There has been alot of development going on around the PS3 since the discoveries of the PS3Xploit (webkit exploit) on 4.81 OFW, first we seen the IDPS dumper (4.81/2 OFW) released with some big news & hope to come along with it, like a Flash Writer (downgrader) for OFW, so if you have been reluctant to buy a Hardware Flasher such as the E3 Flasher and bust open your PS3, but have been wanting to get your PS3 FAT(PHAT) Console and your Downgradable PS3 SLIM Models (up to & including 25xx models with minimum installable version <= 3.56) on Custom Firmware, then here is your chance with a 100% SOFTWARE SOLUTION thanks to the work of PS3Xploit Team ( @bguerville, @esc0rtd3w & W) along with contributions from new team member @habib to help expedite this release. Essentially what this Software Solution does is write a patch to the CoreOS (on NOR/NAND Chip) and when the PS3 Console is then rebooted you can install a Custom Firmware directly, So downgrading back to 3.55 is not required in the process, rather "Direct OFW to CFW patching" is done to allow for Custom Firmware Installation. Since this exploit is executed from 4.82 OFW, you can only install to a 4.82 CFW, HOWEVER if you wish to use an earlier firmware such as REBUG 4.81 for example, once on 4.82 CFW you must TOGGLE QA using a toggle tool, which allows CFW user's to freely switch CFW version from past and present. Read more about this in the Frequently Asked Question (FAQ) and more info in the details provided:
Flash Writer Compatible with these PS3 Models:
Important -- AVOIDING A BRICK
As noted by esc0rtd3w: YOU NEED TO BE ON OFW 4.82 TO USE WRITER....PERIOD! DO NOT DO THIS!!!!!!!!!!!!!
1) Try using a LAN connection or a solid WiFi connection during exploitation. A weak signal can cause problems.
2) If the exploit takes more than 5 minutes to work, reload page, browser, or restart console and try again.
3) If you are using a LAN connection and experience network issues, make sure all cables to router are in working order.
Steps:
1. Setup a small Web server on pc or smartphone. A custom miniweb application has been created by Aldo, and supplied to host files if you would like to use it. Don't come to us for explanations about how to run a http server though. Google it.
2. Extract the files from release to your http server root folder.
3. Copy the "flsh.hex" file from release folder to root of flash drive.
4. Put a FAT32 USB key in port closest to BD Drive (/dev_usb000).
5. DOUBLE-CHECK your flash drive on XMB to make sure it shows up under Music, Photos, Videos, etc.
6. Open the PS3 browser File Address window, write the IP address of your server (and the port if not 80) & press the Start button.
7. Select the appropriate button for your console and wait for PS3 to power down. DO NOT STOP THE PROCESS ONCE STARTED!!
8. Once PS3 has powered down, reboot console and install CFW matching OFW version. If installing through XMB does not work, boot to recovery and install.
PS3 4.81/4.82 NAND/NOR Flash Dumper v1.0
THE CORRECT FIRMWARE VERSION BETWEEN 4.81 and 4.82 IS AUTOMATICALLY SELECTED!
PLEASE READ FIRST:
1) Try using a LAN connection or a solid WiFi connection during exploitation. A weak signal can cause problems.
2) If the exploit takes more than 5 minutes to work, reload page, browser, or restart console and try again.
3) If you are using a LAN connection and experience network issues, make sure all cables to router are in working order.
Steps:
1. Setup a small Web server on pc or smartphone. A custom miniweb application has been created by Aldo, and supplied to host files if you would like to use it. Don't come to us for explanations about how to run a http server though. Google it.
2. Extract the files from release to your http server root folder.
3. Put a FAT32 USB key in port closest to BD Drive (/dev_usb000).
4. DOUBLE-CHECK your flash drive on XMB to make sure it shows up under Music, Photos, Videos, etc.
5. Open the PS3 browser File Address window, write the IP address of your server (and the port if not 80) & press the Start button.
