Guidelines for kernel mode homebrew in 2.5/6 TIFF eLoader

Posted Sep 19, 2006 at 9:03AM by QJ Staff Listed in: Hacks & Exploits, Homebrew Applications, Homebrew Development, News Tags: 0okm, eLoader, Exploit, GTA Exploit, hitchhikr
Ó


0okm code screenshot0okm has just released instructions enabling developers to make kernel mode applications in Firmwares 2.5/6 which would run using the eLoader. In case anyone's wondering, we did have kernel mode access on those firmwares, but it could only be done using HitchHikr's exploit in the GTA game.

Although the instructions themselves are nothing more than a small piece of code, it's very obvious that it's very useful for all the people in the community. Firstly, you don't need to wait for GTA to load up. Secondly, this is a big boon for all those who're stuck with a patched UMD, or do not have one.

Surprisingly, the instructions are very easy for even the most "noobiest" of programmers:


main.c
add line extern void kernel_ent(u32 Temp);
and write Kernel access in a function
use kernel_ent((u32) &your_function) to call it

Makefile
in line OBJS add kernel_ex.o
in line LIBS add -lpspvshbridge


0okm has also ported the original proof-of-concept which demonstrated kernel mode access on the 2.5/6 GTA exploit. Further, he has also bundled the source, so that all you budding programmers can have a look at it. Also thanks to Jordan in #noobzOT for the heads-up!

Download Link: [Firmware 2.5/6 Kernel mode access through VSH proof-of-concept]

 
 
 

Comments [refresh]

by first - 2006-09-19 04:14
»

first

by 2 - 2006-09-19 04:15
» 2

2

by EvilMonkey - 2006-09-19 04:16
» Re

This is some good news..just a few more days till the 2.71 / 2.80 e-loader :)

by muppetman - 2006-09-19 04:16
» amazing

This should be amazing for developers of Homebrew... and to those people who post "first and second" f off... you have no reason to visit this site...



thanks for the news



-mm-

by Cewl - 2006-09-19 04:21
» This is 4 real man!

If somebody could port Fastloader or Devhook it would be great!



0okm rulez!!!

by Jordan Black - 2006-09-19 04:24
» Thanks for me, I sent in the Tip lol

Yeah great work 0okm

by Fanjita - 2006-09-19 04:27
» caution

"the instructions are easy for even the noobiest of programmers"...



It's not really a good idea to mess around with kernel mode if you don't know what you're doing. The chance of bricking is much higher.



Incidentally, eLoader 0.99 will support easier use of kernel mode via the standard APIs, I'd recommend waiting for it.

by Jordan Black - 2006-09-19 04:29
» Fanjita kwl

Don't Wait until Eloader 0.99, thanks for the update

by ???? - 2006-09-19 04:30
»

will there be a umd emu out soon then?

by MC - 2006-09-19 04:31
»

Is this a new kernel finding or is it based off the hitchikr exploit?

by milo22 - 2006-09-19 04:33
» @Fanjita

will eloader .99 support higher firmwares?

by tophead420 - 2006-09-19 04:35
»

well i agree with Fanjita messin around with any kernal access is risky no matter what so if you do try this be very careful and take your time cuz u dont wanna end up with a brick or you cud simply wait like fanjita said and wait till eloader 0.99 but thats just me and this doesnt affect me much seeing that im on 1.5

by - 2006-09-19 04:36
» @ #10

This is just a port of the HitchHikr exploit. But unlike that one, this one works from the Photo Menu...

by MC - 2006-09-19 04:37
» Ok

13. » @ #10



This is just a port of the HitchHikr exploit. But unlike that one, this one works from the Photo Menu...





Thanks for that.

by Fanjita - 2006-09-19 04:54
» -> # 9

I should have known that Talk Like A Pirate Day would just heighten the ISO talk

by prime - 2006-09-19 05:03
» Great work 0okm!!! One quick question...

