vitasploit - Exploitation Framework

[Hykem]

Do we know the what the Vita's kernel is based on? I recall somewhere that it was based on FreeBSD? Please correct me if I am wrong.

http://en.wikipedia.org/wiki/PlayStatio ... m_software
http://www.scei.co.jp/psvita-license/freebsd.html

Advertising

[x86]

There are some recently revealed kernel exploits:
https://www.exploit-db.com/exploits/35938/


This is beyond my current understanding of an OS works, but I hope this will help someone else.

Advertising

[Hykem]

There are some recently revealed kernel exploits:
https://www.exploit-db.com/exploits/35938/


This is beyond my current understanding of an OS works, but I hope this will help someone else.

Unfortunately, none of those exploits could work on the Vita. The first exploit described targets the vt console driver, which is not implemented on the Vita's OS and the other two target the SCTP socket option which, again, is not used by the Vita. The getsockopt/setsockopt system calls do exist, but only work with SOL, IP or TCP.

[tudisawap]

Can we open - Package Installer (NPXS10031) on 3.36 frimware ?

[Avidity_X]

How can we test this vitasploit for fw 3.36? I started server.py as the instructions say, but have no idea what to do next.

[smithsf0x]

Hykem is currently busy so we have to wait.

[Dessel]

How can we test this vitasploit for fw 3.36? I started server.py as the instructions say, but have no idea what to do next.

https://github.com/Hykem/vitasploit#instructions

[Hykem]

I apologize for the long absence, I've been terribly busy. There are indeed a few issues with the 3.36 version, but I'll get to fix them with "smithsf0x" as soon as possible.
Thank you for your patience!

[bollafa]

Hello, for some reason when I connect my vita to the python server, it gets stuck at loading utils,
I have included document.write("Hello!") to test if initMemoryHole runs but it doesnt get called

Thanks in advance!

[smithsf0x]

As mentioned above, the vitasploit for 3.30-3.36 is WIP. I looked over it and with some changes I got the initMemHole and some others to work but there are still some problems.
Stay patient till Hykem and I get enough time to fix the things : )
(I should have time in two weeks or so / I don't know whats about Hykem)


### edit ###
download HERE ...we got some text on the Vita...or so