Installing Exploit via Network with Original HDL/HDA Discs

This guide outlines a method of installing an Exploit package via Local Network with the use of ExecFTP and a pressed HDLoader or HDAdvance disc.

@PS_2

Published in 

Playstation 2 tutorials

 · 10 Oct 2020

Installing the Independence Exploit Using Retail HDLoader/HDAdvance Software via Network

By Cool438

If you wish to jump to a particular section, use the CTRL+F keystroke to search.

Contents:

• Introduction
  
• Step 1- Supplies
  
• Step 2- Formatting the Hard Drive with HDLoader/Advance
  
• Step 3- Making a Title.DB File
  
• Step 4- Installing ExecFTPs 0.69
  
• Step 5-The Memory Card Independence Exploit
  
• Frequently Asked Questions (FAQ)

Introduction

This tutorial is meant for people who have the ORIGINAL, RETAIL version of HDLoader / HDAdvance, yet do not own a mod chip, Codebreaker, AR MAX/Gameshark, a USB Flash Drive, swap magic or other ways of swapping discs, or any other peripheral to exploit the memory card . Following this tutorial will require much patience, but is well worth it in the end. Note that I am not responsible for any damage(s) that may occur as a result of this guide.

If you own HDLoader/HDAdvance and any of the items mentioned above, you may still use this way to exploit the memory card, although it will be much easier to use an alternative method.

Step 1- Supplies

• PS2 Console (Not Slimline)
• PS2 Official Network Adapter
• PS2 Memory Card with preferred 1.5mb of free space
• Original PSX Game(s) (Nearly Any)
• PS2 Hard Drive (Either the official 40 GB or a drive of your choosing)
• RETAIL HDLoader/HDAdvance Software
• Several files and programs which are included in this tutorial
• An FTP Client (You may use any one you choose but FlashFXP is highly recommended)
• A Computer to network to your PS2
• Networking Cables (Crossover) or Router/Hub/Switch with ethernet cables (Patch)

Step 2- Formatting the Hard Drive with HDLoader/HDAdvance

*Note - You may skip this step if your hard drive is already formatted.

• Insert the hard drive into the PS2 and screw it to the network adapter using a coin.
• Screw the network adapter in place.
• Turn on your PS2 and insert your retail HDLoader/HDAdvance.
• Read the message that appears and format the hard drive when prompted.
• After the formatting is complete, you may turn off your PS2.

Step 3- Making a Title.DB File

*Note- (See the bottom of this note for a Title.DB with 800 games) Personally, I would make my own Title.DB file instead of downloading an unknown, which may or may not work. This can be useful for those who want to make several exploited memory cards without generating a custom TITLE.DB file for each. This file takes up additional memory card space. Some report problems getting this to work, and many game's codes are not included . Exploitstation.com strongly urges you to generate your own TITLE.DB file . Here is the Title.DB with 800 games.

Here we will make a PSX “Trigger” disc in order to use the memory card exploit.

• Download Titleman Frontend
• Download IDGET
• Extract the Titleman Frontend and IDGet .rar archives.
• Insert your PSX game into your computer’s cd/dvd drive.
• Use IDGet to select the drive where you inserted the game.
• Click the GET button to retrieve the game’s ID.

• Open Titleman Frontend and ignore the startup message.
• Create a new Title.DB with the Create Title.DB button.
• Use the pulldown menu and type the game ID you just retrieved.
  
• Once typed, use the ADD EXEC button to add your game to the Title.DB.
  

-Your Title.DB will be placed in the same folder as Titleman Frontend.

*Note 2 - If you want, you can use more than one PSX Trigger disc IDs in your TITLE.DB. I would not recommend this, as it is very time consuming but you will have a higher rate of success for doing so.

*Note 3 - Not all games like being trigger discs. From my experience, two of my PSX games, Quake II and Duke Nukem: Time to Kill did not trigger the exploit.

Step 4- Installing ExecFTPs 0.69

We will be using ExecFTPs 0.69 to install the independence exploit via network. We will do this by installing ExecsFTP 0.69 to the PS2 hard drive and then using ExecFTPs 0.69 to FTP the necessary files to the memory card.

• Download the ExecFTPs CD image
• Download WinHIIP
• Extract WinHIIP and ExecsFTP.
  
• Shut down the computer. (We wouldn’t want to get electrocuted while working inside the computer… right?)
  
• If the hard drive is in your PS2, unscrew the network adapter with a coin and take the hard drive out carefully.
  
• Discharge your STATIC ELECTRICITY by touching a metal object.
  
• Open your computer case and install the hard drive. (To install the hard drive, look for the IDE* and power cable and insert it in to the hard drive after you secure it to the chassis.) See the note below if you have trouble locating the IDE cable.
• Change the hard drive jumper to SLAVE if you have to.
  
• Reassemble the computer case and boot up your computer.
  
• Navigate to the directory where you extracted WinHIIP.
  
• Open WinHIIP and use the Select Drive option to choose your hard drive, clearly marked with (PS2).
  
• Use the Add Image(s) option to install the ExecFTPs 0.69 image you downloaded earlier to the PS2 hard drive. I would recommend naming the image so you can easily distinguish it from your PS2 games and not get confused.
  

ex. (PROGRAM) ExecsFTP 0.69

• Shut down the computer and reinsert the hard drive back in the PS2. (Make sure you reconnect all cables, plugs, and screws you took out earlier) Also, make sure to change the jumper settings on the hard drive if you had to.

*Note- Locating the IDE Cable

The IDE Cable you’re looking for is the one with the smaller, finer pins, not the one that’s used for CD/DVD drives. Most IDE cables can hold 2 hard drives per cable. Make sure you attach the IDE cable to the PS2 hard drive WITHOUT disconnecting the original PC hard drive. If you have 2 hard drives on your computer already, unplug the IDE cable from the SLAVE hard drive (the one that doesn't have Windows on it) and connect it to the PS2 hard drive.

Step 5- The Memory Card Independence Exploit

In this step, we will be using ExecFTPs 0.69 to FTP the necessary files to the memory card.

-Turn on the computer to configure your network settings.

Simple Networking Instructions (Should work for most people)

• On your computer go to Start -> Settings -> Control Panel -> Network Connections -> Local Area Connection -> Properties -> Right Click on Internet Protocol (TCP/IP) and choose properties -> Fill in the radio button "Use the following IP address"
• Under IP Address type in 192.168.0.1.
• Under Subnet Mask type in 255.255.255.0.
• Make sure you leave Default Gateway section and the DNS Server section empty!
• Click OK.

*Note- If you are still having problems, view my

PS2 Networking tutorial.

• Attach the network cable to the PS2.
  
• Start up the PS2 with HDLoader/HDAdvance.
  
• Scroll to ExecFTPs and load it up.
  
• After ExecFTPs displays the PS2 Network information, load up your FTP Client. It should look something like this.
  

• Connect to 192.168.0.10 with your FTP client (no login or password; Passive mode turned off; Port 21). This tutorial uses FlashFXP as an example.

• Transfer the Title.DB to BADATA-SYSTEM ( USA; NTSC ) or BEDATA-SYSTEM ( Australia, New Zealand;PAL )
• Download an ELF launching program (ex. Keylauncher, LaunchELF, PS2Menu-K ) Without a launching program, you cannot run more than one ELF from your memory card.
  

*Note- This tutorial covers how to use LaunchELF.

LaunchELF

• Download LaunchELF at the ELF Library of ExploitStation
• Rename LAUNCH.ELF to BOOT.ELF.
  
• Transfer BOOT.ELF to same directory as your Title.DB file with your FTP client.
  

*Note- There is a tutorial on how to use LaunchELF here

• Shut off your PS2 and restart it with your PSX Trigger Disc.
  
• If the PS2 loads LaunchELF, CONGRATULATIONS!
  
• If it didn't load, you may have used a game that did not like being a Trigger disc. (see step 3's 2nd note)
  
• You may use the ExecsFTPs you installed on the hard drive earlier to transfer over any new ELF(S) or fix any settings.
  

You have just succeeded in the Memory Card Independence Exploit. Give yourself a pat on the back. ^_^

Frequently Asked Questions (FAQ)

Thank you BadServo for providing some of the Questions and Answers.

What is the “exploit?”

The “exploit” refers to a means of making the Playstation 2 video game console execute homebrew and unlicenced code without the use of a mod chip or swap disc. This is done by exploiting a flaw in the PS1 Driver contained on the PS2's internal ROM.

Why would the exploit interest me?

Any number of tasks can be accomplished using enthusiast coded utilities. With the right tools, one can play backup discs of legally owned games, play music and movie files, run games faster and more conveniently from an internal hard disc drive, use unofficial hard disc drives, manage memory cards and use USB devices to backup information. More ambitious users can even install the Linux operating system to their Playstation 2.

Help! I can't connect to my PS2 with my FTP client!

There are several solutions to this problem. Let's start with the simple ones first. Check to see if your network cables are properly plugged in. Next, check if your FTP client is connecting to the IP of the PS2 shown on port 21. Disable any firewalls that may interfere with the connection. Finally check your network settings.

Why can't I use my FTP Client to access my hd/ directory?

This is a limitation in ExecsFTPs. LaunchELF allows you to copy files over from your memory card, CD, and USB key over to your hard drive. Hopefully, ExecsFTPs will have HD support. Use this method until then.

Is there a premade Title.DB?

Download it here

Yes, this is a TITLE.DB file that has been pre-compiled to include 800+ disc codes. This can be useful for those who want to make several exploited memory cards without generating a custom TITLE.DB file for each. This file takes up addition memory card space. Some report problems getting this to work, and many game's codes are not included. Exploitstation.com strongly urges you to generate your own TITLE.DB file.

Can I use a router to install the exploit?

Yes, you can use a router. I use a Linksys router myself.Be sure to check your network settings and configure the router properly. Hook up an ethernet cable from the Ethernet card from your PC to the router and an ethernet cable from your router to your PS2 network adapter.

Can I use a crossover cable to install the exploit?

You cannot use the same network cable that you use to connect to your modem to connect to the PS2. You will need a "Crossover Cable." These are commonly available form electronics shops. They are designed to allow 2 client machines (i.e. PS2 & PC) to connect directly. Configure the IP to match ExecsFTP's settings.

I see corrupted files on my PS2 browser! Should I delete them?

If you exploited your memory card, do not delete these corrupted files! They are usually your installed ELFS and other files you installed on your memory card. The PS2 is only used to recognizing save game files and was not meant to boot ELFS and their respectable files. This is why the PS2 shows it as corrupted.