QJ.net Game Discussion - PSP, Xbox, Wii, PS3, PSP Homebrew, and PSP Guides

**birdman** · 06-27-2006, 07:36 PM

Alright the topic for the first post on this has gotten out of hand and most people are asking the same questions over and over again

so in an attempt to stop this i present this FAQ (beware spelling errors):

------FAQ----------------------

What does this Proof of Consept program do?
-The Program dumps your kernal memory this contains the keys used to decrypt the firmware and use it to emulate the firmware on a 1.5

How do i run this proof of concept thing?
-First if your not a developer dont even think about running this, its a waist of time, but if your really bored, on a 2.5 or 2.6 psp load GTA and the eboot loader then select the proof of concept eboot.

But wait i have a 2.7 or 2.71 how can i run this?
-You cant, buy the modchip, there is currently NO way to run hombrew on 2.7 or 2.71 PERIOD END OF STORY.

All i get is a black screen when i run this, it didnt work....
-Yes it did, exit and check the root of your memory stick you should find some files

What can i do with these files?
-Unless your a developer, nothing. (and if you are a dev chances are you arnt looking at this faq

)

------------------------------------------------------------
So what will come of this?
-fanjita says "For what it's worth the main focus from this exploit is to replicate nokxploit functionality, if possible - ie. using GTA to 'patch' the PSP, and from there on it would behave as a v1.0 in terms of loading HB."

-Working on a kernel eloader would be possible, but seems pointless since the nokxploit approach is much better in the long term.

-For any remaining doubters - yes, this proof of concept works, and appears to offer full kernel access.

-Also the 2.6 and 2.71 firmwares will probobly get decrypted (because they bouth use the same encryption keys) so they will be emulateable via devhook.(note that this is just what people are telling me, im not 100% sure that 2.7x uses the same keys as 2.6, but quite a few people over at ps2dev think this as well)

So when will the downgrader be out?
-the psp version number is stored in something called the ipl and we cant modify that. however a dedicated user named dark_alex is currently working on it.

-----Now for the section that is almost entirely speculation----------

First off WE REALLY HAVE NO CLUE WHATS POSSIBLE.

So i can run all of my shells/iso's?
-currently it is unknown weather all the shells will function properly as many of them have 1.5 system calls, this goes for iso loaders as well.

When can i run my Shells/iso's
-Probobly as soon as someone makes a eboot loader that supports kernel mode, fanjita is working on this.

Will i have to launch gta every time i want to load my homebrew?
-Homer says "you will only have to launch gta once" altho in all proboblility he means once every time you reboot your psp, unless we gain flash access.

-most likely, you will need to start gta every time you want to launch homebrew.

Will we have flash access?
-YES Read/Write Access, however this still wont lead to a downgrader. (read So when will the downgrader be out?)

----------------interesting new things learned about 2.6-----------
-it uses MMU, Linux uses MMU, before we didnt know the psp even had MMU.(MMU is a sort of hardware type thing)
-2.6 and 2.7X use the same decryption keys.(99% sure)

----------------------------------------------------------
Original thread - 2.6 Kernel access - Proof of concept

Super-Pre-beta beta (doesnt work) - Fanjita "releases" Unfinished Kernel eLoader?

the UNWORKING downgrader .1 - Downgrader Test for 2.50/2.60

THE UNTESTED .2 DOWNGRADER - http://forums.qj.net/psp-homebrew-hacks-discussion/56534-downgrader-test-v0-2-2-50-2-60-a-post776418.html#post776418

------------------------------------------------
got other questions? post em here

**El Diablo** · 06-27-2006, 07:39 PM

1. when can i run ISO's on my 2.71

2. when can i run ISO's on my 2.7

3. when can i run ISO's on my 2.5/6

4. when can i use the eloader on my 2.72

5. i still cant downgrade my 2.71...why?

6. can u ask fanjita to make his downgrader for 2.6 work?

**birdman** · 06-27-2006, 07:46 PM

ok there i forgot the stupid 2.7 questions.

**El Diablo** · 06-27-2006, 07:47 PM

he he im just messin wit u =) but you never know..maybe this will lead to a 2.7/71 exploit/...

**Smiffers** · 06-27-2006, 07:50 PM

Quote:

-Kernel access does NOT mean FLASH access

In this case it does, though

.

**birdman** · 06-27-2006, 07:55 PM

Update: ok so i was wrong

umm i dont belive it does all the program does is dump the ram, ram is not flash. but ill put that under speculation

**X-BlueRaven** · 06-27-2006, 07:57 PM

Hey Birdman this is a great help for the " noobie users" thanks for the info.

**Smiffers** · 06-27-2006, 08:01 PM

Quote:

Originally Posted by birdman

Update: ok so i was wrong

umm i dont belive it does all the program does is dump the ram, ram is not flash. but ill put that under speculation

The author of the original POC says it does read and write to flash0.

**Networkgamer** · 06-27-2006, 08:06 PM

also to clear some things up this will not bring us a 2.5 or 2.6 downgrader.Although we do have flash access,tin the ipl,or initial program launcher,its encrypted and conmtains your firmware version,therefor it will detect that files are missing and your psp will not boot and become a brick

**gangsta_psp** · 06-27-2006, 08:06 PM

Quote:

Originally Posted by El_Diablo

he he im just messin wit u =) but you never know..maybe this will lead to a 2.7/71 exploit/...

It cant lead to a 2.7+ exploit, because you still need gta.

**Networkgamer** · 06-27-2006, 08:08 PM

in the program it enters into kernel,and dumps the memory of kernel-only accessable files,plus dumps a bin image containing the hex code proving we have flash access

**chzyrat** · 06-27-2006, 08:08 PM

Quote:

Originally Posted by Smith|

The author of the original POC says it does read and write to flash0.

So a downgrader IS still possible!?

**Networkgamer** · 06-27-2006, 08:10 PM

no because in the ipl the firmware version of your psp is stored in there and it will not boot because even if you do reflash into 1.5,the files will be missing because you downgraded and you will have a brick.

EDIT:Yes we do have flash access.

royal55 · 06-27-2006, 08:10 PM

thanks for following through on my idea.this F.A.Q is great but i just have one more question.do you have to install the dump program thing or is that just for advanced users

"-How do i run this?
on a 2.5 or 2.6 psp load GTA and the eboot loader then slect the eboot.

What can i do with these files?
-Unless your a developer, nothing. (and if you are a dev chances are you arnt looking at this faq )"

those two statements together really threw me off and confused me a bit since im a noob and all HA

**ANTONIO_424** · 06-27-2006, 08:10 PM

^^^chzyrat Did you even read a post back?

**Networkgamer** · 06-27-2006, 08:11 PM

no you can not have a downgrader

**birdman** · 06-27-2006, 08:18 PM

there next person who asks about a downgrader will die

*i placed THERE WILL BE NO DOWNGRADER, NO DOWNGRADER SHALL THERE BE! NONE ZIP ZERO, NO DOWNGRADER, NO DOWNGRADER. in the 2 spots where i even mentioned a downgrader.

**psp1003** · 06-27-2006, 08:22 PM

excuse me i just wanted to know will this lead to a downgrader for 2.5/6??

**birdman** · 06-27-2006, 08:22 PM

Quote:

Originally Posted by royal55

thanks for following through on my idea.this F.A.Q is great but i just have one more question.do you have to install the dump program thing or is that just for advanced users

"-How do i run this?
on a 2.5 or 2.6 psp load GTA and the eboot loader then slect the eboot.

What can i do with these files?
-Unless your a developer, nothing. (and if you are a dev chances are you arnt looking at this faq )"

those two statements together really threw me off and confused me a bit since im a noob and all HA

the dump program thing is the whole proof of concept thing, really if your not a developer, you probobly shouldnt even be running the proof of concept thing aka dump program thing, if you do its just for kicks and giggles

**birdman** · 06-27-2006, 08:24 PM

Quote:

Originally Posted by psp1003

excuse me i just wanted to know will this lead to a downgrader for 2.5/6??

DOWNGRADE THIS - BOOM! HEADSHOT!

THERE WILL BE NO DOWNGRADER, NO DOWNGRADER SHALL THERE BE! NONE ZIP ZERO, NO DOWNGRADER, NO DOWNGRADER.

ps: i apologise for the double post

**ANTONIO_424** · 06-27-2006, 08:27 PM

It's alright birdman.............that guy was a stupid ass......

He posted it right AFTER you explained there will NOT be a downgrader also

............

**birdman** · 06-27-2006, 08:32 PM

hes lucky he was the first one, im mobilizeing my army to distroy everyone who speaks of the downgraders. lol

side note: THERE WILL BE NO DOWNGRADER, NO DOWNGRADER SHALL THERE BE! NONE ZIP ZERO, NO DOWNGRADER, NO DOWNGRADER.

also does anyone see anything else that should be added to this faq?

