Vulnerabilities
See also [1]. (to wikify).
Hardware
Modchips
See Modchips.
Software
Operating System
PS2 Independence
Released on 15-08-2003 by Marcus R. Brown <[email protected]>.
Homebrew programs can be launched directly from a memory card on unmodified consoles by using certain software that takes advantage of a long known and used exploit, dealing with the boot part of the EE/IOP process (PS2 Independence exploit).
See PS2 Independence.
CD/DVD Swap tricks
Swap Magic
Swap Magic is a specialized PlayStation 2 game disc used for tricking the console into reading non-retail or burned game discs, homebrew software, or games outside the console's region. The software has existed since at least mid-2003, with several different versions of the disc having been developed.
Swap Magic and its related mods, such as the Magic Switch and Swap Tool, which are used to allow the user to swap discs without the system being aware, are notable over other methods (such as a modchip) due to the fact that they do not void the PS2's warranty.
See Swap Magic.
FreeMCBoot
Released on 23-05-2008 by jimmikaelkael (with help from Neme). Maintained since 14-09-2011 by SP193.
Free McBoot allows homebrew programs to be launched without a trigger disc required unlike PS2 Independence.
This also allows use of homebrew on unmodded systems without a functional disc drive. However, installation of the exploit to each individual memory card requires either an already exploited/modded system in order to launch the installer, or boot image that can load an app that loads ELF files (network adapter and hard drive also required). Copying from one memory card to another will not work.
It does not work on the very newest PS2s (SCPH-9000x model with BIOS 2.30 and up) but will work on all models prior to that.
FreeHDBoot
The newest versions of Free McBoot, version 1.90 and newer, also have the ability to install and boot from both Sony and non-Sony HDDs when using a "fat" PS2 and network adapter.[3] This support is called FreeHDBoot or FHDB. With a few minor issues, it is now possible to game entirely from the HDD, without needing to use the optical disc drive nor a physical memory card.
Fortuna
Released on 12-02-2019 by krat0s.
Fortuna is an homebrew launcher for all PS2 models.
That means EVERY PS2 including the TV can be exploited by scrolling to an MC-Icon and "back out" of the menu.
Fortuna supports all PS2 models, from the first to the very last. However, different files are needed depending on the console version (SLIM or FAT).
Requirements:
- A PS2 Memory Card
- A way to transfer files to the Memory Card (one time setup)
Technical explanation on how it works will be provided later by krat0s.
TnA writes it is a bit similar to this bug: "There seems to be either an issue in FMCB/FHDB's Payload, or the OSDSYS has a fault which can cause code-injection via text-strings which use opcodes or some instructions.
I can get it to freeze, with some funky OSDSYS-Item-Names... I haven't tested however, if this also happens with some weird mc-save-name-strings (not the folder-name on MC, but the actual shown name in the OSDSYS), without FMCB...
Why? The idea was a 'kick-start'-icon which has the weird name and starts an ELF from MC. The only issue is, that - if it works - it would be immediately triggered, once the name is parsed."
See [2].
ESR Vulnerability
Vulnerability to bypass PS2 disc reader anticopy protection system.
Allows to run burnt PS2 CD/DVD on a PS2 without modchip. It is needed to have FreeMCBoot/FreeHDBoot, Fortuna or SwapMagic in order to launch ESR.
It does not yield code-execution, but once you have the ability to load code, you can access content on burned (Video-)DVDs, which have DVD-Video-content. This vulnerability is used in different apps like ESR or SMS and in varying 'formats' like ESR-Discs or simple Video-DVDs with extra-content.
Games
Network games
It is possible to exploit Network-capable games, to inject codes!!!
This is perfect for Slim PS2 and people which can not move files to the MC!
TnA scarcely mentioned that method since January 2019, like it can be seen in the comments of @Haldrie's video about the time-swap! TnA got the basic idea from some discoveries someone else mentioned.
The problem is to either inject it elsewhere, or find a way to run it!
PS1 Savedata exploits
Maybe not exploitable. See PS1 Dec Wiki Vulnerabilities page.
PS2 Savedata exploits
a PS2 game by ChampionLeake
To be disclosed.