NIDS Explained смотреть онлайн

What are they:

Function names, variables, etc, but obfuscated. Known as (N)ame(ID)entifiers.

How to get a nid from:

PSP

sha1 hash of string of function name or variable , grab first 4 bytes, endian swap 32

Warning: Some nids have to be manually guessed! From 3.70 at least. there is no solution to find the suffix (yet)

PSVita

sha1 hash of string of function name or variable , grab first 4 bytes, endian swap 32

Warning: Some nids have to be manually guessed! there is no solution to find the suffix (yet)
Warning2: nids like module_start, etc(NONAME) have suffix c1b886af5c31846467e7ba5e2cffd64a as key


PS3

sha1 hash of string of function name plus binary key 6759659904250490566427499489741A in hex,
grab first 4 bytes, endian swap 32

Warning: nids like module_start, etc (NONAME) have suffix bc5eba9e042504905b64274994d9c41f as binary key

PS4

sha1 hash of string of function name or variable plus binary key 518D64A635DED8C1E6B039B1C3E55230
grab first 8 bytes?, endian swap 64? and finally convert to sony's special base64
(i believe replace - with = for charset)


Bruteforcing:

Using custom hashcat.

Algos:

https://github.com/zecoxao/sce_symbols/blob/main/ps3_names2nid.py (PS3, Python)

https://github.com/zecoxao/sce_symbols/blob/main/ps4_names2nid.py (PS4, Python)

Good links:

https://github.com/sajattack/nidcracker (also excelent bruter but for psp)
http://uofw.github.io/upspd/docs/SilverSpring_Blog/my.malloc.us/silverspring/nid-explained/index.html
https://github.com/SocraticBliss/ps4_module_loader (aerolib.csv)
https://github.com/idc/ps4libdoc
https://github.com/clienthax/Ps3GhidraScripts (nids.txt)
https://github.com/vitasdk/vita-headers/ (db folder)