September 8, 2008, Monday, 251

Independence Exploit

From Emu Bomb

Jump to: navigation, search

Contents

[edit] What is the independence exploit?

When a PlayStation (PS1) game is loaded in the PlayStation 2, the console looks for a file called TITLE.DB which, if present, is located in the Memory Card's directory BxDATA-SYSTEM (where x is a letter corresponding to the console's region –e.g.: E for the EU, A for the USA or I for Japan, this directory corresponds to the System Settings save). This file is a database of special options to be applied to specific PS1 games for their correct operation.

The exploit relies on creating a deliberately incorrect entry inside this file, which triggers a buffer overflow and, combined with a small stub loader located in the file, allows the execution of unencrypted code from the Memory Card upon the insertion of a specific PS1 game. Normally, only programs encrypted by Sony, such as the DVD player, will run from the Memory Card.

Hence, to use the exploit, you need to create a title.db file that will launch when you insert a specific PS1 disk to the PS2

[edit] How to use the Independence Compiler

The independence compiler is the easiest way to use the exploit on your PS2.

Click to download independence compiler 4.1


  • Download the above app and unzip it.
  • Insert an authentic PS1 disk into your PC. Thiz will be the trigger disk (i.e. when you place this disk into your PS2, the exploit will begin.)
  • Open independencecompiler4.1.exe
  • Goto the Title DB tab
  • Select your CD drive from the select box, Click the 'Get ID from CD' button. Once the ID has been found, click 'Add to Title DB'
  • If you wish to have more than one possible trigger disk, insert the next disk and repeat the above step.
  • Choose the 'Loader' tab. Select 'Other' and select 'recommended-BOOT.ELF included in the package or available here)
  • Choose the 'Files' tab. Here you can either add homebrew apps, or leave it blank. If you intend to use a USB pen drive with the memory card (much easier to use/update etc.), I recommend placing the apps on your flash drive instead of on here. You could also add the apps to your PS2 HD or to a CD. Long story short - unless you *need* to have the memory card as a stand alone app, don't put the apps on your memory card.
    • A list of all of the apps included is below.
  • In IP options, set the IP address os your PS2 if you have it networked.
  • In the region tab, select the region of your PS2 - PAL for europe, australia, new zealand and some pacific regions. NTSC for japan and US. If in doubt, it should say on your PS2 console.
  • In 'Extras', If you will be adding the exploit with a CD Installer (on a modchipped console or something), add a dummy file of at least 100MB. this is because on cd, a PS sometimes has problems reading small files.
  • In 'Create Exploit', choose the options of the resulting exploit. Memory Card (XPS) will output the actual memory card file for transplating directly to a memory card (i.e. for action replay, gameshark, memory card backup device). CD image with installer will boot just like a game (must have modchip etc.) and install the exploit. File Outpuit will output the raw exploit files for use in another program.

[edit] Included ELF files

  • CogSwap.elf:
    • You use this application to launch backup & copied PS2 games.
      • Method:
      • 1. Open cogswap
      • 2. Insert the largest authentic PS2 game you have (I use Need for Speed Carbon - a dual layer DVD game)
      • 3. Wait a few seconds and press X.
      • 4. Disk-Swap using a slide card to your pirated DVD game, press X
  • Media Player 2.7
    • This is actually called SMS 2.7 but was renamed to avoid confusion. This can play a variety of audio,video and other multimedia
  • All the rest
    • These are emulators to play roms from other systems. Included are: SNES, NES, Genesis & SMS
  • There are many more ELF applications available.

[edit] How to install the exploit