​

PlayStation Vita owners have been waiting with bated breath for Vita scene hacker TheFloW to release his latest exploit: h-encore. This marks the second ever major exploit for the Vita, following the 3.60 Henkaku hack. For the first time, OFW 3.65, 3.67, and 3.68 can be modified to run backups, run homebrew, and more. Adrenaline, which lets users exploit the PSP side of the Vita, has also been updated as of two days ago, to support the latest firmwares.

To use h-encore, you're going to need a PS Vita on firmware 3.65 or above, be linked (though not activated) to a PSN account, and if you're using a OLED Vita, you'll also need a memory card.

Enso can also be installed, but only for those who are on 3.65--there's no current support for Enso on higher firmware. TheFloW's instructions note that this installation is far more complex than previous Henkaku releases, and will require more work to ensure that it works correctly.

Note that the following guide is for advanced users and a bit more complicated than the previous hack that only required you to visit a website. If you don't understand the guide below or how to use these tools, you should neither file an issue here nor annoy me on twitter, but rather seek help on /r/vitahacks (check for duplicated questions first!) or wait for an easy installer.

1. Download and install qcma, psvimgtools and pkg2zip (check the releases section).
   
   
2. Download the vulnerable DRM-free demo of bitter smile (yes, that's the user entry point).
   
   
3. Download h-encore and extract it on your computer.
   
   
4. Extract the demo using:
   
   pkg2zip -x PATH_OF_PKG
   
   This will output the files to app/PCSG90096.
   
   
5. Copy the contents of the output app/PCSG90096 to the folder h-encore/app/ux0_temp_game_PCSG90096_app_PCSG90096(such that the files eboot.bin and VITA_PATH.TXT are within the same folder).
   
   
6. Copy the license file app/PCSG90096/sce_sys/package/temp.bin to the folder
   h-encore/license/ux0_temp_game_PCSG90096_license_app_PCSG90096 and rename the just pasted file temp.bin to 6488b73b912a753a492e2714e9b38bc7.rif. Again, this file should be in the same folder as VITA_PATH.TXT.
   
   
7. Start qcma and within the qcma settings set the option Use this version for updates to FW 0.00 (Always up-to-date).
   
   
8. Launch Content Manager on your PS Vita and connect it to your computer, where you then need to select PC -> PS Vita System, and after that you select Applications. If you see an error message about System Software, you should simply reboot your device to solve it. This should create a folder at PS Vita/APP/xxxxxxxxxxxxxxxx on your computer (see qcma settings where this folder is), where the folder xxxxxxxxxxxxxxxx represents the AID (account ID) that you need to insert here. If the AID is valid, it will yield a key that you can now use to encrypt the demo.
   
   
9. Change directory to the h-encore folder in terminal and use the key to encrypt all folders that are listed below using:
   
   psvimg-create -n X -K YOUR_KEY X PCSG90096/X
   
   Where X is (yes, repeat it 4 times or write a script for that):
   • app
   • appmeta
   • license
   • savedata
   The folder h-encore/PCSG90096 should then contain sce_sys and all 4 folders from above, and within these folders you should find files called X.psvimg and X.psvmd, where X has the same name as the folder. Backup this folder, since if everything has been done correctly, you don't need to redo all the steps to install it onto another device with the same PSN account.
   
   
10. Copy the folder h-encore/PCSG90096 to PS Vita/APP/xxxxxxxxxxxxxxxx/PCSG90096 and refresh the database under qcma settings.
    
    
11. The h-encore bubble with a size of around 243 MB should now appear in the Content Manager and that's what you finally need to transfer to your PS Vita.
    
    
12. Launch h-encore to exploit your device (if a message about trophies appears, simply click yes). The screen should first flash white, then purple, and finally open a menu called h-encore bootstrap menu where you can download VitaShell and install HENkaku.
    
    
13. Enjoy. Note that you have to relaunch the exploit everytime you reboot or shutdown your device. Of course if you only put your device into standby mode, you don't need to relaunch.