How's development on the TA-082 downgrader progressing? Thanks

by . - 2006-09-19 05:04
» ,

if someone can convert something like umd emulator to 2.71 then i would upgrade

by Zodionic - 2006-09-19 05:04
» Talk Like A Pirate Day

arrr!

by i have a big *****! - 2006-09-19 05:05
»

Enough said!

by emulating 1.5 through 2.6 - 2006-09-19 05:24
» this is huge!

this is huge news everybody. there are 3 things i am excited about:



1) if IRShell is ported, we will be able to listen to mp3s while playing new games again (like in the umd emulator days)



2) if SNES9x TYL 0.4.2 ME is ported, hopefully it won't have the savestate sound bug anymore? (fingers crossed)



3) if Devhook is ported, it won't matter if some games aren't ported, because you will just be able to emulate 1.5 through 2.5+ to run the old kxploit eboots :)



i'm pumped!!!

by prime - 2006-09-19 05:32
» SNESTYL

"if SNES9x TYL 0.4.2 ME is ported, hopefully it won't have the savestate sound bug anymore?"



How would porting it fix anything. The savestate sound bug exists in f/w 1.5, it's not a f/w related issue. It's a coding issue that they gave up on when they gave up on SNESTYL altogether (sadly enough)..

by flash player - 2006-09-19 05:34
» the flash player will run better too

the flash player runs like ***** in emulated devhook firmware, so this will also benefit those who want to upgrade to have their flash player run faster. now i can play fly the copter!!!

by emulating 1.5 through 2.6 - 2006-09-19 05:55
» i might get lucky?

"How would porting it fix anything. The savestate sound bug exists in f/w 1.5, it's not a f/w related issue. It's a coding issue that they gave up on when they gave up on SNESTYL altogether (sadly enough).."



some people SWEAR that they don't have the savestates sound problem in 0.4.2 me anymore, i was hoping maybe i will get lucky like them when i run it out of 2.6??



it's worth a TRY at least!!!

by td - 2006-09-19 06:13
» good news

i might even update to 2.5 if a custom firmware comes out that allows full homebrew support (like 1.5) from the xmb!

by DuRoLuRo - 2006-09-19 07:06
» YES!!

I downgraded from 2.60 to 1.50,

but i would be very happy if all the 1.50 apps could work on 2.60 or 2.71, cuz then i could upgrade again, and use the full speed internet-browser again!

by DuRoLuRo - 2006-09-19 07:09
» And...

And of course, it would be nice to have full res. wallz again!

by insa8ne2k4 - 2006-09-19 08:04
» 0okm you da man!

Round of applause for 0okm.



thanks

by Cent - 2006-09-19 08:14
»

How use... This is program ?

by PSPUser - 2006-09-19 08:51
» WOW Great

great news. I can't wait to use PMPMod AVC on my 2.6, I agree with DuRoLuRo running 1.5 using devhook on a 2.6 would be very funny.



lets hope people will stop asking for a downgrader soon

by Welcome - 2006-09-19 08:58
»

OK no unrig'd users asner this should i wait to use it or not if i wait HOW LONG

by zoa - 2006-09-19 09:29
» ...

please someone try this and post your comment

by Welcome - 2006-09-19 09:48
»

i got a alot of questions that need to be asnwered Who is your daddy and what does he do no im joking does this work on ta-028 undowngradeable firmware im saying would it wokr explain

by ... - 2006-09-19 09:53
» ....

why does'nt QJ has not post geMP (Homer's RIN)

new version of GeMP (Homer’s RIN) is out! GeMP emulates the old school Gameboy & Gameboy Color handhelds from Nintendo! v3.3 incorporates many changes, most of which I’m not even sure about… Nevertheless, here’s a few:



New eLoader icon

New default menu background

A more complete file browser

Press “L” to switch between flash1, flash0, disc0, & ms0 directories

The ability to cycle to new commands in the browser using “R”

A letter input system

Press select to cycle 4 times

Background support has changed — JPG/PNG added.

Photo viewer: When viewing a supported image, press “O” to escape, and Triangle to open commands at the bottom left of the screen.

