[Update] Install Multiple PKG at Once in OFW become Possible

You mean when you use the install all package files option.

Interesting. I will look as nas_plugin.rco to see if there is any page names i can swap to enable it. Can you look at the sprx for possible patches that could be done with HAN exploit?

Not sure, before anything we should at least get that option appeared without qa flag first..
 
No SPRX patches in RAM, we can patch VSH memory only AFAIK.
VSH is a self module and self is same like sprx it need officiel signature to be run on OFW and as far as i know patches on CFW VSH hexing doesn't enable the ability to install packages
 
QA combo doesn't work on OFW 3.56+ I'm not sure how he was able to get that option appeared.
I think it always shows, Just doesn't work unless QA flagged. That is the way i understood it. Always shows when on usb root section of package manager.
 
I think it always shows, Just doesn't work unless QA flagged. That is the way i understood it.

no, disable qa then switch to retail vsh to see if that works.. the reason why it works on cfw is because of token patch + qa flag in eeprom.

upload_2019-4-4_16-50-20.png


upload_2019-4-4_16-50-31.png
 
QA combo doesn't work on OFW 3.56+ I'm not sure how he was able to get that option appeared.
No didn't get the combo to work cause can't QA Flag on OFW
I think it always shows, Just doesn't work unless QA flagged. That is the way i understood it. Always shows when on usb root section of package manager.
Yes but my test has been done on CFW console the error is same for HAN
 
VSH is a self module and self is same like sprx it need officiel signature to be run on OFW and as far as i know patches on CFW VSH hexing doesn't enable the ability to install packages
The HAN/Debug PKG exploits are VSH memory patches, ask the developers yourself. The exploit itself dumps the VSH memory then patches it. I could be wrong about only being able to dump VSH though, I don't have all the technical details of the exploit.
 
The HAN/Debug PKG exploits are VSH memory patches, ask the developers yourself. The exploit itself dumps the VSH memory then patches it. I could be wrong about only being able to dump VSH though, I don't have all the technical details of the exploit.
i don't know that enabling debug package installation is from VSH cause the patches that exist from first CFW until today are in nas_plugin.sprx :/
 
i don't know that enabling debug package installation is from VSH cause the patches that exist from first CFW until today are in nas_plugin.sprx :/
That's because the patches are done differently on CFW AFAIK.

+store_word(default_vsh_pub_toc, vsh_ps3xploit_key_toc)
+memcpy(vsh_ps3xploit_key_toc-0x20, index_key_addr, (index_key.length/2))
+memcpy(vsh_ps3xploit_key_toc,ps3xploit_ecdsa_key_addr,(ps3xploit_ecdsa_key.length/2))


^ Patching VSH memory.
 
Yes, So @Joonie, basically we have same issue on CFW , we have the option in package manager always, but it only works if QA flag is enabled, So if we could get it working all the time on CFW, that would be first step. It should not be majorly locked down, its not an important feature, i dont even know why its like this, you would think they would offer this feature to official DEX users.
 
That's because the patches are done differently on CFW AFAIK.

+store_word(default_vsh_pub_toc, vsh_ps3xploit_key_toc)
+memcpy(vsh_ps3xploit_key_toc-0x20, index_key_addr, (index_key.length/2))
+memcpy(vsh_ps3xploit_key_toc,ps3xploit_ecdsa_key_addr,(ps3xploit_ecdsa_key.length/2))


^ Patching VSH memory.
I think they can patch any files, because they also patch download plugin i think. and nas plugin. Maybe i am wrong.
 
Yes, So @Joonie, basically we have same issue on CFW , we have the option in package manager always, but it only works if QA flag is enabled, So if we could get it working all the time on CFW, that would be first step. It should not be majorly locked down, its not an important feature, i dont even know why its like this, you would think they would offer this feature to official DEX users.
You would also think there would be a simple way to background download pkg files, but the PS3 works in mysterious ways o_O
 
Yes, So @Joonie, basically we have same issue on CFW , we have the option in package manager always, but it only works if QA flag is enabled, So if we could get it working all the time on CFW, that would be first step. It should not be majorly locked down, its not an important feature, i dont even know why its like this, you would think they would offer this feature to official DEX users.

@habib said it maybe doable by enabling fake qa from vsh, we will have to reverse "8002AE32" too.
 
Back
Top