PSP firmware 5.03 running the TIFF Exploit! 
The day many PSP owners have been waiting for is coming, as PSP homebrew developer MaTiAz has released a TIFF-based exploit in the form of a “Hello World,” proof of concept for PSP Firmware 5.03. So the idea of running homebrew on TA88v3 / PSP-3000 is rapidly approaching! (This is no late April fools joke)
*Update* 14-April: Version 2 has been released. Works on the Slim & PSP-3000. -> Hello World TIFF Exploit Version 2
The exploit is run in the PSP’s photo menu and takes advantage of a vulnerability found in the TIFF image library. Just think in the old early days of the PSP scene when using software downgrades and GTA: LCS TIFF exploits etc was the way to go.
This current version is only for PSP-1000 (Fat) units at this stage. But don’t fret a separate release is being prepared by MaTiAz for Slim models. Both the the PSP-2000 and PSP-3000 (Ta88v3).
MaTiAZ also commented that “a bit of awesomeness” is due out soon. We’ll keep you updated on this. Looks like we’ll all soon have hombrew access again on Firmware 5.03.
The days of TIFF based exploits aren’t long gone, at least not yet
Here’s the third TIFF exploit for the PSP, enjoy.Just copy the files to the memory stick root, disconnect USB and go to photo menu.
Don’t dismiss the exploit even if it doesn’t work on the first time, it’s *very* unstable.
You might get it working on the first time, but you might as well have to try it 20 times!The h.bin is loaded to 0×08800000, and the text address of paf.prx is passed in $a0 to the
binary code. You can then trick out function imports, like for example sceDisplayWaitVblankStart:sceDisplayWaitVblankStart = (void*)(paf_addr+0×15F068);
This release works _only_ on fat PSPs. The slim version will come out later.
I’m not gonna include a list of credits here, I’ll just forget some important names and then
I’ll be screwedThe people who need to be credited will know it anyway.
Have fun!
P.S. Just wait a few days, there’s a bit of awesomeness coming up.
- MaTiAz
Please see installation instructions included in the file.
Source: 5.03 TIFF Hello World
Similar Posts
- PSP Go Hacked! Exploit found 2 days into release. *Updated*
- PSP Go Hack isn’t fake. MaGiXieN tests FreePlay save game exploit
- Firmware 6.20 Does indeed block the 6.10 FreePlay Exploit
- 5.51 working exploit found in Medal of Honor: Heroes
- Savegame Exploit found in PSP Firmware 5.50?
- Custom Firmware Enabler v1.0 – Load M33 CFW via ChickHEN
Digg it
Stumble
Del.ico.us
Reddit
Newsvine
Leave a comment
Add your link!
April 13, 2009 at 12:17 am
Just when I thought the days of TIFF exploits were well over…. My Guess is Sony will soon try and release a patch to patch this exploit up. I suggest if its released that PSP-3000 & PSP-2000 (TA88v3) owners don’t update
You might want to see were this exploit is going.
April 13, 2009 at 12:37 am
Its important to note that MaTiAz himself won’t be working on the 2k/3k releases due to the fact that he doesn’t own a slim himself
Likely to be someone like FreePlay.
n00b81
April 13, 2009 at 1:31 am
Nothing for now but I’m quite curious what MaTiAz is cooking up -I’m quite sure that it would be something very big or at least it sound like that
Keep your fingers crossed people
April 13, 2009 at 1:31 am
YAHOOOOOOO!!!!!!!!!!
Finally! Hope!
April 13, 2009 at 2:02 am
i dont get it
April 13, 2009 at 3:23 am
congratulations!! you hacked the 3000
April 13, 2009 at 3:57 am
can somebody explain this 2 me., how does this work., im new in having a psp 2001 5.03 fw., pls response.,
April 13, 2009 at 4:06 am
@yehuda
currently you can’t do anything with it.
its just a step forward in hacking it.
April 13, 2009 at 5:27 am
@joe joe
tanx dude., my psp disables pandora., does it mean that its a v3.,???
April 13, 2009 at 6:03 am
@yehuda, ya probably.
April 13, 2009 at 6:58 am
thanks.,.. ill just wait then.. until its hacked., good luck!!!