**delight1** · 06-27-2006, 08:36 PM

you should remind people that we do not know jack **** about this yet.

**ANTONIO_424** · 06-27-2006, 08:37 PM

Good luck on the army

I'll join as soon as possible XD Just trying to serve my country

lol

Just kidding

FAQ Looks pretty done. Nice job on it man

EDIT: Oh yeah, remind people it's still pretty NOTHING right now for the common user.

**birdman** · 06-27-2006, 08:49 PM

ok done, anything else guys?

**Link88** · 06-27-2006, 08:54 PM

Update that we do have read/write to flash0.

**birdman** · 06-27-2006, 08:59 PM

alrighty thats done now too.

**RazorG606** · 06-27-2006, 09:01 PM

nice job! hopefully this will stop most of the noob questions

**chzyrat** · 06-27-2006, 09:02 PM

Quote:

Originally Posted by ANTONIO_424

It's alright birdman.............that guy was a stupid ass......

He posted it right AFTER you explained there will NOT be a downgrader also

............

When I clicked the reply button there were no posts beyond the one I quoted. I just took a few minutes until I got back to it and actually wrote the post, because I was busy with other things. There was a "positive posting" thread a while back, did you even read that?

You need to calm the **** down about people talking about downgraders. Not all of us have been sitting in front of our computers repeatedly hitting refresh so we can get the updates as they come, and flaming anyone who doesn't. Maybe you can tell off the guys who ask 'noob' questions in a weeks time, but not a few hours after this was announced.

**birdman** · 06-27-2006, 09:17 PM

no one follows that positive thing, however im sorry for offending you its just that so many people have asked about a downgrader when it even says on the front page of pspupdates

"Also, this breakthrough does not open up the possibility of a downgrader due to the protection in the IPL in 2.50+ firmware"

and dont tell me you posted before that was posted because that has been there on the front page for almost 3hrs now

now im going to sleep, ill update this faq in the morning.

06-27-2006, 07:36 PM	#1
birdman TMK&GWKU's Bth Join Date: May 2005 Posts: 380 Trader Feedback: 0	UNOFFICIAL 2.50/.60 Proof of Concept Kernel FAQ Alright the topic for the first post on this has gotten out of hand and most people are asking the same questions over and over again so in an attempt to stop this i present this FAQ (beware spelling errors): ------FAQ---------------------- What does this Proof of Consept program do? -The Program dumps your kernal memory this contains the keys used to decrypt the firmware and use it to emulate the firmware on a 1.5 How do i run this proof of concept thing? -First if your not a developer dont even think about running this, its a waist of time, but if your really bored, on a 2.5 or 2.6 psp load GTA and the eboot loader then select the proof of concept eboot. But wait i have a 2.7 or 2.71 how can i run this? -You cant, buy the modchip, there is currently NO way to run hombrew on 2.7 or 2.71 PERIOD END OF STORY. All i get is a black screen when i run this, it didnt work.... -Yes it did, exit and check the root of your memory stick you should find some files What can i do with these files? -Unless your a developer, nothing. (and if you are a dev chances are you arnt looking at this faq ) ------------------------------------------------------------ So what will come of this? -fanjita says "For what it's worth the main focus from this exploit is to replicate nokxploit functionality, if possible - ie. using GTA to 'patch' the PSP, and from there on it would behave as a v1.0 in terms of loading HB." -Working on a kernel eloader would be possible, but seems pointless since the nokxploit approach is much better in the long term. -For any remaining doubters - yes, this proof of concept works, and appears to offer full kernel access. -Also the 2.6 and 2.71 firmwares will probobly get decrypted (because they bouth use the same encryption keys) so they will be emulateable via devhook.(note that this is just what people are telling me, im not 100% sure that 2.7x uses the same keys as 2.6, but quite a few people over at ps2dev think this as well) So when will the downgrader be out? -the psp version number is stored in something called the ipl and we cant modify that. however a dedicated user named dark_alex is currently working on it. -----Now for the section that is almost entirely speculation---------- First off WE REALLY HAVE NO CLUE WHATS POSSIBLE. So i can run all of my shells/iso's? -currently it is unknown weather all the shells will function properly as many of them have 1.5 system calls, this goes for iso loaders as well. When can i run my Shells/iso's -Probobly as soon as someone makes a eboot loader that supports kernel mode, fanjita is working on this. Will i have to launch gta every time i want to load my homebrew? -Homer says "you will only have to launch gta once" altho in all proboblility he means once every time you reboot your psp, unless we gain flash access. -most likely, you will need to start gta every time you want to launch homebrew. Will we have flash access? -YES Read/Write Access, however this still wont lead to a downgrader. (read So when will the downgrader be out?) ----------------interesting new things learned about 2.6----------- -it uses MMU, Linux uses MMU, before we didnt know the psp even had MMU.(MMU is a sort of hardware type thing) -2.6 and 2.7X use the same decryption keys.(99% sure) ---------------------------------------------------------- Original thread - 2.6 Kernel access - Proof of concept Super-Pre-beta beta (doesnt work) - Fanjita "releases" Unfinished Kernel eLoader? the UNWORKING downgrader .1 - Downgrader Test for 2.50/2.60 THE UNTESTED .2 DOWNGRADER - http://forums.qj.net/psp-homebrew-hacks-discussion/56534-downgrader-test-v0-2-2-50-2-60-a-post776418.html#post776418 ------------------------------------------------ got other questions? post em here Last edited by birdman; 06-29-2006 at 06:55 AM..

06-27-2006, 07:39 PM	#2
El Diablo Join Date: Mar 2006 Location: Somewhere Posts: 3,625 Trader Feedback: 0	1. when can i run ISO's on my 2.71 2. when can i run ISO's on my 2.7 3. when can i run ISO's on my 2.5/6 4. when can i use the eloader on my 2.72 5. i still cant downgrade my 2.71...why? 6. can u ask fanjita to make his downgrader for 2.6 work? __________________ Veteran [CENTER][COLOR="Green"][FONT="Fixedsys"] PSN Name[/FONT][/COLOR]: Eldiabl1o[/CENTER] [center][QUOTE=gmansixfo]Since I have to reset my psp whenever i get out of an emulator. Can this damage my psp.[/QUOTE][/center]

06-27-2006, 07:47 PM	#4
El Diablo Join Date: Mar 2006 Location: Somewhere Posts: 3,625 Trader Feedback: 0	he he im just messin wit u =) but you never know..maybe this will lead to a 2.7/71 exploit/... __________________ Veteran [CENTER][COLOR="Green"][FONT="Fixedsys"] PSN Name[/FONT][/COLOR]: Eldiabl1o[/CENTER] [center][QUOTE=gmansixfo]Since I have to reset my psp whenever i get out of an emulator. Can this damage my psp.[/QUOTE][/center]

06-27-2006, 07:55 PM	#6
birdman TMK&GWKU's Bth Join Date: May 2005 Posts: 380 Trader Feedback: 0	Update: ok so i was wrong umm i dont belive it does all the program does is dump the ram, ram is not flash. but ill put that under speculation Last edited by birdman; 06-27-2006 at 07:59 PM..

06-27-2006, 08:36 PM	#23
delight1 73\|-\| m4573r poker Join Date: Jan 2006 Location: some place fun Posts: 4,117 Trader Feedback: 0	you should remind people that we do not know jack **** about this yet. __________________ (cc) BY-NC-ND

06-27-2006, 07:46 PM	#3
birdman TMK&GWKU's Bth Join Date: May 2005 Posts: 380 Trader Feedback: 0	ok there i forgot the stupid 2.7 questions.

06-27-2006, 07:57 PM	#7
X-BlueRaven Join Date: Jan 2006 Location: In my chair Posts: 232 Trader Feedback: 0	Hey Birdman this is a great help for the " noobie users" thanks for the info.

06-27-2006, 08:06 PM	#9
Networkgamer Join Date: May 2006 Posts: 921 Trader Feedback: 0	also to clear some things up this will not bring us a 2.5 or 2.6 downgrader.Although we do have flash access,tin the ipl,or initial program launcher,its encrypted and conmtains your firmware version,therefor it will detect that files are missing and your psp will not boot and become a brick

06-27-2006, 08:08 PM	#11
Networkgamer Join Date: May 2006 Posts: 921 Trader Feedback: 0	in the program it enters into kernel,and dumps the memory of kernel-only accessable files,plus dumps a bin image containing the hex code proving we have flash access

06-27-2006, 08:10 PM	#13
Networkgamer Join Date: May 2006 Posts: 921 Trader Feedback: 0	no because in the ipl the firmware version of your psp is stored in there and it will not boot because even if you do reflash into 1.5,the files will be missing because you downgraded and you will have a brick. EDIT:Yes we do have flash access.

