QJ.NET | Videos | Forums | iPhone | MMORPG | Nintendo DS | Wii | PlayStation 3 | PSP | Xbox 360 | PC | Downloads | Contact Us
Forums | Gaming News | Videos | Downloads | Today's Posts | Mark Forums Read | Chat | FAQ | Members List | Contact

QJ.net Game Discussion - PSP, Xbox, Wii, PS3, PSP Homebrew, and PSP Guides

Go Back   QJ.net Game Discussion - PSP, Xbox, Wii, PS3, PSP Homebrew, and PSP Guides > Developers Corner > PSP Development, Hacks, and Homebrew > PSP Development Forum
The above video goes away if you are a member and logged in, so log in now!

PSafeP 1.0 - scan psp executables for suspicious code

This is a discussion on PSafeP 1.0 - scan psp executables for suspicious code within the PSP Development Forum forums, part of the PSP Development, Hacks, and Homebrew category; PSafeP is a Windows tool to scan psp executables for susp icious code, like accessing the flash memory. I wrote ...

Reply
 
LinkBack Thread Tools
Old 10-04-2005, 12:08 PM   #1
Developer
 
Join Date: Jun 2005
Posts: 32
Trader Feedback: 0
Default PSafeP 1.0 - scan psp executables for suspicious code

PSafeP is a Windows tool to scan psp executables for suspicious code, like accessing the flash memory.

I wrote this to combat rogue homebrew like the fake patcher that was released a few days ago.

Attached Files
File Type: zip PSafeP_1.0-DK.zip‎ (23.3 KB, 672 views)
Dark Killer is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 12:12 PM   #2
 
xxxdvlman's Avatar
 
Join Date: Sep 2005
Location: Oakland, CA
Posts: 591
Trader Feedback: 0
Default

Interesting indeed. What else does it look for other than flash access?
__________________
If you love AOTM then join the official AOTM fan site forum here: [url]http://www.attackofthemutants.de.tt/[/url]

Best quote ever, by iball:
"Take a good long look at it....almost every 7 days they have "something new" that turns out to always be NOTHING.
But the hits go up, the ads get served, and n00bs from all over the planet hug their nuts."
xxxdvlman is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 12:14 PM   #3
Developer
 
Join Date: Jun 2005
Posts: 32
Trader Feedback: 0
Default

right now it only searches for flash memory access as that is really the only way a psp can be permanently destroyed through code.
Dark Killer is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 12:14 PM   #4
 
FrozenIpaq's Avatar
 
Join Date: Jun 2005
Posts: 2,986
Trader Feedback: 0
Default

Oh, I like this :P
FrozenIpaq is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 12:16 PM   #5
 
xxxdvlman's Avatar
 
Join Date: Sep 2005
Location: Oakland, CA
Posts: 591
Trader Feedback: 0
Default

Didn't the fake patcher say that it accessed flash, but left out the fact that it deleted needed files?
__________________
If you love AOTM then join the official AOTM fan site forum here: [url]http://www.attackofthemutants.de.tt/[/url]

Best quote ever, by iball:
"Take a good long look at it....almost every 7 days they have "something new" that turns out to always be NOTHING.
But the hits go up, the ads get served, and n00bs from all over the planet hug their nuts."
xxxdvlman is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 12:19 PM   #6

Developer
 
AnonymousTipster's Avatar
 
Join Date: Jun 2005
Location: Under a Large rock called Fred
Posts: 693
Trader Feedback: 0
Default

This is a good idea, but another message should say if it uses the line sceIoRemove() in the flash, ie, it's deleting stuff, so it's really su****ious.
__________________
Developer of
Tipster Unzip/Unrar ThrottleX RoboTORN3D ODEPsp


Now, with the power of my PSP, I will finally RULE THE WORLD. Muhahahah.
AnonymousTipster is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 12:20 PM   #7
 
FrozenIpaq's Avatar
 
Join Date: Jun 2005
Posts: 2,986
Trader Feedback: 0
Default

Quote:
Originally Posted by xxxdvlman
Didn't the fake patcher say that it accessed flash, but left out the fact that it deleted needed files?
It just said it "patched" the firmware, no mention of flashing of files or overwrite/removal of files
FrozenIpaq is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 12:26 PM   #8
 
xxxdvlman's Avatar
 
Join Date: Sep 2005
Location: Oakland, CA
Posts: 591
Trader Feedback: 0
Default

But by saying that it patched the firmware isn't it assumed to access flash which is where the firmware files are?

I say this because I think Dark killer's app is a good idea, but should look for other things, such as what Anonymous stated above, and not just flash access which is usually already known right up front. We need to check to see what they are using the flash for.
__________________
If you love AOTM then join the official AOTM fan site forum here: [url]http://www.attackofthemutants.de.tt/[/url]

Best quote ever, by iball:
"Take a good long look at it....almost every 7 days they have "something new" that turns out to always be NOTHING.
But the hits go up, the ads get served, and n00bs from all over the planet hug their nuts."
xxxdvlman is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 12:28 PM   #9
NDS Mod
 
MagicianFB's Avatar
 
Join Date: Jul 2005
Location: w00+land
Posts: 645
Trader Feedback: 0
Default

Good idea.
Quote:
Originally Posted by AnonymousTipster
su****ious.
There's another forum error.
__________________
"15% percent of programing is creating a program, 85% percent is getting it to work like it should." - Me
[URL=http://www.mozilla.org/products/firefox/][IMG]http://img439.imageshack.us/img439/5667/getfirefox0sr.png[/IMG][/URL]
MagicianFB is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 12:30 PM   #10
 
lilmul123's Avatar
 
Join Date: Jun 2005
Posts: 207
Trader Feedback: 0
Default

no one really uses that term anyway. just take it off the filter >.>
lilmul123 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 12:33 PM   #11
Developer
 
Join Date: Jun 2005
Posts: 32
Trader Feedback: 0
Default

su****ious - suspicious
****aki mushrooms - shitaki mushrooms

^the filters can easily be bypassed anyway
Dark Killer is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 12:43 PM   #12
 
FrozenIpaq's Avatar
 
Join Date: Jun 2005
Posts: 2,986
Trader Feedback: 0
Default

Dark, don't post ways to get around the filters

shitaki mushrooms

Back on topic now :P
FrozenIpaq is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 12:48 PM   #13
 
st.jimmy's Avatar
 
Join Date: Aug 2005
Location: MD | Fries: 13
Posts: 1,019
Trader Feedback: 0
Default

thats a cool program. im gonna use this frequently on untested programs.
st.jimmy is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 12:49 PM   #14
NDS Mod
 
MagicianFB's Avatar
 
Join Date: Jul 2005
Location: w00+land
Posts: 645
Trader Feedback: 0
Default

Quote:
Originally Posted by AnonymousTipster
This is a good idea, but another message should say if it uses the line sceIoRemove() in the flash, ie, it's deleting stuff, so it's really su****ious.
I agree

shitaki mushrooms
__________________
"15% percent of programing is creating a program, 85% percent is getting it to work like it should." - Me
[URL=http://www.mozilla.org/products/firefox/][IMG]http://img439.imageshack.us/img439/5667/getfirefox0sr.png[/IMG][/URL]

Last edited by MagicianFB; 10-04-2005 at 12:58 PM..
MagicianFB is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 01:27 PM   #15

Developer
 
Koba's Avatar
 
Join Date: Jul 2005
Location: Canada
Posts: 362
Trader Feedback: 0
Default

i know your probably gunna say no, but could i have the source code so i can make a port for mac and linux? i feel the other OS users should have this too, not EVERYBODY uses windows, most do, but not everyone
__________________
Windows: A thirty-two bit extension and GUI shell to a sixteen bit patch to an eight bit operating system originally coded for a four bit microprocessor and sold by a two-bit company that can't stand one bit of competition...

