Export to GitHub

procfw - issue #524

Possible exploit for PSP Go


Posted on Jan 11, 2013 by Grumpy Wombat

Just buyed a PSP Go and put it on 6.60 with Pro-C Fix3 and possibly found an exploit. I did not needed to lauch Fast Recovery for returning in custom firmware.

What steps will reproduce the problem? 1. Install Pro-C Fix 3 on 6.60 on a PSP Go. 2. Lauch an iso or cso backup game for PSP. 3. Press Home and Choose to pause the game, the running session will be saved. 4. On the XMB, completly shutdown the PSP Go for returning on OFW. 5. Now you are on OFW and need to lauch Fast Recovery for returning in CFW Pro-C, instead, resume your game on the PSP Go. 6. Now your last running config while you pause the game as been restored. Press home button and quit. 7. You see your iso and cso from ISO folder as been mounted and you are now returned in CFW.

So, maybe there is a possibility to exploit the hibernation file on PSP Go, i am not enought a skilled programmer for doing this. Maybe this exploit can be able to make a permanent fix for PSP Go.

What version of the product are you using? On what operating system?

PSP Go, 6.60 with Pro-C Fix3, 05g TA-091.

Please provide any additional information below.

The game i used was Persona 3 Portable Undub on the M2 Memory Stick slot.

Hope it could help you. ^_^

Comment #1

Posted on Feb 23, 2013 by Happy Rhino

Thats a well known feature of the PSP Go. If you use the save/pause feature, while having a CFW loaded, it will save the active CFW too, since it saves the current RAM, which included the progress of the game, the CFW itself and other active functions (e.g. Plugins).

Since the CFW is loaded after loading the paused game, you wont need a LCFW launcher. This isnt working with some games (ISOs) and the pause feature can return an error. Having a launcher is still recommended.

Comment #2

Posted on Dec 14, 2013 by Quick Camel

1) We already have kernel exploits for all firmwares and Sony did stop publishing them 2) It requires Flash0 access; it would be interesting for VSH exploits when we want to get some more access but this would limit its use to PSP-GO models only.

Status: Invalid

Labels:
Type-Defect Priority-Medium