Picture framing: During a game open menu (L+R), and go down to “GB Frame: On/Off”

Improved cheat support

Check out GeMP.doc for a little history lesson, and other details regarding this release.



I just finished giving it a test run; works very well — 1942 all the way

by #32 - 2006-09-19 10:25
» #32

Hey welcome, you really need to learn how to type/spell/use punctuation/....and just how to not suck at life.

by Joel - 2006-09-19 10:27
» Woah

i have 2.80 and i know "NO KERNEL FOR U" but umm i'm still pumped after reading #20. emulate the 1.5 (the ultimate firmware i believe, or am i wrong?) anyways this is great stuff.

by Welcome - 2006-09-19 10:30
»

Well actually i do know how my 10 year old bro typed it while i said it because i was on level 10 on tetris * intense! * and i forgot how to pause. So if u have anything else to add feel free.

by Welcome - 2006-09-19 10:34
»

i did type the number 30 while on level 3 w/o it paused

by Marq - 2006-09-19 10:53
» ...?

What does Kernal Mode du?

by Swashbuckler Steve - 2006-09-19 10:58
» Ahoy maties!!

Anchors away...we are here for the long haul!!

by ... - 2006-09-19 11:18
» ...

kernel mode is to

emulate firmware's

to load ISO(psp games)

to run shell's (like da best IRSHELL)

custom firmware

and altmost all from 1.50

I'd say almost ,because you cannot run homebrew directly from the game menu

by Gah - 2006-09-19 11:30
» Noob q

Sorry for the noob question but... do this exploit allow to run unsigned code on 2.6 WITHOUT GTA? I can,t find a copy of unpatched GTA and where I live I've never saw portable games rentals =(.

by ... - 2006-09-19 11:44
» @ Gah #41

you can already run the eloader whitout gta here the site http://noobz.eu/

by bob - 2006-09-19 11:51
» what do these do beside * cross *

printf(" Pass [TRIANGLE] to Kernel mem. Dump\n");

printf(" Pass [SQUARE] to Kernel lib. Dump\n");

printf(" Pass [CIRCLE] to Kernel boot Dump\n");

printf(" Pass [CROSS] to EXIT\n\n");

by matrixfn386 - 2006-09-19 11:52
» question

does this open the possiblilty of writing a custom firmware for 2.6? therefore making it possible to launch eboots directly from the xmb? if so could this also mean the end of 1.5 being the golden firmware? if so i am very enthusiastic about updating to 2.6 some time in the future.

by Skinny310 - 2006-09-19 13:06
»

Fanjita is da s*** I would listen to him if I where you.

by zoa - 2006-09-19 13:08
» ...

@43 good point and quest?

by , - 2006-09-19 13:24
» ...

so wat does it do

by hubyxxx - 2006-09-19 13:27
» SNESTYL on Firmware 2.6

i might get lucky?

-------------------------------------------------------------------

"How would porting it fix anything. The savestate sound bug exists in f/w 1.5, it's not a f/w related issue. It's a coding issue that they gave up on when they gave up on SNESTYL altogether (sadly enough).."



some people SWEAR that they don't have the savestates sound problem in 0.4.2 me anymore, i was hoping maybe i will get lucky like them when i run it out of 2.6??

-------------------------------------------------------------------

I have no sound problems loading saves in 2.6 TA-082

I SWEAR!!!



By the way THANK'S Ookm!!!! great work!!!

by Zoa - 2006-09-19 15:00
» ....

