URI
URI calls are system internal calls. They are used on PS Vita and PS4.
Supported URIs
The following list of URI calls supported by the PS Vita is not exhaustive.
To merge from [1].
settings_dlg: settings_dlg:updater settings_dlg:updater::via_downloader settings_dlg:updater::com settings_dlg:updater::via_game settings_dlg:updater::via_mc settings_dlg:wifi::wps settings_dlg:wifi::manual settings_dlg:signin settings_dlg:psn::account_information settings_dlg:psn::profile settings_dlg:psn::twitter settings_dlg:custom_themes settings_dlg:console_info::psm settings_dlg:reset::format_mc_for_promote !!!!INSTANTANEOUSLY FORMAT THE MEMORY CARD!!!!! settings_dlg:debug::crash_test ---> Crashes the System settings_dlg:sandbox::generic_page1 ---> Error settings_dlg:psn::profile::account_panel_selection (DEX only?) photo:delete photo:browse?category=ALL music:delete music:browse?category=ALL video:delete video:browse?category=ALL video:browse?category=ALL&content_id=21617...... email:?body=LoremIpsum&attach=ux0:/calendar/vitacal.ics scecalendar:type=schedule_detail&uid=201607301930002472&date=20160730 psnreg: pscloud: psns:demo psvp:play?url= psnmsg:chatview psns:browse?category= psns:browse?product= psns_in_game:browse?category= psns_in_game:browse?product= psns:redeem?code1=XXX&code2=XXX&code3=XXX
Entrypoints
From Web Browser
From the PS Vita we browser, it is possible to execute certain URIs, for example the PS Store ones as shown in this video. The web browser has to be redirected to that URI and there are multiple ways: clicking on an anchor <a href=="">click here</a>
contained in a HTML page, a direct input of the URI into the URL address bar of the web browser, or by clicking a bookmark pointing to that URI.
From Email application
This works on System Software version 2.10-3.74. This might work on System Software version 2.00-2.06.
From Calendar application
This works on System Software version 3.30-3.74.
From the LiveArea of an application
Silica made a PoC of an evil Harry Potter application whose LiveArea contained a link to the URI that formats the Memory Card.
- See the target markup in the PS Vita LiveArea XML
From app.db modification
The installed application database located at ur0:shell/db/app.db is a SQL database that contains much information, especially the URI calls supported by a specific application. For example, the SUPPORT_URI of the Email application is mailto:
. Hence any URI call to mailto: opens the Email application. It is then up to the Email application to parse the arguments provided with the URI. See [2].
The SUPPORT_URI field in app.db comes from the SUPPORT_URI field of the param.sfo files contained in application folders. It is contained in PKG files and in Game Cartridges, as well as in System applications data folders.
Applications
FailMail
URI calls were involved in a lot of primitive hacks of the PS Vita, notably the FailMail exploits.
See its impact as file read/write to some partitions of the internal eMMC, of the Memory Card and of Game Cartridges.
Package Installer
A URI allows a retail PS Vita to launch the Package Installer which is an application for Test/Dev Kits and internal consoles only. This was patched since System Software ?3.30? by adding a target check (IsDEX, IsTool, etc.) in the Package Installer source code.
uriCaller
uriCaller is an homebrew application to call an arbitrary URI on a PS Vita or PS TV running a HEN or an activated Dev/Test Kit.