starred/kstuff
1
0 Fork 0
mirror of https://github.com/EchoStretch/kstuff.git synced 2026-10-22 11:42:27 -05:00
Code Issues Packages Projects Releases 10 Wiki Activity
172 Commits 1 Branch 14 Tags
f2505ce5eaabfdc2eaf732ca4e5fa0b7cdfbf040
Commit Graph
172 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sergey Lisov f2505ce5ea porting_tool: fix wrong module name 2024-01-07 03:19:49 +03:00
Sergey Lisov 66496a1fa3 porting_tool: warning for broken rootvnode offset 2024-01-06 17:26:58 +03:00
Sergey Lisov b99acfcd6a ps5-kstuff: add firmwares 3.10 and 4.00 2024-01-04 16:55:43 +03:00
Sergey Lisov 4b0eca9bfb Add 3.10 kernel offsets 
3.10 shellcore offsets are not yet added, so 3.10 can't be considered supported yet.
 2024-01-03 19:23:14 +03:00
Sergey Lisov 24080b56a7 ps5-kstuff: add length to shellcore patches 2024-01-03 03:47:58 +03:00
Sergey Lisov 9537acef23 ps5-kstuff: firmware 3.00 support 
Untested
 2024-01-03 00:46:48 +03:00
Sergey Lisov e65c470aba Fix 3.20/3.21 offsets again 
They were not actually applied due to a forgotten #include.
 2024-01-02 21:27:03 +03:00
Sergey Lisov 70bcadae35 Add missing offsets on 3.20 and 3.21 
The offsets are from Specter's WebKit exploit, and are not strictly necessary because the debug settings enabler is already implemented there, but let them be.
 2024-01-02 20:20:12 +03:00
Sergey Lisov 84135dcbd2 ps5-kstuff: add 3.20 and 3.21 offsets 
Untested.
 2024-01-02 19:24:10 +03:00
Sergey Lisov 1f660543e5 Remove hardcoded 4.03 offsets from utils.c 2024-01-02 18:12:20 +03:00
Sergey Lisov b506347279 porting_tool: add remaining offsets 2024-01-02 17:47:40 +03:00
Sergey Lisov 4ca46653da porting_tool: add most fPKG-related offsets 
Are sceSblServiceCryptAsync_deref_singleton and crypt_message_resolve the only remaining offsets?
 2024-01-02 04:38:38 +03:00
Sergey Lisov a6ca56d3c0 ps5-kstuff: remove "panic" offset 
The panic function is inlined in the PS5 kernel. It's unknown what the "panic" offset represented, and it's unused in the code either way.
 2024-01-02 00:56:43 +03:00
Sergey Lisov 6abf7a07fb porting_tool: port shellcore patches to 3.xx 
This will fix the tool on 3.xx firmwares. I have no idea whether these fixed patches will actually work there.
 2024-01-01 02:50:48 +03:00
Sergey Lisov 91273eaf2f porting_tool: add shellcore offsets 
These are in userspace, but I decided to add them anyway, because more automation is nice.
 2023-12-31 19:34:38 +03:00
Sergey Lisov 743dd62679 porting_tool: fix missing retry_on_error 2023-12-31 01:57:07 +03:00
Sergey Lisov d6ded0258a porting_tool: add fself-related watchpoints 2023-12-31 01:47:42 +03:00
Sergey Lisov 23a82dbc96 porting_tool: copyin, copyout, syscall parasites 2023-12-30 20:31:55 +03:00
sleirsgoevy 7f31b2973a Merge pull request #19 from cheburek3000/bd-jb-451 
ps5-kstuff: offsets for 4.51
 2023-11-04 20:15:11 +03:00
cheburek3000 f1b7b41509 ps5-kstuff: offsets for 4.51 
All offsets (offsets, parasites, shellcore) are working on 4.51.
Kudos to @MKBUHD for running porting scripts and testing!
 2023-11-04 17:08:21 +00:00
Sergey Lisov 51faa7377f ps5-kstuff: fix FreeBSD build 2023-11-04 00:35:39 +03:00
Sergey Lisov 4825ebff57 porting_tool: add missing make_fself.py 
Ported to Python3 and fixed to work as a module
 2023-10-29 11:38:00 +03:00
Sergey Lisov 937655baac porting_tool: now finds decryptMultipleSelfBlocks 2023-10-29 02:20:17 +03:00
Sergey Lisov 7f345adb0f Tehnical update 
This fixes offset derivation for sceSblServiceMailbox_lr_*. If you have
any of these offsets in your symbols.json, remove them and rerun the
tool.
 2023-10-29 01:05:07 +03:00
Sergey Lisov 5555d75ba1 porting_tool: add sceSblServiceMailbox & some lrs 
Almost enough for fSELF (missing decryptMultipleSelfBlocks & parasites)
 2023-10-28 01:00:21 +03:00
Sergey Lisov 9a355cd4dc ps5-self-dumper: also dump elf auth info 
This is necessary to accurately repackage official binaries into fSELF
 2023-10-27 22:51:03 +03:00
Sergey Lisov 5929a306f5 porting_tool: add offsets for mmap_self 
This should be enough to get ps5-self-dumper working
 2023-10-27 21:45:02 +03:00
Sergey Lisov 089f31f75c porting_tool: add sigaction offsets 2023-10-27 00:41:22 +03:00
Sergey Lisov 8b8d51e625 porting_tool: more offsets 
mprotect_fix_start, malloc, M_something
 2023-10-21 20:52:30 +03:00
sleirsgoevy 60604e2960 Merge pull request #17 from cheburek3000/bd-jb-450 
ps5-kstuff: offsets for 4.50

Offsets from @cheburek3000.
 2023-10-21 19:40:06 +03:00
cheburek3000 27fb376d7e ps5-kstuff: offsets for 4.50 2023-10-21 16:55:02 +01:00
Sergey Lisov 1b4ce92ae7 ps5-kstuff: disasm comments in shellcore patches 2023-10-21 17:25:26 +03:00
Sergey Lisov e3d0099ba8 ps5-kstuff: support per-firmware shellcore patches 2023-10-21 01:44:29 +03:00
Sergey Lisov 0bfe08c1c7 porting_tool: find debug register access offsets 2023-10-21 00:11:19 +03:00
Sergey Lisov 455ea70901 porting_tool: find mov_rdi_cr3 and mov_cr3_rax 2023-10-19 21:25:41 +03:00
Sergey Lisov da8b6e82a9 porting_tool: add more offsets 2023-10-18 23:31:16 +03:00
Sergey Lisov 966607e817 porting_tool: find some more XOM offsets 
Specifically, push_pop_all_iret, pop_all_iret, rdmsr_start, justreturn, wrmsr_ret, rep_movsb_pop_rbp_ret
 2023-10-17 00:53:13 +03:00
Sergey Lisov 41c4f37868 ps5-kstuff: add WIP porting tool 
Currently it finds most data-based offsets (not very interesting) & the doreti_iret offset, other offsets are TODO.
 2023-10-15 14:02:07 +03:00
Sergey Lisov 7ea25efb88 prosper0gdb: miscallenous 
* remove unused offsets from the offset list, to reduce searching
* rewrite doreti_iret leaking code for better efficiency
 2023-10-15 04:20:24 +03:00
Sergey Lisov e3bce49d74 prosper0gdb: add scripts for trace post-processing 2023-10-14 22:33:53 +03:00
Sergey Lisov 73b8981c95 prosper0gdb: add frankenELF support 2023-10-14 20:03:09 +03:00
Sergey Lisov 125fff45d5 ps5-kstuff: move offsets to prosper0gdb/offsets.c 2023-10-12 23:37:50 +03:00
Sergey Lisov 4555cda030 gdb_stub: add "no syscall" version of the payload 
This version is for embedding in OOSDK homebrew to be run on the PS5.
 2023-10-12 18:33:42 +03:00
Sergey Lisov 1cb24e296d prosper0gdb: move all offsets to offsets.c 
The goal of this is to keep all offsets in a common place, to allow easier integration of other firmwares' offsets once they are found.

ps5-kstuff proper is untouched for now.
 2023-10-10 01:56:31 +03:00
Sergey Lisov ce5bd39f63 Add missing lib/frankenelf.py 2023-10-09 22:43:15 +03:00
Sergey Lisov 057151dea1 ps5-kstuff: build payloads as frankenELF 2023-10-09 21:05:18 +03:00
Sergey Lisov 9dae008afb ps5-kstuff: fix fPKG not launching from library 2023-10-08 23:14:38 +03:00
Sergey Lisov 8272f6a5db ps5-kstuff: miscallenous 
* move uelf mapping to the kernel part of the address space
* add startup notification after loading
 2023-10-07 01:11:08 +03:00
Sergey Lisov 04445d8f46 ps5-kstuff: strip uelf before embedding 2023-10-06 01:33:45 +03:00
Sergey Lisov 8b1d6b6ecd ps5-kstuff: add standalone build 
payload.bin now runs fully standalone, without the need for an external debugger
 2023-10-06 01:33:14 +03:00