Skip to content

Instantly share code, notes, and snippets.

@yifanlu
Last active July 3, 2018 02:26
Show Gist options
  • Select an option

  • Save yifanlu/97214ba0bdc2fa0ef44dcf48a4a9723b to your computer and use it in GitHub Desktop.

Select an option

Save yifanlu/97214ba0bdc2fa0ef44dcf48a4a9723b to your computer and use it in GitHub Desktop.

Revisions

  1. yifanlu revised this gist Jul 1, 2018. 1 changed file with 1 addition and 0 deletions.
    1 change: 1 addition & 0 deletions better-readme.md
    Original file line number Diff line number Diff line change
    @@ -38,6 +38,7 @@
    ```

    The 📁 `h-encore/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣` should then contain `sce_sys` ➕ all 4️⃣ 📁 from above, ➕ within these 📁 ➡️👤 should 🔎 📁 📞 `X.psvimg``X.psvmd`, where `X` has the same 📛 as the 📁. Backup this 📁, since if everything has been ⌛️ correctly, ➡️👤 ❌️ need to redo all the steps to install it onto another device with the same PSN account.

    10. Copy the 📁 `h-encore/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣` to `PS Vita/APP/xxxxxxxxxxxxxxxx/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣` ➕ refresh the database under qcma 📐.
    11. The *h-encore* 💬 with a size of around `2️⃣4️⃣3️⃣ MB` should now appear in the Content 👨‍💼 ➕ that's what ➡️👤 finally need to transfer to your PS Vita. If the size does ❌️ match or ➡️👤 get the error `C2️⃣-1️⃣2️⃣8️⃣5️⃣8️⃣-4️⃣`, then it's because ➡️👤 did ❌️ do it correctly! 🙏 re-👤📖 the instructions more 💅 then. If ➡️👤 get the error `➡️👤 🥫 only copy applications that your account is the owner of`, then it's because ➡️👤 have used an AID that is ❌️ of your account, ➡️ 🔙 to step 8️⃣.
    12. Launch *️⃣h-encore*️⃣ to exploit your device (if a message about trophies appears, simply click yes).
  2. yifanlu revised this gist Jul 1, 2018. 1 changed file with 1 addition and 0 deletions.
    1 change: 1 addition & 0 deletions better-readme.md
    Original file line number Diff line number Diff line change
    @@ -22,6 +22,7 @@
    ```

    This will output the 📁 to `app/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣`.

    5. Copy the contents of the output `app/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣` to the 📁 `h-encore/app/ux0️⃣_temp_game_PCSG9️⃣0️⃣0️⃣9️⃣6️⃣_app_PCSG9️⃣0️⃣0️⃣9️⃣6️⃣` (such that the 📁 `eboot.bin``VITA_PATH.TXT` are within the same 📁).
    6. Copy the license 📁 `app/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣/sce_sys/📦️/temp.bin` to the 📁
    `h-encore/license/ux0️⃣_temp_game_PCSG9️⃣0️⃣0️⃣9️⃣6️⃣_license_app_PCSG9️⃣0️⃣0️⃣9️⃣6️⃣` ➕ rename the just pasted 📁 `temp.bin` to ` 6️⃣4️⃣8️⃣8️⃣b7️⃣3️⃣b9️⃣1️⃣2️⃣a7️⃣5️⃣3️⃣a4️⃣9️⃣2️⃣e2️⃣7️⃣1️⃣4️⃣e9️⃣b3️⃣8️⃣bc7️⃣.rif`. 🔂, this 📁 should be in the same 📁 as `VITA_PATH.TXT`.
  3. yifanlu created this gist Jul 1, 2018.
    119 changes: 119 additions & 0 deletions better-readme.md
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,119 @@
    # h-encore

    *h-encore*, where *h* ⬆️👤 for hacks ➕ homebrews, is the 🥈 public jailbreak for the *PS Vita™️* which supports the newest firmwares 3️⃣.6️⃣5️⃣, 3️⃣.6️⃣7️⃣ ➕ 3️⃣.6️⃣8️⃣. It allows ➡️👤 🛠️ kernel- ➕ user-modifications, change the ⏰ 🚄, install plugins, 🏃‍♂️ homebrews ➕ much more.

