PS3 Tips(HELP) to make custom offline CPU xploit work

[xps3riments]

Hi,

I have made a little modification to the CPU temperature xploit, It works fine while served from a page.
( It's only cosmetic change, nothing from the original version is changed except some css & the final alert thing)

The problem comes when I try to make this script "bookmarktable" for the XMB, no way of every solution I have tried works.

Any help is welcome XDD

 

[xps3riments]

Here are the source files... one inline script that works served from a page, but not with javascript:xxx inside XMB, and the original one...

 

[lmn7]

Why did you base64 + URI encode the script? Anyway, nice idea, but this won't work due to the size. You can't really add custom images as the exploit script itself is barely small enough to work this way to begin with.

 

[xp3riments]

Hi, thanks!!

I have just found that the problem was the inline image and the size while working in change the look of han & dev pkg's scripts...

Managed to center the text & make a blue background.(for han also needed to remove the text-shadow (mem allocation?))
The image works sometimes but slows the xploit speed by 1000%. I think is something related also to memory allocation, because the use of the "image".

Now, I will try to recreate something small & css only for the Temperature thing.... I will post all my results latter here...

 

[xp3riments]

BTW do you know what are limits of the "javascript:xxx" bookmarklet size?

 

[xps3riments]

Ok, after some reboots XDDD I managed to get a "LITE" css only version working.... Is not as beautiful as the other, but is not a simple alert XDD.

Here a screenshot ( sorry from Desktop, I have not my capture card here ), and the source files....

 

[lmn7]

BTW do you know what are limits of the "javascript:xxx" bookmarklet size?

From my testing, around 16k chars.

 

[xps3riments]

Thanks!! Great to know... also learned we don't have access to window/document event listeners... so I have attached the onclick direct to the body...

 

[ayassinsayed]

Ok, after some reboots XDDD I managed to get a "LITE" css only version working.... Is not as beautiful as the other, but is not a simple alert XDD.

Here a screenshot ( sorry from Desktop, I have not my capture card here ), and the source files....

View attachment 17160

Work from xmb or work local? I think size will be large to work on xmb ?


Sent from my iPhone using Tapatalk

 

[lmn7]

Thanks!! Great to know... also learned we don't have access to window/document event listeners... so I have attached the onclick direct to the body...

The script's size can further be reduced by removing unused functions, variables and whatever else. You still won't be able to use large images, but it does give you more to work with.

I made improvements to the temp reader already, it's no longer shown as an alert and the temp values are properly formatted too. If you find a nice background image that can be used, maybe it could be added to HAN Toolbox.

 

[xps3riments]

I has been using in other parts of my project a trick to use a small image 36px for the background.

I am using this one currently:

data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAASCAMAAAANFixgAAAAPFBMVEVUYWc6R1pCVmRicHZ+dn+gfZewk6hFY2xQbnuSiZBhgIlripB7l56Qp6ulsrQzO1AvMkcqK0AlJDkeHC8JxtK6AAAAvElEQVR4AQXBQVICQRRAsbzGLlgJev9TzgoKmW+SAiewnFxSYGQB+3V7ss51cmn/BUNXQG/spwvZPmC+dH1veN0WvK7S50vwvND1vSErJhIBQ2uy0QqEBAyF2FkQERpQ3w60swARgO4Nh+zAOlnnQoa6Zzi0BTA9b4B39zXGQTYNbwA4e2QMBwIMAPWIYTgAvgFw9FiGaRiAAJh+AsMAmqZpgulnwWAaAECc/QYMAAwizh6XgWHQxABiff4BAhtKw4+y7scAAAAASUVORK5CYII=

When sized 100% width & height... the browser blurs the image and we get a "good" background for nothing...

So for "abstract" backgrounds we can get too small in size, anyway from my tests the browser needs too much time to "parse" this base64, and this also slows the xploit...

Tested this with han enabler, if I put the background.... works but... it takes... tooo much..., remove it and 1-2sec max...

 

[xps3riments]

BTW: I am senior web dev... (but studied design) I can help mostly in frontend things, but also with node & GFX...

 

[lmn7]

Tested this with han enabler, if I put the background.... works but... it takes... tooo much..., remove it and 1-2sec max...

Hmm that's odd, it shouldn't become slower just because of that. Anyway if it's a memory issue the exploit offsets could be adjusted.

 

[xps3riments]

Maybe we can make a little online tool to help process of encoding & convert the script to work as bookmarklet...

For the moment I have make a little step to convert the '<> thing to \47 \74\76...

https://codepen.io/xperiments/pen/LvBaEo?editors=0010

Nothing terrible...

PD: the temp codepen also (GFX only)

https://codepen.io/xperiments/pen/GLXyJE?editors=0100

 

[xps3riments]

A repo with all the offline exploits with uncompress code & a process to "encode" & prepare for the XML will be fantasic, so every one can consume the dist folder & others can get the original to use in their code...

I can help here if you like..

 

[lmn7]

A repo with all the offline exploits with uncompress code & a process to "encode" & prepare for the XML will be fantasic, so every one can consume the dist folder & others can get the original to use in their code...

I can help here if you like..

I don't know how many people here want to edit the scripts themselves, but that would be great, thanks.