April 13, 2009 at 7:20 am
wait a sec, so this will allow psp-1000s to be hacked without a pandora battery?
April 13, 2009 at 7:43 am
MMMM OK im not sure i tested in my phat and load the photo it says something then shuts down thats all or there is something else i’m not getting???
April 13, 2009 at 9:38 am
go MAtiaZ go!!!
April 13, 2009 at 10:18 am
uhmm.. so if Matiaz released a psp-3000 version of this update, does it mean that the psp-3000 will be hackable??
April 13, 2009 at 10:38 am
[...] Source & Download Similar Posts PSP-3000 HEN Hack? MaGiXien of PSPGen speaks out. [...]
April 13, 2009 at 12:27 pm
will this work in psp 2001 5.03ofw? v3?
April 13, 2009 at 12:41 pm
Not yet, but they plan to release a PSP-2000 / PSP-3000 version in a few days.
April 13, 2009 at 12:54 pm
@PSPFan
f this program will be released., will it need pandora.,?
April 13, 2009 at 3:11 pm
i have tried the tiff exploit on a psp 3000 with firmware 5.02 it crashes and restard
April 13, 2009 at 7:40 pm
yesssssssss finally
April 13, 2009 at 11:06 pm
oo skeen
so if da 3000 version comes out how do i go about puttin dis on my psp 3000???
i mean like where do i put it???
April 14, 2009 at 4:55 am
Just wait until the 3000 version comes out. There will be instructions included in the file package. Try it now, and the PSP will just crash(And turn off).
@pogiakkano
Heck no! This is a software-based hack. No pandora is needed.
April 14, 2009 at 7:02 am
@PSP ruler
ok tanx 4 d info… when will it be released…? i onw a psp 2001 5.03ofw.. v3… pls make a 200x version. tanx…
April 14, 2009 at 8:09 am
Patience my friends. Iknow it will come out *soon*
P.S. I don’t long is *soon*, but here is a clue: in a few days
April 14, 2009 at 9:31 am
Yo, this is killah! I am going to buy a PSP-3000 in a couple of days, though I know the crack’s not out yet. But I hear the prices will go sky high soon as the crack’s out.
So I am just going to sit with my fingers crossed, beside my 3000 till then….
April 14, 2009 at 11:18 am
there has already a version for psp phat and slim, but derz still no version for the psp brite.. just go here, “http://forums.mformature.net/showthread.php?t=2242″ to download the psp-2000 version of this update by matiaz.
April 14, 2009 at 3:31 pm
@aeon44
thats not the finished program for downgrading the psp slim… 5.03fw v3…
April 14, 2009 at 5:44 pm
hmm i wonder what the awesomeness is gonna be
April 14, 2009 at 7:59 pm
can somebody help me when u put it on does the psp switch off and what folder do the downloaded games need to be in
April 15, 2009 at 12:43 am
The awesomeness is a hombrew loader through this TIFF exploit. Meaning hoebrew on PSP-3000s !!! Yeah I cannot wait for that day. My PSP-3000 is dusty. Time to wipp that of with the homebrew goodness in a few weeks
April 15, 2009 at 1:56 am
Its gonna take a lot more work to downgrade the slim/brite with the tiff exploit than to do it with a phat psp since the exploit can manipulate the version firmware the psp thinks it has because psp phats can go down to v.1.5, while v3 slims/brites can only go down to 4.01. so its gona be a miracle to activate the kernel mode with what little code the tiff exploit can hold.
April 15, 2009 at 2:07 am
@crowbar
please, shut up if you don’t have a clue what you are talking about…
who says that you must downgrade a psp in order for it to have custom firmware?
the exploit can simply chainload a cfw installer rather than downgrader…
April 15, 2009 at 2:07 am
I have a Ta88v3, supposedly its can be hacked now. I have tried the exploit multiple times, each time I open my Photo part of the XMB the PSP freezes, any help? Or is Ta88v3 exploit to unstable to work properly?
April 15, 2009 at 2:11 am
@Greg,
We are not fully sure what MATIZA have up in his sleeve to reveal, therefore the public is not sure if it will be hacked or not.
