Skip to content

v4.1.0

Compare
Choose a tag to compare
@hammer-83 hammer-83 released this 25 Feb 07:26
· 6 commits to main since this release

Notable New Features

  • Multiple SDK improvements.
  • Implemented paged DMA transfers.

Notable Fixes

  • Jailbreak JAR now works with Menu Loader and is included in Full ISO.
  • Previously inaccessible directories can now be read (bug in usage of native file i/o).

Notes

  • See commit logs for full list of changes.
  • New payloads are not compatible with previous JAR Loader version and vice-versa.
  • Full ISO includes a menu and all the JARs as of this release. Trimmed ISO includes only the remote JAR loader, payloads need to be sent over network.

Payloads:

  • UMTX bug implementations from flat_z, Cryptogenic and cheburek3000 adapted to this SDK. Each one of them can be used to obtain kernel read/write. Note: UMTX1 is the recommended payload. As stability improves, other implentations will be deprecated and eventually removed.
  • Byepervisor implementation from Cryptogenic.
  • Kernel dumper. Once kernel r/w is obtained, send this payload to dump the kernel. If byepervisor was run first, it will dump text and data. Otherwise, only data will be sent. Use netcat on a computer to receive the kernel binary by connecting to the PS5 on port 5656.
  • Jailbreak implementation which makes BD-J process run with superuser and escapes it from /app0 jail.
  • FTP server (with root access after jailbreak).
  • Klog server. Not very stable when a client is connected to it.
  • Debug Settings. Activates/deactivates debug settings (deactivation only works within initial BD-J process).
  • Samples:
    • Mini tennis game.
    • System properties printer.
    • Dump current classpath of JVM, including java.base module (may not work on all firmwares).
    • Dump information about BD-J process (requires kernel r/w).
    • List of all directories in the filesystem using native calls.