Vita native hack: vitasploit released by Hykem

Native vita hack news keep coming for those of you who managed to keep their Vita in firmware 3.18 or under.



Yesterday, developer Hykem released his own set of tools to leverage the Webkit exploit on the PS Vita . (If you don’t know who Hykem is, just know that he’s been on the scene for quite some time now, and has experience on lots of Sony’s stuff). Download links at the bottom of the article

Vitasploit is an attempt at merging all the ongoing efforts (memtools_vita, JSoS Module Dumper, akai,…) and improving on them. Hykem says some of the code has been cleaned up, and made more generic (“The scripts can be used for both memory reading/writing and ROP code execution by changing a single variable.”).

Additionally, he plans to port the scripts to as many firmwares as possible (3.30+ owners, remember, we’re talking of an exploit that works up to 3.18 here. When you read “as many firmwares as possible”, it means anything at 3.18 or below!), with the ultimate goal of reverse engineering various versions of the modules, to understand what has changed, and maybe find even more vulnerabilities, or understand how the NID poisoning was implemented (that was apparently added in firmware 2.xx)


Screenshot thanks to @HarryKnucklez

Hykem also released a full list of the modules that can be dumped through the exploit, with BBalling1/nas’s work:
SceAacenc.seg0.bin
SceAacenc.seg1.bin
SceAppUtil.seg0.bin
SceAppUtil.seg1.bin
SceAtrac.seg0.bin
SceAtrac.seg1.bin
SceAvcodecUser.seg0.bin
SceAvPlayer.seg0.bin
SceAvPlayer.seg1.bin
SceBeisobmf.seg0.bin
SceBeisobmf.seg1.bin
SceBemp2sys.seg0.bin
SceBemp2sys.seg1.bin
SceClipboard.seg0.bin
SceClipboard.seg1.bin
SceCommonDialog.seg0.bin
SceCommonDialog.seg1.bin
SceDriverUser.seg0.bin
SceDriverUser.seg1.bin
SceFiber.seg0.bin
SceFiber.seg1.bin
SceGpuEs4User.seg0.bin
SceGpuEs4User.seg1.bin
SceGxm.seg0.bin
SceGxm.seg1.bin
SceHafnium.seg0.bin
SceHafnium.seg1.bin
SceHandwriting.seg0.bin
SceHandwriting.seg1.bin
SceIme.seg0.bin
SceIme.seg1.bin
SceLibc.seg0.bin
SceLibc.seg1.bin
SceLibDbg.seg0.bin
SceLibDbg.seg1.bin
SceLibFios2.seg0.bin
SceLibFios2.seg1.bin
SceLibft2.seg0.bin
SceLibft2.seg1.bin
SceLibGameUpdate.seg0.bin
SceLibGameUpdate.seg1.bin
SceLibHttp.seg0.bin
SceLibHttp.seg1.bin
SceLibKernel.seg0.bin
SceLibKernel.seg1.bin
SceLibLocation.seg0.bin
SceLibLocation.seg1.bin
SceLibLocationExtension.seg0.bin
SceLibLocationExtension.seg1.bin
SceLibMp4Recorder.seg0.bin
SceLibMp4Recorder.seg1.bin
SceLibNetCtl.seg0.bin
SceLibNetCtl.seg1.bin
SceLibPgf.seg0.bin
SceLibPgf.seg1.bin
SceLibPspnetAdhoc.seg0.bin
SceLibPspnetAdhoc.seg1.bin
SceLibPvf.seg0.bin
SceLibPvf.seg1.bin
SceLibRudp.seg0.bin
SceLibRudp.seg1.bin
SceLibSsl.seg0.bin
SceLibSsl.seg1.bin
SceLibVitaJSExtObj.seg0.bin
SceLibVitaJSExtObj.seg1.bin
SceLibXml.seg0.bin
SceLibXml.seg1.bin
SceLiveAreaUtil.seg0.bin
SceLiveAreaUtil.seg1.bin
SceMp4.seg0.bin
SceMp4.seg1.bin
SceMusicExport.seg0.bin
SceMusicExport.seg1.bin
SceNearDialogUtil.seg0.bin
SceNearDialogUtil.seg1.bin
SceNearUtil.seg0.bin
SceNearUtil.seg1.bin
SceNet.seg0.bin
SceNet.seg1.bin
SceNetAdhocMatching.seg0.bin
SceNetAdhocMatching.seg1.bin
SceNgsUser.seg0.bin
SceNgsUser.seg1.bin
SceNotificationUtil.seg0.bin
SceNotificationUtil.seg1.bin
SceNpActivity.seg0.bin
SceNpActivity.seg1.bin
SceNpBasic.seg0.bin
SceNpBasic.seg1.bin
SceNpCommerce2.seg0.bin
SceNpCommerce2.seg1.bin
SceNpCommon.seg0.bin
SceNpCommon.seg1.bin
SceNpManager.seg0.bin
SceNpManager.seg1.bin
SceNpMatching2.seg0.bin
SceNpMatching2.seg1.bin
SceNpMessage.seg0.bin
SceNpMessage.seg1.bin
SceNpPartyGameUtil.seg0.bin
SceNpPartyGameUtil.seg1.bin
SceNpScore.seg0.bin
SceNpScore.seg1.bin
SceNpSignaling.seg0.bin
SceNpSignaling.seg1.bin
SceNpSnsFacebook.seg0.bin
SceNpSnsFacebook.seg1.bin
SceNpTrophy.seg0.bin
SceNpTrophy.seg1.bin
SceNpTus.seg0.bin
SceNpTus.seg1.bin
SceNpUtility.seg0.bin
SceNpUtility.seg1.bin
ScePhotoExport.seg0.bin
ScePhotoExport.seg1.bin
ScePsp2Compat.seg0.bin
ScePsp2Compat.seg1.bin
SceSasUser.seg0.bin
SceSasUser.seg1.bin
SceScreenShot.seg0.bin
SceShellSvc.seg0.bin
SceShellSvc.seg1.bin
SceShutterSound.seg0.bin
SceSqlite.seg0.bin
SceSqlite.seg1.bin
SceSystemGesture.seg0.bin
SceSystemGesture.seg1.bin
SceTeleportClient.seg0.bin
SceTeleportClient.seg1.bin
SceTeleportServer.seg0.bin
SceVideoExport.seg0.bin
SceVideoExport.seg1.bin
SceVoice.seg0.bin
SceVoice.seg1.bin
SceVoiceQoS.seg0.bin
SceVoiceQoS.seg1.bin
SceWebFiltering.seg0.bin
SceWebFiltering.seg1.bin
SceWebKit.seg0.bin
SceWebKit.seg1.bin
SceWebKitProcess.seg0.bin
SceWebKitProcess.seg1.bin
Hykem invites everyone to contribute to the code. To all of you who have always wondered “how can I help the console hacking effort”, now’s the right time to dig into the code: as everyone makes baby steps and everything is new, this is the best time to learn the basics and contribute!

http://wololo.net/2014/11/14/vita-na...ased-by-hykem/