6. The dumper will detect the firmware version of your console automatically & setup the code appropriately so there is only one version for both 4.81 & 4.82. Run until ps3 beeps & shutdown. The flash dump should be a 16MB file on your USB drive as dump.hex.
Frequently Asked Questions & Additional Notes
Will this jailbreak my SuperSlim?
Download Link Below :
Download python
Download capstone
NOR_dumper_release_1.0_PS3Xploit
NOR_NAND_writer_release_1.0_PS3Xploit
NOR_NAND_writer_release_1.0_PS3Xploit_Consoleinfo.be_Fix
PS3 Ferrox Custom Firmware 4.82
- Supports FAT Models Axx/Bxx/Cxx/Exx/Gxx/Hxx/Jxx/Kxx/Lxx/Mxx/Pxx/Qxx
- Supports SLIM Models 2xxx (minver 3.56 or lower ONLY, check with minverchk.pup)
Important -- AVOIDING A BRICK- Verify flsh.hex file on a flash drive and in the far right USB slot!
- 4.82 flsh.hex MD5: 8E156C99101BF36EC3EDB832982AE46D
- DO NOT USE ON CFW (Custom Firmware) (Only Supports OFW)
- DO NOT USE ON PS3 Models 3xxx/4xxx (aka SuperSlims / Late Slim models) you will brick those console.
As noted by esc0rtd3w: YOU NEED TO BE ON OFW 4.82 TO USE WRITER....PERIOD! DO NOT DO THIS!!!!!!!!!!!!!- DO NOT RENAME THE flsh.hex FILE!!!!
- VERIFY THE MD5 WHILE THE FILE IS ON THE USB STICK BEFORE PROCEEDING!!!
- VERIFY THE USB STICK SHOWS UP UNDER XMB
- It's essential not to flood the browser memory with junk before running the exploit. The reason for this is that due to javascript core memory usage limitations we are scanning several times a small range of browser memory (a few Mb) to find some essential data in RAM, if the memory is flooded then the range to scan becomes much larger & the probabilities that our data is found in the smaller range decrease dramatically..
- So in short, never use the browser or set a homepage you cancel before running the exploit!
- If you need to, set the homepage to 'blank', close the browser then reopen it to start the flash writer.
- Supports Direct OFW to CFW patching for All Phat and 2xxx Slim (minver 3.56 Dec 2010 and lower)
- the NOR/NAND writer will just copy 3Mb of CoreOS data to both ros0 & ros1 in the flash memory.
- There is only one version released for 4.82. The same hex patch file can be used on nor & nand.
- It's as safe as possible, with a check for usb device & patch file making the exploit hang instead of corrupting flash if file is not found.
- In case of corruption (extremely rare but could always happen), it's only a partial brick because no per console info ever gets erased so a hardware flasher could still be used if ever a recovery reboot was impossible.
1) Try using a LAN connection or a solid WiFi connection during exploitation. A weak signal can cause problems.
2) If the exploit takes more than 5 minutes to work, reload page, browser, or restart console and try again.
3) If you are using a LAN connection and experience network issues, make sure all cables to router are in working order.
Steps:
1. Setup a small Web server on pc or smartphone. A custom miniweb application has been created by Aldo, and supplied to host files if you would like to use it. Don't come to us for explanations about how to run a http server though. Google it.
2. Extract the files from release to your http server root folder.
3. Copy the "flsh.hex" file from release folder to root of flash drive.
4. Put a FAT32 USB key in port closest to BD Drive (/dev_usb000).
5. DOUBLE-CHECK your flash drive on XMB to make sure it shows up under Music, Photos, Videos, etc.
6. Open the PS3 browser File Address window, write the IP address of your server (and the port if not 80) & press the Start button.
7. Select the appropriate button for your console and wait for PS3 to power down. DO NOT STOP THE PROCESS ONCE STARTED!!
8. Once PS3 has powered down, reboot console and install CFW matching OFW version. If installing through XMB does not work, boot to recovery and install.
PS3 4.81/4.82 NAND/NOR Flash Dumper v1.0THE CORRECT FIRMWARE VERSION BETWEEN 4.81 and 4.82 IS AUTOMATICALLY SELECTED!
PLEASE READ FIRST:
- It's essential not to flood the browser memory with junk before running the exploit. The reason for this is that due to javascript core memory usage limitations we are scanning several times a small range of browser memory (a few Mb) to find some essential data in RAM, if the memory is flooded then the range to scan becomes much larger & the probabilities that our data is found in the smaller range decrease dramatically....
- So in short, never use the browser or set a homepage you cancel before running the exploit! If you need to, set the homepage to 'blank', close the browser then reopen it to start the flash writer.
- Supports Dumping NOR on both 4.81 & 4.82.
- bguerville tried to produce a release that was easy to port & he succeeded. Anyone able to search for offsets in IDA can add support to any firmware version in the dumper in a matter of minutes.
- For technical reasons, the Full NAND dumper release is postponed. We will now be focusing on self execution & if we succeed there will be no need for the extra ROP work to do the NAND dumper. If we fail, I will finish it in ROP.
- The dumper will be released in a form extremely easy to port so others can tweak it to their heart content with outcomes having to face complicated searches in the big unicode strings
- A lot of time has been invested into making the javascript + UI more efficient, as well as the trigger phase faster & more stable. I hope you enjoy the result.
1) Try using a LAN connection or a solid WiFi connection during exploitation. A weak signal can cause problems.
2) If the exploit takes more than 5 minutes to work, reload page, browser, or restart console and try again.
3) If you are using a LAN connection and experience network issues, make sure all cables to router are in working order.
Steps:
1. Setup a small Web server on pc or smartphone. A custom miniweb application has been created by Aldo, and supplied to host files if you would like to use it. Don't come to us for explanations about how to run a http server though. Google it.
2. Extract the files from release to your http server root folder.
3. Put a FAT32 USB key in port closest to BD Drive (/dev_usb000).
4. DOUBLE-CHECK your flash drive on XMB to make sure it shows up under Music, Photos, Videos, etc.
5. Open the PS3 browser File Address window, write the IP address of your server (and the port if not 80) & press the Start button.
6. The dumper will detect the firmware version of your console automatically & setup the code appropriately so there is only one version for both 4.81 & 4.82. Run until ps3 beeps & shutdown. The flash dump should be a 16MB file on your USB drive as dump.hex.
Frequently Asked Questions & Additional NotesWill this jailbreak my SuperSlim?
- NO, (PS3Xploit has strong possibility to eventually evolve into a HEN style exploit (that aspect will take some additional development and time, at this time PS3Xploit exploit has not evolved enough)
- Yes, however you must Toggle QA Flag. Once the Token is activated you have the ability to then freely jump CFW versions. (see below for details)
- When on a CFW download & install QA TOGGLER (Standalone) (Note: Will just show a black screen then reboot the PS3)
- You must have a PS3 Console that has a Factory Firmware of 3.56 and below.
- To check, its easy with this simple tool for OFW, Download minverchk.rar
- Then place the .pup file on a FAT32 USB Flash Drive in a PS3/UPDATE folder (create path if needed)
- Now on the PS3 XMB goto Setting ->> System Update >>> Update via Media Storage
- Once shown on the list select the PUP and install, shortly after
there will be a message showing the factory firmware the console was
shipped,
- For this we want 3.56 and below.
- ANYTHING HIGHER THEN 3.56 IS NOT ABLE INSTALL A CFW. Sorry this will not work for your console, but there could be a HEN (Homebrew Enabler) possible for running homebrew
Console Compatibility list :
Download Link Below :
Download python
Download capstone
NOR_dumper_release_1.0_PS3Xploit
NOR_NAND_writer_release_1.0_PS3Xploit
NOR_NAND_writer_release_1.0_PS3Xploit_Consoleinfo.be_Fix
PS3 Ferrox Custom Firmware 4.82
if You Have Any Problem To Run The Server On Your Computer Try This Online Server https://goo.gl/jaZDAk
Sign up here with your email
ConversionConversion EmoticonEmoticon