PS2 Independence Exploit

From Wikipedia, the free encyclopedia

The PS2 Independence Exploit allows the execution of homebrew programs on an unmodified PlayStation 2.

1 Exploit details
- 1.1 Installation
2 Benefits
3 The exploit on newer consoles
4 See also
5 External links

[edit] Exploit details

When a PlayStation (PS1) game is loaded in the PlayStation 2, the console looks for a file called TITLE.DB which, if present, is located in the Memory Card's directory BxDATA-SYSTEM (where x is a letter corresponding to the console's region –e.g.: E for the EU or A for the USA, this directory corresponds to the System Settings save). This file is a database of special options to be applied to specific PS1 games for their correct operation.

The exploit relies on creating a deliberately incorrect entry inside this file, which triggers a buffer overflow and, combined with a small stub loader located in the file, allows the execution of unencrypted code from the Memory Card upon the insertion of a specific PS1 game. Normally, only programs encrypted by Sony, such as the DVD player, will run from the Memory Card.

The discovery of this vulnerability in the PS2's software opens up the possibility of running programs created by the PS2 homebrew developer community without the need for a modchip or disc swapping techniques (a.k.a. CogSwap).

[edit] Installation

Triggering the exploit requires a way of installing the modified files to the Memory Card, which is not possible by normal means. Installation is accomplished either from a console (modified or with the exploit already installed), a Memory Card reader/writer, a disc swapping technique or through the use of some commercial programs allowing USB flash drive to Memory Card transferences, such as Code Breaker (versions 8 and higher) or Action Replay MAX, by transferring a modified System Settings save file. Alternatively a more involved method can be used, through the combination of a hard disk loader program (HD Loader/HD Advance), an ISO image installer program (such as Power ISO or Daemon Tools), and an image of some program allowing installation.

[edit] Benefits

With the exploit installed, the user is able to run programs from Memory Cards, optical discs, network or USB flash drives. Programs are found in the ELF executable format.

Popular programs include media players, Memory Card/hard disk management tools, emulators, and loaders (able to launch other programs).

[edit] The exploit on newer consoles

The PS2 Independence Exploit does not work on newer Slim (V12) models (see PlayStation 2: Hardware revisions), since the buffer overflow has been corrected, although there are alternatives [1].