Advertisement
rf0odxm0dz

PS4 Kernel Addresses 9.00

Dec 16th, 2021 (edited)
2,755
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
C 1.83 KB | None | 0 0
  1. #define KERN_XFAST_SYSCALL 0x1C0
  2. #define KERN_PROCESS_ASLR 0x5F824
  3. #define KERN_PRISON_0 0x111F870
  4. #define KERN_ROOTVNODE 0x21EFF20
  5. #define KERN_PTRACE_CHECK 0x41F4E5
  6. #define KERN_PRINTF 0x0B7A30
  7. #define KERN_COPYOUT 0x2715B0
  8. #define KERN_PATCH_HASMSELF 0x8BC90
  9. #define KERN_PATCH_CANMSELF 0x8BCB0
  10.  
  11. //patch memcpy first
  12. *(uint8_t *)(ptrKernel + 0x2713FD) = 0xEB;
  13.  
  14. // patch sceSblACMgrIsAllowedSystemLevelDebugging
  15.  memcpy((void *)(ptrKernel + 0x8BC20), "\x48\xC7\xC0\x01\x00\x00\x00\xC3", 8);
  16.  
  17. // patch sceSblACMgrHasMmapSelfCapability
  18.  memcpy((void *)(ptrKernel + 0x8BC90), "\x48\xC7\xC0\x01\x00\x00\x00\xC3", 8);
  19.  
  20. // patch sceSblACMgrIsAllowedToMmapSelf
  21.  memcpy((void *)(ptrKernel + 0x8BCB0), "\x48\xC7\xC0\x01\x00\x00\x00\xC3", 8);
  22.  
  23. // disable sysdump_perform_dump_on_fatal_trap
  24. // will continue execution and give more information on crash, such as rip
  25. *(uint8_t *)(ptrKernel + 0x00767E30) = 0xC3;
  26.  
  27.  // self patches
  28.  memcpy((void *)(ptrKernel + 0x168051), "\x31\xC0\x90\x90\x90", 5);
  29.  
  30.  // patch ptrace
  31.  ptrKernel[KERN_PTRACE_CHECK] = 0xEB;
  32.  memcpy((void *)(ptrKernel + 0x41F9D1), "\xE9\x7C\x02\x00\x00", 5);
  33.  
  34.  // Disable process aslr
  35. *(uint16_t*)&ptrKernel[KERN_PROCESS_ASLR] = 0x9090;
  36.  
  37.  // patch kmem_alloc
  38.  *(uint8_t *)(ptrKernel + 0x37BF3C) = VM_PROT_ALL;
  39.  *(uint8_t *)(ptrKernel + 0x37BF44) = VM_PROT_ALL;
  40.  
  41.  
  42.  
  43. *****ps4debug*****
  44. // libkernel.sprx
  45. scePthreadAttrInit = 0x0013660
  46. scePthreadAttrSetstacksize = 0x00013680
  47. scePthreadCreate = 0x00013AA0
  48. thr_initial = 0x8E430
  49.  
  50. // libkernel_web.sprx
  51. scePthreadAttrInit = 0x000087F0
  52. scePthreadAttrSetstacksize = 0x0001A580
  53. scePthreadCreate = 0x00204C0
  54. thr_initial = 0x8E430
  55.  
  56. // libkernel_sys.sprx
  57. scePthreadAttrInit = 0x0014190
  58. scePthreadAttrSetstacksize = 0x0141B0
  59. scePthreadCreate = 0x00145D0
  60. thr_initial = 0x8E830
  61.  
  62.  
  63. //all addresses ported by rfoodxmodz
  64.  
  65.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement