Hacking [GUIDE] The Ultimate Noob PS Vita/PSTV Hacking Guide OP OUTDATED

  • Thread starter Deleted User
  • Start date
  • Views 702,127
  • Replies 1,848
  • Likes 45

nazomeku

Member
Newcomer
Joined
Mar 21, 2018
Messages
12
Trophies
0
Age
44
XP
54
Country
United States
Yes, brand new and sealed

For anyone else who happens to be wondering, yeah, any new/sealed will definitely be under 3.6. I bought a brand new PSTV just the other day and it was on an ancient firmware. I already had a Vita on an even older firmware, but I don't actually care for handhelds that much.
 

godreborn

Welcome to the Machine
Member
Joined
Oct 10, 2009
Messages
38,471
Trophies
3
XP
29,138
Country
United States
does anyone know what happens if say you restore your ps vita system to remove a banned account, then try to use qcma? since qcma uses the partials, will that read as all 0's on the pc? will qcma even work without an account id? thanks.
 

n00b2015

Well-Known Member
Member
Joined
Oct 19, 2015
Messages
357
Trophies
0
Age
44
XP
403
Country
Slovenia
Hey
My usb stick is mounted as ux0. I can install games on usb. My vita2sd is mounted as uma0. I can’t install games. Is it possible to mount vita2sd to ux0 to install games on vita2sd card? How to do it. Tried everything but no success.
 

Tom Bombadildo

Dick, With Balls
Member
Joined
Jul 11, 2009
Messages
14,580
Trophies
2
Age
29
Location
I forgot
Website
POCKET.LIKEITS
XP
19,249
Country
United States
Hey
My usb stick is mounted as ux0. I can install games on usb. My vita2sd is mounted as uma0. I can’t install games. Is it possible to mount vita2sd to ux0 to install games on vita2sd card? How to do it. Tried everything but no success.
You can use this to swap the SD2Vita mount point between uma0 and ux0: https://github.com/Applelo/SwitchSD2Vita/releases

However it should be noted that you can't run Vita backups off uma0, you'll need to switch the SD2vita to ux0 any time you want to play any game installed there.
 

Bonovox40

Well-Known Member
Member
Joined
Apr 2, 2003
Messages
578
Trophies
2
XP
1,340
Country
United States
Anyone know what the titleid of Vitashell itself is, so I can try to manually back that directory up through USB? (at least I think that will work instead of CMA method?)
 

Oris

Well-Known Member
Newcomer
Joined
Feb 1, 2013
Messages
79
Trophies
0
Age
32
XP
341
Country
United States
I have a Vita, but it is current firmware, so I can't hack it. I was told that PSTV is still a good option. Is there any real difference between Vita and TV once hacked? And if I hack the TV, what all can I do with it?
 

n00b2015

Well-Known Member
Member
Joined
Oct 19, 2015
Messages
357
Trophies
0
Age
44
XP
403
Country
Slovenia
I have both. On ps tv you can do all you can do on vita. I had hacked vita but I update it by mistake. So I bought ps tv for 50 eur just to hack it and install games. Haven’t played yet:D:lol:
 
Last edited by n00b2015,

tunip3

[debugger active]
Banned
Joined
Oct 31, 2016
Messages
1,675
Trophies
0
XP
1,661
Country
United Kingdom

Notice: It is currently NOT possible to downgrade from 3.61 or higher down to 3.60, nor is it possible to install HENkaku on firmwares higher than 3.60. If you think you've found a video or site which claims to jailbreak/downgrade your Vita, it will be 100% completely fake, unless otherwise stated from any trusted sources, e.g. Wololo, GBATemp, etc.
The creators of these said sites and videos will be more-than-likely attempting to rack up revenue from your visit to the content (it's why they do it in the first place), so at the same time, please don't give it any more attention by linking it here for other people to visit and fall for.
Since there still seems to be quite a few posts querying about this, I decided this should be addressed at the top of the main post.


Hello!

To save time on asking questions in new threads, I have constructed a guide for users to follow, and to ask about/point out additional info! It has plenty of information you will need to set up your Vita for many existing hacks, and ones to come! :)

Take note that some of these tutorials are outdated if you are running HENkaku/Interested in running HENkaku, and are only useful if you are adamant on staying on a lower firmware. Pretty much all of the tutorials I am talking about are currently under the 'Older Tutorials' category.


Latest firmware: 3.67
Latest EXPLOITABLE firmware: 3.60
PSN Spoofing? Yes (3.60 only)

(29/07/17 ~ Downloading content from PS Store or attempting to activate your Vita is currently broken (will give you an error).
If already activated and have HENkaku installed, ensure you back up your tm0:npdrm/act.dat as soon as possible. It will come in handy in case you ever accidentally deactivate/restore your Vita.
If not already activated you will unfortunately have to wait until there is a fix...



Table of Contents:

1 - Introduction
2 - HENkaku Guides
3 - Older Guides (Do NOT use these if you are looking to get the latest hacks and homebrew)

4 - FAQ





Purchasing a Vita (If you haven't already!)

Recently been interested in getting into the Vita scene, but unsure of where to start where buying is concerned? Well you've came to the right place, as this (very simple!) guide to purchasing a Vita should be able to clean up all of your concerns of what exactly to look out for.

Which is the right firmware for me?
You might have probably gathered this if you did some research, but HENkaku is currently the most definitive hack to utilize on your Vita (it can only be ran on firmware 3.60, so if you are on any higher FW, you're out of luck!). HENkaku can run native homebrew applications, as well as Vita, PSP, and PS1 game backups, and allows for a rich selection of system-enhancing plugins such as RinCheat and DS3/DS4/Wiimote-pairing plugins.

