LAN.ST  

Go Back   LAN.ST > Forum > Console Hacking & Development > Sony PlayStation Portable

Sony PlayStation Portable Sony PlayStation Portable related development discussion.

Closed Thread
 
Thread Tools Display Modes
  #21  
Old 06-07-2010, 01:26 PM
bbtgp bbtgp is offline
Member
 
Join Date: Feb 2010
Location: Florida
Posts: 50
Default

Quote:
Originally Posted by hrimfaxi View Post
I wonder if it's stored in nandipl part1/2/3 or else?

Quote:
Originally Posted by bbtgp View Post
u8 keysGoUpdater[0x10] =
{
0xE2, 0x03, 0x8A, 0x8C, 0x33, 0x81, 0x4B, 0x56,
0x52, 0x4E, 0x1D, 0xE5, 0xA4, 0x24, 0x04, 0xFF
};

u8 keysGoUpdater_internal_modules[0x10] =
{
0xF1, 0xBC, 0x17, 0x07, 0xAE, 0xB7, 0xC8, 0x30,
0xD8, 0x34, 0x9D, 0x40, 0x6A, 0x8E, 0xDF, 0x4E
};

{ 0xA6E328F0, keysGoUpdater, 0x5F },
{ 0x4C9428F0, keysGoUpdater_internal_modules, 0x43 },

I'll post the kernel key if i ever find it. I believe its stored here 0xBFC00200 in its xor'd form and can be decrypted using memlmd_8450109f at 0x88059CF0. (probably wrong) I dont own a psp go so i doubt ill ever know.

u8 keys620_2[0x10] =
{
who knows?...
};

{ 0x4C942AF0, keys620_2, 0x43 },
Where did you find it? Care to share please?
A kernel dump released on k0 k1 something forum and ida pro. i wont link to the site because of ads.

Last edited by bbtgp; 06-07-2010 at 01:51 PM. Reason: added quote
  #22  
Old 06-07-2010, 02:20 PM
coyotebean coyotebean is offline
Member
 
Join Date: Dec 2009
Posts: 60
Default

Quote:
Originally Posted by hrimfaxi View Post
I wonder if it's stored in nandipl part1/2/3 or else?
Where did you find it? Care to share please?
Take a look at the HBL project

"user" keys are in mesg_ledXXX.prx, "kernel/internal" keys are in memlmdXXX.prx

The critical "kernel" key are stored in 2 parts, 1 part in kernel space 0x88nnnnnn, the other part in 0xBFC0nnnn. There are functions in "memlmd" to prepare (XOR the 2 parts to form the actual key and stored in 0xBFC0nnnn area) / clear the key.

The IPL since, 3000/brite, cannot be directly decrypted by Kirk command 1....

Edit:
I may have the kernel keys now...
__________________
GBASP x1, GBM x2, NDSL x2, PSP 100X x3, PSP 200X x5, PSP 300X x3, PSP Go x2, Wii x1

Last edited by coyotebean; 06-07-2010 at 03:03 PM.
  #23  
Old 06-07-2010, 03:07 PM
bbtgp bbtgp is offline
Member
 
Join Date: Feb 2010
Location: Florida
Posts: 50
Default

Quote:
Edit:
I may have the kernel keys now...
You must be moonlight's reincarnate ;]
  #24  
Old 06-07-2010, 04:04 PM
coyotebean coyotebean is offline
Member
 
Join Date: Dec 2009
Posts: 60
Default

Quote:
Originally Posted by coyotebean View Post
I may have the kernel keys now...
6.20 PSPgo "kernel" key confirmed
Haven't tested 5.70 PSPgo "kernel" key

Release updated.
__________________
GBASP x1, GBM x2, NDSL x2, PSP 100X x3, PSP 200X x5, PSP 300X x3, PSP Go x2, Wii x1

Last edited by coyotebean; 06-07-2010 at 04:52 PM.
  #25  
Old 06-07-2010, 04:58 PM
Davee Davee is offline
Moderator
 
Join Date: Jul 2008
Posts: 117
Default

Congrats on your kernel exploit.
  #26  
Old 06-07-2010, 05:01 PM
bbtgp bbtgp is offline
Member
 
Join Date: Feb 2010
Location: Florida
Posts: 50
Default

Wonderful.
  #27  
Old 06-07-2010, 06:05 PM
pyroesp pyroesp is offline
Senior Member
 
Join Date: Jan 2010
Posts: 163
Default

nice !

//10 char's
__________________
The one, who shall not fear fire...
  #28  
Old 06-07-2010, 08:55 PM
npt npt is offline
Member
 
Join Date: Aug 2008
Location: Minneapolis,MN
Posts: 39
Send a message via AIM to npt Send a message via Skype™ to npt
Lightbulb

Congrats! Good job! Keep up the good work.

Regards,

npt

__________________
2k x 2 ta-085v1 5.00 m33-6 / 5.50 GEN D3 final
2k x 1 x ta-088v2 madden blue OFW 6.20
3k x 2 OFW 4.20 / OFW 5.03 + chickhen r2 + GEN C
Go x 1 OFW 6.10
Go x 1 OFW 6.20
  #29  
Old 06-07-2010, 09:58 PM
coolprize coolprize is offline
Junior Member
 
Join Date: Mar 2010
Posts: 16
Default

HOLY [DELETED]!!!!!!!! I love you!!!!! amazing job

never thought Id see a kernal exploit for the GO!

;_; this is a great day.

so what next?

Last edited by MaxMouseDLL; 06-08-2010 at 07:31 AM. Reason: Removing swearing, I'll leave your spelling mistake intact though ;)
  #30  
Old 06-08-2010, 08:08 AM
hrimfaxi hrimfaxi is offline
Junior Member
 
Join Date: Apr 2010
Posts: 17
Default

Quote:
Originally Posted by coyotebean View Post
Quote:
Originally Posted by hrimfaxi View Post
I wonder if it's stored in nandipl part1/2/3 or else?
Where did you find it? Care to share please?
Take a look at the HBL project

"user" keys are in mesg_ledXXX.prx, "kernel/internal" keys are in memlmdXXX.prx

The critical "kernel" key are stored in 2 parts, 1 part in kernel space 0x88nnnnnn, the other part in 0xBFC0nnnn. There are functions in "memlmd" to prepare (XOR the 2 parts to form the actual key and stored in 0xBFC0nnnn area) / clear the key.

The IPL since, 3000/brite, cannot be directly decrypted by Kirk command 1....

Edit:
I may have the kernel keys now...
Thanks for that useful tip! I have already reimplemented mesg_led_02g.prx in my project called PSPCipher. Now I will reimplement memlmd for now. Once my job is done, I will release my source.
Closed Thread

  LAN.ST > Console Hacking & Development > Sony PlayStation Portable

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
psardumper 6.XX bbtgp Sony PlayStation Portable 79 08-13-2010 04:40 AM
Pause game hole in PSPgo? jace2 Sony PlayStation Portable 23 03-19-2010 04:41 PM
PSPGo 6.20 OFW Cod3r-D Crash Working. blue1ce Sony PlayStation Portable 1 01-30-2010 02:09 AM
PSARdumper question... Dr. Soup Sony PlayStation Portable 16 12-02-2009 12:35 PM
PSARDumper with 3.10 Support. kompas Sony PlayStation Portable 0 01-31-2007 06:28 AM


All times are GMT +1. The time now is 12:16 AM.

Design Developed by CompleteGFX
Powered by vBulletin®
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.