Skip to content

Next steps #1

Description

@hitodama

Base infrastructure

  • Minimal stand-alone kernel-only lib
  • Cleanup libps4 (breaking changes), separate user and kernel calls, restructure headers a bit (=> ended up being a modular re-write ^^')
    • Mix and match approach (use and link-in what you need from kernel only to sce libc + pad to magically mixed kernel-user-space-shifting-privledge-escalating builds)
  • Optimize for static build (multiple translation units) - no hurry
  • Re-purpose hooks function to a man-in-the-middle interface (observe
    calls and/or intercept)
  • Rename current simple hooks to "patch to jump to" (or so)
  • Make "run" interface dynamic (choose between main, syscall, ... signature)

Kernel

  • Kernel proc example
  • Kernel (proc) elf loader
  • Remote peek, poke, seek and hook payload

Stability and progress

  • Look into sceSbl is/has checks for a complete patch out payload
  • Look into dlsym and sprx stuff to get symbols etc., find and read out

Further insights

  • Ptrace process tool (?)
  • Reverse structures, fix structs
  • Look into update unpack and warm reboot (no real idea whats possible
    there atm)
  • Look into local load via SQL / menu hack

The efforts above are code-named buster.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions