请选择 进入手机版 | 继续访问电脑版

A9VG电玩部落论坛

昵称  找回密码
 注册
搜索
查看: 1768|回复: 9

[共享] [共享]看的懂的来 [复制链接]

骑士

勇者JJKKLL

精华
0
帖子
1203
威望
0 点
积分
1783 点
注册时间
2005-2-13
最后登录
2018-7-24
发表于 2010-3-7 17:02:53 |显示全部楼层
XorHack: The PS3 Exploit Toolkit - http://www.eurasia.nu/modules.php?name= … ry=xorhack
xorloser @ www.xorloser.com

I finally found the time to complete the PS3 exploit toolkit software I mentioned to in my previous posts. I call it XorHack. It allows you to call lv1 syscalls (level 1 system calls) from a normal (userspace) program. It also lets you run the software required when triggering the PS3 exploit from a normal userspace program. To give an example of how it can be used I have included the following example programs:
* ps3exploit – Runs the software required to exploit the ps3, it loops a number of times which can be specified as a parameter. (This still must be used along with the "button pressing", it will not exploit the PS3 via software alone).
* dumphv – Dumps the hypervisor to a file in the current directory.* dumpbl – Dumps the bootloader to a file in the current directory.
* dumprom – Dumps the system rom to a file in the current directory.

The XorHack package contains full sourcecode for everything including a rewrite of geohot’s exploit sourcecode to make it easier to read and understand (the new file is kmod/exploit.c). The rewrite doesn’t just fix the compilation warnings, it attempts to replace all “magic��  values with the algorithms and reasoning as well as tidying up the code and commenting it all. I also added another syscall #21 to allow executing of code in hypvervisor context. Due to the associated complexities it is not available from usermode, it is for advanced users to make use of in kernel space. Some small changes were also made to the timing and the text that gets printed onscreen to make the exploit easier and hopefully more stable to use. I recommend XorHack when both looking into how the exploit works and when actually triggering the exploit.

XorHack is made up of three parts. The kernel module, the userspace library file, and lastly the userspace programs themselves. To build all three parts you need to first extract the contents of the XorHack zip file to a directory on your PS3 harddrive. Next you need to navigate on the command line to the directory you extracted the files to. You should be either logged in as root or running as root thanks to the “su��  command. Now type "make" to build all parts of XorHack. Then once that completes type "make install" to install all parts of XorHack. If you wish to you can type “make uninstall��  in this same directory to remove all of XorHack from your system. When you install XorHack on your system it will always be ready for use, even after rebooting it will be automatically reloaded and ready for use.

To use XorHack to perform the exploit on your PS3 first install it as per the directions above. You then need to switch to a console only mode (no GUI). This is required because it is the only way you can see the printed messages from the kernel module to know when to press the button. Once exploited all other programs can be run normally from a terminal window in GUI mode. To switch to console mode press Ctrl+Alt+F1 on your keyboard. To switch back to the GUI mode press Ctrl+Alt+F7. When you enter console mode you will be greeted with a login screen. Now login with your normal user account and password and type "ps3exploit 100". This will start the exploit looping 100 times in which you need to successfully glitch the console by pressing the button on your glitch hardware. The idea is the perform the glitch when nothing else is occuring on your PS3. Therefore some things you may want to try when exploiting to help your chances are:

* Only press the button once per loop.
* Try to press the button around the middle of the pause between two concurrent prints of the “press button��  message.
* Don’t start pressing the button till after the 10th “press button��  message (by this time the system should done loading and preparing the newly running code, so less likely to interfere with processes that occur during these stages)
* Run the ps3exploit software after initially booting up the PS3 and switching to the console login without first logging into the GUI mode.
* After booting the PS3 and switching to the console mode straight away, log in and then wait about a minute before running ps3exploit so that any processes that may occur upon login/startup have completed.
* Don’t use any services that will cause more processes to be running until the exploit is completed. This includes things like accessing your PS3 over samba.
* Once you have successfully exploited, stay in console mode as there is less chance of instabilities causing havoc and crashing your PS3.

The PS3 Exploit Game!

Once you can run the exploit it’s time to turn it into a game. Think of it as a cross between getting the turbo boost at the start of a Mario Kart race and Dance Dance Revolution with a finger pad. The aim of the game is to exploit your PS3 as quickly as possible without it crashing. Below is my highscore table picture showing my highscore of THREE!


    .

精华
0
帖子
192
威望
0 点
积分
198 点
注册时间
2009-3-4
最后登录
2015-5-31
发表于 2010-3-7 17:13:54 |显示全部楼层
XorHack:PS3的漏洞工具 - http://www.eurasia.nu/modules.php?name = ... ry = xorhack
xorloser@www.xorloser.com

我终于找到时间来完成的PS3软件开发工具包,我提到我以前的职位。我把它称为XorHack。它允许你调用lv1系统调用(1级系统调用)从正常(用户空间)计划。它还可以触发运行时需要利用PS3的用户空间,在正常的程序软件。为了让一个例子来说明为什么它可以用来已加入下面的例子程序:
* ps3exploit - 运行需要利用PS3的,它循环的,可以作为一个参数指定的次数的软件。 (这仍然必须使用与“紧迫”按钮一直以来,它不会利用通过软件单独PS3的)。
* dumphv - 转储管理程序到当前目录.* dumpbl - 转储引导加载到当前目录的文件。
* dumprom - 系统ROM转储到当前目录中的文件。