GitHub
TheFloW's Twitter
For those on 3.60

 

[xwizit]

Hey Guys

Im on a 3.65 vita, i want to do this. Is there a noob friendly difficult to mess up guide yet? I DONT EXPECT THERE TO BE as it just came out, just checking

I want to stay on 3.65 not 3.68 as i want permahack

 

[Deleted User]

fck win 10 i dont have cmd in folder options anymore only stupid powershell but that dont work

Actually you can just type cmd in the address bar and it will open cmd in that dir

 

[linuxares]

Hey Guys

Im on a 3.65 vita, i want to do this. Is there a noob friendly difficult to mess up guide yet? I DONT EXPECT THERE TO BE as it just came out, just checking

I want to stay on 3.65 not 3.68 as i want permahack

If I know @Lia correct, she is probably working on one.

 

[Deleted member 381889]

If I know @Lia correct, she is probably working on one.

SoonTM

 

[linuxares]

SoonTM

I'll be waiting because my noob-butt don't know what to do from dirty 3.65 to this!

 

[Dankmemes420]

Soo I fixed my other issue however I install h-encore so the henkaku and then I goto instal enso it says success yet when I reboot it's no longer henkakued any help? Yes I'm on 3.65

 

[subcon959]

I'll be waiting because my noob-butt don't know what to do from dirty 3.65 to this!

Wait, why do you even want to this doesnt have any advantage over 3.65 henkaku enso.

Unless by dirty 3.65 you just mean ofw?

 

[linuxares]

Wait, why do you even want to this doesnt have any advantage over 3.65 henkaku enso.

Unless by dirty 3.65 you just mean ofw?

I mean the enso 3.65, since it is kind of a dirty way to upgrade. If this vs. the coldboot isnt any difference. Why not update? But if this is a warmboot. Yeah I rather stay with Enso.

 

[subcon959]

I mean the enso 3.65, since it is kind of a dirty way to upgrade. If this vs. the coldboot isnt any difference. Why not update? But if this is a warmboot. Yeah I rather stay with Enso.

I was thinking the exact same thing yesterday and made a thread asking it. People said there's no difference at all.

I guess it's just an OCD thing that the old method somehow wasn't a clean 3.65.

Edit: I mean no difference in 3.65. Anything above is warmboot only.

 

[Temptress Cerise]

I mean the enso 3.65, since it is kind of a dirty way to upgrade. If this vs. the coldboot isnt any difference. Why not update? But if this is a warmboot. Yeah I rather stay with Enso.

So I actually scored a pre-owned mint condition white PS Vita on 3.65 w/ a 4GB memory card from Gamestop, and doing everything, after I got Henkaku and VitaShell installed, it was pretty easy FTPing the 3.65 enso.vpk to the Vita, have that sweet coldboot. I don't think there would be any difference from doing the old method and upgrading to 3.65, but I found it relatively painless to get this all setup with this method on stock 3.65.

Now waiting for my SD2Vita and 128GB mSD to arrive tomorrow.

Good luck on whatever you decide to do!

 

[xXxSwagnemitexXx]

https://github.com/noahc3/auto-h-encore

 

[Dankmemes420]

Soo I fixed my other issue however I install h-encore so the henkaku and then I goto instal enso it says success yet when I reboot it's no longer henkakued any help? Yes I'm on 3.65

Still need help with this if anyone knows how to fix this?

 

[Spendy39]

Gonna wait for Easy Installer.

Snap done a Wii, WII U, PSP, and this looks far harder to hack than any of those.

 

[SekateSwitch]

Getting an error code "C2-12858-4" when trying to copy the files using QCMA.
I've googled it and the only answers I could find were to refresh the database which I have done.

i get the same code

 

[leon315]

okay, now i have successfully installed HENkaku and vitashell, anyone pls explain how to install game's update folder??

