Wololo e il sistema per scovare exploit

Wololo torna a far parlare di se, rilasciando un file, volto a tutti gli sviluppatori, che permetterà di trovare exploit per far eseguire HBL su PS Vita. Il file necessita di qualche aggiustata ma , una volta ultimato, farà diminuire il tempo da una settimana ad appena qualche ora per tutti coloro che cercano un exploit.

Di seguito la guida (in inglese) di Wololo con il rispettivo link al file.

1. Write your binary loader
2. While displaying your hello world in psplink, type malloc 2 test l 2048but 00, this will give you an address to load HBL. Note down this address
3. still in the same psplink session, type uidlist > uidlist.txt in order to save the current essential UID information
4. still in the same session, type savemem 0×08800000 0×01800000 memdump.bin to dump the user memory
5. copy the file uidlist.txt and the file memdump.bin to the tools folder of HBL (where gen_exploit_config.rb is). Make sureuidlist.txt is encoded in unix format, convert it if that’s not the case.
6. Copy the file sdk.S from your exploit into the tools folder of HBL. you should now have, in addition togen_exploit_config.rb, uidlist.txt, sdk.S, and memdump.bin
7. run gen_exploit_config.rb. It should create an “output” folder which will have most of the necessary files for HBL compilation
8. Edit the 2 “TODO” sections of output/exploit_config.h, one with the HBL address you obtained above, the other one with the id of your game (e.g. UCUS12345)
9. Copy the files from the output folder to your exploit folder in HBL, follow the HBL port tutorial to get the 1 or 2 missing files, and Compile
10. Profit