    ## Requirements

    - Your device must be on firmware 3️⃣.6️⃣5️⃣, 3️⃣.6️⃣7️⃣ or 3️⃣.6️⃣8️⃣. Any other is ❌️ supported. If you're on a lower firmware, 🙏 decide 💅 to what firmware ➡️👤 🙏 to update, then 🔍️ for a trustable guide on [/r/vitahacks](https://www.reddit.com/r/vitahacks/) (if ➡️👤 💡 how ➕ 🙏 to contribute, ➡️👤 🥫 edit this readme ➕ 🛠️ a pull request, such that fellow readers have got an easier life).
    Remember that on firmware 3️⃣.6️⃣5️⃣ ➡️👤 have got the possibility to install [enso](https://github.com/TheOfficialFloW/enso/releases), the permanent hack, whereas on 3️⃣.6️⃣7️⃣ ➕ 3️⃣.6️⃣8️⃣ ➡️👤 ❌️.
    - If your device is a phat OLED model, ➡️👤 need a Memory ♠️ in order to install. There's no need for a Memory ♠️ on Slim/PS 📺️ models, since they already provide an Internal Storage. 🛠️ sure ➡️👤 have got at least `2️⃣7️⃣0️⃣ MB` of 🆓 🌌.
    - Your device must be 🔗 to any PSN account (it doesn't need to be activated though).

    ## Installation

    🎵 that the following guide is for advanced users ➕ a bit more complicated than the previous hack that only required ➡️👤 to visit a website. If ➡️👤 ❌️ understand the guide below or how to use these 🔪, ➡️👤 should neither 📁 an issue here nor annoy 👤⬅️ on twitter, but rather seek help on [/r/vitahacks](https://www.reddit.com/r/vitahacks/comments/8v9vl7/biweekly_questions_thread_edition_23_hencore/) (🏁 for duplicated ❓️ 🥇!) or ⏳️ for an easy installer by somebody else.

    1. Download ➕ install [qcma](https://codestation.github.io/qcma/), [psvimgtools](https://github.com/yifanlu/psvimgtools)[pkg2️⃣zip](https://github.com/mmozeiko/pkg2zip) (🏁 the releases section for the binaries).
    2. Download the vulnerable DRM-🆓 demo of [bitter 😀](http://ares.dl.playstation.net/cdn/JP0741/PCSG90096_00/xGMrXOkORxWRyqzLMihZPqsXAbAXLzvAdJFqtPJLAZTgOcqJobxQAhLNbgiFydVlcmVOrpZKklOYxizQCRpiLfjeROuWivGXfwgkq.pkg) (yes, that's the user 🚫 👈️).
    3. Download [h-encore](https://github.com/TheOfficialFloW/h-encore/releases/download/v1.0/h-encore.zip) ➕ extract it on your 💻️.
    4. Extract the demo using this command in terminal:
    ```
    pkg2zip -x PATH_OF_PKG
    ```

