Playstation 2 - Exploit v1.0 - By BadServo
What is the “exploit?”
The “exploit” refers to a means of making the Playstation 2 video game console execute homebrew and unlicenced code without the use of a mod chip or swap disc. This is done by exploiting a flaw in the PS1 Driver contained on the PS2's internal ROM.
What is “Independence?”
Independence is the name most commonly used to refer to the PS2 exploit. It is so called because the person who initially discovered and released the exploit information, did so along with a set of files that makes an installer disc called the “Independence Installer.” The day that the exploit and this installer utility disc were released is referred to as “PS2 Independence Day.”
Why would this interest me?
Any number of tasks can be accomplished using enthusiast coded utilities. With the right tools, one can play backup discs of legally owned games, play music and movie files, run games faster and more conveniently from an internal hard disc drive, use unofficial hard disc drives, manage memory cards and use USB devices to backup information. More ambitious users can even install the Linux operating system to their Playstation 2.
Play Backup Games!!? Hot-damn, hook me up....
Not so fast, buddy. Firstly you need to make sure you have a compatible PS2. Recently SONY released a new slimline version of the PS2, commonly referred to as the “PSTwo.” The exploit as a general rule will not run on these newer machines. If you have a traditional “chubby” PS2, then you are capable of running he exploit.
I've totally got a chubby. Now what?
Secondly you need to get the exploit onto your memory card. There are several ways to do this. All of them involve one of 4 things to be in your possession. Your options are:
- Action Replay/Gameshark
- Swap Magic Discs
- Codebreaker Version 8 or later
- Xploder or Similar Memory Card-2-PC Device
No problem. I went on Kazaa and downloaded all of those.
That won't work, dude. Anything you burn a copy of, whether you downloaded it or copied it yourself is a BACKUP DISC. And if your PS2 could play backup discs, there wouldn't be a lot of point in exploiting it. DUH!!
Are you sure I can't use this version of XXXXX app that I downloaded? It says it's cracked...
I'm positive, there is no such thing as a magical patch or crack to let a backup disc run in an unmodified or unexploited PS2. While we're on the subject, there is no magic laser replacement or cover replacement that will allow you to play backup discs either. Everything requires a mod chip, swap disc, or exploit. Honestly...
Ok, ok... Since I have to buy something, what specifically am I looking for?
Glad you asked. These are the following methods you can use to install the exploit and what versions of what products will allow you to use that method:
Method 1: Boot the Independence Installer Disc
- Swap Magic Discs
- Action Replay/Gameshark Version 2
If you have one of these discs, you can use it to load the PS2 and then swap out with a backup disc (in this case the Independence Installer CD), and load it. To do this, you need a fliptop lid, or a slide card or similar tool.
Method 2: Copy the files Directly to the Memory Card via USB
- Action Replay/Gameshark MAX or EVO
- Codebreaker Version 8 or Higher
Obviously, this method requires a USB flash drive. If you have this already, you simply need to purchase or borrow one of the above products. I recommend Codebreaker for this method. Codebreaker is compatible with more Flash Drives than AR MAX and costs only half as much. The newest version of Codebreaker (9) also supports Hard Drives for storing codes and saved games.
If you can't get a Codebreaker, the Action Replay/Gameshark works equally well, although support for USB drives is spotty. Also, if you don't already have a USB Flash Drive, you can get a version of Action Replay that comes with one. There are multiple versions of the Gameshark and Action Replay software. It is not always easy to distinguish what version you are holding by package alone. The rule of thumb is that if it mentions a “Media Player” on the package of comes with the afore mentioned USB Drive, it will work for the purposes of installing the exploit.
Method 3: Copy Files Directly to the Memory Card via Network
- Action Replay/Gameshark MAX or EVO
This method, pioneered by our own DiGiTaLeX, uses your PC to act as a code server for the AR MAX/Gameshark cheat disc. The upshot of this, is that by running the software on your network enabled PC, and updating the cheat list in the ARMAX/GS interface, the PS2 will be tricked into downloading your preconfigured exploit files. All versions of ARMAX/GS that work with method 2 should be suitable for method 3. Codebreaker cannot be used with this method.
