matem6/P2JB-Y2JB-Porting 2.5

Y2JB-P2JB V2.5

on GitHub

Release 2.5

• Y2JB 1.3 support. The payload now runs on Y2JB 1.3 as well as 1.4: title id resolves via TITLE_ID (1.4) or get_title_id() (1.3), and the ELF loader is delivered from the right place — Y2JB 1.4 reads elfldr_1320_v5.elf from the sandbox, Y2JB 1.3 reads elfldr_1320.elf from a USB stick at /mnt/usb0–/mnt/usb7.
• elfldr_1320_v5.elf bundled in the repo so Y2JB 1.3 users have the binary to drop on USB (Y2JB 1.4 users can ignore it — same file already ships inside the framework).
• ELF loader from Y2JB sandbox (no kexp). elfldr_1320 is now read directly from one of Y2JB's sandbox slots and spawned via elf_parse / elf_run, replacing the Y2JB 1.4 kexp shellcode delivery.
• Debug Settings menu enabled by p2jb itself via GPU DMA writes on the read-only kernel .data (security_flags, target_id, qa_flags, utoken_flags).
• Y2JB 1.3 supported alongside 1.4 (probes both elfldr_1320_v5.elf and elfldr.elf file names).