WebKit ROP Chain Tutorials [Creation/Editing/Debugging] - PS3 Development

[bguerville]

Sorry for bumping here, however, any news on SuperSlim Hack/HEN/CFW?

No.

 

[esc0rtd3w]

@esc0rtd3w i tested all of the functions on the new test file all of them work perfectly and even success rate is much much higher but the rename function has some bugs which include:
1- if the file path is long it wont rename it example if the file path is /dev_hdd0/photo/2017/02/01/test-file.txt then it wont rename it. It only renames it if path is short.
2-it doesn't move directories(folders) i mean it move files from one place to another but not directories i don't know why.

yes i also tested rename with same drive and does not work using different paths. the bug with path conversion from string to unescape should now also be fixed (thanks @bguerville) haha

i have updated files that include that and others i will be posting soon that have many improvements. Also PSID Dump option was added to dropdown box haha the tool nobody wants!

Sorry for bumping here, however, any news on SuperSlim Hack/HEN/CFW?

wrong place dude!!

make a new thread for 3xxx/4xxx HEN questions if you would like!

 

[k9mo]

@esc0rtd3w thx bro also that psid dump option works perfectly and its much easier than getting it out of savegames

 

[k9mo]

@esc0rtd3w can we expect the new test files soon or is it going to take time?

 

[esc0rtd3w]

as soon as we release 2.0 dumpers/writer then i can release the new tutorial files, as it uses the same JS fixes as the 2.0 release

 

[''tiiok'']

with that , we can run homebrew with 3xxx models ?

 

[DeViL303]

with that , we can run homebrew with 3xxx models ?

No, the 2.0 release will be an updated version of 1.0 that supports the same CFW compatible consoles. The 3xxx/4xxx hack if and when one ever becomes available will be a different type of hack that resembles Henkaku more than CFW (I think)

 

[bguerville]

with that , we can run homebrew with 3xxx models ?

Look at the thread title & the first header in OP.
This is a ps3 webkit hacking tutorial & it's aimed at developers & advanced users wishing to discover or get familiar with various userland applications of ps3xploit.
This project will not produce a new ps3xploit release, it's for educational purposes only.

 

[aldostools]

This project will not produce a new ps3xploit release, it's for educational purposes only.

Is it possible to call syscall 389 (SC_SET_FAN_POLICY) with ROP? IMO it would be a nice addition for the exploit tool

 

[kozarovv]

Is it possible to call syscall 389 (SC_SET_FAN_POLICY) with ROP? IMO it would be a nice addition for the exploit tool

Really nice idea!

 

[DeViL303]

So that would allow faster fan on OFW? That would be really cool. (pun intended)

 

[kozarovv]

So that would allow faster fan on OFW? That would be really cool. (pun intended)

Exactly, by that syscall you can set fan speed.

 

[bguerville]

Is it possible to call syscall 389 (SC_SET_FAN_POLICY) with ROP? IMO it would be a nice addition for the exploit tool

With Rop you can use all official syscalls & any export or sub you wish, from vsh or any module.

 

[esc0rtd3w]

i can try adding fan and led control to dropdown boxes

if anyone wants to post all the params, that would be cool

EDIT: Mostly done....in testing now

 

[aldostools]

i can try adding fan and led control to dropdown boxes

if anyone wants to post all the params, that would be cool

I don't see any practical use for led. Anyway here are the params:
https://github.com/aldostools/webMAN-MOD/blob/master/include/led.h

For fan control, maybe this snippet could help:
https://github.com/aldostools/webMAN-MOD/blob/master/include/fancontrol.h#L72

 

[esc0rtd3w]

thanks, i was thinking more of a status while doing operations. like green ok, red error, yellow busy haha

but also works well for tutorial, just because

 

[bguerville]

True, the led has no practical use on its own however someone wishing to learn should take the tut code & try to implement a stack frame to do something more interesting such as changing the led colour briefly or blink and/or beep when a temp change call or a file io call is made.
Only way to learn is to get your hands dirty and luckily here 90% of the job is done, it is only a matter of merging 2 frames...

 

[esc0rtd3w]

well...everything seems to work from ROP so far except sys_sm_set_fan_policy haha

i get this

/** The feature is not yet implemented. */
#define ENOSYS -2147418109 /* 0x80010003 */

led stuff works, get CELL and RSX temps work

 

[k9mo]

@esc0rtd3w nice i see other syscalls are added could we be seeing the new tutorial files these days?

 

[esc0rtd3w]

yeah...video posted yesterday

new files, as explained already, use fixes from 2.0 files, so i cannot release yet!!

hopefully soon