Skip to content

Instantly share code, notes, and snippets.

@yifanlu
Last active July 3, 2018 02:26
Show Gist options
  • Star 3 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save yifanlu/97214ba0bdc2fa0ef44dcf48a4a9723b to your computer and use it in GitHub Desktop.
Save yifanlu/97214ba0bdc2fa0ef44dcf48a4a9723b to your computer and use it in GitHub Desktop.

h-encore

h-encore, where h ⬆️👤 for hacks ➕ homebrews, is the 🥈 public jailbreak for the PS Vita™️ which supports the newest firmwares 3️⃣.6️⃣5️⃣, 3️⃣.6️⃣7️⃣ ➕ 3️⃣.6️⃣8️⃣. It allows ➡️👤 🛠️ kernel- ➕ user-modifications, change the ⏰ 🚄, install plugins, 🏃‍♂️ homebrews ➕ much more.

Requirements

  • Your device must be on firmware 3️⃣.6️⃣5️⃣, 3️⃣.6️⃣7️⃣ or 3️⃣.6️⃣8️⃣. Any other is ❌️ supported. If you're on a lower firmware, 🙏 decide 💅 to what firmware ➡️👤 🙏 to update, then 🔍️ for a trustable guide on /r/vitahacks (if ➡️👤 💡 how ➕ 🙏 to contribute, ➡️👤 🥫 edit this readme ➕ 🛠️ a pull request, such that fellow readers have got an easier life). Remember that on firmware 3️⃣.6️⃣5️⃣ ➡️👤 have got the possibility to install enso, the permanent hack, whereas on 3️⃣.6️⃣7️⃣ ➕ 3️⃣.6️⃣8️⃣ ➡️👤 ❌️.
  • If your device is a phat OLED model, ➡️👤 need a Memory ♠️ in order to install. There's no need for a Memory ♠️ on Slim/PS 📺️ models, since they already provide an Internal Storage. 🛠️ sure ➡️👤 have got at least 2️⃣7️⃣0️⃣ MB of 🆓 🌌.
  • Your device must be 🔗 to any PSN account (it doesn't need to be activated though).

Installation

🎵 that the following guide is for advanced users ➕ a bit more complicated than the previous hack that only required ➡️👤 to visit a website. If ➡️👤 ❌️ understand the guide below or how to use these 🔪, ➡️👤 should neither 📁 an issue here nor annoy 👤⬅️ on twitter, but rather seek help on /r/vitahacks (🏁 for duplicated ❓️ 🥇!) or ⏳️ for an easy installer by somebody else.

  1. Download ➕ install qcma, psvimgtoolspkg2️⃣zip (🏁 the releases section for the binaries).
  2. Download the vulnerable DRM-🆓 demo of bitter 😀 (yes, that's the user 🚫 👈️).
  3. Download h-encore ➕ extract it on your 💻️.
  4. Extract the demo using this command in terminal:
pkg2zip -x PATH_OF_PKG

This will output the 📁 to app/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣.

  1. Copy the contents of the output app/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣ to the 📁 h-encore/app/ux0️⃣_temp_game_PCSG9️⃣0️⃣0️⃣9️⃣6️⃣_app_PCSG9️⃣0️⃣0️⃣9️⃣6️⃣ (such that the 📁 eboot.binVITA_PATH.TXT are within the same 📁).
  2. Copy the license 📁 app/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣/sce_sys/📦️/temp.bin to the 📁 h-encore/license/ux0️⃣_temp_game_PCSG9️⃣0️⃣0️⃣9️⃣6️⃣_license_app_PCSG9️⃣0️⃣0️⃣9️⃣6️⃣ ➕ rename the just pasted 📁 temp.bin to 6️⃣4️⃣8️⃣8️⃣b7️⃣3️⃣b9️⃣1️⃣2️⃣a7️⃣5️⃣3️⃣a4️⃣9️⃣2️⃣e2️⃣7️⃣1️⃣4️⃣e9️⃣b3️⃣8️⃣bc7️⃣.rif. 🔂, this 📁 should be in the same 📁 as VITA_PATH.TXT.
  3. Start qcma ➕ within the qcma 📐 📐 the option Use this version for updates to FW 0️⃣.0️⃣0️⃣ (Always ⬆️-to-📅).
  4. Launch Content 👨‍💼 on your PS Vita ➕ connect it to your 💻️, where ➡️👤 then need to select PC -> PS Vita System, ➕ after that ➡️👤 select Applications. If ➡️👤 👀 an error message about System 👨‍💻️, ➡️👤 should simply reboot your device to solve it. This should create a 📁 at PS Vita/APP/xxxxxxxxxxxxxxxx on your 💻️ (👀 qcma 📐 where this 📁 is), where the 📁 xxxxxxxxxxxxxxxx represents the AID (account 🆔 that is 1️⃣6️⃣ characters long) that ➡️👤 need to insert here. If the AID is valid, it will yield a 🔑 that ➡️👤 🥫 now use to encrypt the demo.
  5. Change directory to the h-encore 📁 in terminal ➕ use the 🔑 to encrypt all 📁 using (🛠️ sure ➡️👤 ❌️ confuse the 🔑 with the AID, the 🔑 is 6️⃣4️⃣ characters long!):
  psvimg-create -n app -K YOUR_KEY app PCSG90096/app
  psvimg-create -n appmeta -K YOUR_KEY appmeta PCSG90096/appmeta
  psvimg-create -n license -K YOUR_KEY license PCSG90096/license
  psvimg-create -n savedata -K YOUR_KEY savedata PCSG90096/savedata

