TinyBacklog/relapse-exploit-docker
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow BlackBox catalog DNS endpoints

Browse Source
This commit is contained in:
kadinho
2026-10-07 22:20:42 +01:00
parent d1e39243a6
commit 74a412ded8
5 changed files with 50 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+14 -5
View File
@@ -35,14 +35,16 @@ The maintained LAN deployment runs on `net-utils01` from
Configure the PS5 with primary DNS `192.168.20.30` and secondary DNS `0.0.0.0`.
The DNS gateway resolves `manuals.playstation.net` locally and forwards only
`homebrew.page`, `itsplk.github.io`, `store.spectrumlibrary.online`,
`api.github.com`, `github.com`, and `release-assets.githubusercontent.com` to its
configured upstream resolver. These names cover the homebrew store, the official
PS5 Payload Manager catalog and downloads, and Spectrum Library's fixed API and
update endpoints; every other name receives NXDOMAIN.
`api.github.com`, `github.com`, `raw.githubusercontent.com`,
`release-assets.githubusercontent.com`, `prosperopatches.com`,
`cdn.prosperopatches.com`, `image.api.playstation.com`, and
`gmedia.playstation.com` to its configured upstream resolver. These names cover the
homebrew store, PS5 Payload Manager, Spectrum Library, and BlackBox's catalog,
updates, and artwork; every other name receives NXDOMAIN.
The console needs LAN access to DNS UDP/TCP 53 and TCP 80, 443, and 8000 on
`192.168.20.30`. For the online applications it also needs WAN egress on TCP 443 to
the six allowlisted domains; no WAN ingress rule is required. The server needs DNS
the allowlisted domains; no WAN ingress rule is required. The server needs DNS
egress on UDP/TCP 53 to its configured resolver (`1.1.1.1` by default).
The Payload Manager supports arbitrary custom repository URLs. Those hosts are not
@@ -56,6 +58,13 @@ manifest, and package URLs; these unknown hosts remain blocked until observed an
reviewed. The Spectrum API returned HTTP 502 during the 2026-10-07 review, so DNS
availability alone does not guarantee that its catalog will load.
BlackBox v1.0.5 uses `raw.githubusercontent.com` for its catalog and update JSON,
the existing GitHub hosts for its own release files, and the Prosperopatches and
PlayStation media hosts for artwork. Its catalog also advertises third-party game
files from Archive.org and Vikingfile. Those download providers are deliberately
not allowlisted: browsing, artwork, and application updates work without granting
the console access to unreviewed game files that frequently lack SHA-256 hashes.
To deploy a reviewed commit:
```sh