geohot’s PS3 Exploit Released
Posted by greg on January 26, 2010
Geohot has released his PS3 exploit to the masses… This particular exploit is for research purposes only; it won’t serve the average user any real purpose. So now it’s on you — all you hardcores out there.
A couple things you should know:
You need a non-Slim PS3;
You need OtherOS installed.
Once you’ve soldered the appropriate connections (see pokemehere.jpg) and have loaded whatever Linux distro with OtherOS, you’re all set… Download the exploit below and:
Compile and run the kernel module.
When the “PRESS THE BUTTON IN THE MIDDLE OF THIS” comes on, pulse the line circled in the picture low for ~40ns.
Try this multiple times, I rigged an FPGA button to send the pulse.
Sometimes it kernel panics, sometimes it lv1 panics, but sometimes you get the exploit!!
If the module exits, you are now exploited.
This adds two new HV calls,
u64 lv1_peek(16)(u64 address)
void lv1_poke(20)(u64 address, u64 data)
which allow any access to real memory.
The PS3 is hacked, its your job to figure out something useful to do with it.
http://www.ps3-hacks.com/
http://geohotps3.blogspot.com/2010/01/heres-your-silver-platter.html