Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Next steps #1

Open
8 of 16 tasks
hitodama opened this issue Apr 27, 2016 · 0 comments
Open
8 of 16 tasks

Next steps #1

hitodama opened this issue Apr 27, 2016 · 0 comments

Comments

@hitodama
Copy link
Contributor

hitodama commented Apr 27, 2016

Base infrastructure

  • Minimal stand-alone kernel-only lib
  • Cleanup libps4 (breaking changes), separate user and kernel calls, restructure headers a bit (=> ended up being a modular re-write ^^')
    • Mix and match approach (use and link-in what you need from kernel only to sce libc + pad to magically mixed kernel-user-space-shifting-privledge-escalating builds)
  • Optimize for static build (multiple translation units) - no hurry
  • Re-purpose hooks function to a man-in-the-middle interface (observe
    calls and/or intercept)
  • Rename current simple hooks to "patch to jump to" (or so)
  • Make "run" interface dynamic (choose between main, syscall, ... signature)

Kernel

  • Kernel proc example
  • Kernel (proc) elf loader
  • Remote peek, poke, seek and hook payload

Stability and progress

  • Look into sceSbl is/has checks for a complete patch out payload
  • Look into dlsym and sprx stuff to get symbols etc., find and read out

Further insights

  • Ptrace process tool (?)
  • Reverse structures, fix structs
  • Look into update unpack and warm reboot (no real idea whats possible
    there atm)
  • Look into local load via SQL / menu hack

The efforts above are code-named buster.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant