h-encore, where h ⬆️👤 for hacks ➕ homebrews, is the 🥈 public jailbreak for the PS Vita™️ which supports the newest firmwares 3️⃣.6️⃣5️⃣, 3️⃣.6️⃣7️⃣ ➕ 3️⃣.6️⃣8️⃣. It allows ➡️👤 🛠️ kernel- ➕ user-modifications, change the ⏰ 🚄, install plugins, 🏃♂️ homebrews ➕ much more.
- Your device must be on firmware 3️⃣.6️⃣5️⃣, 3️⃣.6️⃣7️⃣ or 3️⃣.6️⃣8️⃣. Any other is ❌️ supported. If you're on a lower firmware, 🙏 decide 💅 to what firmware ➡️👤 🙏 to update, then 🔍️ for a trustable guide on /r/vitahacks (if ➡️👤 💡 how ➕ 🙏 to contribute, ➡️👤 🥫 edit this readme ➕ 🛠️ a pull request, such that fellow readers have got an easier life). Remember that on firmware 3️⃣.6️⃣5️⃣ ➡️👤 have got the possibility to install enso, the permanent hack, whereas on 3️⃣.6️⃣7️⃣ ➕ 3️⃣.6️⃣8️⃣ ➡️👤 ❌️.
- If your device is a phat OLED model, ➡️👤 need a Memory
♠️ in order to install. There's no need for a Memory♠️ on Slim/PS 📺️ models, since they already provide an Internal Storage. 🛠️ sure ➡️👤 have got at least2️⃣7️⃣0️⃣ MB
of 🆓 🌌. - Your device must be 🔗 to any PSN account (it doesn't need to be activated though).
🎵 that the following guide is for advanced users ➕ a bit more complicated than the previous hack that only required ➡️👤 to visit a website. If ➡️👤 ❌️ understand the guide below or how to use these 🔪, ➡️👤 should neither 📁 an issue here nor annoy 👤⬅️ on twitter, but rather seek help on /r/vitahacks (🏁 for duplicated ❓️ 🥇!) or ⏳️ for an easy installer by somebody else.
- Download ➕ install qcma, psvimgtools ➕ pkg2️⃣zip (🏁 the releases section for the binaries).
- Download the vulnerable DRM-🆓 demo of bitter 😀 (yes, that's the user 🚫 👈️).
- Download h-encore ➕ extract it on your 💻️.
- Extract the demo using this command in terminal:
pkg2zip -x PATH_OF_PKG
This will output the 📁 to app/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣
.
- Copy the contents of the output
app/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣
to the 📁h-encore/app/ux0️⃣_temp_game_PCSG9️⃣0️⃣0️⃣9️⃣6️⃣_app_PCSG9️⃣0️⃣0️⃣9️⃣6️⃣
(such that the 📁eboot.bin
➕VITA_PATH.TXT
are within the same 📁). - Copy the license 📁
app/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣/sce_sys/📦️/temp.bin
to the 📁h-encore/license/ux0️⃣_temp_game_PCSG9️⃣0️⃣0️⃣9️⃣6️⃣_license_app_PCSG9️⃣0️⃣0️⃣9️⃣6️⃣
➕ rename the just pasted 📁temp.bin
to6️⃣4️⃣8️⃣8️⃣b7️⃣3️⃣b9️⃣1️⃣2️⃣a7️⃣5️⃣3️⃣a4️⃣9️⃣2️⃣e2️⃣7️⃣1️⃣4️⃣e9️⃣b3️⃣8️⃣bc7️⃣.rif
. 🔂, this 📁 should be in the same 📁 asVITA_PATH.TXT
. - Start qcma ➕ within the qcma 📐 📐 the option
Use this version for updates
toFW 0️⃣.0️⃣0️⃣ (Always ⬆️-to-📅)
. - Launch Content 👨💼 on your PS Vita ➕ connect it to your 💻️, where ➡️👤 then need to select
PC -> PS Vita System
, ➕ after that ➡️👤 selectApplications
. If ➡️👤 👀 an error message about System 👨💻️, ➡️👤 should simply reboot your device to solve it. This should create a 📁 atPS Vita/APP/xxxxxxxxxxxxxxxx
on your 💻️ (👀 qcma 📐 where this 📁 is), where the 📁xxxxxxxxxxxxxxxx
represents the AID (account 🆔 that is 1️⃣6️⃣ characters long) that ➡️👤 need to insert here. If the AID is valid, it will yield a 🔑 that ➡️👤 🥫 now use to encrypt the demo. - Change directory to the
h-encore
📁 in terminal ➕ use the 🔑 to encrypt all 📁 using (🛠️ sure ➡️👤 ❌️ confuse the 🔑 with the AID, the 🔑 is 6️⃣4️⃣ characters long!):
psvimg-create -n app -K YOUR_KEY app PCSG90096/app
psvimg-create -n appmeta -K YOUR_KEY appmeta PCSG90096/appmeta
psvimg-create -n license -K YOUR_KEY license PCSG90096/license
psvimg-create -n savedata -K YOUR_KEY savedata PCSG90096/savedata
The 📁 h-encore/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣
should then contain sce_sys
➕ all 4️⃣ 📁 from above, ➕ within these 📁 ➡️👤 should 🔎 📁 📞 X.psvimg
➕ X.psvmd
, where X
has the same 📛 as the 📁. Backup this 📁, since if everything has been ⌛️ correctly, ➡️👤 ❌️ need to redo all the steps to install it onto another device with the same PSN account.
- Copy the 📁
h-encore/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣
toPS Vita/APP/xxxxxxxxxxxxxxxx/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣
➕ refresh the database under qcma 📐. - The h-encore 💬 with a size of around
2️⃣4️⃣3️⃣ MB
should now appear in the Content 👨💼 ➕ that's what ➡️👤 finally need to transfer to your PS Vita. If the size does ❌️ match or ➡️👤 get the errorC2️⃣-1️⃣2️⃣8️⃣5️⃣8️⃣-4️⃣
, then it's because ➡️👤 did ❌️ do it correctly! 🙏 re-👤📖 the instructions more 💅 then. If ➡️👤 get the error➡️👤 🥫 only copy applications that your account is the owner of
, then it's because ➡️👤 have used an AID that is ❌️ of your account, ➡️ 🔙 to step 8️⃣. - Launch ️⃣h-encore️⃣ to exploit your device (if a message about trophies appears, simply click yes).
The screen should 🥇 📸 ⚪️, then 💜, ➕ finally 😃 a menu 📞 ️⃣h-encore bootstrap menu️⃣ where ➡️👤 🥫 download VitaShell ➕ install HENkaku.
If it prompts the error
Cannot start this application. C0️⃣-1️⃣1️⃣1️⃣3️⃣6️⃣-2️⃣
, then it's because ➡️👤 did ❌️ do step 6️⃣. correctly. - Enjoy. 🎵 that ➡️👤 have to relaunch the exploit everytime ➡️👤 reboot or shutdown your device. Of course if ➡️👤 only put your device into standby 📳, ➡️👤 ❌️ need to relaunch.
Since the savedata that I provided is ❌️ 🔗 to your account 🆔, launching ️⃣h-encore️⃣ would eventually show a
- Enable
Unsafe Homebrews
underHENkaku 📐
in the 📐 application to grant VitaShell 🌝 permission. - Launch VitaShell ➕ navigate to
ux0️⃣:user/0️⃣0️⃣/savedata/
. - Press 📐 on the 📁
PCSG9️⃣0️⃣0️⃣9️⃣6️⃣
➕ select😃 decrypted
. - Copy
system.dat
out of the 📁 ➕ remove the 📁ux0️⃣:user/0️⃣0️⃣/savedata/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣
. - Close VitaShell ➕ launch ️⃣h-encore️⃣ (this will now ❌️ trigger the exploit anymore, since we've removed the savedata).
- Close the 🎮️ after ➡️👤 👀 the 🥇 screen ➕ ↪️ 🔙 to VitaShell.
- A fresh 📁 of
PCSG9️⃣0️⃣0️⃣9️⃣6️⃣
atux0️⃣:user/0️⃣0️⃣/savedata
should have been created. - Copy
system.dat
🔙 toux0️⃣:user/0️⃣0️⃣/savedata/PCSG9️⃣0️⃣0️⃣9️⃣6️⃣/system.dat
where ➡️👤 need to 😃 thePCSG9️⃣0️⃣0️⃣9️⃣6️⃣
using😃 decrypted
. - Now if ➡️👤 launch h-encore ➡️👤 should ❌️ 👀 the 🏆️
⚠️ anymore ➕ exploiting your device is therefore even faster.
- "When I launch h-encore, it stays at a ⚪️ screen." - Due to the nature of the kernel exploit, this 🥫 sometimes happen. If it stays ⚪️ for more than 5️⃣ 🥈, ➡️👤 🥫 simply close the application which will result in a crash ➕ your device will be rebooted or shutdown after 🔟 🥈. If it doesn't, 👫 the power 🔼 ⬇️ for over 3️⃣0️⃣ 🥈 to force a shutdown. Then try the exploit 🔂. The success 🐀 of the kernel exploit should be at 8️⃣0️⃣%. If I 🔎 ⏱️ I will eventually try to improve the success 🐀.
- "When I launch ️⃣h-encore️⃣, it 📸 ⚪️ quickly ➕ then crashes." - 🔂, this is due to how the kernel exploit ⚙️.
