Editing Dumping Metldr

Jump to navigation Jump to search
Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.

Latest revision Your text
Line 1: Line 1:
{{Wikify}}
==Howto use==
 
ohai ill tell you guys howto use mathldr<br/>
files main: https://web.archive.org/web/*/http://ps3devwiki.com/files/devtools/dump-metldr/
(i like to call it that, its kinda catchy)<br/>
 
== source/basis ==
[http://www.phrack.org/issues.html?issue=66&id=13&mode=txt archives/66/p66_0x0d_Power cell buffer overflow_by_BSDaemon.txt] [http://www.kernelhacking.com/rodrigo/docs/Cell-phrack.txt]
 
== How to use ==
 
ohai I'll tell you guys how to use mathldr<br/>
(I like to call it that, it's kinda catchy)<br/>
this is pretty safe (if you know what you are doing, and do it right)<br/>
this is pretty safe (if you know what you are doing, and do it right)<br/>
just don't go crazy with it, it's possible mess your eid up if you attempt to rehash it and flash or attempt in any way to replace your eid<br/>
just dont go crazy with it, its possible mess your eid up if you attempt to rehash it and flash or attempt in any way to replace your eid<br/>
if you plan on rehashing your EID make sure to have a flasher and a good backup of your flash handy<br/>
if you plan on rehashing your EID make sure to have a flasher and a good backup of your flash handy<br/>
you can decrypt eid with root keys and static keys in the wiki key talk page<br/>
you can decrypt eid with root keys and static keys in the wiki key talk page<br/>
The static keys: http://web.archive.org/web/20150910133656/http://pastie.org/private/qwndjafrtkvhe9cikbxhg
the static keys: http://pastie.org/private/qwndjafrtkvhe9cikbxhg
 
=== Prerequisites ===


===prerequisites===
<ol>
<ol>
<li>otheros++ with ss patches<br/> (yes the ones that cause trophy errors, just update when you wanna play games again and dont complain)</li>
<li>otheros++ with ss patches<br/> (yes the ones that cause trophy errors, just update when you wanna play games again and dont complain)</li>
<li>linux on your ps3 (im using ubuntu 10.10)</li>
<li>linux on your ps3 (im using ubuntu 10.10)</li>
<li>a unpacked copy of your flash (which you can obtain by using glevands [https://web.archive.org/web/*/http://ps3devwiki.com/files/flash/Tools/USB%20Flash%20Dump/ dump_flash.pkg]<br/>), you need:
<li>a unpacked copy of your flash (which you can obtain by using glevands dumpflash.pkg<br/> http://gitbrew.org/~glevand/ps3/pkgs/dump_flash.pkg), you need:
<ul>
<ul>
<li>metldr (aka asecure)</li>
<li>metldr (aka asecure)</li>
<li><strike>EID0</strike> (not needed, commented out in run.sh) (if used, you will need to split eid from your flash [[Dev_Tools#dump_EID0.sh|dump_EID0.sh]]; use 'modprobe ps3dmproxy' if needed)</li>
<li><strike>EID0</strike> (not needed, commented out in run.sh) (if used, you will need to split eid from your flash http://www.ps3devwiki.com/index.php?title=Dev_Tools#dump_EID0.sh)</li>
</ul>
</ul>
and an unpacked copy of OFW (e.g. [https://web.archive.org/web/*/http://ps3devwiki.com/files/firmware/OFW-CEX/3.55/ 3.55 OFW-CEX]), you will need the following files from these:
and an unpacked copy of ofw (e.g. [http://www.multiupload.com/EF6WZ6PU4K 3.55]), you will need the following files from these:
<ul>
<ul>
<li>isoldr</li>
<li>isoldr</li>
Line 34: Line 25:
<li>and obviously appldr-metldrexploit350.self from the files</li></ul>
<li>and obviously appldr-metldrexploit350.self from the files</li></ul>
</li>
</li>
<li>ps3tools [[Dev_Tools#fail0VERFLOW|fail0VERFLOW]] (to unpack your nor and the ofw ie norunpack and pupunpack)</li>
<li>ps3tools http://www.ps3devwiki.com/index.php?title=Dev_Tools#fail0VERFLOW (to unpack your nor and the ofw ie norunpack and pupunpack)</li>
<li>latest gitbrew linux kernel</li>
<li>latest gitbrew linux kernel</li>
<li>a desire to quit *****ing and complaining and get off your ass.</li>
<li>a desire to quit *****ing and complaining and get off your ass.</li>
Line 43: Line 34:


=== Step by Step instuctions ===
=== Step by Step instuctions ===
 
you can do this over ssh or on console I prefer ssh because my girlfriend likes to watch tv alot.<br/>
Precompiled metldrpwn : https://web.archive.org/web/*/http://ps3devwiki.com/files/devtools/dump-metldr/metldrpwn.zip
 
you can do this over ssh or on console.<br/>
 
Note: don't forget to provide EID0 and RL_FOR_PROGRAM.img if you do manually, instead of the run.sh file where they are commented out


<ol>
<ol>
<li>ssh into the ps3</li>
<li>ssh into the ps3<li>
<li>download the files:
<li>download the files:
{{keyboard|content=<syntaxhighlight lang="bash">wget https://web.archive.org/web/*/http://ps3devwiki.com/files/devtools/dump-metldr/metldrpwn.zip</syntaxhighlight>}}</li>
<pre>wget http://gotbrew.org/metldr838exploit.tar.gz</pre></li>
<li>untar the files:
<li>untar the files:
{{keyboard|content=<syntaxhighlight lang="bash">unzip metldrpwn.zip</syntaxhighlight>}}</li>
<pre>tar -xvf metldr838exploit.tar.gz</pre></li>
<li>enter the directory and compile:
<li>enter the directory and compile:
{{keyboard|content=<syntaxhighlight lang="bash">cd metldrpwn && make</syntaxhighlight>}}</li>
<pre>cd metldr838exploit && make</pre></li>
<li>run the following commands now:
<li>run the following commands now:
{{keyboard|content=<syntaxhighlight lang="bash">
<pre>insmod ./metldrpwn.ko
insmod ./metldrpwn.ko
cat metldr > /proc/metldrpwn/metldr
cat metldr > /proc/metldrpwn/metldr
cat appldr-metldrexploit350.self > /proc/metldrpwn/mathldr
cat appldr-metldrexploit350.self > /proc/metldrpwn/mathldr
Line 66: Line 51:
cat eid0 > /proc/metldrpwn/eid0
cat eid0 > /proc/metldrpwn/eid0
echo 1 > /proc/metldrpwn/run
echo 1 > /proc/metldrpwn/run
cat /proc/metldrpwn/debug
cat /proc/metldrpwn/debug</pre></li>
</syntaxhighlight>}}</li>
<li>there now you have a dump check it out:
<li>there now you have a dump check it out:
{{keyboard|content=<syntaxhighlight lang="bash">hd /proc/metldrpwn/dump  | less</syntaxhighlight>}}</li>
<pre>hd /proc/metldrpwn/dump  | less</pre></li>
<li>now copy the dump somewhere or youll lose it:
<li>now copy the dump somewhere or youll lose it:
{{keyboard|content=<syntaxhighlight lang="bash">cp /proc/metldrpwn/dump /home/username/</syntaxhighlight>}}</li>
<pre>cp /proc/metldrpwn/dump /home/username/</pre></li>
</ol>
</ol>
now you have a copy in your home directory for safe keeping<br/>
now you have a copy in your home directory for safe keeping<br/>
congrats you've completed about < 10 mins of actual work<br/>
congrats youve completed about < 10 mins of actual work<br/>
<br/>
<br/>
there you go: keys are in 0x00 to 0x20 (first 3 lines)<br/>
there you go keys are in 0x00 to 0x20 (first 3 lines)<br/>
[QUOTE]
'''So now you get code execution on metldr at the best time possible because your code executes right after metldr copies the root keys from 0x00 to 0x30, which means you get to dump these too. (Although they are hardcoded in metldr's code anyway)'''[/QUOTE]


::'''So now you get code execution on metldr at the best time possible because your code executes right after metldr copies the root keys from 0x00 to 0x30, which means you get to dump these too. (Although they are hardcoded in metldr's code anyway)'''
example:<br/>
 
erk: #<br/>
==== example ====
  00000000 66 4d ee 51 65 6f 68 28 38 98 83 ea df ea 90 04 |fM.Qeoh(8.......|<br/>
 