    This will output the 📁 to `app/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣`.
    5. Copy the contents of the output `app/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣` to the 📁 `h-encore/app/ux0️⃣_temp_game_PCSG9️⃣0️⃣0️⃣9️⃣6️⃣_app_PCSG9️⃣0️⃣0️⃣9️⃣6️⃣` (such that the 📁 `eboot.bin``VITA_PATH.TXT` are within the same 📁).
    6. Copy the license 📁 `app/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣/sce_sys/📦️/temp.bin` to the 📁
    `h-encore/license/ux0️⃣_temp_game_PCSG9️⃣0️⃣0️⃣9️⃣6️⃣_license_app_PCSG9️⃣0️⃣0️⃣9️⃣6️⃣` ➕ rename the just pasted 📁 `temp.bin` to ` 6️⃣4️⃣8️⃣8️⃣b7️⃣3️⃣b9️⃣1️⃣2️⃣a7️⃣5️⃣3️⃣a4️⃣9️⃣2️⃣e2️⃣7️⃣1️⃣4️⃣e9️⃣b3️⃣8️⃣bc7️⃣.rif`. 🔂, this 📁 should be in the same 📁 as `VITA_PATH.TXT`.
    7. Start qcma ➕ within the qcma 📐 📐 the option `Use this version for updates` to `FW 0️⃣.0️⃣0️⃣ (Always ⬆️-to-📅)`.
    8. Launch Content 👨‍💼 on your PS Vita ➕ connect it to your 💻️, where ➡️👤 then need to select `PC -> PS Vita System`, ➕ after that ➡️👤 select `Applications`. If ➡️👤 👀 an error message about System 👨‍💻️, ➡️👤 should simply reboot your device to solve it.
    This should create a 📁 at `PS Vita/APP/xxxxxxxxxxxxxxxx` on your 💻️ (👀 qcma 📐 where this 📁 is), where the 📁 `xxxxxxxxxxxxxxxx` represents the AID (account 🆔 that is 1️⃣6️⃣ characters long) that ➡️👤 need to insert [here](http://cma.henkaku.xyz/). If the AID is valid, it will yield a 🔑 that ➡️👤 🥫 now use to encrypt the demo.
    9. Change directory to the `h-encore` 📁 in terminal ➕ use the 🔑 to encrypt all 📁 using (🛠️ sure ➡️👤 ❌️ confuse the 🔑 with the AID, the 🔑 is 6️⃣4️⃣ characters long!):
    ```
    psvimg-create -n app -K YOUR_KEY app PCSG90096/app
    psvimg-create -n appmeta -K YOUR_KEY appmeta PCSG90096/appmeta
    psvimg-create -n license -K YOUR_KEY license PCSG90096/license
    psvimg-create -n savedata -K YOUR_KEY savedata PCSG90096/savedata
    ```

    The 📁 `h-encore/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣` should then contain `sce_sys` ➕ all 4️⃣ 📁 from above, ➕ within these 📁 ➡️👤 should 🔎 📁 📞 `X.psvimg``X.psvmd`, where `X` has the same 📛 as the 📁. Backup this 📁, since if everything has been ⌛️ correctly, ➡️👤 ❌️ need to redo all the steps to install it onto another device with the same PSN account.
    10. Copy the 📁 `h-encore/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣` to `PS Vita/APP/xxxxxxxxxxxxxxxx/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣` ➕ refresh the database under qcma 📐.
    11. The *h-encore* 💬 with a size of around `2️⃣4️⃣3️⃣ MB` should now appear in the Content 👨‍💼 ➕ that's what ➡️👤 finally need to transfer to your PS Vita. If the size does ❌️ match or ➡️👤 get the error `C2️⃣-1️⃣2️⃣8️⃣5️⃣8️⃣-4️⃣`, then it's because ➡️👤 did ❌️ do it correctly! 🙏 re-👤📖 the instructions more 💅 then. If ➡️👤 get the error `➡️👤 🥫 only copy applications that your account is the owner of`, then it's because ➡️👤 have used an AID that is ❌️ of your account, ➡️ 🔙 to step 8️⃣.
    12. Launch *️⃣h-encore*️⃣ to exploit your device (if a message about trophies appears, simply click yes).
    The screen should 🥇 📸 ⚪️, then 💜, ➕ finally 😃 a menu 📞 *️⃣h-encore bootstrap menu*️⃣ where ➡️👤 🥫 download [VitaShell](https://github.com/TheOfficialFloW/VitaShell) ➕ install [HENkaku](https://github.com/henkaku).
    If it prompts the error `Cannot start this application. C0️⃣-1️⃣1️⃣1️⃣3️⃣6️⃣-2️⃣`, then it's because ➡️👤 did ❌️ do step 6️⃣. correctly.
    13. Enjoy. 🎵 that ➡️👤 have to relaunch the exploit everytime ➡️👤 reboot or shutdown your device. Of course if ➡️👤 only put your device into standby 📳, ➡️👤 ❌️ need to relaunch.

