Skip to content

Instantly share code, notes, and snippets.

View MustCodeAl's full-sized avatar

Albert MustCodeAl

  • Chicago, Illinois
  • 10:38 (UTC -05:00)
View GitHub Profile

On offsets

After the recent release of ps5-kstuff with support for PS4 fpkg files, there is a lot of questions about porting this to other firmwares (4.50 and 4.51 are important in particular, because users of those firmwares can't update to 4.03, but they are still vulnerable to all of the used exploits). The main problem with these ports it the bespoke XOM, which prevents finding the offsets by simply examining the dumps. So in this document I'm going to go over what offsets are important for ps5-kstuff, and how I found them for 4.03.

These are the main categories of offsets:

  1. Kernel data offsets, those can be found from data dumps that are not XOM-protected
  2. Kernel text offsets pointed to by kernel data
  3. doreti_iret offset (that's one offset, but it deserves its own word)
  4. Offsets found from single-stepping of kernel functions
chflags nohidden ~/Library
defaults write com.apple.finder AppleShowAllFiles YES
defaults write com.apple.finder ShowPathbar -bool true
defaults write com.apple.finder ShowStatusBar -bool true
defaults write com.apple.finder QuitMenuItem -bool true
defaults write NSGlobalDomain AppleShowAllExtensions -bool true
defaults write com.apple.finder FXEnableExtensionChangeWarning -bool false
defaults write com.apple.dock showhidden -bool true; killal│
defaults write com.apple.finder QLEnableTextSelection -bool│
defaults write com.apple.Dock showhidden -boolean yes; kill│

Keybase proof

I hereby claim:

  • I am mustcodeal on github.
  • I am albertisbolt (https://keybase.io/albertisbolt) on keybase.
  • I have a public key ASCXVxgzWUS554ReBeG4ZNCT9QXbleT0-XZjM9dIbxgQ-wo

To claim this, I am signing this object:

@MustCodeAl
MustCodeAl / main.js
Created October 5, 2023 04:17
gist for chr
This file has been truncated, but you can view the full file.
!function (n) {
function e(e) {
for (var i, r, s = e[0], a = e[1], u = e[2], m = 0, c = []; m < s.length; m++) r = s[m], Object.prototype.hasOwnProperty.call(o, r) && o[r] && c.push(o[r][0]), o[r] = 0;
for (i in a) Object.prototype.hasOwnProperty.call(a, i) && (n[i] = a[i]);
for (d && d(e); c.length;) c.shift()();
return l.push.apply(l, u || []), t()
}
function t() {
for (var n, e = 0; e < l.length; e++) {

template file for generate module from template to help with creating mui page components

for this to work you need the 3 following file template files imported with a ${name} variable in them : index.tsx styles.ts types.ts

{"template":{"name":"","isDir":true,"placeholders":{"name":"PageTemp"},"fileTemplates":{"index.tsx":"indexmuitemplate","styles.ts":"muistylestemplate","types.ts":"Typesmuitemplate"},"realChildren":[{"name":"${name}","isDir":true,"realChildren":[{"name":"index.tsx","isDir":false,"placeholders":{},"fileTemplates":{},"realChildren":[]},{"name":"styles.ts","isDir":false,"placeholders":{},"fileTemplates":{},"realChildren":[]},{"name":"types.ts","isDir":false,"placeholders":{},"fileTemplates":{},"realChildren":[]}]}]},"language":"java","templateName":"MuiPageTemplate","lowercaseDir":false,"capitalizeFile":false,"packageNameToDir":true,"enableApacheVelocity":true}
@MustCodeAl
MustCodeAl / MY RUST LINT SETTINGS
Last active September 13, 2023 20:45
Synced via Snip
ymy sni
// https://github.com/rust-lang/rust-clippy
// https://rust-lang.github.io/rust-clippy/stable/index.html
make sure you put it on complexity and pendantic
cargo clippy --all-features --all-targets --message-format=json -- --warn clippy::pedantic > report.json
working command for linter :)
@MustCodeAl
MustCodeAl / mac-apps.md
Last active November 30, 2023 05:19 — forked from erikreagan/mac-apps.md
Mac developer must-haves

Mac web developer apps

This gist's comment stream is a collection of webdev apps for OS X. Feel free to add links to apps you like, just make sure you add some context to what it does — either from the creator's website or your own thoughts.

— Erik