Pool Exploit: How does Qwikrazor’s firmware 3.50 exploit actually work?
Since Wololo just publicly announced the exploit game(s), we also thought of showing you how to properly use said exploits.
This should prevent people from asking us how to actually use the exploit.
If you are a friend of audio-visual tutorials, feel free to watch the following video.
It showcases how to use the exploit on your 2-device-combination (I used a FW 6.20 PSPgo & a FW 3.36 PS Vita).
If you prefer it in text form, then keep reading.
How to set up the exploit on your two devices?
At first the device you want to hack:
Pretty simple. At first you have to buy the exploit game (Europe: World of Pool | North-America: Pool Hall Pro) from the PSN store and download/transfer it straight onto your PS Vita.
Keeping the game on another device might render you unable to transfer it onto your PS Vita at a later date!
Then you have to transfer the savedata files, which are for the device you want to exploit, onto your PS Vita as well. This is everything you have to do on your ‘soon to be hacked PS Vita’.
Next, the already hacked device that is assisting you:
You either need a hacked Playstation Portable or a hacked Playstation Vita. With ‘hacked’ we mean that the device has to run a 6.xx CFW (ME, LME, PRO & TN?) or any of the PSPemulator eCFWs (TN-C, TN-V, ARK or ARK-2).
‘Fancy’ PSP Emulators (like PPSSPP) for PC, iOS & other plattforms are not supported. You will need a Sony handheld device for this.
Supported Playstation Portable models: PSP 1000, PSP 2000 (including the TA-088v3), all PSP 3000s & the PSPgo. – No PSP E1000 support, due to its lack of Wifi!
Supported PS Vita models: PS Vita 1k (fat), PS Vita 2k (slim) & PS TV (VitaTV).
In case you are using a hacked PSP running a 6.xx CFW:
Put the savedata files for the hacked device onto your Playstation Portable (into the /PSP/SAVEDATA/ directory) and put the necessary Plugin into the /seplugins/ directory.
Don’t forget to enable the plugin inside of the GAME.TXT file, since the plugin is required!
You also have to use the same game you are using on your PS Vita. It does not matter if you use the PSN Version of your Pool game, or if you are using an ISO/CSO, as long as it is the same game.
In case you are using a hacked PS Vita (TV) running an eCFW:
It is pretty much the same on the PS Vita.
Copy the savedata files for the ‘hacked device’ onto your eCFW PS Vita, and add the exploit game onto your PS Vita (either as bought PSN Version, ISO/CSO or Custom Bubble).
Be sure to activate the plugin for your eCFW. Activate it in the plugins.txt (ARK) or game.txt (TN) inside of the eCFW’s exploit savedata folder (ARK) or seplugins folder (TN-V).
Files transfered and now?
Next you have to activate the wifi function on both of your devices, and be sure that the hacked device has activated the Plugin for the exploit game.
If those things are how they should be, start the exploit game on both devices and load their respective savedata files.
On the hacked device you go to ‘Multiplayer -> host game’, while on the unhacked device you go to ‘Multiplayer -> join game’.
The unhacked device should find your hacked device’s game sessions, which trigger the exploit on the unhacked device.
What happens is pretty easy to describe: The hacked device is sending the exploit’s payload, via the Multiplayer feature of the exploit game, to the unhacked device, which then will exploit said unhacked device.
Troubleshooting:
My unhacked device just froze, what now?
Since the kernel mode exploit is not as good as the previously released ones (the one for 3.36 wasn’t that good either), it might crash the PSPemulator instead of exploit it.
At first wait if something is happening (it can take a while until the exploit triggers), if nothing happens after 2 minutes shutdown your device.
In that case just keep the power button on your PS Vita pressed and it should shutdown/reboot by itself.
After the device has rebooted, try it again. It might take a few tries.
It successfully loaded, but then crashed the PSPemulator?
Be sure that you have transfered all the necessary savedata folders (exploit game’s folder & ARK-2 eCFW’s folder) onto your unhacked PS Vita and try it again.
It is still not working, help me please!
Tripple check if everything is where it should be. Does the hacked device have the savedata files for the hacked device? Is the plugin activated?
Does the unhacked device have the savedata files for the unhacked device?
Did you host via hacked device, and join via unhacked device?
There are a lot of possiblities what could be wrong, try to hunt down every mistake you might have made and correct it.
Check Wololo’s little FAQ about the released exploit for more information!
In the end we should all thank Qwikrazor for giving us exploits for each new firmware, even thought he does not have to do this.
What used to be a release once a year (firmwares 1.81, 2.02, 3.01, 3.20), has turned into multiple releases (3.36, 3.50) each few months, thanks to Qwikrazor.
If you want to support Qwikrazor, why don’t you donate him a few bucks for releasing his exploits?!