Personal Development Blog:
http://keepitreal-dev.blogspot.com/
Koba is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 01:34 PM   #16
 
RaiderX's Avatar
 
Join Date: Jul 2005
Posts: 273
Trader Feedback: 0
Default

This app is really useful, but I dont play anything without getting some kind of assurance of it being real. Also, I never would patch my firmware...

Nice app tho, its great for fake games! thx! :Jump

PS: Koba, I love yuor sig! I use windows, but its soooo funny!!
RaiderX is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 02:12 PM   #17

Developer
 
Koba's Avatar
 
Join Date: Jul 2005
Location: Canada
Posts: 362
Trader Feedback: 0
Default

haha, thanks, found it on google one day and was like, nice feel free to use it anywhere you want
__________________
Windows: A thirty-two bit extension and GUI shell to a sixteen bit patch to an eight bit operating system originally coded for a four bit microprocessor and sold by a two-bit company that can't stand one bit of competition...

Personal Development Blog:
http://keepitreal-dev.blogspot.com/
Koba is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 03:05 PM   #18
 
RaiderX's Avatar
 
Join Date: Jul 2005
Posts: 273
Trader Feedback: 0
Default

Quote:
Originally Posted by Koba
haha, thanks, found it on google one day and was like, nice feel free to use it anywhere you want
cool. Microsft is a 2-bit company and they really cant stand competetion, but I still use their OS! OH, the irony!
RaiderX is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 03:08 PM   #19
NDS Mod
 
MagicianFB's Avatar
 
Join Date: Jul 2005
Location: w00+land
Posts: 645
Trader Feedback: 0
Default

Quote:
Originally Posted by RaiderX
cool. Microsft is a 2-bit company and they really cant stand competetion, but I still use their OS! OH, the irony!
I hope this doen't turn into a Microsoft vs. Mac thread...
__________________
"15% percent of programing is creating a program, 85% percent is getting it to work like it should." - Me
[URL=http://www.mozilla.org/products/firefox/][IMG]http://img439.imageshack.us/img439/5667/getfirefox0sr.png[/IMG][/URL]
MagicianFB is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 03:09 PM   #20
 
RootOfAllEvil's Avatar
 
Join Date: Aug 2005
Location: Do I Know You?,EH? Do You Know Brian Peppers?
Posts: 539
Trader Feedback: 0
Default

SOMichrosoft owns sonyyou know?
__________________
[QUOTE=FBMachine] i got kicked out of barnes and noble once for moving all the bibles into the fiction section [/QUOTE]
XD!


[img]http://img.villagephotos.com/p/2004-9/842657/Untitled.jpg[/img]
RootOfAllEvil is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 05:02 PM   #21
 
RaiderX's Avatar
 
Join Date: Jul 2005
Posts: 273
Trader Feedback: 0
Default

lol, I hate microsoft. they piss me off. They are so decieving like with the 2 MACs running the 360 demos at E3.........

I hate sony cuz thye do this no homebrew junk when they should just liscense soem devs and then many will upgrade! But they are dumb, so dotn expect an FFVII remake.

I hate MAC cuz........I guess I dont, I never use their OS much, but it does bothe rme thta thye have so many OS verisons and they have annoying animal names and stuff and its confusing.! @_@

BOTTOM LINE: Everyne sucks in some way, and everyone is good in otghers. WHo cares!

back to the PSafeP application! :icon_smil
RaiderX is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 05:16 PM   #22
 
??????'s Avatar
 
Join Date: Sep 2005
Location: What?-----US-Colorado
Posts: 217
Trader Feedback: 0
Default

This is a great program.Its just like a psp anti-virus program.
You should have an option that allows the user to select what type code you could scan for such as the delete,write, and other code that can be used for bad things.
But besides all that.GREAT PROGRAM!!:mrgreen:
?????? is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-04-2005, 06:04 PM   #23
 
Join Date: Jul 2005
Posts: 12
Trader Feedback: 0
Default

When i try and run this program i get an error saying something about invalid or missing files. any ideas?
funnyman2 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-05-2005, 12:59 AM   #24
 
Join Date: Oct 2005
Posts: 1
Trader Feedback: 0
Default

Yeah... I get an error too:

PSafeP
Component 'Comdlg32.ocx" or one of its dependencies not correctly registered: a file is missing or invalid

Any clue why I have this error?