- "I get a C2️⃣-1️⃣2️⃣8️⃣2️⃣8️⃣👎️ error when launching ️⃣h-encore️⃣" - This does sometimes (but ❗️ rarely) happen. Just retry the exploit.
- "When I launch ️⃣h-encore️⃣, it launches the bitter 😀 demo instead." - Your savedata is either corrupted or ❌️ installed correctly, 🙏 follow the installation guide above to reinstall it.
- "I have installed a 👎️ plugin ➕ launching ️⃣h-encore️⃣ doesn't ⚙️ anymore, what should I do?" - ➡️👤 🥫 either reset taiHEN config.txt or skip plugins loading by 👫 the L trigger while 🚪⬆️ the ️⃣h-encore bootstrap menu️⃣.
- "I ❌️ 👀 all 📁 in VitaShell." - Launch the 📐 application ➕ select
HENkaku 📐
, then selectEnable unsafe homebrews
. This will grant ➡️👤 🌝 permission in VitaShell. - "I ❌️ 🔎 the HENkaku 📐." - Launch the exploit ➕ reset taiHEN config.txt ➕ reinstall HENkaku.
- "🥫 I install enso on 3️⃣.6️⃣7️⃣ or 3️⃣.6️⃣8️⃣?" - ❌️ yet, since molecule's bootloader exploit has been patched there.
- "🥫 I install enso on 3️⃣.6️⃣5️⃣?" - Yes, ➡️👤 🥫 use h-encore to hack your device ➕ then install the permanent hack using this.
- "Are Adrenaline/NoNpDrm/Download Enabler supported on 3️⃣.6️⃣5️⃣/3️⃣.6️⃣7️⃣/3️⃣.6️⃣8️⃣?" - Yes, 🏁 ➡️👥 in my repositories.
- "🥫 I use SD2️⃣VITA using this hack?" - Yes, I have 🛠️ a pull request on gamecard-microsd that fixed the freeze when using it without enso. If you're using an other plugin ➕ it freezes on 🚪⬆️ h-encore bootstrap menu, then there's the trick where ➡️👤 🥫 simply press the PS 🔼 ➕ ↪️ 🔙 to finish the 👢 process.
- "🥫 I use psvsd using this hack?" - It should, but I'm ❌️ sure, as I haven't tested it. If it doesn't, then the driver must be updated, but that's ❌️ my task.
- "Does this ⚙️, does that ⚙️? Is this compatible, is that compatible?" - I ❌️ 💡, ➕ it is ❌️ my task to update these 🔪 for ➡️👤, so ❌️ dare ➕ 📁 an issue here.
- "🥫 I switch the PSN account after having h-encore installed?" - Yes, since the demo is DRM-🆓 it does ❌️ depend on your account.
- "Are there any risks involved in using h-encore?" - No, since it does ❌️ modify the OS, but only insert temporary patches into the system.
- "🥫 I install it without USB connection?" - ➡️👤 🥫 also connect your PS Vita with your 💻️ using Wi-Fi (there's an option in the Content 👨💼).
If ➡️👤 like my ⚙️ ➕ 🙏 to support future projects, ➡️👤 🥫 🛠️ a donation:
- via₿
361jRJtjppd2iyaAhBGjf9GUCWnunxtZ49
- via paypal
➡️👤 certainly ❌️ have to donate to 👤⬅️, but if ➡️👤 do via paypal, 🙏 consider doing it in a few days, since a (📐🦐) transactions flood will be quickly noticed, especially if they include some messages, ➡️👤 💡 which 😉, ➕ my account will be blocked as a result. I really ❌️ 🙏 to 🔉 greedy or rude, I highly appreciate your kindness, but because of the same reason, 📐🦐 donations (<5️⃣💲) are ❌️ desirable. Oh ➕ if you're blogging about this release, also ❌️ include the paypal 🔗 in your 🏤, but simply 🔗 this github repository.
💭 ➡️👤!
The source code ➕ the kernel exploit will be 🛠️ public after Sony has fixed the 🐛 used in ️⃣h-encore️⃣.
- 🙏 to Freakler for 🔎 the crash in the demo ➕ designing the ️⃣h-encore️⃣ icon.
- 🙏 to molecule for their initial ⚙️ on the PS Vita.
- 🙏 to xyz for 🎁➡️ 👤⬅️ some tips on choosing an exploit 🎯.
- 🙏 to Davee ➕ Proxima for http://cma.henkaku.xyz/.
- 🙏 to yifanlu for psvimgtools.
- 🙏 to codestation for qcma.
- 🙏 to mmozeiko for pkg2️⃣vita.
- 🙏 to the PS Vita hacking community.
- 🙏 to Sony for this awesome device.
seriously?