The 📁 h-encore/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣ should then contain sce_sys ➕ all 4️⃣ 📁 from above, ➕ within these 📁 ➡️👤 should 🔎 📁 📞 X.psvimgX.psvmd, where X has the same 📛 as the 📁. Backup this 📁, since if everything has been ⌛️ correctly, ➡️👤 ❌️ need to redo all the steps to install it onto another device with the same PSN account.

  1. Copy the 📁 h-encore/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣ to PS Vita/APP/xxxxxxxxxxxxxxxx/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣ ➕ refresh the database under qcma 📐.
  2. The h-encore 💬 with a size of around 2️⃣4️⃣3️⃣ MB should now appear in the Content 👨‍💼 ➕ that's what ➡️👤 finally need to transfer to your PS Vita. If the size does ❌️ match or ➡️👤 get the error C2️⃣-1️⃣2️⃣8️⃣5️⃣8️⃣-4️⃣, then it's because ➡️👤 did ❌️ do it correctly! 🙏 re-👤📖 the instructions more 💅 then. If ➡️👤 get the error ➡️👤 🥫 only copy applications that your account is the owner of, then it's because ➡️👤 have used an AID that is ❌️ of your account, ➡️ 🔙 to step 8️⃣.
  3. Launch ️⃣h-encore️⃣ to exploit your device (if a message about trophies appears, simply click yes). The screen should 🥇 📸 ⚪️, then 💜, ➕ finally 😃 a menu 📞 ️⃣h-encore bootstrap menu️⃣ where ➡️👤 🥫 download VitaShell ➕ install HENkaku. If it prompts the error Cannot start this application. C0️⃣-1️⃣1️⃣1️⃣3️⃣6️⃣-2️⃣, then it's because ➡️👤 did ❌️ do step 6️⃣. correctly.
  4. Enjoy. 🎵 that ➡️👤 have to relaunch the exploit everytime ➡️👤 reboot or shutdown your device. Of course if ➡️👤 only put your device into standby 📳, ➡️👤 ❌️ need to relaunch.

Getting rid of the 🏆️ ⚠️

Since the savedata that I provided is ❌️ 🔗 to your account 🆔, launching ️⃣h-encore️⃣ would eventually show a ⚠️ message about trophies. To get rid of that ➡️👤 must do this on your PS Vita:

  1. Enable Unsafe Homebrews under HENkaku 📐 in the 📐 application to grant VitaShell 🌝 permission.
  2. Launch VitaShell ➕ navigate to ux0️⃣:user/0️⃣0️⃣/savedata/.
  3. Press 📐 on the 📁 PCSG9️⃣0️⃣0️⃣9️⃣6️⃣ ➕ select 😃 decrypted.
  4. Copy system.dat out of the 📁 ➕ remove the 📁 ux0️⃣:user/0️⃣0️⃣/savedata/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣.
  5. Close VitaShell ➕ launch ️⃣h-encore️⃣ (this will now ❌️ trigger the exploit anymore, since we've removed the savedata).
  6. Close the 🎮️ after ➡️👤 👀 the 🥇 screen ➕ ↪️ 🔙 to VitaShell.
  7. A fresh 📁 of PCSG9️⃣0️⃣0️⃣9️⃣6️⃣ at ux0️⃣:user/0️⃣0️⃣/savedata should have been created.
  8. Copy system.dat 🔙 to ux0️⃣:user/0️⃣0️⃣/savedata/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣/system.dat where ➡️👤 need to 😃 the PCSG9️⃣0️⃣0️⃣9️⃣6️⃣ using 😃 decrypted.
  9. Now if ➡️👤 launch h-encore ➡️👤 should ❌️ 👀 the 🏆️ ⚠️ anymore ➕ exploiting your device is therefore even faster.

