ICAL Exploit

From Vita Dev Wiki
Jump to: navigation, search

Introduction

ICAL Exploit was Created by SilicaAndPina allows for System Uri Calling on the latest PSVita firmware 3.70 as well as a bug with the PSN Sign Up application, that allows for Account Switching also on the latest PSVita Firmware 3.70

System URI Calling

(system uri's are URI's defined in param.sfo surrounded by triangle brackets. and they can only be run by the system and not the browser) The PSVita Calendar Application allows you to create ical event files in the (.ics) format, which is an .INI-Like format with ':' instead of '=' for defining values. these files can be sent over PSN Messager and the EMail client, to execute SUPPORT_URI's you simply have to write the uri you want into the ics file's URL: entry and then view the event either in the Email Application or the PSN Messager application and click the "www" browser icon.

  • Note: You CANNOT use the Calendar application itself to do this, it must be done in the event preview screen found in Email or Messager apps

you should be able to do this in any Text Editor. Here is an example .ics file (run package installer)

   BEGIN:VCALENDAR
   PRODID:-//SCE Inc//PSVitaCalendar 0.00//EN
   VERSION:2.0
   BEGIN:VTIMEZONE
   TZID:106
   BEGIN:STANDARD
   DTSTART:19700101T000000
   TZOFFSETFROM:+1100
   TZOFFSETTO:+1000
   RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=4
   END:STANDARD
   BEGIN:DAYLIGHT
   DTSTART:19700101T000000
   TZOFFSETFROM:+1000
   TZOFFSETTO:+1100
   RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=10
   END:DAYLIGHT
   END:VTIMEZONE
   BEGIN:VEVENT
   UID:2017100712075551579
   DTSTAMP:20171007T121157Z
   DTSTART;TZID=106:20171007
   DTEND;TZID=106:20171008
   SUMMARY:Package Installer
   SEQUENCE:6
   URL:psgm:play?titleid=NPXS10031
   END:VEVENT
   END:VCALENDAR

A website for easily exploiting the libical bug mentioned can be found at http://vitatricks.tk (src code: http://bitbucket.org/SilicaAndPina/vitatricks)

Changing PSN Accounts

If you re-run the signup app via the 'psnreg:' uri call after you've already got an account linked then the SignUp application will say "Please Wait..." and then take you to the "Welcome <yourname> to PSN" screen, however if you remove internet access to the console at the correct time using the "Please Wait..." screen then PSN Authentication will fail. and you will be booted back to the "Sign In" screen, from here. you can sign in using any credentials your vita will be linked to this account. however `ux0:/id.dat` is NOT updated. so you'll have to go back to your original account before rebooting or you'll be greeted with the "Please format your memory card" message