The PSP-3000 TIFF Exploit. Proof it works....
True to his word MaTiAz has released Version 2 of his Hello World TIFF Exploit. This version works on PSP Slim units and we have reports from users that it even works on the PSP-3000! That’s a added bonus. As for the “bit of awesomeness” promised we have to wait just a little longer for that.
MaTiAz’s notes:
Just copy the files to the memory stick root, disconnect USB and go to photo menu. Don’t dismiss the exploit even if it doesn’t work on the first time, it’s *very* unstable. You might get it working on the first time, but you might as well have to try it 20 times!
The h.bin is loaded to 0×08800000, and the text address of paf.prx is passed in $a0 to the binary code. You can then trick out function imports, like for example sceDisplayWaitVblankStart: sceDisplayWaitVblankStart = (void*)(paf_addr+0×15F068);
Instructions:
1. Copy either slim.tiff or phat.tiff to /PSP/PHOTO/ folder on the memory stick, depending on
your PSP model. Do NOT copy both!
2. Copy h.bin to the root of the memory stick.
Also its reported to be working on the PSP-3000 (Ta88v3) Try the following: (Thanks to n00b81 for the tip!)
From p2s2p: The interesting thing is, they didn’t think it would work for 3000s but it does! Here is what you have to do…follow the same instructions for the slim, but then throw in about 5 or 8 other pics in your photo folder, and when the thumbnails are loading, you have to scroll up and down, and then the PoC should boot up. You need at least 5.02 on a 3000 to work this.
Source: PSPGen
Similar Posts
- 5.51 working exploit found in Medal of Honor: Heroes
- Game Decrypter: Run 5.55 + 6.00 games on CFW 5.50 GEN & 5.03 GEN-A
- Sedna for 5.03 GEN-A/B. Keep 5.03 GEN-B active even after rebooting!
- Game Decrypter V3 Released. Now Supports 5.00 M33 CFW
- Despertar del Cementerio v8 Mod by Red Bull PSP
- Savegame Exploit found in PSP Firmware 5.50?
Digg it
Stumble
Del.ico.us
Reddit
Newsvine
Leave a comment
Add your link!
April 25, 2009 at 4:14 pm
Aaaaay finally got it to work……….but now i cant get off it….I cant even power off the psp. Anyone?
April 25, 2009 at 7:51 pm
well with 3004, i am able to power off the psp. not sure how the other models work
April 25, 2009 at 10:56 pm
Steps: (Not sure if it will work on 3000’s)
1: Take out MS.
2. Turn on PSP.
3. Scroll over to Picture.
4. Push MS in but make sure that if you let go of the MS it will pop out and won’t be connected to the PSP.
5. Check photos.
6. As soon as you see the .tiff let go of the MS.
7. Try again and again.
8. As soon as you see the .tiff select it.
(Steps 6 & 7 might be able to be skipped.)
April 26, 2009 at 3:40 pm
@pspfan2009
it’s still won’t work bro T_T
April 26, 2009 at 6:56 pm
i hope you are having one of ofw version 5.01, 2, 3 . comment #28 (by neo 1.3) says he was able to
see the tiff ’sploit in his psp 3006. Probably you might have to increase the tries and experiment with
the steps with fewer or more ways.
April 26, 2009 at 9:03 pm
I got it to work on my psp 3001 ofw 5.03 but on my psp phat it loads like a normal picture and it is a white swirly. When i click on it it freezes. Help. if i do get it working can i use hen or something? I know it won’t work on the 3000 but what about 1000?
April 27, 2009 at 4:07 am
@pspfan
maybe i’m going to try harder or wait for the stabler one huh???
April 27, 2009 at 9:16 am
Hey all,
Well i tried this on my PSP 3004 with OFM 5.03, and it didn’t work for me.
, Cause i am screwed if it crashes to :’(
When slim.tiff should load, the PSP freezes, and after 10 second it powers off.
I have made a vid of it, as a proof it fails:
http://www.youtube.com/watch?v=bOn0pNoU1a0
Well, i hope the upcoming HEN will work for me
Bye,
Pachirisu
April 27, 2009 at 9:37 am
i can post you a workin vid of psp 3004 with ofw 5.03 vulnerable to the ’sploit, give me some time.
April 27, 2009 at 9:40 am
Oke Great
!
But can u send the files u used to?
maybe i use a wrong .tiff file :S?
April 27, 2009 at 12:24 pm
i used the slim.tiff and 7 more jpeg files in the psp/photo and h.bin in the root.
April 28, 2009 at 11:21 am
Here’s the video of the sploit getting executed in a psp 3004.
http://www.youtube.com/watch?v=f6ZYe3E7y18
May 4, 2009 at 6:28 am
i already executed the exploit many times but if i put music then hit home it dosent freeze what does this mean
April 27, 2009 at 1:38 pm
This method works almost every time.
