Lisov 6a1e717e23 ps5-kstuff: support bundled auth info 2023-06-06 18:37:03 +03:00
Sergey Lisov aa5e14a28b ps5-kstuff: add fSELF support for execve()
Now both executables and libraries are supported
2023-06-06 14:05:02 +03:00
Sergey Lisov 0942059ed4 ps5-kstuff: fix missing PCB_DBREGS in some places
This flag needs to be set whenever a thread makes use of debug registers.
2023-06-03 23:32:43 +03:00
Sergey Lisov 1026613b8e ps5-kstuff: add fSPRX loading support
Supports loading of decrypted PS5 PRX files packaged with make_fself.py

Also somehow this breaks PS4 Minecraft...
2023-06-03 02:44:33 +03:00
Sergey Lisov 851b04ee2c ps5-self-dumper: try to dump all ELF segments 2023-05-28 13:39:03 +03:00
Sergey Lisov 94fd3d1eeb ps5-kstuff: add DR-based hook
Hooks ioctl 0x40045145 on sockets (soo_ioctl), so that it writes 0xdeaddead to its argument and returns 0
2023-05-26 23:04:46 +03:00
Sergey Lisov 3ad15779d2 prosper0gdb: use M_NOWAIT for r0gdb_kmalloc 2023-05-26 23:04:03 +03:00
Sergey Lisov fdbfd46e54 ps5-kstuff: fix write to dr6 & dr7 2023-05-26 17:35:29 +03:00
Sergey Lisov f76845979d ps5-kstuff: add kekcalls
See kekcalls.txt and 8cc-kekcalls.c
2023-05-25 22:11:03 +03:00
Sergey Lisov cd751e7266 ps5-kstuff: add macros to read debug registers
getppid() now returns dr6
2023-05-25 16:38:30 +03:00
Sergey Lisov d98eac9539 prosper0gdb: add functions to access dr[0-36-7] 2023-05-25 16:37:28 +03:00
Sergey Lisov b0c2730abd ps5-self-dumper: also dump files with .prx extension 2023-05-24 02:28:27 +03:00
Sergey Lisov 81751fbe86 prosper0gdb: add authmgr-related offsets & klog 2023-05-24 02:27:57 +03:00
Sergey Lisov 6485561c85 ps5-self-dumper: dump PFS if it is not empty 2023-05-22 02:22:04 +03:00
Sergey Lisov ef13407cfa prosper0gdb: add sigaction20
Allows to set signal handlers to SIGKILL and SIGSTOP
2023-05-22 02:21:24 +03:00
Sergey Lisov aada7512a3 lib: add rfork and rfork_thread syscalls 2023-05-22 02:20:54 +03:00
Sergey Lisov 096c9253c3 ps5-self-dumper: fix EPERM on some binaries 2023-05-21 01:37:03 +03:00
Sergey Lisov 9777d64bcc Miscallenous
prosper0gdb: avoid single-stepping through the scheduler
ps5-self-dumper: copy md0 binaries to /data before trying to dump (does not actually work)
ps5-self-dumper: terminate the process after dumping all binaries
2023-05-20 21:26:48 +03:00
Sergey Lisov d741767217 ps5-kstuff: syscall hook PoC 2023-04-03 01:00:12 +03:00
Sergey Lisov e2c2a90e0a prosper0gdb: add r0gdb_kfncall 2023-04-02 17:48:28 +03:00
Sergey Lisov e8787f4c15 prosper0gdb: add sysentvec offset 2022-12-25 23:21:37 +03:00
Sergey Lisov 4f3094aa5c gdb_stub: save mcontext in a global variable 2022-12-25 23:15:35 +03:00
Sergey Lisov 1ef0e7da81 ps5-self-dumper: try to dump files from / (md0) 2022-11-17 19:38:41 +03:00
Sergey Lisov 65b4ad10c7 ps5-self-dumper: dump /system_ex before /system 2022-11-05 17:51:44 +03:00
Sergey Lisov 4e577aa1d0 ps5-self-dumper: standalone payload
Still depends on gdb_stub for building, but does not enable it at runtime
2022-11-05 17:09:42 +03:00
Sergey Lisov 81b25944a6 Add ps5-self-dumper
Dumping routine only, no main() for now
2022-11-04 23:33:56 +03:00
Sergey Lisov 0fdced7ff3 prosper0gdb: add MAP_SELF (unstable yet) 2022-11-03 20:11:44 +03:00
Sergey Lisov 975ef52fc4 prosper0gdb: add trace_decode.py 2022-11-01 01:05:38 +03:00
Sergey Lisov ae834288ea prosper0gdb: add tracing & instrumentation
Due to how its implemented (interrupt handlers that return to userspace), it will work only for the same process (bd-j jvm), and only while running on the same cpu core (#2 cpuset, #13 apic).
2022-11-01 00:55:10 +03:00
Sergey Lisov 55051ce475 prosper0gdb: add swapgs on kernel entry/exit 2022-10-12 23:21:07 +03:00
Sergey Lisov 8a855ffd99 prosper0gdb (well, sort of)
Limited 4.03 kernel singlestep.
2022-10-12 21:00:46 +03:00
Sergey Lisov 983458841a gdb_stub: add pluggable helpers for memrw 2022-10-12 03:42:16 +03:00
Sergey Lisov 0558a4d722 gdb_stub: add an option to disable breakpoint emulation 2022-10-09 21:58:22 +03:00
Sergey Lisov c90c4f9256 gdb_stub: breakpoint emulation 2022-06-20 20:41:48 +03:00
Sergey Lisov 626cab1c67 gdb_stub: fix dbg_enter when SIGSEGV is blocked
Now explicitly unblocks all signals needed for the stub's operation.
2022-06-20 19:24:23 +03:00
Sergey Lisov d8e2c223e4 Support BD-JB in the crt & gdb_stub (partial) 2022-06-20 00:42:48 +03:00
Sergey Lisov 5c81b43637 gdb_stub: fix strace by using a separate thread 2022-06-10 22:17:59 +03:00
Sergey Lisov fe065d2d74 linux: add kmem_alloc patch from mira 2022-06-06 15:53:07 +03:00
Sergey Lisov ee89b240cb injector: add 9.00 support 2022-06-06 15:52:54 +03:00
Sergey Lisov b7d09f222a gdb: add strace
WIP, experimental, does not quite work yet
2022-06-06 15:51:39 +03:00
Sergey Lisov 4c060b105d Add ring0 debugger 2022-04-16 17:27:07 +03:00
sleirsgoevy bce7ada8e2 Merge pull request #8 from AstolfoKawaii/patch-1
Update main.c
2022-02-06 19:51:52 +03:00
Astolfo c7117b861d Update main.c
main must be either `int main (void)` or `int main (int argc, char *argv[])`
2022-02-06 19:48:57 +03:00
Sergey Lisov c9671e67eb linux: add 9.00 support 2022-01-25 21:39:15 +03:00
sleirsgoevy 1e617fdedc Merge pull request #7 from sleirsgoevy/bgft-goldhen
bgft: support GoldHEN loader
2022-01-22 23:55:39 +03:00
Sergey Lisov cffd4fc765 bgft: sender: rewrite to use loop instead of goto 2022-01-22 23:53:46 +03:00
sleirsgoevy 7f666e6606 Merge pull request #6 from SiSTR0/master
Added multiple port support on bgft
2022-01-22 23:32:14 +03:00