If anyone else is having trouble i don’t blame you this is crazy to do lol, but we are all here to help,, I feel bad for others who don’t get to have access to hacking the Vita this way plus you had to have such things for it
I am officialy going from m33 5.00 to Pro just for this update for the Vita.
I cant believe we use our PSP’s again, though?
I think I officially hate you Z… came here thinking the files for the exploit had been released. Not cool
Do you have any idea gown his site works? They usually wait 48 hours after song pulls the game from psn to release the files.
A release would have “release” in the title. And I dont release the files, Qwik or Wololo do.
How long does it take? Until the Save File
Z pls give us save file T.T
PSPGo and PSTV both set up and waiting for the official release. You guys are awesome!
If anyone is planning on doing this through their router you may also need to adjust some settings if you are using a PSP as your attacking device. The PSP only supported 802.11b so if you’re using security that means only WEP, or WPA. Don’t forget to change your settings back after the attack!
The entire communication between the PSP and the Vita will be made over an ad hoc connection. So there is no need to change settings on your router.
Hi all. Just a thought, exploit uses 2 devices. What chance to use pc and ps vita, did not had any need to try out ad-hoc pc/ps but if it works maybe its possible:) Oh and sorry ain’t gonna try my self since i’m still on 3.18:)
Ups sorry again didn’t finish reading, looks like not supported.
In theory someone could hack together a program to do this from a pc, but that’s far more effort than just using a PSP or already hacked Vita.
PSP helpers??! Help!
I seriously now need help, I’m on OFW 6.60 on PSP and I cannot install 6.60 Pro B or C, when I start the update and run it , I press x and it doesnt reboot itself, but shuts down the psp
And when I reboot its still on OFW 6.60.
http://zload.net/v2/help/
Read that. Everything will work out fine.
OmG its like a climbed a mountain -_-
I’m sorry people or others who enjoyed my min fraustrations on here,
I finally got 6.60 Pro B i just basically formated my memory card, ugh, but whatever its Vita I care to play on
Both games are ready and also testing the multiplayer and all ready..
Awaiting for the files..
There was a much easier way to do it. You could have just followed the guide the first time I linked it in reply to one of your posts.
Yea but it wasnt really much and i found out about Pro instead since i updated to 6.60
I also got confused but now I finally at least am at a cfw for this hack.
Anyone else who has a PSP and still at 6.60 at least the hack it to PRO C and you are good to go.
That link was literally a step by step walkthrough of what to do on every possible PSP device that exists. That is completely the opposite of “wasn’t really much”. :/
Thanks for the news, gonna try it with my old psp go under tn-c when the files will be released, hope it will work, too lazy to update it atm xD
You might want to update it to a proper CFW, like LME or PRO.
6.xx TN has not been tested.
Remember people you gotta have your wi fi set up and working ,
All we can do is now wait, psp is awaiting
Zett when we get psone loader for 3.36
Most likely never. 3.3x/3.50 wont get TN-V/TN-X or PSOneloader until someone updates those for 3.3x/3.50.
The Z can I use my computer’s psp emulator to use the exploit or not because it can use ad-hoc mode?
never mind I just read the rest of it
can you please link the files we need to do this? thanks
Not released yet. Keep an eye out on this blog, you will see them soon.
ps 2k world of pool eu exploit thanks
🙂
So do we make our own savedata on psvita?
I bet 😛
https://twitter.com/qwikrazor87/status/585247113258242048
This article is only confusing people, why post it now? It would have been better to post this when the files are actually released. Is wololo running out of content to write about?
dont have ark-2 for 3.5 :(( . i dont want to join exploit game every time i want to hack my ps vita . cause if i have 1 devices like psp i dont need to hack any more @@~ help me pls
@ytlooc exactly my thoghts
will updating my content manager make my fw 3.18 vita not be able to access it? will it get rid of open content? manager?
i have a 3.50 vita too that why i am asking
This exploit was found back in 2013 by other guy ;))
now known to do bubbles in 3.50, the way to do it was published ?
sorry for my English .
http://wololo.net/2015/03/30/bubbles-giveaway/
bubbles in 3.50
this’ll work for 3.20 right?
My PS VITA 3.36 does not found my PSP 6.60 PRO B10.
I already saved the ps vita and psp save data and also set up the plugin on psp hacked e add a line in GAME.txt
any help here?
thks in advance
i’m still trying , and i found now that some times it make my psp to shutdown.
I think that is related what plugins are activated:
im using this configuration on GAME.txt
ms0:/seplugins/PCT2.prx 0
ms0:/seplugins/AdHocToUSB.prx 0
ms0:/seplugins/screenshotbmp.prx 1
ms0:/seplugins/php_adhoc_exploit.prx 1
maybe the second one is the problem…
I have both pool hall pro and ape escape on the loose on my NA psn account while numblast on my Hongkong PSN account. Which one should I use
If pro-c2 can