QJ.NET | Videos | Forums | PoV | iPad | iPhone | MMORPG | Nintendo 3DS | Nintendo DS | Wii | Wii U | PlayStation 3 | PSP | PS Vita | Xbox 360 | PC | Downloads | Contact Us
• QJ.NET
 • iPad
• iPhone 		• Nintendo DS
• Nintendo 3DS 		• PlayStation 3
• Xbox 360 		• PS Vita
• PSP 		• Wii
• Wii U 		• MMORPG
• PoV 		• PC
• Forums
• Videos 		• Downloads
• Contact Us

GripShift savegame exploit POC v2


File Name gripshift_poc_built_v2.zip
File Type ZIP
Developer MaTiAz
Operating System PSP
File Size 0.48 MB
Created 01/03/2009
Updated 01/03/2009
Downloads 7032 times
Download time  
Modem: 1 min
ISDN: 0 min 30 sec
DSL: 0 min 2 sec
CABLE: 0 min 1 sec
T1: 0 min 0 sec

GripShift savegame exploit POC v2
Rating: 4.50/5.00
Rated by: 6 users
Rate it:
Please scroll down for the download button and more file information.

Download!
File Description
Aah, yes, new exploit, old game. It's so cool to actually see this beauty working - and on a PSP-3000 no less! The PSP scene was buzzing the other day when MaTiAz found an exploit (read: buffer overflow!) in the three year old game, GripShift.

MaTiAz says that they've yet to find any further use for this, but it's still a new exploit. It could lead to further hacks, and for now, it's merely a proof of concept. Be that as it may, this is a great start, and a rather sweet find! Here's MaTiAz explaining the exploit:

GripShift has a buffer overflow vulnerability when loading savegames. The savegame contains the profile name which can be easily used to overwrite $ra. The savegame file is pretty big (25kB) so you have lots of space to put your code there. I wrote a simple blob of code to paint the framebuffer completely white (to just indicate that arbitrary code is running ). The return address is located at offset 0xA9 in the file. In this poc it points to 0x08E4CD50 (which is only a few bytes after the return address), and the code starts at 0xCC in the file.


It was tested on 4.01M33-2 with US version of GripShift (ULUS10040), and psplink.prx, usbhostfs.prx and deemerh.prx loaded (also without psplink and usbhostfs). The decrypted savegame (sorry, couldn't [be bothered to] get Shine's savegame tool working so it's in plaintext form) is in the SDDATA.BIN form which Hellcat's Savegame-Deemer produces (thanks to him, if the program didn't exist I wouldn't have bothered with this. ). Just copy the ULUS10040SAVE00 directory to /PSP/SAVEPLAIN/ and run the game. EDIT: yeah, don't forget to have Savegame-Deemer working, duh.



 

Become a Member of QJ.Net!

If you want your comments to go live without waiting for moderation, you need to be logged in. Being logged in has its benefits:
  • Logged in members do not wait for their comments to be approved.
So why wait? Create an account or login now! It's easy, quick, and free.

To get started, use the LOGIN boxes, or the REGISTER link at the top right!

Add comment

Security code
Refresh

Welcome to QJ.Net!

If you want your comments to go live without waiting for moderation, you need to be logged in. Being logged in has its benefits:
  • Logged in members do not wait for their comments to be approved.
So why wait? Create an account or login now! It's easy, quick, and free.

To get started, use the LOGIN boxes, or the REGISTER link below!


Want to learn more about the team who brings you the QJ news?

Read about them now!

 Username: 
 Password:

Newest Downloads

02/10/2012 - 02/15/2012


02/14/2012
02/14/2012
02/14/2012
02/14/2012
02/14/2012
02/11/2012
02/11/2012
02/11/2012
02/10/2012
02/10/2012
02/09/2012
02/09/2012
02/07/2012
02/07/2012
02/07/2012
HOT FLASH GAMES

Devil Ride Game

Tank Storm

Naruto Shippuden

Killer Survival

Snow Racers

Big Tree Defense
Navigation:

