Uploaded August 2011 | Updated September 2026, 6 hours ago
A special thanks to LXShadow, who worked very hard to hack level editor's code in the game. Also, another special thanks to him for the editor guide (explanations you see at the beginning of each tutorial videos about the editor). It helped me a lot to understand how the editor works.
Français:
-Contenu de la vidéo en Anglais seulement-
La deuxième partie du guide de l'éditeur de niveau caché du jeu Crash Bandicoot 4: The Warth Of Cortex (Ps2). Cette partie présente l'éditeur d'animations (Anim Editor) qui demande un certain niveau de programmation en matière de jeux vidéo. Cette vidéo va vous montrer à quoi cet éditeur ressemble, mais vous ne verrez pas d'animations complètes puisqu'il est très difficile à utiliser. je vais quand même vous présenter beaucoup de ses fonctions. Une de ses fonctionnalités que je préfères est le Memory Card Test Bed. Il permet de faire toutes sortes de tests avec la carte mémoire de la Ps2. AVERTISSEMENT: CETTE FONCTION PEUT EFFACER DÉFINITIVEMENT ET IMPRÉVISIBLEMENT TOUTES CARTES MÉMOIRES ENTRÉS DANS N'IMPORTE QUEL SLOT DE LA PS2. Utilisez-là à vos propres risques... Alors, pour les programmeurs, voici une autre façon de redonner à notre bon vieux jeu de Crash une nouvelle vie!
English:
Part 2 of the guide for the hidden level editor found in Crash Bandicoot 4: The Wrath Of Cortex (Ps2). This part presents the Animation Editor (Anim Editor). For use it, you need to know a little bit of game programmation because this Anim Editor is really hard to understand and use. So, you will not see in this video a big animation because I dont know really how this editor works:S I will show even a lot of his features! My favourite one is the Memory Card Test Bed. it allow you to do some evil things with you Ps2 Memory Card. WARNING: VISIT THIS MENU WITH NO MEMORY CARDS PLUGGED IN YOUR PS2, BECAUSE THIS FEATURE CAN CRASH DEFINITIVELY AND UNPREDICTABLY YOUR MEMORY CARD. Use it at your own risks, a format could be required to use it again... So, for programmers, this Anim Editor is a good way to give a second life to our old Crash game!
A special thanks to LXShadow, who worked very hard to hack level editor's code in the game. Also, another special thanks to him for the editor guide (explanations you see at the beginning of each tutorial videos about the editor). It helped me a lot to understand how the editor works.
Français:
-Contenu de la vidéo en Anglais seulement-
La deuxième partie du guide de l'éditeur de niveau caché du jeu Crash Bandicoot 4: The Warth Of Cortex (Ps2). Cette partie présente l'éditeur d'animations (Anim Editor) qui demande un certain niveau de programmation en matière de jeux vidéo. Cette vidéo va vous montrer à quoi cet éditeur ressemble, mais vous ne verrez pas d'animations complètes puisqu'il est très difficile à utiliser. je vais quand même vous présenter beaucoup de ses fonctions. Une de ses fonctionnalités que je préfères est le Memory Card Test Bed. Il permet de faire toutes sortes de tests avec la carte mémoire de la Ps2. AVERTISSEMENT: CETTE FONCTION PEUT EFFACER DÉFINITIVEMENT ET IMPRÉVISIBLEMENT TOUTES CARTES MÉMOIRES ENTRÉS DANS N'IMPORTE QUEL SLOT DE LA PS2. Utilisez-là à vos propres risques... Alors, pour les programmeurs, voici une autre façon de redonner à notre bon vieux jeu de Crash une nouvelle vie!
English:
Part 2 of the guide for the hidden level editor found in Crash Bandicoot 4: The Wrath Of Cortex (Ps2). This part presents the Animation Editor (Anim Editor). For use it, you need to know a little bit of game programmation because this Anim Editor is really hard to understand and use. So, you will not see in this video a big animation because I dont know really how this editor works:S I will show even a lot of his features! My favourite one is the Memory Card Test Bed. it allow you to do some evil things with you Ps2 Memory Card. WARNING: VISIT THIS MENU WITH NO MEMORY CARDS PLUGGED IN YOUR PS2, BECAUSE THIS FEATURE CAN CRASH DEFINITIVELY AND UNPREDICTABLY YOUR MEMORY CARD. Use it at your own risks, a format could be required to use it again... So, for programmers, this Anim Editor is a good way to give a second life to our old Crash game!
![De Rebus Antiquis - iPad 4 (P102AP) iOS 7.x iBoot Exploit [Demo]](https://i.ytimg.com/vi/d6b_G1gxu-Q/mqdefault.jpg "De Rebus Antiquis - iPad 4 (P102AP) iOS 7.x iBoot Exploit [Demo]
This is a demo of a complete De Rebus Antiquis iBoot exploit setup running on iPad 4 (P102AP). Once iBoot re-runs after the exploitation, it mounts a secondary HFS+ volume that contains a new bootloader image and executes it. In this demo, I simply used the same iBoot as the signed one, except running unsigned with custom patches and verbose boot enabled.
Im currently working on a complete write-up about De Rebus Antiquis iBoot exploit. Once it will be released, you should get most of the necessary knowledge to implement what you see in this video. See my personal blog here, https://www.pmbonneau.com/ for more details.
Many thanks to @dora2ios (Twitter) for help with some issues I had while debugging.")
![HFS+ Heap Buffer Overflow - iPad 2 (K94AP) iOS 5.x iBoot Exploit [Demo]](https://i.ytimg.com/vi/dJbakxWSy18/mqdefault.jpg "HFS+ Heap Buffer Overflow - iPad 2 (K94AP) iOS 5.x iBoot Exploit [Demo]
This is a post-exploitation demo of an HFS+ heap buffer overflow in iOS 5.x iBoot, running on iPad 2nd (K94AP). One particular use case of an iBoot exploit such as this one is the ability to downgrade or upgrade the device to any iOS version as long as it can run on it. This iPad 2nd is downgraded to iOS 5.x using previously saved SHSH blobs, so when powered-on, the signed iOS 5.x iBoot is executed. An HFS+ volume is specifically crafted to trigger an heap buffer overflow when iBoot attempts to mount it. Then, we get control over the PC register and eventually execute a custom payload which jumps to a completely new patched iBoot image. From there, additional unsigned bootchain images are executed and so, to fully boot iOS. In this video, iPad start up with the iOS 5.0.1 signed bootchain, exploit is triggered, then jumps to an iOS 7.1.2 bootchain.
See the complete write-up I did about this iBoot exploit on my personal blog here, https://www.pmbonneau.com/ios5-iboot-hfs-hbo/
This video was originally posted on X (Twitter) here, https://x.com/ShadowLee19/status/1074533504610918400?s=20")
