Tuesday, May 31, 2005

6 ways to crash the Wipeout Browser

tbminc over at ps2dev was been able to put the wipeout browser into a buffer overflow mode and execute other system functions. This looks promising for doing an exploit.

With help of #pspdev i was able to continously call "sceKernelSleepThread", so sound continued but browser crashed. yay.

The binary is in fact loaded to 08900000. That location seems to be "static", it isn't randomized or so.

Next big task is to place some more interesting code somewhere where we know the memory address of. I haven't succeeded here for now.

Damn, i wish i had a ramdump of the running game...

If anyone has info for him, or wants to start trying this for themselves check out this thread:

http://forums.ps2dev.org/viewtopic.php?t=1948

posted by LiquidIce at 4:57 AM

0 Comments:

Post a Comment

<< Home

Previous psphacks

• 1.50, 1.51 Homebrew Exists
• PSP Homebrew Exploding
• PSP Emulator for PC
• PSP Firmware 1.0
• Second PSP Emulator: SNES
• First PSP Emulator: GB
• PSP Firmware Dumper 1.0
• Downgrade PSP Firmware to 1.0
• In Depth Look at the Wipeout Pure Files
• PSP File System Access