The only reason not to go with HENkaku is if you're absolutely desperate to run the PSM Dev Assistants, but overall it's rather pointless just to stay on FW <=3.51 for that, as home-made PSM applications and games can't even utilize the full potential of the Vita (e.g. lack of trophy earning, cut-down processing speeds). Rejuvenate is another example, but it is so heavily outdated that HENkaku can do absolutely everything it could do, but much better, and with much more additional features (HENkaku is also amples easier to setup!)

If you land a Vita on 3.52, 3.55, or 3.57 you are 100% recommended to just upgrade to 3.60 and use HENkaku, as the Dev Assistants don't run on any of those firmwares...

If you are also after PSP CFW, and a way to play PS1 backups as well, take a look at Adrenaline (for 3.60/HENkaku users only), which comprises of the full-on PSP XMB, an option to save/load savestates, and graphics filters! There is also the option of ARK eCFW for PSP ISOs and PS1 ISOs without audio support.

If you're adamant on getting the full Vita hacking experience, avoid 3.61 or higher Vitas at all costs! There are no native (Vita-side) hacks available whatsoever that you can perform directly on those firmwares. On 3.61 and 3.63, the only available ePSP homebrew/backup solutions are VHBL and ARK, however on >=3.65 only VHBL (PSP homebrew only!) will be available, so be careful when you buy!

Okay, so HENkaku looks like the best option; where should I start looking for those 3.60-or-lower Vitas?
Pretty much look anywhere that stocks brand-new, unopened Vitas, except for the newer Red/Silver model Slims (or any more model Vitas manufactured after them); these ones will pretty much guarantee you a firmware with 3.60 or under on them for sure.
If you are planning to buy from a store that is selling used Vitas, be sure to first ask to "see it turned on". If you can, get the employee to go through the setup process then go to the Settings app -> System -> System Info, and carefully observe the firmware number. If it says 3.61 or any higher value, don't buy it.
Same story for buying off of Ebay or wherever; ask the seller to check the firmware version and not to update it.

Hmm, any chances these new, unopened Vitas might contain 3.61 or higher on them?
Yes! In December 2016, two new colored Vitas hit the Japan market; Red and Silver. They both shipped with 3.61 on them.
However, if you're absolutely dying to have one of these colors, it might be possible to swap out the motherboard with another pre-3.61 Vita of a different variety.



Some key facts you should know before you ask a question:

- Almost all new, out-of-the-box Vitas are guaranteed to be on 3.60 or lower. As mentioned further above this post, The known models to ship with 3.61 or higher currently are the Japanese Red/Silver Slims. Any more new Vita models that have been manufactured after these two colors will also be on 3.61 or higher, so always ensure you are certain you are choosing an exploitable model.

- You cannot run any games that require 3.61 or higher firmware version if you are on 3.60, as the encryption for these games changed.

- It is possible to set up an eCFW for Vitas on 3.61 and 3.63 (but still no native Vita hacks!). ARK eCFW to be more precise. But on >=3.65, it is not possible to run an eCFW and play PSP/PS1 ISOs.

- Users on 3.18 (3.20 for PSTV users) or lower may not be able to sign in to the Email Application with their Gmail or Yahoo accounts, as email security used within the app had become obsolete. To bypass this issue, use a GMX account. Members here have reportedly been able to successfully sign in using this email system, and can continue to use the email exploit with ease on lower firmwares.

- 3.60 is, and will be, the ONLY firmware to support HENkaku for perhaps years now, as developers may not find the time and devotion to deliver backports to lower firmwares. (addresses and offsets required for the exploit need to be found again for every individual firmware).

- As a result of the above, you CANNOT launch native Vita homebrews or game backups on any other firmware than 3.60. I do not count the Cobra Black Fin as a Vita piracy solution anymore because it is classed as a flashcard and not a free solution. Although it does still work on lower FWs, it's not really worth your time and money in my opinion. Go figure.

- 3.52 and higher nuke PSM support. This means you cannot run the PSM Dev Assistants anymore on those firmwares. Period.

- DO NOT perform any file operations on files inside the os0: partition! Your Vita may brick permanently as a result.

- Have common sense when installing VPK files. Past scene dumps, dumped as VPKs, have been known to have bricking applications injected into them, which will permanently damage your device! Two of these dumps off the top of my head are Fruit Ninja and Lego Harry Potter, but I imagine there are still a few more games that got hit by this issue...

- You can ONLY use a PS3 to activate a PS Vita under the latest firmware. 3.60 is an exception to this rule however, as you can either use ePSP Bubble Installer 2.0, or simply spoof to the latest firmware and activate by normal means (via Settings -> PSN -> Activation)




Scam Sites

It's silly I should say this, but it does happen from time-to-time, and some people can often be misled quite easily... Please don't be tricked into thinking that a site offering a Vita hack for 3.61 or higher is actually legitimate, because they simply aren't. These sites are often designed specifically just for money-laundering and to rack up views to climb up search engines. These sites tend to 'guard' their "CFW" files with surveys you must complete in order to bypass, so ultimately, stuff like that should ring alarm bells anyway. 99% of all downloads on the internet with surveys you have to complete first are just plain fake, period.

To make sure you are kept up-to-date with the latest actual news, bookmark as many of these three trusted Vita hacking news sites as you please:
  • Wololo
  • Hackinformer
  • PSX-Place
May I also add that these trusted sites are rich with other guides and releases you'll not find on GBATemp (yet :ph34r:), so if you enjoy trying out something new every day, frequently pop onto those sites as well as here!







HENkaku Tutorials

Below are a series of HENkaku-related tutorials. You can understand how to set up HENkaku for the first time, as well as installing VPKs for both homebrews and Vita game backups, plus much more.

Please note that HENkaku works on 3.60 ONLY. Backports are not on the official developers' minds due to several other priorities. 3.61 patches HENkaku!




Updating your Vita to 3.60 (HENkaku Update Server)

This is for users still under 3.60 looking to get a piece of HENkaku quickly and easily, without any hassle. This guide will take you all the way to the golden firmware, 3.60, through the use of Yifan_Lu's DNS server! It's seriously a very easy process, and extremely noob-friendly!

1) Go to Settings -> Network -> Wifi Settings -> Your Connected Access Point -> Advanced Settings
2) Under DNS Settings, select 'Manual', and set the Primary DNS to 212.47.229.76.
3) Now you may go back to the root Settings menu and choose 'System Update' -> 'Update using Wifi'.
4) Only update if it says "Firmware 3.60 (変革 Compatible)", otherwise you should follow these steps again and ensure any other settings are not conflicting the process!
5) After you have downloaded and installed the 3.60 update, you are now free to start setting up HENkaku!


Setting up HENkaku for the first time

Need a quickstart to set up HENkaku in less than 2 minutes? Look no further, as this is a pretty easy exploit to install to your system!

With HENkaku, thanks to the immense amount of work put in by developers and communities alike, you can:
  • Access native Vita homebrew and homebrew games
  • Dump/install PS Vita backups
  • Spoof PSN to access features under the latest firmware
  • Get access to the full file system and its features
  • Run Vita romhacks and translations made by the community
All you need is just over 10MB of storage space on your memory card (HENkaku ver. 4 brings support for even internal memcards as well as normal memcards) and also, an internet connection.

1) On your 3.60 Vita, navigate to the internet browser application. Then open up the address bar.

2) In that address bar, type the following link: http://go.henkaku.xyz

You should now either recieve an error or the "welcome to HENkaku" alert screen. If you recieve an error, just try and try again; it takes a little bit of time to work its magic.

3) When on the "Welcome to HENkaku" message, click OK and the HENkaku installation screen should show up.
Allow 15-20 seconds of VitaShell (formerly known as MolecularShell) installation time, and the installation screen should auto-close after a few additional seconds.

When you scroll down the LiveArea, you should now see that "MolecularShell" (actually VitaShell now) is now installed to your Vita, and HENkaku mode is enabled on your Vita!


Installing VPKs via your new MolecularShell installation (through FTP)

So now you have your basic HENkaku needs, you are ready to dive into the rapidly-developing scene of homebrew and games! If you would like to see a diverse archive of Vita homebrews and utilities in VPK format, ready to be installed straight to your Vita, GBATemp member @VitaType has been working hard round the clock to bring you the latest and greatest apps and games for us to enjoy! Head on over to his impressive sticky thread for those said homebrew apps!

:!: DISCLAIMER: :!:
Please be wary of malicious apps. We have recently ran into trouble with a user who released a fake game dump which turned out to be an app to format one's memory card, which led to total chaos and paranoia in the scene! Please be careful when downloading from a shady source; it may even cost you your Vita, what with all the write-access to important partitions which store core OS files!

1) Make sure you install a suitable FTP manager on your PC/Android device. (I'm gonna leave iOS out for the simple reason of that I have little-to-no experience with iPhone FTP apps)
I highly recommend WinSCP for PC, and TurboFTP for your Android device, as they work with almost no fuss or fiddling around with settings!

I will leave it up to you to configure the site for connecting to your Vita. (Just press select on your Vita while in VitaShell and it will tell you the IP address and port to set up the site to connect to!)

2) After you have set up your respective FTP manager, connect to your Vita (make sure to stay on the "now running FTP server" screen, or press X to have it run in the background) and the FTP manager on your PC/Android device should display all the main partitions within the Vita.

3) [OPTIONAL] Navigate to ux0: in the manager, and create a folder (preferably called "VPK") to store all of your incoming VPK files in.

4) Back on the PC/Android device, send over your downloaded VPK file of choice to the desired location on your Vita. Then close the FTP window on your Vita, and navigate to the folder you placed the VPK into.

5) Press X on the VPK file, and X again to confirm the installation. If you get a window saying "This app will gain higher priveliges and may be dangerous", think twice about what you just downloaded/transferred, and hit X once again to really confirm the installation.

6) When the installation is successful, your app should now show up in the LiveArea with no errors. If you encountered an error while installing the VPK, something is wrong with your file and should try to investigate the issue the best you can, because it could simply be anything...

And that is how you install a VPK with ease!

Transferring files from the memory card through USB to/from a PC

Starting from VitaShell 1.5, users now have the option to manage files on the memory card via USB instead of FTP. This allows for much faster transfer speeds, and is generally one of the most simplest ways to manage files. There are some things you will need to know if you wish to have complete ux0 access though, as Windows automatically hides a few protected folders...

1) Enable USB connection in VitaShell if you haven't already, and locate the root of the memory card on PC.

2) In the top menu bar in Windows Explorer, go to View -> Options, and you will see a screen like this:

View attachment 105381

In the "View" tab, scroll down to a tickbox that says "Hide protected operating system files (recommended)" and disable it. You will also need to click on "Show hidden files, folders, and drives" as well. When you've done that, hit 'Apply', ignore the warning message if you get one, and close the window.

upload_2017-11-9_16-3-47-png.105382


Note that this affects all other files and folders on your PC and not just the memory card drive. You can temporarily hit the 'hidden files/folders' tickbox on the fly from the "View" menu bar in Explorer to hide everything again.

Now you know how to easily transfer any files to protected folders when you need to.

HENkaku Enso Installation (permanent HENkaku)

On 29th July 2017, Team Molecule publicly released HENkaku Enso to mark their 1st anniversary since the original HENkaku debut. This variation of the well-known 3.60 browser-based exploit is installed into the boot sequence, eliminating the need to constantly revisit the web browser and execute the exploit on every reboot. This is also very useful and convenient for PSVSD and SD2Vita adapter users, as you will no longer have to keep remounting your adapter as ux0 either. Everything is now executed at boot time!

1) Visit http://enso.henkaku.xyz and grab the enso.vpk installer.

2) Transfer the VPK to your Vita and install via VitaShell like any other homebrew app. A bubble should appear on the LiveArea screen, as per usual.