MAYBE THIS IS THE HEX KEY TO RUN GAMES FROM XML or the PSP GAME MENU

this run for 2.80

this start from the game menu on a 2.80 psp why?

has someone try this

THI IS GOING TO BE A BIG EXPLOID I THINK BECAUSE MAYBE THE SOME GAME CANT BE START FROM THE MENU LIKE THEY DONT NEED A KEY



this run for 2.80

this start from the game menu on a 2.80 psp why?

has someone try this

THI IS GOING TO BE A BIG EXPLOID I THINK BECAUSE MAYBE THE SOME GAME CANT BE START FROM THE MENU LIKE THEY DONT NEED A KEY



this run for 2.80

this start from the game menu on a 2.80 psp why?

has someone try this

THI IS GOING TO BE A BIG EXPLOID I THINK BECAUSE MAYBE THE SOME GAME CANT BE START FROM THE MENU LIKE THEY DONT NEED A KEY



this run for 2.80

this start from the game menu on a 2.80 psp why?

has someone try this

THI IS GOING TO BE A BIG EXPLOID I THINK BECAUSE MAYBE THE SOME GAME CANT BE START FROM THE MENU LIKE THEY DONT NEED A KEY



this run for 2.80

this start from the game menu on a 2.80 psp why?

has someone try this

THI IS GOING TO BE A BIG EXPLOID I THINK BECAUSE MAYBE THE SOME GAME CANT BE START FROM THE MENU LIKE THEY DONT NEED A KEY



this run for 2.80

this start from the game menu on a 2.80 psp why?

has someone try this

THI IS GOING TO BE A BIG EXPLOID I THINK BECAUSE MAYBE THE SOME GAME CANT BE START FROM THE MENU LIKE THEY DONT NEED A KEY



this run for 2.80

this start from the game menu on a 2.80 psp why?

has someone try this

THI IS GOING TO BE A BIG EXPLOID I THINK BECAUSE MAYBE THE SOME GAME CANT BE START FROM THE MENU LIKE THEY DONT NEED A KEY



this run for 2.80

this start from the game menu on a 2.80 psp why?

has someone try this

THI IS GOING TO BE A BIG EXPLOID I THINK BECAUSE MAYBE THE SOME GAME CANT BE START FROM THE MENU LIKE THEY DONT NEED A KEY

by zoa - 2006-09-19 15:03
» ...

^ but it start but it then sayz the game could not be start

by phacergei - 2006-09-19 15:28
» ...

know what I'm mostly excited about? besides being able to play my backups (to save battery life).



FAST LOADING HOMEBREW!.. seriously it's so annoying the wait time to load any h/b. it would speed up development so much, too



except I don't like the idea of e-loader. I would much rather be able to launch each homebrew individually. perhaps the latest toolchain will have a "make Tiff" option that generates the Tiff files/folders to launch it.

by mr_bigmouth_502 - 2006-09-19 15:35
» W00T!!!

Ookm, u r da bomb!

by hi - 2006-09-19 18:00
» yeh im 53

53!!!!!!!!!!!!!!! !!!!!!!!!!!!!!! !!!!!!!!!!!!! eh w/e i dont have a 2.6 any more

by ***** - 2006-09-20 01:25
» 0okm sucks

This guys only provid some concept to attract people's eyes and never work out some useful applications, I think he is kinds of cheater.

by Psilocybeing - 2006-09-20 02:29
» Fantastic!

Fantastic! I've just returned to coding after a long break, and this is just what I need to help me out with testing. Thanks!

by AndyMosh - 2006-09-20 03:34
»

YAY!

by hh - 2006-09-20 05:32
» ddd

hello

by marko polo - 2006-09-20 08:52
» stuck

AHHH im tryin to find hacks for syphon filter dark mirror online gameplay anyone know where i can download somthing like that?? im kinda new to this stff

by Modnu - 2006-09-20 09:27
» Um this is silly

If you just go by the psp modchip for $100 you could have 1.5 and 2.81 with the higher memory capacity.

by welcome - 2006-09-20 11:02
»

modnu ta-028 people cant use the modchip and tiff is ment for ta-028 people so yea

Add QJ.NET
Add to My Yahoo!
Google Reader Subscribe with Bloglines
Add  to your Kinja digest Subscribe in NewsGator Online
Subscribe with Pluck RSS reader Add 'www.qj.net' to Newsburst from CNET News.com
Subscribe with SearchFox RSS del.icio.us www.qj.net
Add to Technorati Favorite! Add to My AOL
furl! it Stumble for Treehugger!