[EXPLOIT]scetool v0.2.7 & Friday POC Package : Exploit PS3 - PS3-Infos

[Itachijiraya]

Naehrwert membre de la team qui est derrière le PS3MFW builder nous sort aujourd'hui deux outils. Le premier friday, qui permet le re couplage de lecteur blu ray sans avoir besoin de passer par le factory mode et un second outil scetool qui affiche des informations sur les fichiers ELF.

---

Naehrwert nous release ici ,deux outils plus que sympathique, mais réservé aux développeurs ayant des connaissances poussées.

Le premier se nomme Friday:
Il permet le re couplage d'un lecteur blu-ray (en cas de changement de lecteur) sans devoir utiliser le factory service mode.

friday (C) 2011 by naehrwert

This is a POC for a isolated spu binary. Generate a self encrypted+signed with the metldr keys out of friday.elf.

Then use friday.h to write a PPU application that loads the self by utilizing metldr and DMAs your console's EID2 to the shared SPU LS.

It will generate the P and S block from it, that is used to pair the BD drive to the specific console.

You can then DMA the blocks out from the LS and send them to the drive to remarry it to the console.

Communication with the SPU is done over in_mbox and out_mbox. MSG_OUT_* is send from the SPU code to out_mbox.

MSG_IN_* should be written from the PPU to in_mbox.

When MSG_OUT_READY arrives the PPU should DMA the EID2 to EID2_START and send MSG_IN_READY.

When MSG_OUT_GEN_DONE arrives the PPU should DMA the blocks out from BLOCKS_START and send MSG_IN_DIE.

Note: this is UNTESTED but should just work

Le second se nomme SCETOOL:
SCETOOL est une version modifiée d'un outil de la team Failoverflow qui permet d'afficher des infos sur les .SELF et SPU (diverses données de la PS3, du firmware entre autre).

Version 0.2.7
- Added local NP license handling.
- Added option to override klicensee.
- Added option to disable section skipping (in SELF generation).

Version 0.2.5
- Added option to use provided metadata info for decryption.
- "PS3" path environment variable will now be searched for keys/ldr_curves/vsh_curves too.

Version 0.2.4
- Added option to display raw values.
- Moved factory Auth-IDs to <public build> (as they are on ps3devwiki now).

Version 0.2.2
- Added options to override control/capability flags (32 bytes each).
- Fixed where a false keyset would crash scetool when decrypting a file.
- Some source level changes and optimizations.

scetool v0.2.1
- Support complet des SELF.

scetool v0.1.1
Changements inconnus, mais semble permettre la création de SELF, comme le montre l'auteur :

scetool.exe --sce-type=SELF --key-revision=0 --self-auth-id=1FF000000A000001 --self-vendor-id=FF000000 --self-type=LDR --self-fw-version=0003004100000000 --encrypt friday.elf friday.self

scetool v0.0.4
Ajout du support des ELF 32 bits dans unself.

scetool v0.0.3
Ajout du support des ELF64

scetool_0.2.7.zip

friday.zip

Site officiel : https://twitter.com/#!/naehrwert/status/142941487330623488