PSP Firmware 2.60 Exploit - Proof of Concept


File Name QJTempRemoved.zip
File Type ZIP
Developer hitchhikr
Operating System PSP
File Size 0.21 KB
Created 06/27/2006
Updated 11/10/2009
Downloads 29,037 times
Download time  
Modem: 0 min 0 sec
ISDN:0 min 0 sec
DSL:0 min 0 sec
CABLE:0 min 0 sec
T1:0 min 0 sec

PSP Firmware 2.60 Exploit - Proof of Concept
Rating: 4.13/5.00
Rated by: 8 users
Rate it:


{FILES_BLOG_NAME}
Please scroll down for the download button and more file information.

Download File PSP Firmware 2.60 Exploit - Proof of Concept
File Description
********************************************************
We apologize for the inconvenience.

This file has been temporarily removed.

QJ Staff
********************************************************
Break out your calendars folks, because this may be a day that you want to mark as a pivotal day in the history of PSP homebrew. A developer known as hitchikr of "hitchhikr SoftWorks" has come out with a Proof of Concept of a 2.50/2.60 Firmware Exploit! Once implemented and tweaked for "normal user" use, this will bring 2.50 and 2.60 Firmware up to the same homebrew capability that 1.50 PSP owners enjoy - although Grand Theft Auto: Liberty City Stories will still be required, just like with eLoader.

Speaking of eLoader, Fanjita is already working with hitchhikr on incorporating this new exploit into an easily executable means via eLoader. After a brief chat with Fanjita, he's told us that you can expect some generic application for developers to hopefully be released in the next 24 hours. It will take a bit longer before something useable for non-devs will be released.

The exploit takes advantage of an added security check in 2.50/2.60 Firmware for sceKernelLoadExec, which is responsible for loading EBOOTs, but also accidentally added an overflow bug, which means this exploit will not work with 2.0 and 2.01 Firmware.

Below you will find a download of hitchhikr's Proof of Concept - this is not intended for the casual user. It created dump files containing kernel memory dumps in the root of the memstick (boot.bin, kmem.bin, klib.bin). It also creates writeaccess.bin which contains just the hex (12 34 56 78) to prove that kmem CAN be written to.

But don't start upgrading those PSP's yet until a viable means of implementation is released! Also, this breakthrough is not on a path to a downgrader, at least that does not seem like an option at this moment. Although speculation has already begun that this will open the door to the decrypting of 2.70+ Firmware, allowing it to be emulated a la Devhook.

We will stay on top of this breaking news all day long and be constantly updating this news post with information as soon as we get it! Stay with QJ.NET and PSPUpdates for all the latest!


Read more about this file on the QJ.NET Blogs here