TinyBacklog/relapse-exploit-docker
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow BlackBox catalog DNS endpoints

Browse Source
This commit is contained in:
kadinho
2026-10-07 22:20:42 +01:00
parent d1e39243a6
commit 74a412ded8
5 changed files with 50 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/HANDOFF.md
+21 -7
View File
@@ -72,8 +72,10 @@ The same Compose project also runs `ps5-guide-gateway`, bound specifically to
`192.168.20.30` on DNS UDP/TCP 53 and HTTP/HTTPS TCP 80/443. It resolves
`manuals.playstation.net` locally and forwards only `homebrew.page`,
`itsplk.github.io`, `store.spectrumlibrary.online`, `api.github.com`, `github.com`
and `release-assets.githubusercontent.com` to the configured upstream resolver
(`1.1.1.1` by default). Every other name receives NXDOMAIN. The HTTP/HTTPS gateway redirects the User Guide to
`raw.githubusercontent.com`, `release-assets.githubusercontent.com`,
`prosperopatches.com`, `cdn.prosperopatches.com`, `image.api.playstation.com` and
`gmedia.playstation.com` to the configured upstream resolver (`1.1.1.1` by
default). Every other name receives NXDOMAIN. The HTTP/HTTPS gateway redirects the User Guide to
`http://192.168.20.30:8000/`.
Port `8080` on the host is already used by `unifi-network-application`; do not move
@@ -180,12 +182,14 @@ accept the self-signed certificate warning in the User Guide.
The gateway provides allowlisted recursive DNS forwarding only for `homebrew.page`,
`itsplk.github.io`, `store.spectrumlibrary.online`, `api.github.com`, `github.com`
and `release-assets.githubusercontent.com`. Only those names and
`raw.githubusercontent.com`, `release-assets.githubusercontent.com`,
`prosperopatches.com`, `cdn.prosperopatches.com`, `image.api.playstation.com` and
`gmedia.playstation.com`. Only those names and
`manuals.playstation.net` resolve; all other names receive NXDOMAIN. This permits
the reviewed fixed endpoints of the homebrew store, PS5 Payload Manager and Spectrum
Library while continuing to block PSN and update resolution. The PS5 sends DNS only
to `net-utils01`; that host must be allowed to reach the configured upstream
resolver on UDP/TCP 53.
the reviewed fixed endpoints of the homebrew store, PS5 Payload Manager, Spectrum
Library and BlackBox while continuing to block PSN and update resolution. The PS5
sends DNS only to `net-utils01`; that host must be allowed to reach the configured
upstream resolver on UDP/TCP 53.
The Payload Manager review used upstream commit
`e4e72dc9d831dd09ee8fabc222ad1e7f5139050e` and the official catalog current on
@@ -203,6 +207,16 @@ identified `store.spectrumlibrary.online` for API/catalog access and
and cover hosts, which are not allowlisted without review. The Spectrum API returned
HTTP 502 during the 2026-10-07 review. Release 1.4.9 contained only a 4-byte
`Void.pkg`, so 1.4.8 was the last usable artifact available for static analysis.
The BlackBox review used repository commit
`80fa07c9cb5319b3ca4b906b9381e1cca2a91295` and the published v1.0.5 ELF. Its
SHA-256, `152dda87ec64899270db61c61676b62e5d29a46a67523299b2719a81d4486235`,
matched the release sidecar. Static analysis identified `raw.githubusercontent.com`
for catalog/update manifests, the existing GitHub hosts for application releases,
and Prosperopatches plus PlayStation media hosts for artwork. Archive.org,
Vikingfile and their download infrastructure are intentionally excluded: they serve
third-party game files, many catalog entries have no SHA-256, and those hosts are
not required for catalog browsing or BlackBox updates.
The PS5 was previously identified as `192.168.10.26`; requests from
`192.168.10.6` seen at that time were from a different client. Those addresses
are historical and must not be used as the current payload destination.