QJ.NET | Videos | Forums | PoV | iPad | iPhone | MMORPG | Nintendo 3DS | Nintendo DS | Wii | Wii U | PlayStation 3 | PSP | PS Vita | Xbox 360 | PC | Downloads | Contact Us
• QJ.NET
 • iPad
• iPhone 		• Nintendo DS
• Nintendo 3DS 		• PlayStation 3
• Xbox 360 		• PS Vita
• PSP 		• Wii
• Wii U 		• MMORPG
• PoV 		• PC
• Forums
• Videos 		• Downloads
• Contact Us

GripShift savegame exploit POC


File Name gripshift_poc.zip
File Type ZIP
Developer MaTiAz
Operating System PSP
File Size 0.01 MB
Created 01/03/2009
Updated 01/03/2009
Downloads 2955 times
Download time  
Modem: 0 min 1 sec
ISDN: 0 min 0 sec
DSL: 0 min 0 sec
CABLE: 0 min 0 sec
T1: 0 min 0 sec

GripShift savegame exploit POC
Rating: 4.00/5.00
Rated by: 2 users
Rate it:
Please scroll down for the download button and more file information.

Download!
File Description
Aah, yes, new exploit, old game. It's so cool to actually see this beauty working - and on a PSP-3000 no less! The PSP scene was buzzing the other day when MaTiAz found an exploit (read: buffer overflow!) in the three year old game, GripShift.

MaTiAz says that they've yet to find any further use for this, but it's still a new exploit. It could lead to further hacks, and for now, it's merely a proof of concept. Be that as it may, this is a great start, and a rather sweet find! Here's MaTiAz explaining the exploit:


"GripShift has a buffer overflow vulnerability when loading savegames. The savegame contains the profile name which can be easily used to overwrite $ra. The savegame file is pretty big (25kB) so you have lots of space to put your code there. I wrote a simple blob of code to paint the framebuffer completely white (to just indicate that arbitrary code is running ). The return address is located at offset 0xA9 in the file. In this poc it points to 0x08E4CD50 (which is only a few bytes after the return address), and the code starts at 0xCC in the file."


"It was tested on 4.01M33-2 with US version of GripShift (ULUS10040), and psplink.prx, usbhostfs.prx and deemerh.prx loaded (also without psplink and usbhostfs). The decrypted savegame (sorry, couldn't [be bothered to] get Shine's savegame tool working so it's in plaintext form) is in the SDDATA.BIN form which Hellcat's Savegame-Deemer produces (thanks to him, if the program didn't exist I wouldn't have bothered with this. ). Just copy the ULUS10040SAVE00 directory to /PSP/SAVEPLAIN/ and run the game. EDIT: yeah, don't forget to have Savegame-Deemer working, duh."



 

Become a Member of QJ.Net!

If you want your comments to go live without waiting for moderation, you need to be logged in. Being logged in has its benefits:
  • Logged in members do not wait for their comments to be approved.
So why wait? Create an account or login now! It's easy, quick, and free.

To get started, use the LOGIN boxes, or the REGISTER link at the top right!

Add comment

Security code
Refresh

Welcome to QJ.Net!

If you want your comments to go live without waiting for moderation, you need to be logged in. Being logged in has its benefits:
  • Logged in members do not wait for their comments to be approved.
So why wait? Create an account or login now! It's easy, quick, and free.

To get started, use the LOGIN boxes, or the REGISTER link below!


Want to learn more about the team who brings you the QJ news?

Read about them now!

 Username: 
 Password:

Newest Downloads

05/18/2012 - 05/23/2012


05/22/2012
05/22/2012
05/22/2012
05/22/2012
05/21/2012
05/21/2012
05/19/2012
05/19/2012
05/19/2012
05/18/2012
05/18/2012
05/18/2012
05/18/2012
05/17/2012
05/17/2012
HOT FLASH GAMES

Spot Hunter

Risky Rider 5

Mario Amazing Jump

Killing Road

Cosmo Defense

Invasion from Hell Operation Oceania TD
Navigation:

