Skip to content

Next steps #1

@hitodama

Description

@hitodama

Base infrastructure

  • Minimal stand-alone kernel-only lib
  • Cleanup libps4 (breaking changes), separate user and kernel calls, restructure headers a bit (=> ended up being a modular re-write ^^')
    • Mix and match approach (use and link-in what you need from kernel only to sce libc + pad to magically mixed kernel-user-space-shifting-privledge-escalating builds)
  • Optimize for static build (multiple translation units) - no hurry
  • Re-purpose hooks function to a man-in-the-middle interface (observe
    calls and/or intercept)
  • Rename current simple hooks to "patch to jump to" (or so)
  • Make "run" interface dynamic (choose between main, syscall, ... signature)

Kernel

  • Kernel proc example
  • Kernel (proc) elf loader
  • Remote peek, poke, seek and hook payload

Stability and progress

  • Look into sceSbl is/has checks for a complete patch out payload
  • Look into dlsym and sprx stuff to get symbols etc., find and read out

Further insights

  • Ptrace process tool (?)
  • Reverse structures, fix structs
  • Look into update unpack and warm reboot (no real idea whats possible
    there atm)
  • Look into local load via SQL / menu hack

The efforts above are code-named buster.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions