QJ.NET | Videos | Forums | PoV | iPad | iPhone | MMORPG | Nintendo 3DS | Nintendo DS | Wii | Wii U | PlayStation 3 | PSP | PS Vita | Xbox 360 | PC | Downloads | Contact Us
• QJ.NET
 • iPad
• iPhone 		• Nintendo DS
• Nintendo 3DS 		• PlayStation 3
• Xbox 360 		• PS Vita
• PSP 		• Wii
• Wii U 		• MMORPG
• PoV 		• PC
• Forums
• Videos 		• Downloads
• Contact Us

GripShift savegame exploit POC v2


File Name gripshift_poc_built_v2.zip
File Type ZIP
Developer MaTiAz
Operating System PSP
File Size 0.48 MB
Created 01/03/2009
Updated 01/03/2009
Downloads 7053 times
Download time  
Modem: 1 min
ISDN: 0 min 30 sec
DSL: 0 min 2 sec
CABLE: 0 min 1 sec
T1: 0 min 0 sec

GripShift savegame exploit POC v2
Rating: 4.50/5.00
Rated by: 6 users
Rate it:
Please scroll down for the download button and more file information.

Download!
File Description
Aah, yes, new exploit, old game. It's so cool to actually see this beauty working - and on a PSP-3000 no less! The PSP scene was buzzing the other day when MaTiAz found an exploit (read: buffer overflow!) in the three year old game, GripShift.

MaTiAz says that they've yet to find any further use for this, but it's still a new exploit. It could lead to further hacks, and for now, it's merely a proof of concept. Be that as it may, this is a great start, and a rather sweet find! Here's MaTiAz explaining the exploit:

GripShift has a buffer overflow vulnerability when loading savegames. The savegame contains the profile name which can be easily used to overwrite $ra. The savegame file is pretty big (25kB) so you have lots of space to put your code there. I wrote a simple blob of code to paint the framebuffer completely white (to just indicate that arbitrary code is running ). The return address is located at offset 0xA9 in the file. In this poc it points to 0x08E4CD50 (which is only a few bytes after the return address), and the code starts at 0xCC in the file.


It was tested on 4.01M33-2 with US version of GripShift (ULUS10040), and psplink.prx, usbhostfs.prx and deemerh.prx loaded (also without psplink and usbhostfs). The decrypted savegame (sorry, couldn't [be bothered to] get Shine's savegame tool working so it's in plaintext form) is in the SDDATA.BIN form which Hellcat's Savegame-Deemer produces (thanks to him, if the program didn't exist I wouldn't have bothered with this. ). Just copy the ULUS10040SAVE00 directory to /PSP/SAVEPLAIN/ and run the game. EDIT: yeah, don't forget to have Savegame-Deemer working, duh.



 

Become a Member of QJ.Net!

If you want your comments to go live without waiting for moderation, you need to be logged in. Being logged in has its benefits:
  • Logged in members do not wait for their comments to be approved.
So why wait? Create an account or login now! It's easy, quick, and free.

To get started, use the LOGIN boxes, or the REGISTER link at the top right!

Add comment

Security code
Refresh

Welcome to QJ.Net!

If you want your comments to go live without waiting for moderation, you need to be logged in. Being logged in has its benefits:
  • Logged in members do not wait for their comments to be approved.
So why wait? Create an account or login now! It's easy, quick, and free.

To get started, use the LOGIN boxes, or the REGISTER link below!


Want to learn more about the team who brings you the QJ news?

Read about them now!

 Username: 
 Password:

Newest Downloads

05/18/2012 - 05/23/2012


05/22/2012
05/22/2012
05/22/2012
05/22/2012
05/21/2012
05/21/2012
05/19/2012
05/19/2012
05/19/2012
05/18/2012
05/18/2012
05/18/2012
05/18/2012
05/17/2012
05/17/2012
HOT FLASH GAMES

Spot Hunter

Risky Rider 5

Mario Amazing Jump

Killing Road

Cosmo Defense

Invasion from Hell Operation Oceania TD
Navigation:

RSS Feeds Follow us on Twitter Find us on Facebook
Download Categories

Nintendo DS
Applications (on PC)
Development
Emulators
Hacks & Exploits
Homebrew Applications
Homebrew Games
Media
PC Gaming
Action
Adventure
Arcade
Bingo
Card Game
Free Games
Game Demos
Game Patches
Magazines and wallpapers
MMORPG
Music
Puzzle
RPG
Shooters
Simulation
Sports
Strategy
Tools and Utilities
XNA Homebrew
Playstation 3
Firmware
Game Saves
Homebrew Applications
Homebrew Games
Linux Tools
PS3 Themes
Tools and Utilities
PSP
Development
Emulators
Firmwares
Game Addon Packs
Game Demos
Game Saves
Hacks & Exploits
Homebrew Applications
Homebrew Games
Homebrew Packs & ROMs
Magazines & Wallpapers
Media
PSP Themes
Tandy Color Computer (CoCo)
Tools & Utilities (on PC)
Software
Antivirus and Anti-Spyware
Apple
Audio / Video
Benchmark
Business
Desktop Enhancement
Developer Tools
Drivers
Educational
Firewall
Gaming
Imaging & Design
Instant Messagers
Internet
Mobile
Mods
Network Tools
Utilities
Web Browsers
Wii
Applications
Game Saves
Homebrew
Xbox 360
Applications
Homebrew Application
Homebrew Game
Media Center Exploits


HOT GAMING NEWS TOPICS


POPULAR GAMING NEWS SEARCHES

guinness world | oneechanbara | mickey | counter strike death | eboot 2 iso | xport 360 | windows xp for nds | 3d lug in psp | templar | 64 emulator | cerita ngentot anak | game catefories | download tekken ds | scorched earth | system updates | adhoc | psp comic viewer cbr | xbox tool | psp emualtor | pce | psp external hard | rjl gta | lamecraft download | gta vcs cheats code | cars | donkey kong for psp | save | psp 1002 | reorder ihpone photo | dissidia 012 duodec | quarrel | ghost rider | psp flash games | physics game for psp | im comeing home | emumster | coustom firmware | chattori black video | picture flow | gsp | ad hoc | gunnar hero | psp homebrew store | super mario psp go | neocd redux | combat evolved | dgmpgdec | csf | all point bulltin | open source nand dumper | svn | videos no psp | hard hats | paintball | dayviewer v7 | disc change psp | pspkm | tanweeho | lego starwars psp | hokm | papimeru | account | game categories v12 mod | how to burn wii ios files | plugin joystick ideas | basilisk2psp | go messenger downlo | iran | despertar del cementario v6 | 2011 psp h game | mario toy | organizr | wii emulator for pc | apps for psp | downgrade xbox 360 | jspsp | ps3 music service | play psp game off pc | modmii2011 | fallout 3 | 50 cent bulletproof | halo 2 full version | prometheus iso load | ps3 camera | animal crossing 2011 | daedalusx64 rev 635 | ps3 usenet | fifa 12 demo psp | cerita dewasa | day viewer psp | reality games | cfw psp 2000 | junk | pokemon crystal | shower | roms nx64 | sing up | 7loader | iphone 3gs im unlock | wii homebrew channel beta | wireless scanner | error 8010850e | essentials | ipip | hen iso | comic | adult game | san andres | pot | pspfirmware | musicgear psp | psx cheats for psp | skype call videos | xbox1 | xbox games | psp iso decryipter | wwe smaxkdown vs raw | jazz psp | xperia 10mini | new console | fixv3 | mapthis | kikboxing | mega guide | patapo2 | how to delete update | wiw | atv offroad fury | armboot | ps3 headset | find mii 2 3ds | i am alive | cxmb themes | wifi scanner | psp vita homebrew | goearpsp | killzone 3 demo | snake vore | iso tool guide | mhp 3 | cd7 | winrar | minecraft nds | adhoc file transfer | snts row | weapon creation | pixeles mertos | this game has been e | the 3rd birthday free download | emilator | pep veiwer | sojia boy | wii ios 35 | shut down | hear | transport tycoon | psptube high mem | wii updater | wii mame | major league basebal | re6 | backup tool | lord arcana cheat | psjbtool | wii error 003 | is tol | xbox customs | japan foto bugil | umd operator | xplora 2 update 06 | mp4 psp | wmp | time baby v6 | wifi controler | tibia |


Use of this Web site constitutes acceptance of the TERMS & CONDITIONS and PRIVACY POLICY
Copyright ©2012, Caputo Media, LLC. All Rights Reserved. Web Cluster C5.
Contact Us | Free Flash Games | Ad Blockers Suck! Why?