Hack For GripShift on PSP and PSP 3000 Leaked
Chatter from the exploit circuit has the relatively old PSP game GripShift being exploited for a buffer overflow hack. We’re excited because it’s interesting to see a new exploit that’s compatible with the PSP 3000, even if the game is really kind of lame. A paraphrase of an excerpt from the PSP hacker, MaTiAz, who discovered the flaw and authored a piece of code to demonstrate its presence, explains the exploit like this:
There’s a buffer overflow vulnerability during the loading of saves in games such as GripShift, which can be exploited to insert code in $ra. The return is found at offset 0xA9 in the file; in this case, it points to 0x08ErCD50 (a few bytes after the return address), and the new code begins at 0xCC.
Although nothing useful has emerged yet from the discovery, expect underground hackfinders to continue to the R&D that certainly will uncover some tasty treats for a number of games. Keep your peeps on this one.
Download GripShift Savegame Exploit POC
Download GripShift Savegame Exploit POC v2
Tags: psp exploits, PSP Hacks