1 follow the slim or phat instructions
2 have eight other jpegs
3 as soon as u click on photo go all the way down quickly
4 go up three pictures then quickly go down
Repeat four until it works
April 28, 2009 at 1:32 pm
Does anyone know where to download the 5.02 update?
thnx nelzx
April 28, 2009 at 5:33 pm
You can get the update from dark alex site just google it but you have to rename it EBOOT as original file name is 502 put it in folder called UPDATE put it in the GAME folder on your psp memory stick hope this helps.
April 28, 2009 at 9:57 pm
I have psp3000 running 5.01 and after about 40 attempts this exploit finally worked!! Woot hopefully matiaz and gang can team up with da and get M33 loader soon!! Comon psp scene show sony who’s boss lol
April 28, 2009 at 10:22 pm
Well, i am ad 30 tries now, and it still dont work
May 20, 2009 at 2:05 am
Yeah same here. I has worked for me though. it took for ever. sometimes it goes through as is there was never a problem then again another million attempts. but it does work.
April 29, 2009 at 8:37 am
hey when i try it just turn my psp off help me plzz
April 29, 2009 at 8:58 am
I have a PSP 3001. It is 5.03. Would it work?
April 29, 2009 at 11:36 am
It works with my psp 3003 with firmware 5.02 so there should be no issue for you.
May 14, 2009 at 4:41 am
hey, what does it really do?
April 29, 2009 at 9:55 pm
Hey
1 Question i have psp 2003 with data code 7c and firm 5.03 its white i think its the slim version now i understand that thing with photos but bin file suppose to be in Root butttttttt i have folder called MPROOT its thos the right thing ?!?!? + inside MPROOT i have 2 folders so where the f%& i should put that bin ? and also if i put bin file in couple of places it will affect the whole process ?????
April 29, 2009 at 10:27 pm
NVM i just read all 164 comments i put it directly in ROOT now still dosnt work .
I COUNT IT 78 tries !!!!!!!!! AND NO LUCK I DID EXACTLY THE SAME AS ON VIDEOS ETC.
I AM REALLY UNLUCKY BASTARD………………
April 29, 2009 at 10:36 pm
110 tries ok fuk this ………
Only 1 thing i cant understand how the fu …. guy on the movie did this 2 times in the row ….. HOOOOOOOOOOOOOOOOOOOOOOOOOOOOWWWWWWWWWWW 2 times in the row when i cant do it once in 110 times !!!
April 29, 2009 at 11:16 pm
FU CKKKKK I WOUND THE REASON IT DIDNT WORK !!!!!!!!!!!!!!
EVERYBODY WHO HAVE PROBLEM WITH THIS SHIT GO TO SETTING AND PRESS================= =======================RESTORE DEFAULT SETTING======= and try again i got it with first try LOL
April 30, 2009 at 2:50 am
You got plain luck. There’s not need to reset defaults.
April 30, 2009 at 2:20 pm
No i did it over 100 times and it didn’t work , after i press restore default settings it worked 3 times in the row ………
April 30, 2009 at 2:23 am
I think Sony is tricking us. >:O Jumping to a new firmware without patching somethings is suspicious. With every update Sony could be making a Trojan Horse, Byte by byte. Whatever it might be could stop all hacks once and for all..It’s just a guess for me.
April 30, 2009 at 2:28 am
If it is true. Oh noes. :[[[[[
April 30, 2009 at 3:12 pm
dudes wat is the use of this hellow world thingy
April 30, 2009 at 5:37 pm
SUCCESSFUL attempt with PSP-2004 Datecode: 8C Firmware:5.03
Do following steps
1. Store 8 JPGs in PICTURE folder along with slim.tiff
2. Place h.bin in root.
3. Restore Factory default settings.
4. Reboot PSP and do initial settings only prompted by PSP wizard.
5. Reboot PSP again
6. Go to Photo | Memory stick
7. Scroll down picture one by one is such manner that you should see at least see one un-loaded thumbnail while moving down.
8. On 7th or 8th picture just stop pressing any key, Exploit will load.
TRUST ME ITS DAMN SO EASY AFTER RESTORING DEFAULT SETTINGS.
April 30, 2009 at 5:38 pm
Following URL will surly help you a lot
http://www.youtube.com/watch?v=cwX_68Ji–A&feature=player_embedded
May 3, 2009 at 5:14 am
I was having trouble with it, but all I had to do was get rid of any .PNG images, and not use a custom background and theme, and then it worked… kind of, the letters were all scrunched together though :\
May 3, 2009 at 12:49 pm
Took me all night to get this going as their are many post’s saying diffrent things.i have a PSP-3003 pb updated to v5.02 brought at christmas 2008 from Gamestation UK. im telling you this so if you brought one around the same time and from the same shop then its likley you have a TA-088 v3 motherboard. good times. I done a Restore Default Settings and formatted my memory card. Using 5.03 TIFF Exploit release v2, I put 8 windows Vista picture’s into the PICTURE directory of a 512mb sony memory card while the PSP was connected to the PC. Also copyed h.bin to root of memory card, then copy slim.tiff to the PSP/PHOTO directory. if you dont have a PHOTO directory in PSP folder then make one. Take the USB cable out of your PSP and any umd disk ’s. Scroll to the Photo icon on your PSP then enter the memory card. Scroll down the list of picture’s all the way down to the slim.tiff then back up then back down quick or slow worked for me, but try to land on the slim.tiff file as it tends to load that way for me. Hope this help’s someone
June 17, 2009 at 12:43 pm
I followed all this steps and it doesn’t work-have PSP-3004 5.50 (updated yesterday). I scrolled down and stay on tiff file but nothing happened-i waited for about 30 seconds and than i pushed the X button on this tiff file but still nothing happend-it writtes unsuported data-PLS HELP
May 4, 2009 at 6:48 am
what happen if i success THE TIFF??? whaTs the benefit of 5.03 TIFF i haVE 5.03 psp 3001 but it freeze i tried it many times but doesnt work
May 4, 2009 at 7:37 am
ROOT OF MEMORY STICK???