3) Carefully read the disclaimer at the top (remember, this is not a 100% stable exploit, even if it has gone through rigorous testing!) and press Circle to continue to options.

4) Press the Cross button to install/reinstall HENkaku Enso. It should take around 10 seconds tops to complete. When prompted, press Cross again to reboot.

5) If all is successful, the Molecule logo should appear in place of the usual PlayStation logo. Now, when you arrive at the LiveArea screen and try to open a homebrew app, it should instantly load without fault. If this happens, congrats! You've successfully installed Enso!

Game Dumping with Vitamin/MaiDumpTool

This is a brief step-by-step process to using either Vitamin or MaiDumpTool to dump your legitimate game cartridges/PSN content (games, updates, DLC, etc) as installable, decrypted content bootable by HENkaku.
It is highly recommended nowadays to use MaiDump for dumping your content, as support has grown much larger and faster than Vitamin.

1) Download the latest version of the game dumper of your choice (again, MaiDump is more recommended)
[Vitamin]
[MaiDumpTool]

2) Install your dumper of choice like any other homebrew (see tutorial above this one for the instructions to do so), and open the newly-installed app.

3) If you chose to install Vitamin, open the Vitamin spoiler below for your next set of instructions; if you chose MaiDump, choose the MaiDump spoiler:

4) Select the game you would like to dump. Select "Dump full game" to dump the entire game contents, minus the update files/DLC, or select "Dump update files"/"Dump additional content" to dump either update content or DLC respectively.

5) Choose the VPK compression level of your choice (go for option 0 (Store) if you want a shorter dumping time and have enough space available on the memory card.

6) Follow the on-screen instructions from there on to dump your content to a VPK file (it should store all dumped VPKs into a "Vitamin" folder at the root of your memcard).

7) If you want to replace your legit dump with the newly-decrypted dump, go ahead and delete the legit content, then install the new content via VitaShell. Now you have successfully dumped, decrypted, and installed your legit content/cartridge!
4) Select "Extract/Decrypt Content" from the main menu, and select the game you would like to dump. Unlike Vitamin, instead of dumping contents to a VPK, decrypted contents are dumped to a folder onn your memory card, uncompressed, so be sure you have sufficient space available before you decide to dump!

5) To completely dump your game like Vitamin, select the first option (Extract game and decrypt eboot), and Press the circle button to begin the dump process. (On older MaiDump versions you will need to exit the party app when it opens, and return to the maidump app without closing the party app.

6) After your game has dumped, delete your legit version of the game/contents you have just dumped, and select the 'install game from folder' option. (Or 'install patch/DLC' if you dumped updates/add-on content) Select the title ID which corresponds to the game you have just dumped, and choose the circle button to install the folder contents. Now you have successfully dumped, decrypted, and installed your legit content/cartridge using MaiDump!


Transferring Any Type of Files via QCMA Savedata

Struggling to transfer files via FTP? Having a hard time setting up your FTP manager? Can't access a local connection? This is the definitive method to transfer all of your files (and they can be of any type of any amount!) Offline!

1) Download this VHBL savedata (I took out all the unimportant files...)

2) Unpack the savedata to your configured QCMA Savedata directory (Default dir is C:\Users\USER\PS Vita\SAVEDATA\RandomNumbers&Letters\)

3) Place any files, be it VPK files or any other file types, into the "vhbl" folder in the unpacked savedata folder. (I took the liberty of placing a file telling you where to place your files anyway if you're still unsure.)

4) Refresh the Database of your QCMA program (or open it if you haven't already) and then transfer the VHBL savedata from the PC to your Vita via USB cable. (This also works over wifi)

5) You should now be able to view/move/manage your transferred files at ux0:pspemu/PSP/SAVEDATA/VHBL0123X/vhbl/*.*

Now you can transfer all of your files with ease, fully offline, if you still don't have FTP up and running! (Trust me; it's really faster!)

Installing Adrenaline (ePSP Custom Firmware) on 3.60

Adrenaline is a new PSP eCFW, created and developed by TheFloW, for henkaku users. It allows you to install a fully-fledged PSP CFW over any PSP game/demo/mini of your choice, then transfer PSP EBOOTs/ISOs of your choice over to your memory card to access and play them.

As stated earlier, you must be running taiHENkaku (http://beta.henkaku.xyz) and you must have any PSP game/demo/mini already installed on your Vita.
To find out how to install a PSP basegame, and how to fully install Adrenaline to your 3.60 Vita, visit these links:

How to install a PSP basegame for Adrenaline without the need for PSN (also activates your Vita at the same time):
https://gbatemp.net/threads/update-...e-installer-for-adrenaline-ark-no-ps3.459931/
Tom Bombadildo's full guide to installing Adrenaline:
http://gbatemp.net/threads/installing-adrenaline-6-61.449344/

(PSTV only) Mounting USB Stick as ux0

This tutorial will guide you on how to get a USB pen drive up and running on your PSTV. This is a really useful and money-saving feature, as the infamous memory cards are still often more expensive than the PSTV itself to this day!

Manually mounting
1) Format your chosen USB drive to FAT32/exFAT, then launch VitaShell and navigate to the partition selection menu (aka the 'home' section)
2) Press the Triangle button and select 'Mount uma0', then attach your USB to the PSTV. Copy any stuff you need to copy over to that USB now. (auch as apps, patches, VPKs, etc.)
3) After you have done all that, making sure uma0 is still mounted in the partitions menu, press triangle again and select 'Mount USB ux0' from the side-menu. The USB is now acting as the memory card.
4) If you want to refresh the livearea with all the apps transferred to your USB, select 'Refresh livearea' from the same side-menu as before.
5) You have now successfully set up a USB Stick for use with your PSTV!

Mount on boot
Thanks to Enso, we can now mount our USB sticks on boot. If you don't have Enso installed, that's fine, it'll just mount when you launch HENkaku.
1) Download the latest version of usbmc_installer
2) Transfer it to your Vita and install it
3) Open the usbmc_installer application and follow the on-screen instructions
4) After it has finished installing, the USB device should now mount on boot!






