Go Back  
Reply
 
Thread Tools
Old 08-28-2010   #11
Pockets69
Senior Member
 
Pockets69's Avatar
 
Join Date: Jan 2008
Location: Lisbon, Portugal
Posts: 6,681
Likes: 2,087
Liked 2,449 Times in 1,389 Posts
Mentioned: 138 Post(s)
Tagged: 0 Thread(s)
Thanks disane, that is usefull
__________________

<eussNL> judge: ´so why did you torrent 5 million AVI of women moaning´
<eussNL> <TizzyT> i dont judge if it sounds good i listen
Pockets69 is offline   Reply With Quote
Old 08-28-2010   #12
spinifex08
Member
 
Join Date: Feb 2008
Posts: 68
Likes: 25
Liked 7 Times in 4 Posts
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Originally Posted by gersrt View Post
Who the **** cares if its sony code. Its out there now so no stopping it.
true enough m8 as stated on my other posts...
its public enough now for the dirties to begin.

what were all hopeing tho is a free version, i thought thats what hacking was all about? or should we support the hackers? errr no! thats the issue sony has i reckon too.

if we are to hack the ps3 it needs to be non profitable, or not using sony code, otherwise they will try their best to destroy all humans lol... yeah right...

Spin.
spinifex08 is offline   Reply With Quote
Old 08-28-2010   #13
HZoooof
Apprentice
 
Join Date: Nov 2009
Posts: 17
Likes: 9
Liked 1 Time in 1 Post
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Smile Shall we ?

OK ,
thanks so much for this man who grab this codes .
can we now edit these codes somehow with the Hxd and use it on the PS3 ?
how can we get profitable with these codes ?
I hope some one expert to help us ...
Thanks so much .
HZoooof is offline   Reply With Quote
Old 08-28-2010   #14
FantmN0de
Apprentice
 
Join Date: Feb 2008
Posts: 19
Likes: 2
Liked 1 Time in 1 Post
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
so is this realy a reversed sony JIG or an exploit (buffer overflow)?
FantmN0de is offline   Reply With Quote
Old 08-28-2010   #15
Doggpound
Apprentice
 
Join Date: Aug 2010
Posts: 3
Likes: 0
Liked 0 Times in 0 Posts
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Originally Posted by Disane View Post
[CODE]
JIG_1.bin: file format binary

Disassembly of section .data:



This is the actual shellcode it repeats 32 times and it patches the lv2 (this info is from RichDevX). It probably tries to make the PC jump to this code sequence, I'm not sure if the same shell code could work on other firmwares.
thats not how usb works. you cant just disassemble it. you have to decrypt the data using the rules of the usb protocol, then it contains the info you need to implement it with whatever hardware you want.
Doggpound is offline   Reply With Quote
Old 08-28-2010   #16
spinifex08
Member
 
Join Date: Feb 2008
Posts: 68
Likes: 25
Liked 7 Times in 4 Posts
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Originally Posted by HZoooof View Post

how can we get profitable with these codes ?
wtf? you want to rip even the forum off your sitting on for personal gain?
doubt it, if your going to post then at least dont tell the world you want to profit from this information given freely to yourself.

clearly alot of work has gone into this project, many years its taken to get to this point.
public trader thieves should be shot there and then.

Spinifex.
spinifex08 is offline   Reply With Quote
Old 08-28-2010   #17
Disane
Member
 
Join Date: Jul 2008
Location: Austria
Posts: 121
Likes: 18
Liked 85 Times in 29 Posts
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Originally Posted by Doggpound View Post
thats not how usb works. you cant just disassemble it. you have to decrypt the data using the rules of the usb protocol, then it contains the info you need to implement it with whatever hardware you want.
I didn't say this is the code your going to transfer on to your MCU as a program. This is the disassembled PPC code more like the shell code that is being injected. The best way would be to use the lv2 dump and this to figure out how the stack overflow exploit works in the USB buffer of the PS3 after that it can be reproduced on any FW. On both slim and fat PS3s.

The JIG ID is probably passed to trigger some code pathern which the Configuration Descriptor overflows and injects the shell code after that the code gets executed. The shell code patches lv2 to run fselfs and all kinds of interesting flags which I haven't noticed yet...

Last edited by Disane; 08-28-2010 at 04:54 PM.
Disane is offline   Reply With Quote
Old 08-28-2010   #18
ady2002
Apprentice
 
Join Date: Aug 2010
Posts: 2
Likes: 0
Liked 1 Time in 1 Post
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Originally Posted by spinifex08 View Post
wtf? you want to rip even the forum off your sitting on for personal gain?
doubt it, if your going to post then at least dont tell the world you want to profit from this information given freely to yourself.

clearly alot of work has gone into this project, many years its taken to get to this point.
public trader thieves should be shot there and then.

Spinifex.
i have a feeling english isnt his first tongue and he means how can we use this code to our advantage, so use it to profit ourselves not make money. if i wrong shoot me down :musicus:

Last edited by ady2002; 08-28-2010 at 04:52 PM. Reason: typo
ady2002 is offline   Reply With Quote
Likes: (1)
Old 08-28-2010   #19
thijzzy
Apprentice
null
 
thijzzy's Avatar
 
Join Date: Aug 2008
Posts: 29
Likes: 2
Liked 0 Times in 0 Posts
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Hmmm..

So the big question is: can we emulate it via a psp or an iDevice

-because you can make homebrew on the systems
-emulate the code
-and there you have the free Jig-stick :P
thijzzy is offline   Reply With Quote
Old 08-28-2010   #20
Doggpound
Apprentice
 
Join Date: Aug 2010
Posts: 3
Likes: 0
Liked 0 Times in 0 Posts
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Originally Posted by Disane View Post
I didn't say this is the code your going to transfer on to your MCU as a program. This is the disassembled PPC code more like the shell code that is being injected. The best way would be to use the lv2 dump and this to figure out how the stack overflow exploit works in the USB buffer of the PS3 after that it can be reproduced on any FW. On both slim and fat PS3s.
sorry i think you misunderstood what the code is. someone sniffed the communications between the dongle and ps3. this code is that communication. if it is an exploit, that exploit would be contained in this code, but only after this code is decrypted based on the usb protocol. after its decrypted then we can see everything that is happening, including the ppc code(if its actually an exploit). Only then can you disassemble that code.
************* [ - Post Merged - ] *************
Originally Posted by thijzzy View Post
So the big question is: can we emulate it via a psp or an iDevice

-because you can make homebrew on the systems
-emulate the code
-and there you have the free Jig-stick :P
yes, if someone writes a driver for it. as a matter of fact, almost any usb peripheral can be used if someone writes a usb driver for it.
Doggpound is offline   Reply With Quote
Reply

Bookmarks

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump



PS3Hax.net is Copyright © 2010-2013.
Use of this site is governed by our Terms of Use and Privacy Policy. All Trademarks and images are owned by their respected owners.
Posts and links are subject to each author on this forum and are no way affiliated with the operations and/or opinions of ps3hax.net
All times are GMT -5. The time now is 01:07 PM.