I know that Action Replay/Gameshark is a cheating utility. But what is Swap Magic?
Whereas AR/GS are cheat utilities that can be misused to load a backup disc, Swap Magic is a set of discs (1 DVD/1 CD) specifically engineered for booting backup discs. They are fast, simple, and effective you use. Simply start the PS2 with Swap Magic and wait for the loading screen to come up, then swap with your backup disc using a slide card or similar technique. Swap Magic also has the added benefit of changing the color system of the PS2 on load, for playing imported games (PAL/NTSC).
PAL & NTSC, were those Village People songs?
Uhh, no. Actually PAL and NTSC represent the standards used in different countries for displaying video signals on a television set. PAL is the format used in Europe and Australia. NTSC is used in the USA and Japan. You can play a game on a format foreign to your own on a PS2, but the colors will be screwed up and the image will be very off-center without first patching the game or using a corrective loader like Swap Magic.
Sounds simple enough. But you mentioned a “slide card.” What is that?
A slide card is a simple tool that allows you to open the PS2's DVD drive without pressing the eject button. While professionally made slide cards can be purchased, you can easily make one yourself but cutting an old credit card, discount card, library card, into the following shape:
Some people bypass this and simply use a small knife to move the pin, but this is no recommended due to the extra stress, that could damage the pin.
Why would I want to do that?
Real factory-pressed PS2 discs contain a small data code that identifies it as an original disc and not a copy. Consumer level CD/DVD burners cannot reproduce this code. This is why the PS2 refuses to simply load up backup discs be default. It's a fairly effective copy protection measure. The PS2 knows when the eject button is pressed. And whenever you use the eject button to load a new disc into the drive, the PS2 scans for this special code. If however, you could change discs without pressing the eject button, the PS2 will simply assume that it still contains a real, store-bought disc, and will happily execute any program on it.
The slide card allows you to do this. One simply removes the thin black cover from the front of the PS2's DVD tray. This allows you to see into the unit when the drive is closed. If you look underneath the drive tray, you will notice a small while pin near the Middle. Using the slide card, you push this pin to the right, unlocking the DVD drive tray. You then pull the tray out, change discs, push it back in, and slide the pin back to the left, re locking the drive. The thing to remember is that the disc which is currently in the drive MUST HAVE STOPPED SPINNING before you can attempt to swap it. This is where swap discs come in. They are engineered to stop the motor in the DVD drive after initially loading themselves, making the swap technique safe.
Christ, that sounds kinda dangerous. Is there a safer alternative to the slide card for swapping discs?
Of course. You can also use a fliptop; pioneered by our own zxspeky.
What is a fliptop?
A fliptop is a modified PS2 shell/cover/casing that has an opening cut into it in the area that rests above the PS2's DVD drive. This opening allows you to simply reach in and change the current disc without ever opening the DVD tray. It is easier, faster, and safer than using the slide card. The name “fliptop” is coined because most cases of this nature have a flip-up lid to cover the opening. This style of top mimics the look of classic desktop/portable CD players, and the new PSTwo.
Much like the slide card, you can purchase a professionally designed and manufactured fliptop lid, or easily make one yourself. A fine tutorial can be found on the site.
Ok, I have a means of putting files on the memory card. Anything else I need?
A couple things. Since the exploit works by way of the PS1 Driver, you need an original PSX disc to “trigger” it. This disc will commonly be referred to as the “trigger disc.”
And I guess a backup won't work for that either?
Nope. I'll be damned, your catching on. Your also gonna need some elfs.
Elfs? Am I gonna need 8 Reindeer too?
Actually, ELF files are the PS2's native executable format. ELF is a handy acronym for Executable Linking File. Think of them like EXE files for your PS2. Every program you run will come as one of these ELF files, and may or may not have supporting files.
Where can I find these ELFs?
We have a wide array of ELFs in our download section, as do many other PS2 scene related sites. You can also use the Exploit Compiler application to get access to all of the most popular ELF files in one easy download. Thanks to DiGiTaLeX for this great application. This program can also automatically generate your TITLE.DB files for you.