该XorHack包中包含的一切包括geohot的开发源代码中,使其更容易阅读和理解重写(新文件kmod /全源码exploit.c)。重写不只是修复编译警告,它试图取代所有的算法和推理以及整理的代码和评论这一切的“神奇的值。我还增加了一个系统调用#21,允许执行代码在hypvervisor情况。由于相关的复杂,但它不能从用户模式可用,它是要在内核空间使用高级用户使用。一些细小的调整也作出了时间和得到的文字打印在屏幕上,使开发更容易,希望更稳定的使用。我建议XorHack当两个如何处理利用工程,在实际寻找触发这个漏洞。

XorHack是由三部分组成。内核模块,用户空间库文件,最后在自己的用户空间程序。为了建立所有三个部分首先需要提取XorHack zip文件的内容对你的PS3硬盘上的目录。接下来,您需要导航在命令行上的目录您解压缩文件。您应该可以登录为root或以root身份运行的感谢“su命令。现在输入“make”构筑XorHack各地。然后,一旦完成输入“make安装”安装的XorHack各地。如果你想你可以输入“在这同一个目录卸载到从系统中删除所有的XorHack。当您在系统上安装它总是使用准备XorHack,即使在重新启动之后将自动重新加载并投入使用。

若要使用XorHack利用执行PS3上首次安装按上面的指示它。然后,您需要切换到控制台模式(没有GUI)。这是必需的,因为它是唯一的方法可以看到从内核模块的印刷信息知道什么时候按下按钮。一旦利用其他所有程序都可以运行在GUI模式下的终端窗口正常。要切换到控制台模式按Ctrl + Alt +键盘上的F1。要切换到GUI模式按Ctrl + Alt + F7键。当你进入控制台模式下,您将与一个登录屏幕的欢迎。现在,登录您的普通用户帐户和密码,键入“ps3exploit 100”。这将启动循环利用的100倍,您需要成功地故障控制台上按您的故障硬件的按钮。这个想法是执行在没有其他故障是发生在你的PS3。因此,有些事你可以尝试利用时,以帮助您的机会是:

*只有按下按钮每一次循环。
*尝试按围绕两对“新闻信息并行打印按钮暂停中间的按钮。
*不要启动后按第十届“按钮,按下按钮,直到消息(本系统应做准备装载和运行的新代码,因此不太可能与干预过程中发生的这些阶段的时间)
*运行ps3exploit软件最初启动电脑后,PS3和切换到控制台没有先进入GUI模式记录登录。
*启动后,PS3和切换到控制台模式马上,登录,然后等待大约在运行ps3exploit因此,任何可能发生的进程,登录后/启动已完成分钟。
*不要使用任何服务,将导致更多的工序在运行,直到完成开发。这包括服务如您对桑巴舞PS3的事情。
*一旦您成功地利用,停留在控制台模式有机会就越不稳定造成混乱和崩溃你的PS3。

PS3的漏洞游戏!

一旦你可以利用它运行的时间变成游戏。把它看成是在两者之间取得了一个马里奥卡丁车比赛,跳舞***用手指垫启动涡轮增压交叉。游戏的目的是利用它攻击你的情况下尽快PS3的。下面是我的排行榜表图片显示我的三峡排行榜!

精华
0
帖子
321
威望
0 点
积分
332 点
注册时间
2006-3-5
最后登录
2015-8-12
发表于 2010-3-7 17:17:45 |显示全部楼层
看得懂...可是懒得看.

圣骑士

太古仓仓管

精华
0
帖子
3498
威望
0 点
积分
3590 点
注册时间
2006-5-6
最后登录
2019-12-10
发表于 2010-3-7 17:18:42 |显示全部楼层
看不懂,很想看得懂……
该用户已被禁言

精华
0
帖子
3712
威望
0 点
积分
4929 点
注册时间
2009-5-21
最后登录
2019-12-9
发表于 2010-3-7 17:20:17 |显示全部楼层
又是破解那点儿事儿么~ 没兴趣看..

留名吧
该用户已被禁言

精华
0
帖子
199
威望
0 点
积分
229 点
注册时间
2006-10-2
最后登录
2019-11-26
发表于 2010-3-7 18:20:55 |显示全部楼层
2L翻译帝,鉴定完毕

精华
0
帖子
2118
威望
0 点
积分
2080 点
注册时间
2004-2-4
最后登录
2019-12-11
发表于 2010-3-7 18:21:57 |显示全部楼层
留给rf看吧。。。。。

审判者

Thank you for smile

精华
0
帖子
14884
威望
0 点
积分
16656 点
注册时间
2005-1-10
最后登录
2019-12-5
发表于 2010-3-7 18:23:11 |显示全部楼层
需要控制台,难怪只能厚机
nds

轮回者

水至清无鱼~人至贱无敌

精华
11
帖子
570274
威望
16 点
积分
585047 点
注册时间
2004-2-26
最后登录
2019-12-7
发表于 2010-3-8 09:51:20 |显示全部楼层
实在跟看天书一样......

终结者

任天堂骑士团本质骑士

精华
0
帖子
10292
威望
0 点
积分
10623 点
注册时间
2006-11-6
最后登录
2017-1-1
发表于 2010-3-8 09:53:08 |显示全部楼层
不是早就破解了 连D盘都有了 连FFV13都出了
您需要登录后才可以回帖 登录 | 注册

Archiver|手机版|A9VG电玩部落 ( 京ICP备16021487号-4 京公网安备 11010802027580号 )

GMT+8, 2019-12-11 22:43 , Processed in 0.191428 second(s), 22 queries .

Powered by Discuz! X2

© 2001-2011 Comsenz Inc.

扫描二维码

下载 A9VG 客户端(iOS, Android)

回顶部