  00000010 01 f3 79 09 d6 a6 52 d9 ea 6d ef 04 51 69 ec 7b |..y...R..m..Qi.{|<br/>
  00000000 66 4d ee 51 65 6f 68 28 38 98 83 ea df ea 90 04 |fM.Qeoh(8.......|   // erk/key
riv: <br/>
  00000010 01 f3 79 09 d6 a6 52 d9 ea 6d ef 04 51 69 ec 7b |..y...R..m..Qi.{|   // erk/key
  00000020 7d 6a 3a e5 37 ba 48 4c fe bd 26 5c f5 b1 28 1f |}j:.7.HL..&\..(.|<br/>
  00000020 7d 6a 3a e5 37 ba 48 4c fe bd 26 5c f5 b1 28 1f |}j:.7.HL..&\..(.|   // riv
the first 2 lines are erk the 3rd is riv<br/>
the first 2 lines are erk the 3rd is riv<br/>
and together they are eid0 root key<br/>
and together they are eid0 like captain ****in planet<br/>
 
==== example with hardcoded version of minver 3.50+ console ====
 
Rare example of eid_root_key with min version hardcoded into it.  Found in some rare <!--// minver 3.50 revisionkey 00 00 0E 92  C3 26 6E 4B BB 28 2E 76 B7 67 70 95 //--> 2501A's (believed to possibly be in 3.60+ as well, but unable to verify.)
00000000  F5 CC 0B 7F 4D 00 31 07 F2 BC 57 A4 B5 C3 8B E1  |õÌ..M.1.ò¼W¤µÃ‹á|  // erk/key
00000010  78 A9 CD BC 73 21 5A 5B 9D E0 B2 7B 13 BE 4D 21  |x©Í¼s!Z[.à²{.¾M!|  // erk/key
00000020  A7 72 F8 74 BE A9 E6 52 B3 D9 A6 85 05 69 D9 C7  |§røt¾©æR³Ù¦….iÙÇ|  // riv
00000030  00 03 00 50 00 00 00 00 32 7F FF 80 32 7F FF    |...P....2.ÿ€2.ÿ |  // min version/jump ladder
the last line contains min version hardcoded in first 8 bytes, and last 8 bytes is jump code beginning.  (only difference.)


btw this does not mean you get 3.60 keys etc or newer games but it will help you get some nifty things to do some <br/>new stuff.... also please be advised that if you are on 3.60+ you will need to downgrade with a flasher to<br/> do this, also if you have a unit that shipped from the factory with the metldr.2 (new metldr) your sol at<br/> the moment
btw this does not mean you get 3.60 keys etc or newer games but it will help you get some nifty things to do some <br/>new stuff.... also please be advised that if you are on 3.60+ you will need to downgrade with a flasher to<br/> do this, also if you have a unit that shipped from the factory with the metldr.2 (new metldr) your sol at<br/> the moment
theres also a nifty program on the dev tools page to turn your hex into key its called hex2key<br />
theres also a nifty program on the dev tools page to turn your hex into key its called hex2key<br />
oh thanx math<br />
thanx anon leaker<br />
thanx gitbrew and glevand<br />


Example of eid_root_key with hardcoded version from minver 3.56+ console
===some good reading on the subject for further understanding:===
00000000  BF 85 81 FF 99 E8 CB A8 32 DF 41 00 66 C9 5F C7
[[File:Ps3-cryptochain.png|300px|thumb|left|3.56 and older Chain of Trust]]
00000010  4B A8 EE A8 9A 68 8E 15 81 1E 54 ED A8 EB 06 4C
http://www.ps3devwiki.com/images/e/ed/Ps3-cryptochain.png<br/>
00000020  EB BF C3 41 4A 9E DF B0 ED A0 86 68 03 3D AD 87
http://www.ps3devwiki.com/index.php?title=Boot_Order<br/>
00000030  00 03 00 56 00 00 00 00 32 7F FF 80 32 7F FF 80
http://www.ps3devwiki.com/index.php?title=Dev_Tools<br/>
 
http://www.ps3devwiki.com/index.php?title=Flash<br/>
=== Some good reading on the subject for further understanding ===
http://www.ps3devwiki.com/index.php?title=Talk:Flash<br/>
http://www.ps3devwiki.com/index.php?title=IDPS<br/>
http://www.ps3devwiki.com/index.php?title=Talk:IDPS<br/>
http://www.ps3devwiki.com/index.php?title=Per_Console_Keys<br/>
http://www.ps3devwiki.com/index.php?title=Talk:Per_Console_Keys<br/>
http://www.ps3devwiki.com/index.php?title=Hypervisor_Reverse_Engineering<br/>
http://www.ps3devwiki.com/index.php?title=Talk:Keys<br/>
http://www.ps3devwiki.com/index.php?title=Synergistic_Processing_Unit_%28SPU%29<br/>
http://www.ps3devwiki.com/index.php?title=Talk:Synergistic_Processing_Unit_%28SPU%29<br/>
http://www.ps3devwiki.com/index.php?title=SPU_Isolated_Modules_Reverse_Engineering<br/>
http://www.ps3devwiki.com/index.php?title=Talk:SPU_Isolated_Modules_Reverse_Engineering<br/>


[[File:Ps3-cryptochain.png|300px|thumb|left|3.56 and older Chain of Trust]]
* [[Boot Order]]
* [[Dev Tools]]
* [[Flash]] / [[Talk:Flash]]
* [[IDPS]] / [[Talk:IDPS]]
* [[Per Console Keys]] / [[Talk:Per Console Keys]]
* [[Hypervisor Reverse Engineering]]
* [[Talk:Keys]]
* [[Synergistic Processing Unit %28SPU%29|Synergistic Processing Unit (SPU)]] / [[Talk:Synergistic Processing Unit %28SPU%29|Talk:Synergistic Processing Unit (SPU)]]
* [[SPU Isolated Modules Reverse Engineering]] / [[Talk:SPU Isolated Modules Reverse Engineering]]


== Mathieulh's explaination ==
== Math's explaination ==
(needs cleanup)
(needs cleanup)
<br><br>
Because some ungrateful person leaked my metldr exploit files I will now be explaining how it actually works, see this as my ultimate release of all times for an ungrateful scene (and scenes in the future)
Because some ungrateful person leaked my metldr exploit files I will now be explaining how it actually works, because of course the person that leaked these files has no idea of how they actually work
 