Older Tutorials

NOTE: Do not read further/use these tutorials if you are looking to get the latest hacks and homebrew! These tutorials were written when HENkaku wasn't around, and are here for archival purposes only.

These guides were originally some of the many hacks and tricks for earlier firmwares, before the time of HENkaku. Unfortunately, most of them are obsolete, however may still come in handy if you are using HENkaku anyway.

HENkaku's molecularShell app can perform every action the email exploit could do, so if you are on a 3.60 Vita, and one of the tutorials below uses the email exploit, use molecularShell's FTP feature for the process instead.




Mail Exploit Setup

This is a tutorial to set up the fail-mail exploit. It can allow you to dump, delete, and write to specific parts of the Vita's NAND. The fail-mail exploit will NOT WORK WITH FIRMWARES 3.55 AND UP, NOR WILL IT WORK ON FIRMWARES UNDER 3.00!

The process for this turorial is exactly the same for the PSTV.
1) Download, Install, and set up Mozilla Thunderbird from Here.

2) Now create a new email address to use with your vita if you haven't already, and set up your Vita with that email address. I would highly recommend using a gmail account for Vita hacking.

3) download this .eml file and open it in Thunderbird. It should open a preview page of the email + attachment you are about to send.

4) Click on forward. Now enter your Vita's email address in the recipient box (who you're sending it to). Now click send. You shouldn't have tampered with anything else. I get a lot of users here who make the mistake of either renaming the attachment or forgetting to fill in the necessary fields. :P

5) Now launch the email application on your vita and enter in your gmail account details, once you have done that, click on inbox and you should see the forwarded message with an attachment.


6) Click on the message and then click on the attachment.

6) You should get a "Could not display this image" message. DON'T CLICK ON THE "OK" BUTTON! Instead, press the PS button and close the email app.

7) Now open the email app again. You should be prompted to set up your email account. Just set it up as usual again, and you're done! You are now ready to exploit your vita further!

Editing your Vita's "app.db"

In this step, we will take a look at modifying an important file in our Vita's system - app.db! It is a file which manages home menu "bubbles", executable paths, and app icons.

The steps in this tutorial are also the same for the PSTV.

1) Open gmail on your PC, (Making links in emails for the Vita only work in gmail-sent emails.) click on 'compose', and fill in the "To:" field with your Vita's email.

2) paste this support_uri call into the message:

email:send?attach=ur0:shell/db/app.db.


(It's important you also copy the full stop at the end, as well!)

3) Now highlight the support_uri call in the message and at the bottom of the email composer, click "insert link", and paste the exact same support_uri call as a webpage link, and click OK.

4) If all went successful, the text should be blue and underlined, as a webpage link would normally be. Now just send the email.
1) Back on your Vita, open up the email app if you haven't already. Find the email you generated, and then click the link below in the email. It should take you to the "Create Message" screen. Send it to yourself, and then click "Send".

2) The email app should close automatically just after you sent the message. Don't worry, this is normal!

3) Open your gmail on your PC, and find the message with "app.db" as the attachment. download the attachment somewhere onto your PC.
1) Download SQLite Browser from here: SQL Browser and then open it up.

2) Drag and drop your saved "app.db" into SQLite Browser. It should look like this, when you have done:


View attachment 29746

3a) Next, go to 'Browse Data', and then in the drop-down box, click on 'tbl_appinfo'. This is where all of your application data and paths are. You can also add new tables into the database to create bubble data for your own bubbles!

3b) Now go to the drop-down box again, and click on 'tbl_appinfo_icon'. Here is where you can create and customize new bubbles for the home screen. You can also change the layout and icons of existing bubbles, too!

4) When you are done modifying your app.db, you will want to inject it back into your Vita so simply hit "write changes" if you did make any changes. After that, rename the app.db to "#0" (without quotation marks)

5) Now open Thunderbird and click "write" in the top-left part of the window. drag and drop the #0 file (app.db) into the top-right part of the window. It should now show up as an attachment named "#0" (without quotes). Fill in the recipient box with your Vita's email account and send the email with the attachment.

6) On your vita, open the mail app again. Find the email you just sent, and click on the #0 attachment. If successful, it should display "Could not open Image". AS USUAL, DO NOT CLICK ON "OK"! Instead, just like when we did the mail exploit setup, press the PS button and close the email app.

7) Reboot your Vita. When you open it up again, your app.db modifications will take place! And this will remain permanent until you rebuild your database. If you rebuild your database, your app.db modifications will be lost, and you have go back to step 6 again.

TN-V and VHBL Setup

In this tutorial, I will show you how to Replace a PSP game with either TN-V or VHBL.
You WILL need a downloaded and fully working PSP basegame to use this.
You will also need QCMA: Download


TN-V is suited more to play PSP ISOs.
VHBL is suited more to play Homebrew.

1) Download the Savedata and PBOOT.PBP for your choice of menu:

VHBL - Download
TN-V (3.5X) - Download
TN-V (1.00-3.36) - Download

2a) Extract the contents of your downloaded zip file. Place the VHBL01234, TNV, or TNV_00000 folder into your QCMA savedata directory.

As for the PBOOT you can send it with Thunderbird. Just rename the PBOOT.PBP to "#0" (without quotes), attach it to the email, set the email subject to "ux0:pspemu/PSP/GAME/Basegame's TITLE ID/PBOOT.PBP" (without quotes), and send the email with the #0 (PBOOT.PBP) attachment.

If you are using TN-V, then move onto step 2b. If you are using VHBL, you can skip to step 3.

2b) Before transferring your savedata, you need 660.PBP. I dunno if it's a file you can host on here, so I'm not gonna link to it. However, when you do find it, place it in your TNV or TNV_00000 savedata directory.

