Editing ICAL Exploit

Jump to navigation Jump to search
Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.

Latest revision Your text
Line 1: Line 1:
== Introduction ==
== Introduction ==
ICAL Exploit was Created by [[SilicaAndPina]] allows for System Uri Calling on the latest PSVita firmware [[3.72]]
as well as a bug with the PSN Sign Up application, that allows for Account Switching also on the latest PSVita Firmware [[3.72]]


ICAL Exploit is a PSVita exploit that allows System URI call on OFW.
== System URI Calling ==  
The vulnerability was discovered and exploited by "Li".
(system uri's are URI's defined in param.sfo surrounded by triangle brackets. and they can only be run by the system and not the browser
Chained with a bug in the PSN Sign Up application, that allows for Account Switching even on the latest PSVita firmware [[3.74]].
The PSVita [[Calendar]] Application allows you to create ical event files in the (.ics) format, which is an .INI-Like format with ':' instead of '=' for defining values.
 
these files can be sent over PSN Messager and the EMail client, to execute SUPPORT_URI's you simply have to write the uri you want into the ics file's URL: entry and then view the event either in the Email Application or the PSN Messager application and click the "www" browser icon.
== System URI calling ==
*Note: You CANNOT use the Calendar application itself to do this, it must be done in the event preview screen found in Email or Messager apps 
 
you should be able to do this in any Text Editor.
System URI's are URI's defined in param.sfo surrounded by triangle brackets. They can only be run by the system and not by the web browser. The PSVita [[Calendar]] application allows user to create ICAL event files in the (.ics) format, which is an .INI-Like format with ':' instead of '=' for defining values. These files can be sent over PSN messenger and the Email client. To execute SUPPORT_URI's you simply have to write the URI you want into the .ics file's URL: entry and then view the event either in the Email application or the PSN messenger application and click the "www" browser icon.
Here is an example .ics file (run package installer)
 
*Note: You CANNOT use the Calendar application itself to do this. It must be done in the event preview screen found in Email or Messenger applications. You should be able to do this in any text editor.
 
== Example ==
 
Here is an example .ics file that launches the Package Installer application.
    
    
     BEGIN:VCALENDAR
     BEGIN:VCALENDAR
Line 43: Line 39:
     END:VEVENT
     END:VEVENT
     END:VCALENDAR
     END:VCALENDAR
A website for easily exploiting the libical bug mentioned can be found at http://vitatricks.tk
(src code: http://bitbucket.org/SilicaAndPina/vitatricks)


== Tools ==
== Changing PSN Accounts ==
 
If you re-run the signup app via the 'psnreg:' uri call after you've already got an account linked then the SignUp application will say
A website for easily exploiting the libical bug mentioned is available at: [[http://vitatricks.xyz]].
"Please Wait..." and then take you to the "Welcome <yourname> to PSN" screen, however if you remove internet access to the console at the correct time using the "Please Wait..." screen then PSN Authentication will fail. and you will be booted back to the "Sign In" screen, from here. you can sign in using any credentials your vita will be linked to this account. however `ux0:/id.dat` is NOT updated. so you'll have to go back to your original account before rebooting or you'll be greeted with the "Please format your memory card" message
 
The source code of this website is available: [[http://bitbucket.org/SilicaAndPina/vitatricks]].
 
== Changing PSN accounts ==
 
If you run again the Sign Up application via the 'psnreg:' URI call after you have already got an account linked, then the Sign Up application will say
"Please Wait..." and then take you to the "Welcome <yourname> to PSN" screen. However if you remove internet access from the console at the correct time using the "Please Wait..." screen then PSN authentication will fail. You will be booted back to the "Sign In" screen from here. You can sign in using any credentials and your PSVita will be linked to this PSN account. However `ux0:/id.dat` is NOT updated so you will have to go back to your original PSN account before rebooting or you will be greeted with the fatal "Please format your memory card" message.
Please note that all contributions to Vita Developer wiki are considered to be released under the GNU Free Documentation License 1.2 (see Vita Developer wiki:Copyrights for details). If you do not want your writing to be edited mercilessly and redistributed at will, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource. Do not submit copyrighted work without permission!

To protect the wiki against automated edit spam, we kindly ask you to solve the following hCaptcha:

Cancel Editing help (opens in new window)