RSS Feeds Follow us on Twitter Find us on Facebook
Download Categories

Nintendo DS
Applications (on PC)
Development
Emulators
Hacks & Exploits
Homebrew Applications
Homebrew Games
Media
PC Gaming
Action
Adventure
Arcade
Bingo
Card Game
Free Games
Game Demos
Game Patches
Magazines and wallpapers
MMORPG
Music
Puzzle
RPG
Shooters
Simulation
Sports
Strategy
Tools and Utilities
XNA Homebrew
Playstation 3
Firmware
Game Saves
Homebrew Applications
Homebrew Games
Linux Tools
PS3 Themes
Tools and Utilities
PSP
Development
Emulators
Firmwares
Game Addon Packs
Game Demos
Game Saves
Hacks & Exploits
Homebrew Applications
Homebrew Games
Homebrew Packs & ROMs
Magazines & Wallpapers
Media
PSP Themes
Tandy Color Computer (CoCo)
Tools & Utilities (on PC)
Software
Antivirus and Anti-Spyware
Apple
Audio / Video
Benchmark
Business
Desktop Enhancement
Developer Tools
Drivers
Educational
Firewall
Gaming
Imaging & Design
Instant Messagers
Internet
Mobile
Mods
Network Tools
Utilities
Web Browsers
Wii
Applications
Game Saves
Homebrew
Xbox 360
Applications
Homebrew Application
Homebrew Game
Media Center Exploits


HOT GAMING NEWS TOPICS


POPULAR GAMING NEWS SEARCHES

clinux | converters | greek font file fla | conduit 2 | psp avi files | compressor | first strike | uportal psp download | comics2psp | jailbreak for psp | where do i enter hacks | colem psp | inalbum deluxe | remotejoy gui | colculator | cree | black ops map packs | cod4 theme | ciao bella | starcraft demo | church | china town | chickhwen | pct | call of duty ds | chickhemr2 | cheaw | common | pspcheatup | cheats ds | cfw v8 | cfw loader | cfw folder | psp twitter radio | cfs | wp7 themes for psp | cf gen d | psp go fw | wii cpw | metal gear fix | cceat | diablo | video mount | upm | cavepspsp | psp xbox 360 emulat | crime | cave story | account sharing | caprice32 | pssh | cap32 | dead block | 170 | cache v22 | invizimals schattenz | marvel zombie the xbox 36d | mission 4 | dadelau4s n6 | playstation eye driv | bt info | cheap psp | play iso cso | brushes v2 | dis | plug ins | breack | pakemon psp | playlist | born eboot | boot | fusa screenshots | jailbreak skype | pce saphire | bookreader | bondpatch | gba to nds | patapon 3 save | boedoet | blue kvm | bles00676 | psp2 | blackbird | pc emulator psp | bike | pray 2 | beup nds | dead alive paradise | psp wifi ooster | indian tube8 | battefield | psp model | faceplate | resistance retribu | alkyria chronicles 2 | avs video | hack psp | audio bus | led nunchuck | asagi wars | ump dumper | motorola microsoft | armor hero | daedalusx64 417 | yellow light death | arkam city | midnightclub 3 | aphrodite | andoid emu | playstation move heroes | alex kidd | iso signer | m33 driver download | al fatihah | psphbsort | akaio | kingdom hearts 3 | ajax | aim for psp | salma hayek | rooms | ps player mt | zelda hd | psp flashlight | lbp game save psp | after years | kombat | reshma mallu | adom | homebrew | ico in stores | adhoc gpsp | upsp result | gameboy psp | ad hoc file | acekard | reboot | homebrew roms | daedalusx64 rev 632 | ace dict | mw2 patch | genesis edition psp | psp disp | 97682 | rss | cfw psp 1000 downloa | grand theft auto ri | 64 roms | daedalus rev 372 | skodeng | satoru | 401 pbp | vita specs | order game | 3ds update | 3ds rom | crysis 2 ps3 patch ps3 | 3ds brick | civilization v patch | lver psp | 002454 | cfl themes | aoa | homebrew guide | one click chickhen | batter | game categories revised | psp custom gameboots | boxart | pc games | source | full metal alchemist | simms | moves | tvu plaer |


Use of this Web site constitutes acceptance of the TERMS & CONDITIONS and PRIVACY POLICY
Copyright ©2012, Caputo Media, LLC. All Rights Reserved. Web Cluster C6.
Contact Us | Free Flash Games | Ad Blockers Suck! Why?