3) Transfer your TN-V or VHBL savedata onto your Vita using QCMA (as the official CMA won't work). Then open up the email app, find your email with the (#0) PBOOT attachment you sent earlier, and then click on it. AS USUAL, DO NOT CLICK ON "OK"! Instead, press the PS button and close the email app.

4) After that, you can either:

i) Transfer your basegame to the PC and back again for the PBOOT to take place. (better option)
OR
ii) Rebuild your database for the PBOOT to take place.


After that, Reboot your Vita, and then you're done! The TN-V or VHBL bubble should now replace your basegame!

PSM Dev for Unity Installation >=3.15 - Make your own PS Vita games!

In this tutorial, I will show you how to install PSM Dev for Unity for firmwares 3.15-3.51. Dev Assistant for Unity can allow you to develop for, and utilize, PS Vita hardware!

If you are using a PSTV, you can only set up VitaDefilerClient (for Rejuvenate) since you can't link your PSTV to a PC using a USB cable. The method for the 1.05/1.06 update installation is different, too.


1) Download and extract the following contents: Download

2) Rebuild your existing database.

3) Forward "test2.eml" from the zip we just extracted.

4) Now copy the PCSI00009 savedata to your Vita using QCMA.

5) Find an app that needs updating. Click and accept the game update. (You can also use PSM Runtime Package as the update payload.)

6) Open the notifications bar, and pause the download as soon as you see some of the green bar showing.

7) Open the email app, and navigate to the forwarded "test2" email.

8) Click on the first attachment. AS USUAL, DO NOT CLICK ON "OK"! Instead, press the PS button and close the email app.


9) Re-open the email app and click on the other attachment. ONCE AGAIN, DO NOT CLICK ON "OK"! Instead, press the PS button and close the email app.

10) Turn wifi and bluetooth off, and then reboot your vita.

11) Check your notification area. Your update should say "Could not download", and should be clickable. Now click on it, and PSM Dev Assistand for Unity should install!

View attachment 29774
Image courtsey of logsic-sunrise.com
1) Either set up a Package Installer bubble by modifying app.db, or use Gmail to make an email link to open Package Installer. ("psgm:open?titleid=NPXS10031." as the support_uri call. Make a link out of it like we did in Tutorial 2, Stage 1.)

2) Download the appropritate update data for your firmware version. They're DRM-free, so I am allowed to link them here:

3.15 - 3.20 = Download
3.30 - 3.51 = Download

3) You will need to use QCMA again. Place your downloaded PSM Unity app update into your QCMA "PSV Packages" folder.

4) Now open Package Installer on your Vita. Connect your Vita to QCMA and install the update package.

5) Your PSM Dev for Unity is now ready to be licensed!
Thanks to bache for the new info! :)

1) Open up QCMA on your PC and PSTV.

2) When connected to the PSTV, switch to the Package Installer app, and you should be able to see a list of PKGs.

3) Install the Unity update Package for your Firmware! :)
1) Simply follow the instructions at PSM Plus and set up PSM+

2) Install the appropriate Unity for PSM program on your PC.

If you installed PSM Dev for Unity 1.05: Download
If you installed PSM Dev for Unity 1.06: Download

You will also need PSM Tool Set for Unity to be able to import your keys and stuff: https://mega.nz/#!KBkTXBpY!z1DqPZ-oCHwVt-sJuY31xZY7TJ0OCBQsvaLHCM7ux_M

3) When you have installed Both programs onto your development PC, open PSM Toolset for Unity first.

4) You will need to import your license, device seed, and device key, all of which you created and set up on the PSM+ website.

5) Now make some kickass PS Vita games using Unity for PSM!

Activation of a lower FW Vita

This tutorial will guide you to activating your Vita via the use of a PS3 and USB cable, to be able to play PSP games and content. This is also useful for if you don't have PSN access from your Vita, and are wanting to download a PSP demo* specifically to set up Adrenaline/TN-V.
*(LocoRoco Midnight Carnival (USA) and Ape Quest Starter Pack (EUR) are 2 demos you can download from the PS Store for use during eCFW setup)

Note that this method doesn't work for PSTV users since it involves using a USB cable to plug in to the PS3.
1) First of all, check that your Vita is linked with a PSN account. You can do this By going to Settings -> PSN.

2) If your Vita isn't linked with a PSN account, then proceed to step 3. If it is, then go to step 4.


3a) Reboot your vita into safe mode. (Shut down, then "PS Button + Power Button + R Button all held down").

3b) Choose "Restore the PS Vita System". The proceed to link your PSN account through the setup process.

4) When all ready, Boot up your PS3. Make sure no apps are running on there! (Also make sure your PS3 has PS Store access and the same PSN account as you used to link your Vita with.)

5) Back on your Vita, turn on flight mode and reboot. Open up "Content Manager" and choose "Copy Content", then connect the USB cable to your PC and start QCMA. When your Vita is successfully recognised and ready to transfer stuff, disconnect the cable from the PC end and DON'T CLICK OFF OF THE ERROR MESSAGE!

6) If the error message states "The PC has been disconnected" then connect your Vita to the PS3 and wait for the prompt on your PS3 to appear. Now click off of the error message on your Vita and click on the "PS3" connection option.

7) Now it should bypass the update nag! Now transfer any content from your PS3 (preferably a pre-downloaded game waiting for install) to your Vita to automatically activate it, and you should be good to go!!

Fully Dumping your Vita's Memory Card (All of the ux0: Partition)

In this tutorial, we will take a look at making a full dump of your Vita's memory card. That means you will be dumping the entire ux0: partition, so not only will you make a dump of your pspemu part of the memcard, you will be dumping encrypted vita apps and their metadata, and a lot of other configuration files and extras!

Also, this guide assumes you are on any firmware up to 3.52. Any higher firmware version this guide doesn't support at the moment.