May 4, 2009 at 8:20 am
could you now run cfw
May 4, 2009 at 8:47 am
I got it !!!!! HAHAHAHAH MORE PATIENCE!!! THEN AFTER I SEE IT WHAT SHALL I DO?? heheh
May 4, 2009 at 9:20 am
can i back DOWNGRADE ANY VERSIONS after i success the TIFF???
May 4, 2009 at 12:09 pm
You can’t do anything with 5.03 TIFF Exploit release. it only show’s that the PSP-3000 can be Exploited by HEN. So when HEN is released Im sure somone will make a CFW based on the firmware 5.03 i would think, as any OFW higher wont work with Tiff. But as for downgrading, your be out of luck for a long time.
May 5, 2009 at 4:00 am
can i downgrade my psp if HEN is released????
hEN can do downgrade or not???
May 5, 2009 at 4:07 am
where i can see my MOTHERBOARD model of my psp,, ihave psp 3001 is this is a model AT265465910-psp3001 under my psp under the select button????
May 5, 2009 at 4:33 am
a question is why demo games can play in psp 3001 5.03?????????????
May 7, 2009 at 10:22 pm
why cant i use the HEN on my PSp 3000 i mean PSP-3007 pls do help me pls do e-mail me @ wingzero_03@live.com btw im on 5.03 ofw
thx and god bless
May 8, 2009 at 10:39 am
gyus plz help me downgrade my psp slim 2006 pb with ofw 5.01 in orderr to install cfw 5.0 m33.my motherboard i think is not 88v3.help me plz.what should i do?thnz in advance
May 14, 2009 at 7:38 pm
i from malaysia..i want to know what TIFF Exploit is??
what TIFF Exploit. do??
if i install TIFF Exploit can i play game not use umd????
pls help me!!!
email me SAUFI360@YAHOO.COM
May 16, 2009 at 6:29 pm
i have a psp 3004 will this work on it
May 30, 2009 at 9:40 pm
this is for hack the psp 3000 and 3001 to made a m33 or for wat
June 4, 2009 at 7:47 pm
i just bought a psp 3001 with 4.21 on it out of the box. i got the hen but it wont work. is the 4.21 good for this or not.
June 14, 2009 at 10:02 am
is this downgradable???
June 16, 2009 at 4:48 pm
OKAY ONE MORE THING THOUGH….HOW WILL I KNOW IF IT WORKS BECAUSE WHEN I GO TO IT, OR EVEN SHOW IT ON MY SCREEN W/O SEELCTING IT IT TURNS OFF
June 17, 2009 at 12:27 pm
I made all this things:
“SUCCESSFUL attempt with PSP-2004 Datecode: 8C Firmware:5.03
Do following steps
1. Store 8 JPGs in PICTURE folder along with slim.tiff
2. Place h.bin in root.
3. Restore Factory default settings.
4. Reboot PSP and do initial settings only prompted by PSP wizard.
5. Reboot PSP again
6. Go to Photo | Memory stick
7. Scroll down picture one by one is such manner that you should see at least see one un-loaded thumbnail while moving down.
8. On 7th or 8th picture just stop pressing any key, Exploit will load.”
I have firmware 5.50 and psp 3004. And it doesn’t work for me. It writtes UNSUPORTED DATA when i try to open/run this tiff file. Can somebody tell me what i did wrong??
June 20, 2009 at 12:06 am
It still doesn’t work for me…..I’ve tried alot of times…using both of my memory sticks….one with and one without folders….Yes I am using the slim TIFF file for my 3000….I just wanted to make that sure so you know I”m not an idiot…I do have the h.bin file in the root as well…. what could I be doing wrong
August 5, 2009 at 11:19 am
Well… i know what you have to do…
1) You need at least 8 pics including the tiff
2) Go to Photo’s
3) Wait for the pictures to load( don’t do anything)
4) If the MS indicator of the PSP on the left is blinking it means it means it’s still loading, when it stopped blinking go to the middle(go down by 4)
5) When your on the middle, press o or x(depending on your exit button) and press o or x(depending on your enter button) and quickly go down… and it will load…
Note: This is just a PoC file… you cannot do anything here…it’s just a “Proof of Concept(PoC)”
August 23, 2009 at 12:22 pm
how do i know if its work?sorry for questioning…please….