That's about how I am pissed off right now, because of course the person that leaked these files has no idea of how they actually work.
<br><br>
<br><br>
How to "pwn metldr" the "easy" way:<br>
How to pwn metldr the "easy" way:<br>
This is most likely how geohot exploited it in the first place, this takes (give or take) about 10 minutes to be performed. (yeah, not so much of a "I hacked the ps3 all on my own work", especially not when it partially relies on Segher's work, one of the reason geohot never shared the way he exploited metldr to anyone)
This is most likely how geohot exploited it in the first place, this takes (give or take) about 10 minutes to be performed. (yeah, not so much of a "I hacked the ps3 all on my own work", especially not when it partially relies on Segher's work, one of the reason geohot never shared the way he exploited metldr to anyone)
<br><br>
<br><br>
I will assume here, that you do not have the loader keys that were made readily available by geohot. This little tutorial also assumes that you have a working .self generator tool
I will assume here, that you do not have the loader keys that were made readily available by geohot. This little tutorial also assumes that you have a working .self generating tool
<br><br>
<br><br>
Now You want to gain code execution to metldr, you know that metldr loads loaders to its own space, but you cannot run a loader because the loader needs to be signed and even though you know about the signature fail that Segher introduced at the CCC, you cannot use it because you don't have decrypted signatures to calculate a private key and to get signatures you need keys which you are currently trying to dump, so far you are stuck in a chicken and egg scenario.
Now You want to gain code execution to metldr, you know that metldr loads loaders to its own space, but you cannot run a loader because the loader needs to be signed and even though you know about the sign fail that Segher introduced at the CCC, you cannot use it because you don't have decrypted signatures to calculate a private key and to get signatures you need keys which you are currently trying to dump, so far you are stuck in a chicken and egg scenario.
<br><br>
<br><br>
The question is, do you really need keys to get a decrypted signature ?  
The question is, do you really need keys to get a decrypted signature ?  
Well the real answer is no, thanks to a nifty bug that sony left in metldr, you can have the loader to decrypt the metadata for you, isn't that neat ?
Well the real answer is no, thanks to a nifty fail that sony left in in metldr (and the bootloader), you can have the ldr to decrypt the metadata for you, isn't that neat ?
<br><br>
<br><br>
Here's how it works:
Here's how it works:
Line 140: Line 118:
STEP I)
STEP I)
<br><br>
<br><br>
In a self file, at address 0x0C a value is used to calculate where the metadata is going to be decrypted, the "offset" is located at self header + 0x0C
In a self file, at address 0x0C a value is used to calculate where the metadata is going to be decrypted, the "offset" is at self header + 0x0C
its the "meta header offset" in the SCE structure, it takes the SCE offset + that value, so what you have to do is to have a calculation that is equal to 0x3E1F0 which happens to be where metldr copies over the shared metadata from the mailbox (which is sent over by the ppu), the trick is to have metldr to decrypt the metadata located in the shared Local Store.
its the "meta header offset" in the SCE structure, it takes the SCE offset + that value, so what you have to do is to have a calculation that is equal to 0x3E01F0 which happens to be where metldr copies over the shared metadata from the mailbox (which is sent over by the ppu), the trick is to have metldr to decrypt the metadata located at.
So basically you have to <br>
So basically you have to <br>
1) set the offset += 0x2000<br>
1) set the offset += 0x2000<br>
dump shared lsa (located at 0x3E000 in ls)<br>
dump shared lsa<br>
and keep increasing 0x2000<br>
and keep increasing 0x2000<br>
until somewhere in the shared lsa, 0x40 byte change<br>
until somewhere in the shared lsa changes 0x40 byte<br>
2) when it changes 0x40 bytes, you can add/subtract the proper amount to make it decrypt the proper locations<br>
2) when it changes 0x40 bytes, you can add/subtract the proper amount to make it decrypt the proper locations<br>
3) then dump the shared lsa and you have a decrypted header<br>
3) then dump shared lsa and we have decrypted header<br>
knowing that metldr uses SCE header 0xECF0, you could calculate it knowing the address 0x3E1F0 - 0xECF0 = the value you would patch at SCE header + 0x0C<br>
knowing that metldr uses SCE header 0xECF0, you could calculate it knowing the address 0x3E01F0 - 0xECF0 = the value you would patch at SCE header + 0x0C<br>
<br>
<br>
   ROM:0000F6C0 D2 68 87 E6 metadata_erk: .int 0xD26887E6 ; DATA XREF: ROM:0000F178o
   ROM:0000F6C0 D2 68 87 E6 metadata_erk: .int 0xD26887E6 ; DATA XREF: ROM:0000F178o
Line 167: Line 145:
Now what ?<br>
Now what ?<br>
<br>
<br>
Well Your first reflex would be to sign a loader and use it to dump whatever is part of the Isolated Local Store, the first thing you will notice is that you have a bit of metldr's code as a leftover, after a bit of disassembly you will notice that it's actually some piece of code that clears metldr's code and registers and jumps to some address which matches your signed loader's entrypoint.
Well Your first reflex would be to sign a loader and use it to dump whatever is in your Isolated Local Store, the first thing you will notice is that you have a bit of metldr's code as a leftover, after a few seconds of disassembly you will figure it's actually some piece of code that clears metldr's code and registers and jumps to some address which is matches your signed loader's entrypoint.
<br>
<br>
This seems a more than likely candidate to exploit, as your goal would be to overwrite that piece of code with your own, that way you would have the whole metldr code right before the point where everything gets cleared out.
This seems like a more than likely candidate to exploit, as in your goal would be to overwrite that piece of code with your own, that way you would have the whole metldr code right before the point where everything gets cleared out.
<br>
<br>
Let's try to do just that, from your previous dump, you should obviously know that the clear code is located from 0x400 to 0x630, (0x410 being where metldr jumps when it clears) your first attempt would naturally be to have a loader section to load at 0x400, unsurprisingly, it fails, because you are not without a brain (at least you aren't supposed to be if you're reading and understanding this), you will assume that it is likely that metldr checks if you aren't loading your loader/self section below a certain address, which considering you know the loaders' entrypoint is most likely to be 0x12C00, this assumption is in fact correct as metldr will make sure you cannot load any loader at 0x12BFF and below, seems like a huge let down...
Let's try to do just that, from your previous dump, you obviously know that the clear code is located from 0x400 to 0x630, (0x410 being where metldr jumps when it clears) your first attempt would naturally be to have a loader section to load at 0x400, well not so surprisingly, it fails, because you are not without a brain (at least you aren't supposed to be if you're reading and understanding this), you will assume that it is likely that metldr checks if you aren't loading your loader/self section below a certain address, which considering you know the loaders' entrypoint is most likely to be 0x12C00, this assumption is in fact correct as metldr will make sure you cannot load any loader at 0x12BFF and below, seems like a huge let down...
<br>
<br>
Well, maybe not, should you check out the hardware properties for the Local Store, you would find out that the memory wraps around (memory is a donut as someone once said at some CCC conference).
Well, maybe not, because yet again, you are not without a brain, you check out the hardware properties for the Local Store, and you find out that the memory wraps around (memory is a donut as someone once said at some ccc conference).
<br>
<br>
So what happens when you load your loader at let's say from 0x3F000 to 0x40000+some address? (like 0x40410 for example) ?<br>
So what happens when you load your loader at let's say from 0x3F000 to 0x40000+some address? (like 0x40410 for example) ?<br>
Line 185: Line 163:
   ROM:00000410 32 7F FF 80 br sub_40C
   ROM:00000410 32 7F FF 80 br sub_40C
<br>
<br>
this is what the exploit that got leaked (yeah that's not really their work eh but you figured that much by now, did you not? ) does.<br>
this is what the exploit that got leaked (yeah that's not really their work eh but you figured that much by now did you not? ) does.<br>
It overwrites from 0x000 to 0x480 because I originally loaded the section of size 0x880 to 0x3FC00<br>
It overwrites from 0x000 to 0x480 because I originally loaded the section o size 0x880 to 0x3FC00<br>
<br>
<br>
So now you get code execution on metldr at the best time possible because your code executes right after metldr copies the root keys from 0x00 to 0x30, which means you get to dump these too. (Although those are hardcoded in metldr's code anyway)<br>
So now you get code execution on metldr at the best time possible because your code executes right after metldr copies the root keys from 0x00 to 0x30, which means you get to dump these too. (Although they are hardcoded in metldr's code anyway)<br>
<br>
<br>


Here you go, you have a metldr dump !<br>
Here you go, you have a metldr dump !<br>


Now as a final line, I'd like to say this is my last contribution to this scene. It seems I can't even trust fellow developers to keep my work safe.
Now as a final line, I'd like to say screw leakers, screw the scene, and this is my last contribution to it EVER. It seems I can't even trust fellow developers to keep my work safe and not leaking it. (Not like any of them would have been able to tell you how all this even works in the first place)
<br>
<br>
So long, everyone. <br>
So long, everyone. <br>
Remember, don't ever bite the hands that feed you.<br>
Remember, don't ever bite the hands that feed you.<br>
<br>
<br>
 
P.S. Oh! and btw, if you talented enough to make hardware to dump the shared lsa, you can decrypt any lv0 using this technique.
'''Old partial/incomplete source: http://lan.st/showthread.php?t=4025'''
<br>
(Link now deprecated)
This is all based on the content of this link: http://lan.st/showthread.php?t=4025<br>
 
 
 
{{Reverse engineering}}<noinclude>[[Category:Main]]</noinclude>
Please note that all contributions to PS3 Developer wiki are considered to be released under the GNU Free Documentation License 1.2 (see PS3 Developer wiki:Copyrights for details). If you do not want your writing to be edited mercilessly and redistributed at will, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource. Do not submit copyrighted work without permission!

To protect the wiki against automated edit spam, we kindly ask you to solve the following hCaptcha:

Cancel Editing help (opens in new window)