RSS Feeds Follow us on Twitter Find us on Facebook
Download Categories

Nintendo DS
Applications (on PC)
Development
Emulators
Hacks & Exploits
Homebrew Applications
Homebrew Games
Media
PC Gaming
Action
Adventure
Arcade
Bingo
Card Game
Free Games
Game Demos
Game Patches
Magazines and wallpapers
MMORPG
Music
Puzzle
RPG
Shooters
Simulation
Sports
Strategy
Tools and Utilities
XNA Homebrew
Playstation 3
Firmware
Game Saves
Homebrew Applications
Homebrew Games
Linux Tools
PS3 Themes
Tools and Utilities
PSP
Development
Emulators
Firmwares
Game Addon Packs
Game Demos
Game Saves
Hacks & Exploits
Homebrew Applications
Homebrew Games
Homebrew Packs & ROMs
Magazines & Wallpapers
Media
PSP Themes
Tandy Color Computer (CoCo)
Tools & Utilities (on PC)
Software
Antivirus and Anti-Spyware
Apple
Audio / Video
Benchmark
Business
Desktop Enhancement
Developer Tools
Drivers
Educational
Firewall
Gaming
Imaging & Design
Instant Messagers
Internet
Mobile
Mods
Network Tools
Utilities
Web Browsers
Wii
Applications
Game Saves
Homebrew
Xbox 360
Applications
Homebrew Application
Homebrew Game
Media Center Exploits


HOT GAMING NEWS TOPICS


POPULAR GAMING NEWS SEARCHES

psp software update | iphone 3gs im unlock | psp pc engine | 7loader | essentials | ipip | psp pro messenger | comic | crash bandicoot | blackops waw zombie | hen iso | gianna michaels | cerita dewasa | pot | catherine special edition | innermost of dungeon | psp iso decryipter | cerita ngentot anak | pspfirmware | psp firm 6 | psx cheats for psp | uo gpsp | skype call videos | fixv3 | game catefories | patapo2 | junk | how to delete update | mega guide | themes ctf | atv offroad fury | find mii 2 3ds | how to flash psp | i am alive | cxmb themes | berzerker ball | hsj | psp vita homebrew | killzone 3 demo | snake vore | iso tool guide | cd key generator | adhoc file transfer | pixeles mertos | full nudity | mario galaxy para ds | the 3rd birthday free download | snts row | hear | usb camera | transport tycoon | psptube high mem | boogie | bright pad | psjbtool | grand theft psp | re6 | lord arcana cheat | is tol | battery indicator ps | japan foto bugil | psp gt | catan | afkim | cid gta | time baby v6 | tibia | umd operator | how to open the ps3 | 360 screenshot tool | ab008028273psp2001 | psp extra monitor | chro | aoa | toy story | mariokart ds | actresss | sixaxis | audio decoder | fable 2 | cerita dewasa mama | kickstarter | 390 ofw | minna sukiri | s9xtylslimmecm | pandora pack | cwcheats for mac | adhoc fie transfer psp | usb iso loader for psp | cod4 modded patch ps3 | amecraft | short cut | anonymouss | psp paper | carnival | meet the fockers | dra | reality games | left 4 dead 2 patch | activatepp | map | xgen update | anoymous | god eater eur | lock the foldes | sega dreamcast | psp free texting app | alternative ways to charge psp | psp cal | msx pszp | iphone keyboard | compos | npdecrypter | account | text app | update original psp | 4tube | at90usbkey | advance wars dual strike | themeshooter | harvest moon boy | mapthis | formula1 2009 | pspweb cam | psp cso loader | how to do backup | price is right | nfs hot pursuit 2010 for psp | rss reader | capcom vs snk 3 | abf | psp mp3 player | guitar games | how disable nodrm | pspwar | psp cheat plugins | mario sport mix | iso cso loader | usb version | firmmware | psp box head | wii error 003 fixed | ps3 eye setup | mms maker mac | how to delete photos | cerita ngentot kakak | sounds psp | driver pc controller | ps3 camera | ratchet costume | need forsavegame ps3 | wmp | xhamster | ps3 patent | new console | backuptool | cd7 | psp gqames | possword | stuck pixe | sojia boy | san andres | allauddin | hard drive hack | roms nx64 | mario toy | modmii2011 | mobile aussult | all point bulltin | lamecraft download | prometheus iso load | lego starwars psp | download video hot | pig | psp minecrat |


Use of this Web site constitutes acceptance of the TERMS & CONDITIONS and PRIVACY POLICY
Copyright ©2012, Caputo Media, LLC. All Rights Reserved. Web Cluster C6.
Contact Us | Free Flash Games | Ad Blockers Suck! Why?