Editing Dumping Bootldr
Jump to navigation
Jump to search
The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.
| Latest revision | Your text | ||
| Line 5: | Line 5: | ||
* OtherOS++ with SS Patches | * OtherOS++ with SS Patches | ||
* Linux Kernel with glevand's/graf's patches (red ribbon rc6 will do the trick, since it has the embedded kernel) | * Linux Kernel with glevand's/graf's patches (red ribbon rc6 will do the trick, since it has the embedded kernel) | ||
* [[https://mega.co.nz/#!QcQ2wZDJ!tu1NuOJpFIrlDV-EEqGM8mgdfNCC9cwqOnGK2012CaQ the exploit | * [[https://mega.co.nz/#!QcQ2wZDJ!tu1NuOJpFIrlDV-EEqGM8mgdfNCC9cwqOnGK2012CaQ the exploit]] | ||
* NOR console with a NOR dump (the exploit isn't adapted to NAND consoles yet, [[Talk:Hypervisor_Reverse_Engineering#MMIO_.2F_Memorymap|no MMIO available]]) | * NOR console with a NOR dump (the exploit isn't adapted to NAND consoles yet, [[Talk:Hypervisor_Reverse_Engineering#MMIO_.2F_Memorymap|no MMIO available]]) | ||
| Line 15: | Line 15: | ||
<li>Open your terminal and type as root:</li> | <li>Open your terminal and type as root:</li> | ||
{{keyboard|content= | {{keyboard|content=cd bootldrexploit/ps3peekpoke}} | ||
<li>Compile the lv1 peek poke kernel module:</li> | <li>Compile the lv1 peek poke kernel module:</li> | ||
{{keyboard|content= | {{keyboard|content=make}} | ||
<li>Insert the lv1 peek poke kernel module:</li> | <li>Insert the lv1 peek poke kernel module:</li> | ||
{{keyboard|content= | {{keyboard|content=insmod ps3peekpoke.ko}} | ||
<li>Change directory to the exploit dir</li> | <li>Change directory to the exploit dir</li> | ||
{{keyboard|content= | {{keyboard|content=cd ../btldr8}} | ||
<li>Compile the exploit</li> | <li>Compile the exploit</li> | ||
{{keyboard|content= | {{keyboard|content=make}} | ||
<li>Make a nor dump by typing</li> | <li>Make a nor dump by typing</li> | ||
{{keyboard|content= | {{keyboard|content=dd if=/dev/ps3nflasha of=nor.bin bs=1024}} | ||
<li>Execute the exploit</li> | <li>Execute the exploit</li> | ||
{{keyboard|content= | {{keyboard|content=./lv0Decrypt 0 nor.bin buffer.bin}} | ||
<li>It should show the status as status A0082. This means you've succeeded. check your dump for the keys.</li> | <li>It should show the status as status A0082. This means you've succeeded. check your dump for the keys.</li> | ||
{{keyboard|content= | {{keyboard|content=hexdump -C dump.bin > test}} | ||
{{keyboard|content= | {{keyboard|content=nano test}} | ||
</ol> | </ol> | ||
{{Reverse engineering}}<noinclude>[[Category:Main]]</noinclude> | {{Reverse engineering}}<noinclude>[[Category:Main]]</noinclude> | ||