06-27-2006, 08:10 PM	#14
royal55 Join Date: Jun 2006 Location: massachusetts Posts: 9 Trader Feedback: 0	thanks for following through on my idea.this F.A.Q is great but i just have one more question.do you have to install the dump program thing or is that just for advanced users "-How do i run this? on a 2.5 or 2.6 psp load GTA and the eboot loader then slect the eboot. What can i do with these files? -Unless your a developer, nothing. (and if you are a dev chances are you arnt looking at this faq )" those two statements together really threw me off and confused me a bit since im a noob and all HA

06-27-2006, 08:10 PM	#15
ANTONIO_424 Join Date: Sep 2005 Posts: 516 Trader Feedback: 0	^^^chzyrat Did you even read a post back?

06-27-2006, 08:11 PM	#16
Networkgamer Join Date: May 2006 Posts: 921 Trader Feedback: 0	no you can not have a downgrader

06-27-2006, 08:18 PM	#17
birdman TMK&GWKU's Bth Join Date: May 2005 Posts: 380 Trader Feedback: 0	there next person who asks about a downgrader will die *i placed THERE WILL BE NO DOWNGRADER, NO DOWNGRADER SHALL THERE BE! NONE ZIP ZERO, NO DOWNGRADER, NO DOWNGRADER. in the 2 spots where i even mentioned a downgrader.

06-27-2006, 08:22 PM	#18
psp1003 Join Date: Sep 2005 Posts: 491 Trader Feedback: 0	excuse me i just wanted to know will this lead to a downgrader for 2.5/6??

06-27-2006, 08:27 PM	#21
ANTONIO_424 Join Date: Sep 2005 Posts: 516 Trader Feedback: 0	It's alright birdman.............that guy was a stupid ass...... He posted it right AFTER you explained there will NOT be a downgrader also ............

06-27-2006, 08:32 PM	#22
birdman TMK&GWKU's Bth Join Date: May 2005 Posts: 380 Trader Feedback: 0	hes lucky he was the first one, im mobilizeing my army to distroy everyone who speaks of the downgraders. lol side note: THERE WILL BE NO DOWNGRADER, NO DOWNGRADER SHALL THERE BE! NONE ZIP ZERO, NO DOWNGRADER, NO DOWNGRADER. also does anyone see anything else that should be added to this faq?

06-27-2006, 08:37 PM	#24
ANTONIO_424 Join Date: Sep 2005 Posts: 516 Trader Feedback: 0	Good luck on the army I'll join as soon as possible XD Just trying to serve my country lol Just kidding FAQ Looks pretty done. Nice job on it man EDIT: Oh yeah, remind people it's still pretty NOTHING right now for the common user.

06-27-2006, 08:49 PM	#25
birdman TMK&GWKU's Bth Join Date: May 2005 Posts: 380 Trader Feedback: 0	ok done, anything else guys?

06-27-2006, 08:54 PM	#26
Link88 Join Date: May 2006 Posts: 105 Trader Feedback: 0	Update that we do have read/write to flash0.

06-27-2006, 08:59 PM	#27
birdman TMK&GWKU's Bth Join Date: May 2005 Posts: 380 Trader Feedback: 0	alrighty thats done now too.

06-27-2006, 09:01 PM	#28
RazorG606 QJ 300th Hot Club Member Join Date: Mar 2006 Location: Im not to sure.... Psp Firmware: 3.10 OE-A Posts: 1,670 Trader Feedback: 0	nice job! hopefully this will stop most of the noob questions __________________ Was PSPFanatic Sig/Banner Made By Deturb *How to Un-Brick Your PSP using the pandora battery!* *How To Install 3.40 OE-A With No Hassle* *My Sticky Guide To Opening The Psp* *My Psp Tips and Problems Guide* *RazorG.com*

06-27-2006, 09:17 PM	#30
birdman TMK&GWKU's Bth Join Date: May 2005 Posts: 380 Trader Feedback: 0	no one follows that positive thing, however im sorry for offending you its just that so many people have asked about a downgrader when it even says on the front page of pspupdates "Also, this breakthrough does not open up the possibility of a downgrader due to the protection in the IPL in 2.50+ firmware" and dont tell me you posted before that was posted because that has been there on the front page for almost 3hrs now now im going to sleep, ill update this faq in the morning.

QJ.net Game Discussion - PSP, Xbox, Wii, PS3, PSP Homebrew, and PSP Guides

UNOFFICIAL 2.50/.60 Proof of Concept Kernel FAQ