LibTiff Exploit for 5.03

[Demonchild]

The classic tiff exploit makes a return on 5.03. Looks like MaTiaZ, the same guy behind the Gripshift expliot has posted it.

Originally Posted by Readme

Hello World for PSP firmware 5.03

The days of TIFF based exploits aren't long gone, at least not yet
Here's the third TIFF exploit for the PSP, enjoy.

Just copy the files to the memory stick root, disconnect USB and go to photo menu.
Don't dismiss the exploit even if it doesn't work on the first time, it's *very* unstable.
You might get it working on the first time, but you might as well have to try it 20 times!

The h.bin is loaded to 0x08800000, and the text address of paf.prx is passed in $a0 to the
binary code. You can then trick out function imports, like for example sceDisplayWaitVblankStart:

sceDisplayWaitVblankStart = (void*)(paf_addr+0x15F068);

This release works _only_ on fat PSPs. The slim version will come out later.

I'm not gonna include a list of credits here, I'll just forget some important names and then
I'll be screwed The people who need to be credited will know it anyway.

Have fun!

P.S. Just wait a few days, there's a bit of awesomeness coming up.

- MaTiAz

Source: http://forums.mformature.net/showthread.php?t=2242

[RainMotorsports]

And 5.06 will be out tomorrow lol nice find.

EDIT - This actually fckn WIN because it doesnt need a game but its also eh cuz of no downgrader.

[p0op]

Awesome .

[Xitherun]

only works on the phat?

bah. Then, imo, it's pretty pointless, as all phats can be hacked by Pandora anyway.

once they get it working on slims, then it's worth talking about.

[BCman]

cool.
just another slap to Sony's face.
this simply proves that ppl are still working on exploiting the psp and will prove very eventfull in the near future....
with small steps greatness will follow....

[pspjoke]

tried it on my phat running 5.03 TDP-3
might not be compatible with the custom fw. custom modules might have some effect. idk. to much work to push a button over and over tho.. wore me out.

[Demonchild]

Originally Posted by pspjoke

tried it on my phat running 5.03 TDP-3
might not be compatible with the custom fw. custom modules might have some effect. idk. to much work to push a button over and over tho.. wore me out.

You don't think that unsigned code would already allow unsigned code to run? I think .tiff overflows also occur due to buffer overflows as well.

[pspjoke]

Originally Posted by Demonchild

You don't think that unsigned code would already allow unsigned code to run? I think .tiff overflows also occur due to buffer overflows as well.

i don't think you understood what i said, luckily i have no real need to explain so ill go play mercs 2 instead. lol
(wish someone else i knew had it.)

[Aaron*1]

Cool... So sony have been burned again... Well hopefully there's something that comes out of this, maybe more development into hacking newer slims and he 3000s...

[Sparker]

I dunno about you guys, but I don't find this very exciting for me for some weird reason.