Marcan 的 linux bootloader 有新的进度了, 他放出了 AsbestOS 的原始码(对应的硬体是 IGEPv2) http://git.marcansoft.com/?p=asbestos.git 并且放出如何 port 到其他装置的指引 http://pastie.org/private/naypgxfletkylvhfryh8pa 主要分成三个部分 ps3pwn,stage1,stage2 ps3pwn 主要是 IGEPv2 触发 PS3 漏洞的部分, 跟一般破解棒的程式类似, 要移植到其他装置这部分要换掉, stage1 是负责在 lv2 中载入 usb driver,并从 usb 中载入 stage2 stage2 是负责 dhcp 和 tftp 的部分 另外 rvalles 大大把程式码 port 到 ATMega1280 这块开发板上了, http://github.com/rvalles/asbestos-avr8susb for ATMega1280, 这块台湾有卖约 1100 不过似乎很少人拿来破解 ps3, 所以韧体更新很慢... 下面是他的 Readme ==================== asbestos-avr8susb ================= This is the asbestos-avr8susb, a ps3 exploit for Atmel avr8 devices without USB support. It's primarily targeted at loading asbestos, which is included in binary form. The payload (stage1) will install an usb driver which will download stage2 from usb. Then, stage2 will netboot (dhcp + tftp). Refer to asbestos for further information. http://git.marcansoft.com/?p=asbestos.git It could be made to run anything else by replacing stage1 (in the first device's descriptor in descriptor.h) and/or stage2 (in stage2.h) It should work on: - ATMega1280 (Arduino Mega) ... and maybe more. This software is not intended to enable piracy. This software is intended to allow the use of third party operating systems and applications on the PS3. Notes ----- A programmed dongle won't enumerate properly on a PC, so don't worry about that. This software is based on psgroove-timwu, a port of psgroove to vusb. This software includes parts of asbestos, written by Hector Martín (marcan). This software includes the vusb library, written by Objective Development. Cloning ------- git clone git://github.com/rvalles/asbestos-avr8susb Configuring ----------- Chip and board selection can usually be handled in the Makefile. In particular, update the MCU, BOARD, and F_CPU lines. Suggested values: Arduino Mega MCU = atmega1280 BOARD = ArduinoMega F_CLOCK = 16000000 Board-specific notes -------------------- See README in subfolder for Boards corresponding to your particular board. Building -------- On Linux, use the AVR GCC toolchain (Debian/Ubuntu package: gcc-avr). On MacOS X, check http://www.obdev.at/products/crosspack/download.html On Windows, WinAVR should do the trick. make clean make Programming ----------- To program, just edit the programming options section of the Makefile to match your particular board programming setup. You will need avrdude on your path. Then do: make program For arduino users, you can get some hints as to how to configure the programming options by checking what the arduino IDE does. 1. Edit your arduino preferences file setting upload.verbose to true. 2. Open the arduino ide 3. Create an empty sketch 4. Upload to your board, and check the output. From the IDE's output you should be able to determine what port to use and other useful information about configuring the options. Using ----- To use this exploit: * Hard power cycle your PS3 (using the switch in back, or unplug it) * Plug the dongle into your PS3. * Press the PS3 power button, followed quickly by the eject button. After a few seconds, the first LED on your dongle should light up. After a few more seconds, the second LED will light up (or the LED will just go off, if you only have one). This means the exploit worked! By default, the exploit will netboot the PS3 (dhcp+tftp). During stage1, the exploit will provide debug information through the uart. Once stage2 is running, it'll provide debug information via ethernet broadcast packets. Refer to asbestos for further information. ------- Roc Vallès. <vallesroc @.aaa@ @gmail.com> ※ 引述《snowwolf725 (空之境界)》之铭言： : Marcan 正式把他目前正在开发中的 PS3 Linux bootloader 取名为 AsbestOS : AsbestOS 是一个能够运作在 PS3 3.41 版韧体的 Linux Bootloader, : 这是他的执行"画面" http://is.gd/fBv7U : 目前已经能够薄/厚机上正常运作了,缺的只是文件的部分, : 他分成两个阶段,第一个阶段是取代掉原本 psjb 的 payload (约2KB) : 第二阶段是读取位於 usb 上的 30KB 的程式, : 另外还需要额外的 32KB 的记忆体, --

※ 发信站: 批踢踢实业坊(ptt.cc) ◆ From: 114.32.118.136