Windows XP, SP2, Disables Firewall, .NET installed (I don't know if it affects...)
Anyways, help xP
Thanks in advance
arkiden is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-05-2005, 03:12 AM   #25
 
Join Date: Oct 2005
Posts: 44
Trader Feedback: 0
Default

You can get around your program, I just write a program that writes instructions to another part of data memory then runs from that memory. So the instructions themselves aren't in the code, just 'encoded' (out of byte order etc).

Don't be fooled people, let someone else run code before you do!
dacium is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-05-2005, 06:42 AM   #26
 
Join Date: Jul 2005
Posts: 4
Trader Feedback: 0
Default

Quote:
Originally Posted by dacium
You can get around your program, I just write a program that writes instructions to another part of data memory then runs from that memory. So the instructions themselves aren't in the code, just 'encoded' (out of byte order etc).

Don't be fooled people, let someone else run code before you do!
Nice tip - Good to see some people are good and tell us these things rather than go off and make fake patchers :icon_wink

I have downloaded psafe but guessing I wont use it, I never run apps if they not been confirmed by other peeps neway
xecuterbox is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-05-2005, 06:46 AM   #27
 
Join Date: Oct 2005
Posts: 1
Trader Feedback: 0
Default

This program is great, but could you filter a bit more or report which flash is accessed ???
It seems some PSP Software access flashs to load some PRX modules, which are "read" but never "written" (for example : LUA Player or PSPInside ).

Thanks for the piece of software, I had started a thread on another forum looking after something like this.

Have a niceday.

[Edit]
Quote:
Originally Posted by dacium
You can get around your program, I just write a program that writes instructions to another part of data memory then runs from that memory. So the instructions themselves aren't in the code, just 'encoded' (out of byte order etc).

Don't be fooled people, let someone else run code before you do!
Wouldn't that behavior get caught by the software ?
I mean you have to actually put the code to be written in the specified memory space to get it executed, isn't it ? Then if this "sub-code" is executed, why wouldn't the PSafeP software see it and scan it ? (can't tell, I'm no coder)
[/Edit]

Last edited by Nickola; 10-05-2005 at 06:54 AM..
Nickola is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-05-2005, 09:00 AM   #28
 
Join Date: Jul 2005
Posts: 30
Trader Feedback: 0
Default

Why Does FastLoader Come up as WARNING!!...getting me scared! lol
rhem is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-05-2005, 09:17 AM   #29
 
NeilR's Avatar
 
Join Date: Jul 2005
Posts: 7,010
Trader Feedback: 0
Default

Quote:
Originally Posted by rhem
Why Does FastLoader Come up as WARNING!!...getting me scared! lol
It says in the description that anything that accesses flash0 (firmware) will show up. Since this is in the early stages of development, he hasn't made a "safe list" or anything... most likely something to do in the future.
NeilR is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old 10-05-2005, 09:24 AM   #30
 
NeilR's Avatar
 
Join Date: Jul 2005
Posts: 7,010
Trader Feedback: 0
Default

Quote:
Originally Posted by arkiden
Yeah... I get an error too:

PSafeP
Component 'Comdlg32.ocx" or one of its dependencies not correctly registered: a file is missing or invalid

Any clue why I have this error?
Look in Windows/System32/ for the file. If it isn't there, you will need to download it (search google).

When you have it in that folder then register the .ocx by going to the start --> Run and typing:
regsvr32 "C:\WINDOWS\system32\Comd lg32.ocx"

Where "c:\" is the right drive letter and "Windows" is the right folder (could be "WINNT").
NeilR is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply

Tags
code , executables , psafep , psp , scan , suspicious

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



All times are GMT -8. The time now is 05:41 AM.



Use of this Web site constitutes acceptance of the TERMS & CONDITIONS and PRIVACY POLICY
Copyright © 2009, QJ.NET. All Rights Reserved.
Contact Us