TITLE.DB..... wtf is that!?
TITLE.DB is simply a file that is used to instruct the PS2 to launch the exploit when your trigger disc is inserted. The TITLE.DB identifies the PSX disc to utilize as the trigger disc. Many tools are available to make your own TITLE.DB file, but it's far easier to use the built-in functionality of Exploit Compiler, or use the on line TITLE.DB Maker in the Content Section of Exploitstation.Com.
There's a lot of stuff on that Exploit Compiler Screen. What do all these check boxes mean?
The various check boxes are ELF files you have the option of using. The uses of these files is as follows:
- PS2Menu : File manager and ELF launcher.
- KeyLauncher : File Manager and ELF Launcher. Supports USB drives.
- LaunchELF : ELF Launcher. Supports USB drives.
- Cogswap : Allows you to load and start backup discs.
- CDVDLoader : Allows some problem discs to run. Generally used with Swap Magic.
- PS2Link : Allows you to run ELF files on the PS2 without copying them to the memory card first. Loads ELFs from your PC across a LAN.
- BootAdvance : Another ELF Launcher. This one supports USB drives.
- HDL_SERV : Server software used in conjunction with HDL_DUMB to load ISO images of games to the PS2's internal HDD over a network.
- PS2Reality : A media player for PS2 supporting MPEG-4 and MP3 files.
- MC Format : Hard formats a Memory Card. Useful when a power outage of other accident has rendered a memory card unrecognizable in the PS2's browser menu.
- PS2MP3se : A much enhanced version of the original PS2MP3 Player.
- PGEN : A SEGA Genesis emulator for playing classic ROMS on the PS2.
- SNESEMU : A Super Nintendo Entertainment System emulator for PS2.
- MCLoader : An automatic installation application for ELF files.
- Faplink : Similar to HDL-SERV, but far buggier.
- ExecFTP : FTP server for PS2. Allows you to FTP into the PS2 to add new files.
- DMSFormat : A formatting and partitioning tool for PS2 HDDs.
- Pukklink : Similar to PS2Link.
- HDloader : Application that allows you to copy PS2 games to your PS2's HDD and play them from there, allowing for faster load times and reduced wear on your laser.
There are 2 HDLoader files, one for PS2 versions 1-8, and another for versions 9-11.
How do I know what version PS2 I have?
VERSION 12 : If your PS2 is a slimline model with a model number beginning with SCPH-700, you have a Version 12.
VERSION 11 : If your console is a European unit with the model number SCPH-50004, you have a Version 11 PS2.
VERSION 10 : If your console is a USA or Canadian unit with the model numbers SCPH-50001 or SCPH-50010 AND has date code 3D stamped on it, you have a Version 10 PS2. European and Australian PS2 with the model numbers SCPH-50002, 50003, or 50004 AND have a small “a” symbol next to the model number is also a Version 10.
VERSION 9 : If your console has the model number SCPH-50000, 50001, 50002, 50003, 50004, or 500010 AND bears the date codes 3A, 3B, or 3C it is a Version 9. White colored consoles with model number SCPH-55006 GT or SCPH-55007 GT are also Version 9 machines.
VERSION 8 : If your PS2 is Japanese and bears the model number SCPH-39000 or SCPH-39006, it is a Version 8 unit.
VERSION 7 : If your PS2 bears the model number SCPH-3900 and is NOT from Japan it is a Version 7. Models SCPH-39001, 39002, 39003, 39004, and 37000 are also Version 7 machines.
VERSION 5/6 : The model numbers can be SCPH-30000R, SCPH-30001 R, SCPH-30002 R, SCPH-30003 R, SCPH-30004 R, SCPH-30006 R But also some SCPH-30000, SCPH-30001, SCPH-30002, SCPH-30003 and SCPH-30004 PS2 have a V5/V6 main board.
VERSION 4 : If the PS2 bears an engraved Electrical Hazard warning on the bottom of the case, it is a Version 4.
VERSION 1-3 : If the PS2 has 10 screws holding the outer case together instead of 8, you have a Version 1, 2, or 3 console.
Exploit Compiler is still a little daunting. Can you walk me through it?
