152w ago - Yesterday
SKFU announced that his PS3 hacking team started a
PS3 Blu-ray drive Project, and today he is back with a PS3 Exploit Loader and POC v0.1 release!
Download:
SKFU's PS3 Exploit Loader and POC v0.1 /
SKFU's PS3 Exploit Loader and POC v0.1 (Mirror)
While many are still hoping for
PS3 Custom Firmware, this proof-of-concept appears to mimick
GeoHot's
PS3 Custom Themes Hack Demonstration, however, instead of using PlayStation 3 .RCO File editing via
RCOMage or similar,
SKFU utilizes the Sony application
p3tcompiler.exe from the official SDK.
To quote from
SKFU: "So here is the result of the simple idea. The first code which is 100% PS3 only compatible. No flash, no bd-java or similar. The actual exploit is not finished. This is just the loader you will need and a proof of concept of the methode used to load it.
This is a beta version of the POC as I'm too tired to finish it now but I don't wanna' let you wait so long. Here you go:
How 2 Use:
1. Install loader.p3t like a common theme file.
2. Put loadme.fu on an USB stick's root dir.
3. Insert USB device into any PS3 USB port.
4. Enable the theme you just installed before.
5. Hello World.
How It Works:
The PS3 theme file is able to load the loadme.fu script from any USB port. The script is executed. The "loader" is for future-use aswell to load any .fu files which I'll release. Stay tuned for updates!"
Shortly following,
SKFU elaborated on the PS3 Exploit Loader and POC v0.1, as follows:
"SKFU's Exploit Loader - What it is and what not
Some of you may expect a little bit too much out of this. The code used runs in a very restricted area. Currently we test how far we can go into direction "overflow" and system param's we can access.
So far it's possible to command the script a bit via system parameters like the clock. The clock can be used as provider of input, for example to command simple textures in different directions or similar.
This is no exploit yet, if you may have missed that statement in the prior post. It's just a way to load scripts via USB now.
Further tests will show us what is possible at all. The information needed was given to several more devs so they can take part in the action.
- SKFU"
PS3 was $600 when it came out. Why be surprised?...
If the images it needs can only reside in the "loadme.fu" file itself, would it be possible to domehow corrupt the USB to make it read further than whats actually there, say getting a 512mb USB, and putting a "loadme.fu" file that is supposedly 4GB on it (mess with the partition file headers, it's definitly possible, my USB has become corrupted before and had massive files appear that cant be deleted)?
From there, if the PS3 loaded something dodgy, like RAM or part fo the harddrive when it exceeded the size of the USB, you could get the loadme.fu file to read from that area, and show it on the screen, maybe even write to it. It's all hypothetical, and I don't really know the PS3's security, but it may be worth a try. Just my noob thoughts on the matter.