cibomatto2002
Windows 10
True to his word MaTiAz has released Version 2 of his Hello World TIFF Exploit. This version works on PSP Slim units and we have reports from users that it even works on the PSP-3000! That’s a added bonus. As for the “bit of awesomeness” promised we have to wait just a little longer for that.
MaTiAz’s notes:
Just copy the files to the memory stick root, disconnect USB and go to photo menu. Don’t dismiss the exploit even if it doesn’t work on the first time, it’s *very* unstable. You might get it working on the first time, but you might as well have to try it 20 times!
The h.bin is loaded to 0×08800000, and the text address of paf.prx is passed in $a0 to the binary code. You can then trick out function imports, like for example sceDisplayWaitVblankStart: sceDisplayWaitVblankStart = (void*)(paf_addr+0×15F068);
Instructions:
1. Copy either slim.tiff or phat.tiff to /PSP/PHOTO/ folder on the memory stick, depending on
your PSP model. Do NOT copy both!
2. Copy h.bin to the root of the memory stick.
Also its reported to be working on the PSP-3000 (Ta88v3) Try the following: (Thanks to n00b81 for the tip!)
From p2s2p: The interesting thing is, they didn’t think it would work for 3000s but it does! Here is what you have to do…follow the same instructions for the slim, but then throw in about 5 or 8 other pics in your photo folder, and when the thumbnails are loading, you have to scroll up and down, and then the PoC should boot up. You need at least 5.02 on a 3000 to work this.
http://pspslimhacks.com/503-tiff-exploit-hello-world-v2-for-psp-slim-psp-3000/
Also here is a video of it working
http://video.google.com/videosearch?q=TIFF+Exploit&hl=en&emb=0&aq=-1&oq=#
MaTiAz’s notes:
Just copy the files to the memory stick root, disconnect USB and go to photo menu. Don’t dismiss the exploit even if it doesn’t work on the first time, it’s *very* unstable. You might get it working on the first time, but you might as well have to try it 20 times!
The h.bin is loaded to 0×08800000, and the text address of paf.prx is passed in $a0 to the binary code. You can then trick out function imports, like for example sceDisplayWaitVblankStart: sceDisplayWaitVblankStart = (void*)(paf_addr+0×15F068);
Instructions:
1. Copy either slim.tiff or phat.tiff to /PSP/PHOTO/ folder on the memory stick, depending on
your PSP model. Do NOT copy both!
2. Copy h.bin to the root of the memory stick.
Also its reported to be working on the PSP-3000 (Ta88v3) Try the following: (Thanks to n00b81 for the tip!)
From p2s2p: The interesting thing is, they didn’t think it would work for 3000s but it does! Here is what you have to do…follow the same instructions for the slim, but then throw in about 5 or 8 other pics in your photo folder, and when the thumbnails are loading, you have to scroll up and down, and then the PoC should boot up. You need at least 5.02 on a 3000 to work this.
http://pspslimhacks.com/503-tiff-exploit-hello-world-v2-for-psp-slim-psp-3000/
Also here is a video of it working
http://video.google.com/videosearch?q=TIFF+Exploit&hl=en&emb=0&aq=-1&oq=#