So without further ado, on to the tutorial!
1) First, download this modified PBOOT file that we will be injecting into one of our required PSP games/minis. However, if you are wanting to use the email exploit method to inject the PBOOT, use this one instead!

2a) If you have direct write access to PSP/GAME (that's any firmware under 3.50), use VitaFTP to FTP over the PBOOT file to ms0:PSP/GAME/TitleID Of Chosen Game/PBOOT.PBP

2b) If you are on 3.00-3.52, you can use the email exploit to mail over the (smaller!) PBOOT file to ux0:pspemu/PSP/GAME/TitleID Of Chosen Game/PBOOT.PBP. Make sure you follow the rules of the email exploit to make sure you don't mess up!

Optional) Delete any /temp folder you see at ms0: just to be sure everything goes alright when dumping the whole memory card.

3) Transfer the chosen PSP/PS1 game over to the PC. When finished, transfer it back over to the Vita again, and you should notice the bubble change its look! (very important step!)

4) Now for the transferral of your entire memory card partition! Transfer the game once more to the PC, and you should notice it takes longer to transfer, since we are transferring the whole memory card.

5) After that, transfer the game back to the Vita yet again.

6) Check the temp/ folder. All of your memory card should now be dumped into that temp/ folder! If not, something went wrong, and you should try again.

Optional) FTP over the entire temp/ folder to the PC, so you can free up a lot of the space the dump took over! :P

Finished! Have fun experimenting and exploring your dumps! :D

Various Vita Registry hacks!

In this tutorial, we will look at applying different registry hacks to your Vita. This includes swapping your Vita's X/O button assignment (doesn't affect games though), faking the Vita's region, and reading out your PSN Login data. Credit to Hackinformer and Co. for these findings. :yay:

However, I am not responsible for any damage or System resets that may occur by doing this! Do at your own risk!

ALSO, DO NOT SHARE YOUR REGISTRY FILES WITH ANYONE, AS THEY CONTAIN YOUR PSN LOGIN DATA UNENCRYPTED!!

You will also need fixregvita from here.

1) Send yourself an email with the following links:

email:send?attach=vd0:registry/system.dreg.
email:send?attach=vd0:registry/system.ireg



2) On your Vita, click on each of the links and send them as attachments in seperate emails.

3) Retrieve the files through your desired email application on the PC.

Done. You are now ready to start modifying the registry files!
1) Put your registry files in the same location as fixregvita and run the executable, causing a 'seg' folder full of .dreg files to be created.

2) Open the system.dreg file with your desired Hex Editor.

3) Search for "button_assign" using the 'find' function.

4) Somewhere after or underneath, there should be a 01 hex value. To swap the 'enter' functionality to the O button, change that 01 value to 00 and click 'save'.

00 = O is enter
01 = X = enter



5) Now run fixregvita again to apply the changes and fix the checksum. You should get a new and patched 'system_.dreg' file.

6) Assuming you saw the previous tutorials on how to insert files back into the Vita, now send an email with the system_.dreg file as an attachment and renamed to #0, and set vd0:registry/system.dreg as the email subject.

7) On the Vita, click on the #0 attachment and don't click off the error! Instead, just press the PS Button and close the email app altogether.

Now just restart, and you should notice the O button is now the enter button, if you changed the hex value to 00! :)
1) Put your registry files in the same location as fixregvita and run the executable, causing a 'seg' folder full of .dreg files to be created.

2) Open the system.dreg file with your desired Hex Editor.

3) Search for "region_no" using the 'find' function.

4) Somewhere after or underneath, there should be a hex value that is completely different to the continuous row of '00's. When you've found it, change it to one of the following values, depending on what you want to change your region to, then click 'save'.

Japan = 01
America = 02
Europe = 03
Korea = 04
UK = 05
UK 2 = 06
Australia = 07
Hong Kong = 08
Taiwan = 09
Russia = 0A
China = 0D



5) Now run fixregvita again to apply the changes and fix the checksum. You should get a new and patched 'system_.dreg' file.

6) Assuming you saw the previous tutorials on how to insert files back into the Vita, now send an email with the system_.dreg file as an attachment and renamed to #0, and set vd0:registry/system.dreg as the email subject.

7) On the Vita, click on the #0 attachment and don't click off the error! Instead, just press the PS Button and close the email app altogether.

Now just restart, and you should now be a different region!
1) Put your registry files in the same location as fixregvita and run the executable, causing a 'seg' folder full of .dreg files to be created.

2) In the 'seg' folder, find buf_NP.dreg and open it in your desired hex editor.

3) Go to offset 0x360 and you should now see your PSN ID and password in plain text. One reason why you should NOT ever share your registry! ;)

An Alternative Method to Dumping Files - The Calendar exploit! (Works from 3.00 to 3.55!)

If you are having a little bit of difficulty dumping files from your Vita using just the email app, there is another method that Mr.Gas found not too long back this year. It lets you create a new calendar event with a support_uri call to dump the file, and then can be emailed, which in turn, dumps the desired file into the email.

Another benefit of this method is that it works not just on firmwares 3.00-3.52, but also 3.55 as well! (but not 3.57 or higher, as it got swiftly patched by Sony!)

1) Create a new calendar, if you haven't already.

2) Now tap and hold a date to add an event.

3) In the event description, enter the support_uri call to dump your desired file. However, do not add the dot like you would for the email exploit!

For example:

email:send?attach=vd0:registry/system.dreg



4) save the event, and then click on it. Enter the little sub-menu in the bottom-right and click on "send as email".

5) The email composition should open up, and you should now see the desired file you want to dump attached.

6) Send the email, and you should now be able to retrieve that file on your PC.








FAQ:

(This FAQ is still a work-in-progress...)
Q: My attachment is still showing the ? Symbol!
A: Try re-doing the mailwriter process again.

Q: My TN-V/VHBL bubble isn't showing!
A: Try to do the process again.

