Post: MW3 RCE Tool by ExIIL 1.0.0.1 + Source
Options
01-01-2019, 08:31 PM
#1
ExIIL
AstroCFG
Since Sabotage leaked his RCE Exploit, I decided to make a Tool for it and make it available for everyone, let's hope that this gets fixed as soon as possible.
The Tool and Source are for learning purposes. Took me about ~2 Hours to make.
If you want to take a look at the source of the SPRX from Sabotage checkYou must login or register to view this content.
The Host can crash, if you send too many commands.
Pictures:
You must login or register to view this content.
You must login or register to view this content.
You must login or register to view this content.
Tool Download: You must login or register to view this content.
Tool Virustotal: You must login or register to view this content.
Source Download: You must login or register to view this content.
Write UINT32 / Short / CHAR
public static void WriteUInt32(uint Address, uint Value)
{
PS3.Extension.WriteUInt32(0x10055010, Address);
PS3.Extension.WriteUInt32(0x10055014, Value);
PS3.Extension.WriteUInt32(0x10055000, 2);
while (PS3.Extension.ReadUInt32(0x10055000) != 0x0)
Thread.Sleep(10);
}
public static void WriteChar(uint Address, uint Value)
{
PS3.Extension.WriteUInt32(0x10055010, Address);
PS3.SetMemory(0x10055014, new byte[] { Convert.ToByte(Value) });
PS3.Extension.WriteUInt32(0x10055000, 2);
while (PS3.Extension.ReadUInt32(0x10055000) != 0x0)
Thread.Sleep(10);
}
public static void WriteShort(uint Address, uint Value1, uint Value2) // The Bytes need to be in Decimal Form
{
PS3.Extension.WriteUInt32(0x10055010, Address);
PS3.SetMemory(0x10055014, new byte[] { Convert.ToByte(Value1), Convert.ToByte(Value2)});
PS3.Extension.WriteUInt32(0x10055000, 2);
while (PS3.Extension.ReadUInt32(0x10055000) != 0x0)
Thread.Sleep(10);
}
// This will obv. still replace all 4 Bytes, but it's easier tbh.
Update 1.0.0.1:
- Added Explosive Bullets
- Added Player Speed
- Added All Perks
Credits:
Sabotage: Making the RCE Exploit
ExIIL: Creating the Tool
NextGenUpdate: Offsets
Last edited by
ExIIL ; 01-04-2019 at 04:09 PM.
Reason: Update 1.0.0.1
The following user thanked ExIIL for this useful post:
01-02-2019, 02:01 PM
#3
Da_Real_Link
Keeper
don't work for me, the tool is connected w/ ccapi, there is the .sprx and eboot.bin in the right folder but idk why it's doesn't work
Last edited by
Da_Real_Link ; 01-02-2019 at 03:54 PM.
02-02-2019, 10:46 AM
#8
ExIIL
AstroCFG
Originally posted by notDread
Hey OP, what are these offsets to exactly (I do not have a mw3 elf to check myself kappa), if I wanted to port to another CoD ?
1. 0x10055010
2. 0x10055014
3. 0x10055000
Thanks!
1. 0x10055010
2. 0x10055014
3. 0x10055000
Thanks!
Read the source of the SPRX from Sabotage for this. These are the addresses where the offset and the bytes are saved to get later overwritten on the host console.
02-08-2019, 08:06 PM
#9
QuantumDev
Can’t trickshot me!
Freezes the form after a button is clicked
Last edited by
QuantumDev ; 02-08-2019 at 08:52 PM.
Copyright © 2024, NextGenUpdate.
All Rights Reserved.