If you insist. Here are the correct options to generate your exploit package:
- Place your chosen PSX “trigger disc” in your PC's CD Drive.
- Run the Exploit Compiler Program.
- Select the Letter of your CD Drive from the pull-down box in the upper left.
- Press the “Get” button.
- A Disc ID Number should appear in the white box on the upper right.
- Choose one of the three available loaders.
- Check the boxes next to the ELF files you want included.
- Be aware that the more ELFs you add, the more space is required on your memory card. It is impossible to add all the ELFs, event o a completely empty memory card.
- Select your Region. BADATA for US & Canada. BEDATA for Europe & Australia.
- Enter the IP address of your PC, and the IP address you'd like your PS2 to use.
- You may specify a Subnet Mask, but it is recommended to leave it at the default.
- Choose your Directory Structure. If you are installing through a CD with a swap disc, select CD. If your using a USB Flash Drive or Network Installer, select MC.
- If you are installing with an installer CD and swap discs, then enter “DUMMY.DAT” into the Dummy File Filename box. And enter “60” in the Size box.
- Press the “Extract ELFs” button.
- The files will be extracted to the hard drive (system drive in the case of multiple drives) in the folder called “Exploitstation.”
- If you are using a USB Flash Drive to install, then use the Save Builder 0.8 application to generate a save game file containing everything in the Exploitstation folder int eh native format of your cheat utility.
- If you are creating an installation CD, then burn the files in the Exploitstation folder (including the FILES sub folder) in Nero Burning ROM using the following settings:
After you've created a save file or installation CD, you can either use a cheat utility to copy the file from the USB drive to the PS2 memory card, or boot the installation CD with your swap discs. Once the files have been copied, insert your PSX trigger disc into the PS2 and press reset. If everything was done correctly, then you should soon be presented with your chosen loader application.
Wow, that was easier than I thought. But you talk about a PS2 Hard Drive a lot, but they are expensive, and I don't want Final Fantasy XI. Is there any alternative?
Actually yes. Apparently you can use any standard PC hard disc drive in your PS2 with a few considerations. Firstly, not every HDD will be recognized by the PS2. As a general rule, drives over 40GB in size are almost always recognized and work fine. Drives that are smaller may or may not work. It's simply a matter of trial and error. The second thing to be aware of is the fact that not all drives physically connect to the PS2 correctly. It is possible to make these drive fit, but it requires modification to the network adapter.
Network Adapter? I thought we were talking hard drives?
The HDD connects to the PS2 via standard IDE and Molex connectors on the PS2 Network Adapter. The Network Adapter in turn, connects to the expansion port above the expansion bay on the rear of the PS2. How were YOU gonna connect it, smart ass?
What if I'm not interested in using a hard drive? Can I boot backup discs now?
Yes, if you included CogSwap on your exploit package, then you can use it to load a backup disc. The basic procedure is as follows:
- Start PS2 with exploit and load CogSwap.
- Press the eject button on the PS2 and insert an Original PS2 disc. DVD for a DVD backup or a CD for a CD backup.
- Press eject to close the tray.
- Once the disc is loaded, press the circle button to refresh the TOC.
- Using a slide card or fliptop, swap the original PS2 disc with your backup.
- Once disc has loaded, press X button to play.
Be aware that there are many different sizes of PS2 discs. Try to use a LARGE disc (big game with lots of videos, etc) to load backups. Games from the Final Fantasy and Grand Theft Auto series work well.
I follow that, but what is the TOC?
TOC is the “Table of Contents” for the disc your using. A “High TOC” disc would be one that contains a lot of data.
Backups are great and all, but tell me about playing games from the hard drive.
Well a program was created that allows a person to copy their PS2 CDs and DVDs onto an internal HDD. This program is called “HDLoader.” Since it's release, various patches have been developed to allow new or altered functionality. All the best patches are already included on the HDLoader ELFs that come along with Exploit Compiler.
HDLoader, eh? Well some guy told me about HDAdvance. I want it because it is compatible with more games than Hdloader and supports larger hard drives.