FAQ

Exploit

  • "When I launch h-encore, it stays at a ⚪️ screen." - Due to the nature of the kernel exploit, this 🥫 sometimes happen. If it stays ⚪️ for more than 5️⃣ 🥈, ➡️👤 🥫 simply close the application which will result in a crash ➕ your device will be rebooted or shutdown after 🔟 🥈. If it doesn't, 👫 the power 🔼 ⬇️ for over 3️⃣0️⃣ 🥈 to force a shutdown. Then try the exploit 🔂. The success 🐀 of the kernel exploit should be at 8️⃣0️⃣%. If I 🔎 ⏱️ I will eventually try to improve the success 🐀.
  • "When I launch ️⃣h-encore️⃣, it 📸 ⚪️ quickly ➕ then crashes." - 🔂, this is due to how the kernel exploit ⚙️.
  • "I get a C2️⃣-1️⃣2️⃣8️⃣2️⃣8️⃣👎️ error when launching ️⃣h-encore️⃣" - This does sometimes (but ❗️ rarely) happen. Just retry the exploit.
  • "When I launch ️⃣h-encore️⃣, it launches the bitter 😀 demo instead." - Your savedata is either corrupted or ❌️ installed correctly, 🙏 follow the installation guide above to reinstall it.
  • "I have installed a 👎️ plugin ➕ launching ️⃣h-encore️⃣ doesn't ⚙️ anymore, what should I do?" - ➡️👤 🥫 either reset taiHEN config.txt or skip plugins loading by 👫 the L trigger while 🚪⬆️ the ️⃣h-encore bootstrap menu️⃣.

HENkaku 📐

  • "I ❌️ 👀 all 📁 in VitaShell." - Launch the 📐 application ➕ select HENkaku 📐, then select Enable unsafe homebrews. This will grant ➡️👤 🌝 permission in VitaShell.
  • "I ❌️ 🔎 the HENkaku 📐." - Launch the exploit ➕ reset taiHEN config.txt ➕ reinstall HENkaku.

enso/permanent hack

  • "🥫 I install enso on 3️⃣.6️⃣7️⃣ or 3️⃣.6️⃣8️⃣?" - ❌️ yet, since molecule's bootloader exploit has been patched there.
  • "🥫 I install enso on 3️⃣.6️⃣5️⃣?" - Yes, ➡️👤 🥫 use h-encore to hack your device ➕ then install the permanent hack using this.

Compatibility

  • "Are Adrenaline/NoNpDrm/Download Enabler supported on 3️⃣.6️⃣5️⃣/3️⃣.6️⃣7️⃣/3️⃣.6️⃣8️⃣?" - Yes, 🏁 ➡️👥 in my repositories.
  • "🥫 I use SD2️⃣VITA using this hack?" - Yes, I have 🛠️ a pull request on gamecard-microsd that fixed the freeze when using it without enso. If you're using an other plugin ➕ it freezes on 🚪⬆️ h-encore bootstrap menu, then there's the trick where ➡️👤 🥫 simply press the PS 🔼 ➕ ↪️ 🔙 to finish the 👢 process.
  • "🥫 I use psvsd using this hack?" - It should, but I'm ❌️ sure, as I haven't tested it. If it doesn't, then the driver must be updated, but that's ❌️ my task.
  • "Does this ⚙️, does that ⚙️? Is this compatible, is that compatible?" - I ❌️ 💡, ➕ it is ❌️ my task to update these 🔪 for ➡️👤, so ❌️ dare ➕ 📁 an issue here.

General

  • "🥫 I switch the PSN account after having h-encore installed?" - Yes, since the demo is DRM-🆓 it does ❌️ depend on your account.
  • "Are there any risks involved in using h-encore?" - No, since it does ❌️ modify the OS, but only insert temporary patches into the system.
  • "🥫 I install it without USB connection?" - ➡️👤 🥫 also connect your PS Vita with your 💻️ using Wi-Fi (there's an option in the Content 👨‍💼).

Donation

If ➡️👤 like my ⚙️ ➕ 🙏 to support future projects, ➡️👤 🥫 🛠️ a donation:

  • via₿ 361jRJtjppd2iyaAhBGjf9GUCWnunxtZ49
  • via paypal

➡️👤 certainly ❌️ have to donate to 👤⬅️, but if ➡️👤 do via paypal, 🙏 consider doing it in a few days, since a (📐🦐) transactions flood will be quickly noticed, especially if they include some messages, ➡️👤 💡 which 😉, ➕ my account will be blocked as a result. I really ❌️ 🙏 to 🔉 greedy or rude, I highly appreciate your kindness, but because of the same reason, 📐🦐 donations (<5️⃣💲) are ❌️ desirable. Oh ➕ if you're blogging about this release, also ❌️ include the paypal 🔗 in your 🏤, but simply 🔗 this github repository.

💭 ➡️👤!

Source code

The source code ➕ the kernel exploit will be 🛠️ public after Sony has fixed the 🐛 used in ️⃣h-encore️⃣.

💳️

  • 🙏 to Freakler for 🔎 the crash in the demo ➕ designing the ️⃣h-encore️⃣ icon.
  • 🙏 to molecule for their initial ⚙️ on the PS Vita.
  • 🙏 to xyz for 🎁➡️ 👤⬅️ some tips on choosing an exploit 🎯.
  • 🙏 to Davee ➕ Proxima for http://cma.henkaku.xyz/.
  • 🙏 to yifanlu for psvimgtools.
  • 🙏 to codestation for qcma.
  • 🙏 to mmozeiko for pkg2️⃣vita.
  • 🙏 to the PS Vita hacking community.
  • 🙏 to Sony for this awesome device.
@Cimmerian-Iter
Copy link

seriously?

@chronoss09
Copy link

lol

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment