mirror of
https://github.com/griches/PS5_DevTools.git
synced 2026-10-23 09:00:45 +02:00
Gary Riches
e225e02256
A resident payload that attaches to homebrew titles as their debugger, writes a crash report (registers, every thread's backtrace, stack, modules, code at the fault, memory before the crash) and shows a TV notification, then hands the signal back. It samples every title's memory (direct/GPU, heap, other), CPU and threads, and serves a dashboard on port 9113. The host tool symbolicates reports against the matching build's ELF, including reports a player sends as JSON. Tested on firmware 13.60 with Super Mario Sunshine and SwitchWaker. Claude-Session: https://claude.ai/code/session_016xMYBaR9GfxtETyVf6er1P
Probes
The single-question payloads that found out what DevTools could do, kept
because their results are the evidence. Build with ./build.sh (the Lima VM);
run.py ELF sends one and prints /data/devtools-probe.log.
| Probe | Question | Answer on 13.60 |
|---|---|---|
ps.c |
what is running | every process, with app ids |
crashwatch.c + crashme.c |
can a payload be another process's debugger | yes, after taking authid 0x4800000000010003: signal, registers, backtrace, map |
audio.c, audio2.c, audio3.c |
can a payload play sound over a game | ports open only as the system user (0xff), and report output 0: not routed, nothing heard. Opening for the user is refused (0x80260011) whatever the authid |
libs.c |
which processes load the audio library | the title, SceShellUI, SceShellCore, SceMediaCoreServer, SceRemotePlay and others (a home for a music player) |
toast.c |
can a payload show a notification | the call returns 0 |