Decided I was fed up with my old blog being clunky so I transitioned it to an Astro blog and so far it's been amazing!
Check out the new series page for RetailKit:
https://t.co/4t9uUo8Ovg
Here's part 3 of my Hacking the Xbox 360 Hypervisor blog series. This part covers all the improvements made to the Bad Update exploit to get it near 100% reliability. Part 4 which covers the Peer Pressure exploit will be out in the next week or so... https://t.co/tXfgb8T9U7
Here's the first release of the Xbox 360 Peer Pressure softmod. Blog post will be out in a few weeks with all the technical details. Barring any critical bugs I'll be "hibernating" for the next 2 months to recoup my sanity from working on this project https://t.co/MTP7adMt5m
@sioslayer Shocking news alert: most people who previously did console research did it for the fun of finding out how things work and digging into things. Prompting a chatbot and bruteforcing solutions isn't very fun or rewarding. I'm sure the piracy kids are thrilled though.
@ar453a I can, I was going to leave it up to the original repo owner to decide if they wanted my changes. I've not really followed their coding style per say either.
I also pushed the improvements for the npt walk to my fork of ps5-hen so folks can mess around with it and see what else they can come up with too.
https://t.co/aWMlLZ6An2
For anyone curious about the internals, this is the AMD64 Architecture Programmer's Manual Volume 2: System Programming I've been digging through. Truly a wealth of information for AMD SVM! https://t.co/Q5vKMTZTb5
@adamfur7 Yeah this is another option I considered rather than making it so the guest kernel can R/W the pages. Both are valid, I just preferred the simplicity of letting the guest have full access to its pages.
I noticed the recent PS5 HEN defeats XOTEXT by just disabling the NPT on all cores. This works, but it comes with a performance tradeoff, without NPT the HV seems to fall back to shadow page tables. Games seem to have 3x slower loads.
My solution is to just walk the nested CR3 and clear XOTEXT and set the RW flags. Gives essentially the same effect as the Bypervisor bug did with the QA flags. I'll make a PR on Cragson's repo once I get some time :D
If you told me I would be writing .NET Framework in 2026 I would not have believed you 🤣
Yet here I am doing just that for the PS4. You can check out what I have so far if you are interested. 😄
https://t.co/2G59uBNogD
@ImJtagModz I would love to see what you had done! I had tried something like this with the mono source but I didn't think to check the libmonosgen, great find! 😀