 

[Taxen]

Okay so I managed to get as far as the h-encore bootstrap menu. I can install HENkaku fine, but when I select "Download Vitashell" it says
>Downloading Vitashell . . .
>Downloading eboot.bin . . .
>Failed! 0x80412112

Does anyone have any idea what might've gone wrong?

 

[Madridi]

Okay so I managed to get as far as the h-encore bootstrap menu. I can install HENkaku fine, but when I select "Download Vitashell" it says
>Downloading Vitashell . . .
>Downloading eboot.bin . . .
>Failed! 0x80412112

Does anyone have any idea what might've gone wrong?

Check that you have an internet connection. Something tells me you’re on flight mode

 

[Taxen]

Check that you have an internet connection. Something tells me you’re on flight mode

Yep that was exactly it
Thank you for the help!

 

[roqpir]

Hey guys, I'm on (3.60)3.65 CFW Henkaku Enso. Should I update or are there any disadvantages over 3.65 h-encore?

 

[ultimatepump]

Than

Added Vita Shell to sd2vita, after h-encore install (solved)

(Remember when sd2vita first came out, this package "SDFiles", https://mega.nz/#!7V4Wla6Y!FOvcazujNtkMbAegivXOYXpCP-w1lulpWAJpk8FTXM4, came out (has not piracy files), but you didn't even need that, it was just a joke!

well turns out

After you install h-encore you have to delete "ux0/tai" folder, and you have to add the "gamesd1.3.skprx" plugin to ur0/tai and the plugins then after you run h-encore you will see your sd2vita, just use context manager.

BUT THERE IS NOTHING THERE NO VITA SHELL

(convince solution::"SDFiles.zip") copy the contents of "ux0 folder" from your memory card (the contents go into the root of your sd2vita card, ftp to your pc, and then copy those contents into the root of your sd2vita card (using your pc plug your sd2vita into pc to copy them there), after that, when you add back to your vita, you'll have vita shell and your larger memory size.

(Right now I don't know if I should use MLTactivator to get rid of the trophy nags when you start a application, but I guess its ok) (if you use PSVIMGTOOLS to try to write vitashell onto your sd2vita card, from content manager, it will delete the h=hack encore, by writting files to ux0 on your memory card instead of sd2vita, so you can't use that, anyway didn't work) (back in a few) (the vita, pstv, was just a coaster until h-encore, i see lots of people will full memory card, guess they upgraded to the trolls) (ugh, psn and nonpdrm test later)

.................................................
# This file is used as an alternative if ux0:tai/config.txt is not found.
# For users plugins, you must refresh taiHEN from HENkaku Settings for
# changes to take place.
# For kernel plugins, you must reboot for changes to take place.
*KERNEL
ur0:tai/gamesd1.3.skprx
ur0:tai/nonpdrm1.2.skprx
ur0:tai/repatch2.61.08c.skprx
ux0:app/PSPEMUCFW/sce_module/adrenaline_kernel.skprx
# henkaku.skprx is hard-coded to load and is not listed here
*main
# main is a special titleid for SceShell
ur0:tai/henkaku.suprx
*NPXS10015
# this is for modifying the version string
ur0:tai/henkaku.suprx
*NPXS10016
# this is for modifying the version string in settings widget
ur0:tai/henkaku.suprx
*!PSPEMUCFW
# Adrenaline
*ALL
ur0:tai/oclockvita1.2.1.suprx
.................................................

I'm too lazy to properly test adrenaline and the update, the last "commit" update threw off the screen size at default and expanded sizes, there was somethings said about needing the line in red? Thats the config file I have for 3.68 minus the line in red, but you might need that one for adrenaline.

MTLactivator.vpk not working on 3.68 (breaks h-encore, need to reinstall everything afterwards, did work fine on 3.65 henkaku enso)

Antiblacklist1.2.vpk appears to work fine, Molecular Shell, 7ZShell, restart.vpk..................oh and vitaRW you need for antiblacklist1.2 all else seems find. Need another serious fix for the trophy nags now.

Thanks for all that info. I'm gonna give it a go