QJ.NET | Videos | Forums | PoV | iPad | iPhone | MMORPG | Nintendo 3DS | Nintendo DS | Wii | Wii U | PlayStation 3 | PSP | PS Vita | Xbox 360 | PC | Downloads | Contact Us
• QJ.NET
 • iPad
• iPhone 		• Nintendo DS
• Nintendo 3DS 		• PlayStation 3
• Xbox 360 		• PS Vita
• PSP 		• Wii
• Wii U 		• MMORPG
• PoV 		• PC
• Forums
• Videos 		• Downloads
• Contact Us

GripShift savegame exploit POC


File Name gripshift_poc.zip
File Type ZIP
Developer MaTiAz
Operating System PSP
File Size 0.01 MB
Created 01/03/2009
Updated 01/03/2009
Downloads 2946 times
Download time  
Modem: 0 min 1 sec
ISDN: 0 min 0 sec
DSL: 0 min 0 sec
CABLE: 0 min 0 sec
T1: 0 min 0 sec

GripShift savegame exploit POC
Rating: 4.00/5.00
Rated by: 2 users
Rate it:
Please scroll down for the download button and more file information.

Download!
File Description
Aah, yes, new exploit, old game. It's so cool to actually see this beauty working - and on a PSP-3000 no less! The PSP scene was buzzing the other day when MaTiAz found an exploit (read: buffer overflow!) in the three year old game, GripShift.

MaTiAz says that they've yet to find any further use for this, but it's still a new exploit. It could lead to further hacks, and for now, it's merely a proof of concept. Be that as it may, this is a great start, and a rather sweet find! Here's MaTiAz explaining the exploit:


"GripShift has a buffer overflow vulnerability when loading savegames. The savegame contains the profile name which can be easily used to overwrite $ra. The savegame file is pretty big (25kB) so you have lots of space to put your code there. I wrote a simple blob of code to paint the framebuffer completely white (to just indicate that arbitrary code is running ). The return address is located at offset 0xA9 in the file. In this poc it points to 0x08E4CD50 (which is only a few bytes after the return address), and the code starts at 0xCC in the file."


"It was tested on 4.01M33-2 with US version of GripShift (ULUS10040), and psplink.prx, usbhostfs.prx and deemerh.prx loaded (also without psplink and usbhostfs). The decrypted savegame (sorry, couldn't [be bothered to] get Shine's savegame tool working so it's in plaintext form) is in the SDDATA.BIN form which Hellcat's Savegame-Deemer produces (thanks to him, if the program didn't exist I wouldn't have bothered with this. ). Just copy the ULUS10040SAVE00 directory to /PSP/SAVEPLAIN/ and run the game. EDIT: yeah, don't forget to have Savegame-Deemer working, duh."



 

Become a Member of QJ.Net!

If you want your comments to go live without waiting for moderation, you need to be logged in. Being logged in has its benefits:
  • Logged in members do not wait for their comments to be approved.
So why wait? Create an account or login now! It's easy, quick, and free.

To get started, use the LOGIN boxes, or the REGISTER link at the top right!

Add comment

Security code
Refresh

Welcome to QJ.Net!

If you want your comments to go live without waiting for moderation, you need to be logged in. Being logged in has its benefits:
  • Logged in members do not wait for their comments to be approved.
So why wait? Create an account or login now! It's easy, quick, and free.

To get started, use the LOGIN boxes, or the REGISTER link below!


Want to learn more about the team who brings you the QJ news?

Read about them now!

 Username: 
 Password:

Newest Downloads

02/10/2012 - 02/15/2012


02/14/2012
02/14/2012
02/14/2012
02/14/2012
02/14/2012
02/11/2012
02/11/2012
02/11/2012
02/10/2012
02/10/2012
02/09/2012
02/09/2012
02/07/2012
02/07/2012
02/07/2012
HOT FLASH GAMES

Devil Ride Game

Tank Storm

Naruto Shippuden

Killer Survival

Snow Racers

Big Tree Defense
Navigation:

