PlayStation Vita

## H-Encore

The H-Encore is a port of the HENkaku exploit to the 3.63+ versions and it's compatible with all the PSV systems.

It allows you to do everything that HENkaku does but on newer firmware versions (up to 3.68).

### Requirements:

1. For the PSV 1000 you need a memory card, no matter the size.
2. A computer (Windows or Mac, if you have Linux you can use a VM or build it yourself)

### Installation (Windows or Mac):

1. Go to https://github.com/soarqin/finalhe/releases and download your OS version
2. If you're on Windows, please install QcmaDriver\_winusb.exe or the QCMA, if you already have it, just go to the next step
3. Double-click on "FinalHE"
4. Just follow the instructions on screen

### Installation (Linux):

1. First of all, open a Terminal and type `sudo addrepo -f http://download.opensuse.org/repositories/home:/seilerphilipp/openSUSE\_Leap\_15.0/`
2. Install the package using `sudo zypper install finalhe`
3. Now you can open FinalHE just by typing "FinalHE" on your terminal. If you're using Leap 42.3 just replace the version in the url with 42.3.

### Usage:

1. When you open the H-Encore bubble, you'll see a black screen with 4 options, for installing HENkaku just press "Exit" and to install VitaShell just click on the "Install VitaShell" option.
2. You need to re-install HENkaku by opening the H-Encore bubble everytime you restart the Vita.

## HENkaku

First Vita lv2 kernel exploit. **Only works on 3.60**, compatible with PSV, PSV Slim and PSTV.

Allows unsigned programs, package installation, filesystem access and provides a PSP-like plugin system.

### Requirements:

1. For PSV 1000: A memory card.
2. A PSV, PSV Slim/2000 or a PSTV on **firmware 3.60**
3. Internet connection and access to the Vita web browser

### Installation:

1. Open the web browser on your PSV
2. Go to henkaku.xyz

It will download and install some packages the first time you run it, or when there is an update. This will not take long. If the system freezes/crashes, restart the system and try again.

**You need to do this every time you restart your system.** That is, whenever it turns off and on again. Putting it into sleep and waking it doesn't count. For an offline method, look below.

## PSP emulator

### Info

There are three kinds of PSP mode exploit available for the PS Vita

* Usermode, which can play most or all PSP homebrews, but not retail PSP or PS1 games. Uses a custom menu via Vita Half Byte Loader.
* Kernel mode, which enables full control of the PSP emulator. This can be used for an almost complete PSP CFW experience. Can play PSP games, and PS1 games but without sound. The two available options are ARK or TN-V. TN-V recreates the PSP XMB interface, but ARK has more flexibility with regards to where it can load files from, which is a good bonus from 3.50 onward.
* PS1 mode, which enables playing PS1 games with near full compatibility and sound.

All three require some kind of entrypoint exploit, usually a modified save file, copied to a legitimate copy of a game which you must buy from PSN.

To copy content between your Vita and PC, you'll need the CMA software. However, the standard CMA requires that you update your Vita to the latest available firmware to use it. To avoid this, and keep your exploit, use QCMA.

(DEAD LINKS, google it) ~~Use http://www.zload.net/bilder/PSVita/VitaExploitChart.png to determine which games are compatible with your Vita's firmware. You can get the files for every released exploit here http://zload.net/v2/archives/vita/~~

### Tutorials

#### Setup

The method is essentially the same for TN-V, ARK and VHBL. Follow the steps here and replace the game name etc. as appropriate for the one you're using http://wololo.net/talk/viewtopic.php?f=65&t=39736

Some games require you to go in game and do something to trigger the exploit, eg, load a savegame, navigate to a certain menu, while a few will load the exploit straight away upon starting up. Numblast is particularly notable for being cheap, small and an instant loader. The savefile archive you download should contain a readme with the details for your game.

#### Installing content with TN-V

* Homebrews (<3.50) http://wololo.net/2013/12/18/tn-v4-how-to-install-homebrews-installment-1-of-3/
* Homebrews (3.50+) http://wololo.net/2015/04/23/install-homebrew-tn-v11/
* ISOs/CSOs/PS1 http://wololo.net/2013/12/19/tn-v4-how-to-install-isos-csos-and-ps1-games-installment-2-of-3/
* Themes and plugins http://wololo.net/2013/12/20/tn-v4-how-to-install-plugins-and-ctf-themes-installment-3-of-3/

#### Installing content with ARK

* Games and homebrew http://wololo.net/2013/01/15/the-ark-guide-tutorials-tricks-tips-and-more/
* Plugins for ARK http://wololo.net/talk/viewtopic.php?f=58&t=26282
* ONEMenu http://wololo.net/talk/viewtopic.php?f=58&t=42430

#### Installing content with VHBL

* Much the same as with ARK, just zip up, copy over and press X to install

### Ninja Releases

This is the term used for wololo.net's gradual rollout of new exploit games. The name of the game is quietly announced to trusted members of /talk when they view the forums. Slowly the name is revealed to more and more users, this usually lasts a week or two at least before a public announcement. This is because, usually within days of a public announcement, Sony pulls the named game from the PS Store until a new firmware update rolls out that patches it. By gradually revealing, they ensure that as many people as possible have the opportunity to get the game before it's pulled.

## Bubbles

On 3.36 and lower, it's possible to create your own Live Area Bubbles of PSP content, including homebrews. The guide to make your own is here http://wololo.net/2015/01/28/how-to-detailed-tutorial-about-creating-custom-psp-game-bubbles-for-ps-vita/

And you can find almost-complete files for Bubbles for things like TN-V (3.18 and 3.36)and ARK (3.18 and 3.36), you only need to digitally sign them with whichever base game you are using.

Note that 3.36 added some protection to the PSP/GAME folder, and while it's easily circumvented by renaming the folders, you need to be sure you remember to rename them back again. If you forget, you can fix it ike this http://wololo.net/talk/viewtopic.php?p=374303

## Package Installer

Available on 3.18 and lower, you can call the Package Installer and use it to install any DRM free .pkg files, including demos, out of region apps, etc.

To use it, set up the email app with an address, then send an email to it containing <a href="psgm:open?titleid=NPXS10031">OPEN PKG INSTALLER</a>

If you have an account on http://wololo.net/talk, you can use http://wololo.net/talk/piu.php to send you the email

## Webkit

On 3.36 and below, there are publicly available webkit exploits that enable code execution via ROP. Currently this is all but useless to anyone who isn't a developer, but as an entrypoint into native code execution on the Vita, it could later on be useful to the average user, and is one more reason to not update. You can check https://github.com/Hykem/vitasploit for the latest developments from it.

## PS Mobile

Yifanlu, known for so far being the only person to have succeeded in finding a true native exploit in the Vita's system software, recently made a strong suggestion for people to sign up to PS Mobile, with the service due to be closed down soon. He hasn't actually specified that there is a hack behind his suggestion, but the specificity of his wording seems to suggest it.

Normally you would need to update to the latest Vita firmware to install the Dev app, but if you have access to a second Vita, or a PS3 either running CFW or with a known IDPS, it is possible to install the Dev app and keep your Vita on a lower firmware.