Also, if you have read the descriptions, he did mention that the exploit is fairly unstable, requires many tries before h.bin can be chainloaded
April 15, 2009 at 2:19 am
Thanks for the response .ISO
April 15, 2009 at 3:18 am
Also, did you download the new PSP-2000 version?
April 15, 2009 at 9:46 am
however,if i run TIFF Exploit no i can play iso file games?
April 15, 2009 at 11:02 am
No. Not yet. You’ll have to wait a little longer for that!
April 15, 2009 at 11:03 am
oh and get the new version ok http://pspslimhacks.com/503-tiff-exploit-hello-world-v2-for-psp-slim-psp-3000/
April 16, 2009 at 4:24 am
I tried tiff on 3000 5.02 and it worked
April 16, 2009 at 9:51 pm
yeaaaaaaaaaaaaa
i can’t wait
for new releases =D
yeahh
ta-088v3 is not hacked yet but
i see the light at the end xD
April 18, 2009 at 6:13 am
WTF! Not working!
I tired renaming it… EVERYTHING!!! The tiff keeps on moving to the front (first picture)… I tried moving it to the back but no luck…
HELP please?
April 18, 2009 at 10:26 am
I just dumped the slim.tiff to the root memory of my PSP 3000 OFW 5.02 then I dumped 8 copies of photos (jpeg) in \PSP\PHOTO. Disconnect USB and then browse the photo directory. I scrolled ups and down then my PSP 3000 unit went died (went off)
I thought I bricked it but not (hey I believe in you MatiaZ) I powered it on then I’m back again. I guess I’ll give it another try until I got the flash of the exploit.
Yodda man MAtiaz and including all the PSP God Smackerz. Thanks guys! really appreciate your work. I can’t wait until tuesday.
April 18, 2009 at 10:32 am
It could work I think. I just can’t get the exact timings to invoke it. But after I browsed photo folder for at least 10 sec my unit freezes for at least another 5 sec and then screen goes blank, I hear a sound (like a croak! sound) then the power went off. I tried this for at least 15 times … I think that the exploit is too fast and I cannot see the flash of Hello World exploit …
April 18, 2009 at 6:56 pm
Hey guys, I just d/l the exploit to my psp 2001 (ta88v3) and I used the slim photo. I’ll list the installation steps, ok?
1. Place the h.bin into the MSROOT (or x:\ drive).
2. *Place the phat.tiff (if you have the thicker PSP) or slim.tiff (if you have the thinner PSP) into the x:\PSP\PHOTO area.
3. If you have a theme activated, I had read on dl.qj.net to *disable this theme. However since I only possess the Slim type, I know it works for slims.
4. Go into the photo on the XMB and click onto the photo. It will use either the photo or turn black then automatically shut down.
5. Reboot after the shutdown process is complete and enter the photo menu. The screen will go black then it will reboot with these words in this format exactly:
“Hello World for PSP Firmware 5.03
Running via The Easter Eggsploit. :>
Exploit by MaTiAz
Thanks to malloxis, FreePlay, Archaemic, wololo,
Cloudy, Davee and everyone else who was involved.
Also hi Sony
”
After you see this message, since the exploit is only for showing, you need to reboot your PSP through hardboot. Don’t go into the photo folder again though or the message above will occur again (unless you wish to see it again, which I don’t know why people would after the first boot but…). Anyways, I got mine up on the 1st try so, it might work that way. Good luck guys.
May 13, 2009 at 4:22 pm
If I copy h.bin to MP_ROOT, will it work? I have tried copying it to F:/ and tried more than 50 times, no joy.
April 18, 2009 at 9:09 pm
do you have to copy the readme file?
April 19, 2009 at 7:10 am
I think not because its just a readme (HOWTO’s) the main hack is within the code itself – within the h.bin file. Anyone knows how to open h.bin? – maybe i’ll try a HEX editor – my thing is just to take a peek on the codes.
April 21, 2009 at 1:40 am
Guy how come the tiff is not working for me i need help please and i have a fat psp
April 30, 2009 at 4:07 pm
after you do the tiff exploit what can you do with your psp after that if you have a phat