Q: Will I lose my TN-V and VHBL Bubbles if I update to 3.55?
A: Nope; they are now of a permanent nature, even if you update, or rebuild the database.
However, you will lose access to the mail exploit if you update to the latest Firmware, so think carefully!
EDIT: Updating any higher than 3.55 WILL NOW BREAK TN-V/ARK!

Q: The notification to install PSM Dev for Unity is unclickable?!
A: That may be because you waited too long to pause the original update payload. Try over again, it takes a couple of tries!

Q: My PSM Dev for Unity app tells me that the license "could not be confirmed".
A: The PSM+ license always resets at 00:00. You can either:
1) Refresh your license on the PSM+ website.
OR
2) Change the date back to when you last activated the license.

Q: Anything that will allow me to spoof to *insert latest firmware*?
A: If you're not on 3.60 then no. 3.60 currently has spoofing capabilities at the time of writing though.

Q: What about an ARK-2 tutorial?
A: No ARK tutorials, as I believe TN-V and Adrenaline make it a somewhat redundant eCFW.

Q: Can we play Vita backups yet?
A: Absolutely. HENkaku allows you to run them by installing the VPK of the dumped game you want to play. As these games became fully decrypted during the dumping process, you cannot run them without first running the HENkaku exploit. (If you are running Enso, you needn't worry about running the browser exploit ever again)

Q: Why does PSM Dev for Unity not work on FWs >3.51?
A: Sony shut down PSM in mid-2015, so 3.52 and upwards revokes PSM Dev Assistant support.

Q: I can only see a small handful of folders in ux0/can't delete anything in ux0/can't access other partitions!
A: Make sure you have "Enable unsafe homebrew" turned on in molecularShell's options menu, then reboot for the change to take effect.

Q: I keep hearing about taiHENkaku as well as the normal HENkaku. What are the differences exactly?
A: taiHENkaku is the newer version of HENkaku. It is designed to run new, special plugins that can modify your system further than usual, and can also run game plugins without needing to dump the appropriate game through a game dumper beforehand.
EDIT: taiHENkaku and HENkaku have now merged, therefore you should go ahead and continue to install HENkaku since the functionality of taiHENkaku is now in the latest versions.
Outdated
 
D

Deleted User

Guest
OP
Thank you for your wonderful contributing post as to how I could possibly make it less outdated...

I have quite a number of things to update, such as replacing the Vitamin/maidump tutorial with nonpdrm and PKGi, SD2Vita installation, updating enso to 3.65 etc. But other than that, mostly the rest is still relavent. Apart from the older tutorials of course, but I just put them there for archival purposes. Or anyone insisting on staying less than 3.60
 
Last edited by ,

fatty77

Member
Newcomer
Joined
Apr 12, 2013
Messages
10
Trophies
0
Age
46
XP
155
Country
United States
Voxel, first I wanted to thank you so much for the time and effort you put into updating the OP. As I was following it I noticed that Adrenaline no longer requires an activated Vita or a PSP game to be installed. I've updated the applicable portion of the OP in case you wanted to copy and paste this over the former section. Thanks again!

Installing Adrenaline (ePSP Custom Firmware) on 3.60

Adrenaline is a PSP eCFW, created and developed by TheFloW, for henkaku users. It allows you to install a fully-fledged PSP CFW, then transfer PSP EBOOTs/ISOs of your choice over to your memory card to access and play them.

Adrenaline is a software that modifies the official PSP Emulator using taiHEN CFW framework to make it run a PSP 6.61 custom firmware. Thanks to the power of taiHEN, Adrenaline can inject custom code into the IPL which allows unsigned code to run at boottime.

Note: An activated Vita with a PSN game used to be required to use Adrenaline, but this is no longer the case. Adrenaline can now be installed from a VPK.

To install Adrenaline to your 3.60 Vita, download the latest version from this link:
https://github.com/TheOfficialFloW/Adrenaline/releases
 
  • Like
Reactions: Deleted User
D

Deleted User

Guest
OP
Thanks a lot! I'm going to try and rehaul the OP a little bit today, and I'll put that in for sure

EDIT: I tweaked the guide, and everything should be all good now... I hope.
 
Last edited by ,
  • Like
Reactions: cvskid and fatty77

SeongGino

The Average One
Member
Joined
May 20, 2015
Messages
939
Trophies
0
Age
25
Location
Jersey, Jersey
Website
www.twitter.com
XP
1,932
Country
United States
Can someone explain exactly how you make a backup of vitashell w qcma? (Prepping for 3.60 Enzo to 3.65 Enzo)

You make a backup of the bubble just as you would have with any official application.

If you already have the Vita synced up to your PC's QCMA installation, then it's as simple as it says on the tin.
 
Last edited by SeongGino,

Bonovox40

Well-Known Member
Member
Joined
Apr 2, 2003
Messages
578
Trophies
2
XP
1,340
Country
United States
You make a backup of the bubble just as you would have with any official application.

If you already have the Vita synced up to your PC's QCMA installation, then it's as simple as it says on the tin.

Ok thanks. I'll give it a go. I thought since it wasn't an official Sony bubble, it wouldn't be that easy.
 
D

Deleted User

Guest
OP
This guide doesn't explain how to switch from MolecularShell to VitaShell...
True; VitaShell has a lot more features than the latest M.Shell nowadays, and I just noticed it's not in the guide too, so thanks for the heads up.
Still a bit more catching up to do, so keep the suggestions coming :)
 
Last edited by ,

Rith12

Well-Known Member
Newcomer
Joined
Apr 15, 2018
Messages
45
Trophies
0
Age
26
XP
907
Country
United States
I’m sorry to ask this only because it’s so much info and I’m an idiot when it comes to things like this.

But literally all I want to do is download 3 games and play them over the course of the year. I have a pstv 3.60 and a fat32 16gb usb. What is the steps I need to do in order to accomplish that in simple idiots guide please.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    AncientBoi @ AncientBoi: omg, He's got even more sayings?