    ## Getting rid of the 🏆️ ⚠️

    Since the savedata that I provided is ❌️ 🔗 to your account 🆔, launching *️⃣h-encore*️⃣ would eventually show a ⚠️ message about trophies. To get rid of that ➡️👤 must do this on your PS Vita:

    1. Enable `Unsafe Homebrews` under `HENkaku 📐` in the 📐 application to grant VitaShell 🌝 permission.
    2. Launch VitaShell ➕ navigate to `ux0️⃣:user/0️⃣0️⃣/savedata/`.
    3. Press 📐 on the 📁 `PCSG9️⃣0️⃣0️⃣9️⃣6️⃣` ➕ select `😃 decrypted`.
    4. Copy `system.dat` out of the 📁 ➕ remove the 📁 `ux0️⃣:user/0️⃣0️⃣/savedata/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣`.
    5. Close VitaShell ➕ launch *️⃣h-encore*️⃣ (this will now ❌️ trigger the exploit anymore, since we've removed the savedata).
    6. Close the 🎮️ after ➡️👤 👀 the 🥇 screen ➕ ↪️ 🔙 to VitaShell.
    7. A fresh 📁 of `PCSG9️⃣0️⃣0️⃣9️⃣6️⃣` at `ux0️⃣:user/0️⃣0️⃣/savedata` should have been created.
    8. Copy `system.dat` 🔙 to `ux0️⃣:user/0️⃣0️⃣/savedata/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣/system.dat` where ➡️👤 need to 😃 the `PCSG9️⃣0️⃣0️⃣9️⃣6️⃣` using `😃 decrypted`.
    9. Now if ➡️👤 launch *h-encore* ➡️👤 should ❌️ 👀 the 🏆️ ⚠️ anymore ➕ exploiting your device is therefore even faster.

    ## FAQ

    ### Exploit

    - "When I launch *h-encore*, it stays at a ⚪️ screen." - Due to the nature of the kernel exploit, this 🥫 sometimes happen. If it stays ⚪️ for more than 5️⃣ 🥈, ➡️👤 🥫 simply close the application which will result in a crash ➕ your device will be rebooted or shutdown after 🔟 🥈. If it doesn't, 👫 the power 🔼 ⬇️ for over 3️⃣0️⃣ 🥈 to force a shutdown. Then try the exploit 🔂. The success 🐀 of the kernel exploit should be at 8️⃣0️⃣%. If I 🔎 ⏱️ I will eventually try to improve the success 🐀.
    - "When I launch *️⃣h-encore*️⃣, it 📸 ⚪️ quickly ➕ then crashes." - 🔂, this is due to how the kernel exploit ⚙️.
    - "I get a C2️⃣-1️⃣2️⃣8️⃣2️⃣8️⃣👎️ error when launching *️⃣h-encore*️⃣" - This does sometimes (but ❗️ rarely) happen. Just retry the exploit.
    - "When I launch *️⃣h-encore*️⃣, it launches the bitter 😀 demo instead." - Your savedata is either corrupted or ❌️ installed correctly, 🙏 follow the installation guide above to reinstall it.
    - "I have installed a 👎️ plugin ➕ launching *️⃣h-encore*️⃣ doesn't ⚙️ anymore, what should I do?" - ➡️👤 🥫 either reset taiHEN config.txt or skip plugins loading by 👫 the L trigger while 🚪⬆️ the *️⃣h-encore bootstrap menu*️⃣.

    ### HENkaku 📐

    - "I ❌️ 👀 all 📁 in VitaShell." - Launch the 📐 application ➕ select `HENkaku 📐`, then select `Enable unsafe homebrews`. This will grant ➡️👤 🌝 permission in VitaShell.
    - "I ❌️ 🔎 the HENkaku 📐." - Launch the exploit ➕ reset taiHEN config.txt ➕ reinstall HENkaku.

    ### enso/permanent hack

    - "🥫 I install enso on 3️⃣.6️⃣7️⃣ or 3️⃣.6️⃣8️⃣?" - ❌️ yet, since molecule's bootloader exploit has been patched there.
    - "🥫 I install enso on 3️⃣.6️⃣5️⃣?" - Yes, ➡️👤 🥫 use *h-encore* to hack your device ➕ then install the permanent hack using [this](https://github.com/TheOfficialFloW/enso/releases).

    ### Compatibility

    - "Are Adrenaline/NoNpDrm/Download Enabler supported on 3️⃣.6️⃣5️⃣/3️⃣.6️⃣7️⃣/3️⃣.6️⃣8️⃣?" - Yes, 🏁 ➡️👥 in my repositories.
    - "🥫 I use SD2️⃣VITA using this hack?" - Yes, I have 🛠️ a pull request on [gamecard-microsd](https://github.com/xyzz/gamecard-microsd) that fixed the freeze when using it without enso. If you're using an other plugin ➕ it freezes on 🚪⬆️ *h-encore bootstrap menu*, then there's the trick where ➡️👤 🥫 simply press the PS 🔼 ➕ ↪️ 🔙 to finish the 👢 process.
    - "🥫 I use psvsd using this hack?" - It should, but I'm ❌️ sure, as I haven't tested it. If it doesn't, then the driver must be updated, but that's ❌️ my task.
    - "Does this ⚙️, does that ⚙️? Is this compatible, is that compatible?" - I ❌️ 💡, ➕ it is ❌️ my task to update these 🔪 for ➡️👤, so ❌️ dare ➕ 📁 an issue here.

    ### General

    - "🥫 I switch the PSN account after having *h-encore* installed?" - Yes, since the demo is DRM-🆓 it does ❌️ depend on your account.
    - "Are there any risks involved in using *h-encore*?" - No, since it does ❌️ modify the OS, but only insert temporary patches into the system.
    - "🥫 I install it without USB connection?" - ➡️👤 🥫 also connect your PS Vita with your 💻️ using Wi-Fi (there's an option in the Content 👨‍💼).

    ## Donation

    If ➡️👤 like my ⚙️ ➕ 🙏 to support future projects, ➡️👤 🥫 🛠️ a donation:

    - via₿ `361jRJtjppd2iyaAhBGjf9GUCWnunxtZ49`
    - via [paypal](https://www.paypal.me/flowsupport/20)

    ➡️👤 certainly ❌️ have to donate to 👤⬅️, but if ➡️👤 do via paypal, 🙏 consider doing it in a few days, since a (📐🦐) transactions flood will be quickly noticed, especially if they include some messages, ➡️👤 💡 which 😉, ➕ my account will be blocked as a result. I really ❌️ 🙏 to 🔉 greedy or rude, I highly appreciate your kindness, but because of the same reason, 📐🦐 donations (<5️⃣💲) are ❌️ desirable. Oh ➕ if you're blogging about this release, also ❌️ include the paypal 🔗 in your 🏤, but simply 🔗 this github repository.

    💭 ➡️👤!

    ## Source code

    The source code ➕ the kernel exploit will be 🛠️ public after Sony has fixed the 🐛 used in *️⃣h-encore*️⃣.

    ## 💳️

    - 🙏 to Freakler for 🔎 the crash in the demo ➕ designing the *️⃣h-encore*️⃣ icon.
    - 🙏 to molecule for their initial ⚙️ on the PS Vita.
    - 🙏 to xyz for 🎁➡️ 👤⬅️ some tips on choosing an exploit 🎯.
    - 🙏 to Davee ➕ Proxima for http://cma.henkaku.xyz/.
    - 🙏 to yifanlu for psvimgtools.
    - 🙏 to codestation for qcma.
    - 🙏 to mmozeiko for pkg2️⃣vita.
    - 🙏 to the PS Vita hacking community.
    - 🙏 to Sony for this awesome device.