RSS Feeds Follow us on Twitter Find us on Facebook
Download Categories

Nintendo DS
Applications (on PC)
Development
Emulators
Hacks & Exploits
Homebrew Applications
Homebrew Games
Media
PC Gaming
Action
Adventure
Arcade
Bingo
Card Game
Free Games
Game Demos
Game Patches
Magazines and wallpapers
MMORPG
Music
Puzzle
RPG
Shooters
Simulation
Sports
Strategy
Tools and Utilities
XNA Homebrew
Playstation 3
Firmware
Game Saves
Homebrew Applications
Homebrew Games
Linux Tools
PS3 Themes
Tools and Utilities
PSP
Development
Emulators
Firmwares
Game Addon Packs
Game Demos
Game Saves
Hacks & Exploits
Homebrew Applications
Homebrew Games
Homebrew Packs & ROMs
Magazines & Wallpapers
Media
PSP Themes
Tandy Color Computer (CoCo)
Tools & Utilities (on PC)
Software
Antivirus and Anti-Spyware
Apple
Audio / Video
Benchmark
Business
Desktop Enhancement
Developer Tools
Drivers
Educational
Firewall
Gaming
Imaging & Design
Instant Messagers
Internet
Mobile
Mods
Network Tools
Utilities
Web Browsers
Wii
Applications
Game Saves
Homebrew
Xbox 360
Applications
Homebrew Application
Homebrew Game
Media Center Exploits


HOT GAMING NEWS TOPICS


POPULAR GAMING NEWS SEARCHES

skype pps | gameboy for psp | pce saphire | drums challenge | god eater burst us data pack | psp go iso free | texting | pocket tanks psp | iphone rumors | samsung galaxy tab | prometheus plugin ca | teh eng aun | star wars | shadowbane | gameboc | pes 2011 games | vesperia dlc | midnight warfare 3 | replace dvd drive | xperialay | 81124382 | psp ctf packs | shining force | monkey 64 | full auto | bluetooth psp | bon jovi | fsa | dead island gameplay | android php | black ops mod tool | droid hacks | mlb 2k11 cso | pmp mod avc | forwarder | psp dems | phone jammer | install dlc | untethered | pmf to avi | hidepymovies | fmsxds | pes2010 wii | drama | psp adobe | ipad keyboard | black shot | pimp my wii ios 202 | flash | how to | must have | psp excell | final fight 3 | greensnow | rsstunes | xnx 18 | free games psp go | iphone headphone stuck | gmeshare | recomend driverupdat | psp battery | mame psp | ps home | civilization v patch | sly collection | fifa dowload | map packs zombies wo | adlut video pron | download fifa | psp homebrews deutsc | psp playlist | sri lanka | downloadskype for psp | daedaus rev | prometheu | tghghhtt jhr | collectic | wbfs mac | psp 1001 | how do i install | fatal fury | tab | cerita ngentot anak | basketball text based iphone | far cry | hide files | sf4 | rock band on psp | play back up psx games | price leak | psp planetarium | free download | misty pink | psp xbox portal | nandextract | rip dvd ipad | harry potter and the | time battery percent | x64 alpha | halfbyte loader | psx 2 psp gui | cali swag | super mario all | sdboot | wii nes emulator | magic psp station | psp movie | red blinking | dc 7 mod | reset psp | psp internal error f | mi | pops plugins | psx2psp | jack and daxter | usb loader | pspvlc | dxbx | nes wii | nintendo ds web brow | mario game roms | vnc psp | cw cheat database edito | psps emultaor | iso tooi | halo beta | wii internet channel | pspzip | star wars force unleashead | psp xmb theme | signed nesterj | stuck pixels | psp type b usb drive | psp hacked games | demo pack | psp tubego tube | signed code | psp1003 | sysconf spoofer psp | black ops harden | gba emularto | best psp apps | n64 trailer | pop loader | psp ingame mute | 60840 | patapon 3 macro | server remoto psp | iphone pc remote | psp stuck | ps3 on computer | lg patent | open idea iso | psp ds emu | psp divix | psp shut down bug | psp ios | my do it all | pandora battery cr | psp sharing | touhouds | patapon save game | senseme | emulador neo geo cd | nikki fritz | dolphin emulator r7719 | run vice city stori | hosizora navi | psp theme invaderzim | snes psps | psp new releases | popstation | gameplayer | xvedios | sweaty |


Use of this Web site constitutes acceptance of the TERMS & CONDITIONS and PRIVACY POLICY
Copyright ©2012, Caputo Media, LLC. All Rights Reserved. Web Cluster C5.
Contact Us | Free Flash Games | Ad Blockers Suck! Why?