That guy is an idiot. Don't listen to idiots. HDAdvance is a shameless copy of HDLoader with a different background image. The only extra benefits (like larger HDD support) are that same exact patches that anyone can apply to Hdloader. They are the exact same program.
What about HDAdvance 2.0? It's supposed to be even better...
Again, this is incorrect. HDAdvance 2.0 is still just the same old HDLoader with another modified background image and few more of the freely available patched applied. Save your money and don't support blatant thievery. Use HDLoader.
So I can play ANY game from the hard drive with HDLoader?
Not exactly. While a vast majority of the games run without and problem at all there are a few games that won't work correctly without additional preparation.
How do I know if my game is compatible?
There are several sites who's purpose is to keep a running database of games and they're level of compatibility. My favorite ones are:
http://homepage.ntlworld.com/casey.miller/HD%20Loader%20Compatibility.htm
Alternatively, you can simply install the game and try it. A majority of games will simply work right away with no additional effort on your part.
The games list says that my game needs “Mode 3” or some other mode. How does that work?
“Compatibility Modes” are a set of three on/off settings that you can choose from in HDLoader to make problem-games work correctly. You set the compatibility modes for a game by selecting the game from the HDLoader menu and pressing the “select” button on your controller.
What do the compatibility modes actually do?
This is one of those little factoids that everyone is curious about, but almost no one seems to know. The modes are as follows:
- Mode 1 : Enable slower HDD access. Passes data from the HDD slower for games that rely on the speed the data is coming from the CDVD.
- Mode 2 : Enable DVD9 support.
- Mode 3 : Remove the Loader from the memory after the game is patched. Some games flush the location where the loader is (because some cheat programs use the same location), and if after that the game resets the IOP (when the loader kicks in to patch stuff) and the system is still patched to enter the loader it crashes.
Ok, but how do I know which modes my game needs?
The easiest way is to check one of the above listed databases. But if you can't do that, then simple trial and error is the way to go. The best course of action is as follows:
- Try game without any modes. This often works fine.
- Try the game with Mode 3 enabled. This is the 2 nd most common solution.
- Try the game with Mode 1 enabled. This is somewhat common as well.
- Try the game with both Mode 3 and Mode 1 enabled. This is a last ditch effort.
What about Mode 2?
Mode 2 is a special mode that enables HDLoader to support DVD9 games. To date there are only a handful of DVD9 games released for the PS2. TO make these work requires a lot of preparation on the PC. Then the modified images of the game must be dumped directly to the PS2's HDD by connecting it to the PC's IDE connection and using a utility such as Winhiip. You will most likely never need or use Mode 2 in most cases.
What is Winhiip?
Winhiip is a utility that runs on your PC. It allows you to access the special HDLoader created file system on your PS2's HDD by connecting it directly to the computer's IDE connection. Using it you can copy a PS2 disc to the HDD, remove games from the HDD, extract games form the HDD to you PC, format the HDD, change game names and compatibility modes, and also put disc image files directly onto the PS2 HDD without burning a disc?
Why use Winhiip?
It can save you from having to burn a backup copy of a disc image file just to put it on the PS2 HDD, since it can work with disc images directly. Regardless of what action your taking in Winhiip, it is much faster than performing the same action directly on the PS2 in about 90% of cases (depending on PC hardware).
My game won't work with any of the compatibility modes. The PS2HD.com site says I need a patch.
Groups of enthusiasts will sometimes release a “patch” for a game that is otherwise incompatible with HDLoader. This patch will change specific information in the game's disc image to allow it to work correctly. In order for a patch to be applied, you smut have the exact disc image the patch was designed to use. So even if you have made a disc image form your own personal game disc, you may need to download a specific disc image released by one of the warez release groups to apply the patch successfully. To apply the patch, you use a dimple patching program (also available at PS2HD.com). Point it to the patch file and the disc image file, and it will do the rest. Then burn or load the image to the PS2 HDD through whatever means you choose.
The databases say that my game is incompatible. What can I do?
Well buddy, your just screwed. Unless someone decides to release a patch correcting the problem, the game will not be playable via HDLoader. You'll have to burn a backup disc of the game in question and load it with a swap disc or the CogSwap loader.
