Join Us and become a Member for a Verified Badge to access private areas with the latest PS4 PKGs.
PS3 Jailbreaking       Thread starter PSXHAX       Start date Nov 24, 2017 at 1:35 AM       876      
Status
Not open for further replies.
Following their PS3 IDPS Dumper v0.2.3 for 4.82 OFW update, the PS3Xploit Team of @bguerville, @esc0rtd3w, @smhabib and W released both a PlayStation 3 NOR / NAND Software Flash Writer and NOR Dumper to downgrade consoles without the need of a hardware flasher allowing those on Official Firmware (OFW) 4.82 to install Custom Firmware (CFW) finally. :love:

Download: NOR_dumper_release_1.0_PS3Xploit.zip (106 KB) / NOR_NAND_writer_release_1.0_PS3Xploit.zip (3 MB)

To quote from STLcardsWS on the releases: Since this exploit is executed from 4.82 OFW, you can only install to a 4.82 CFW, HOWEVER if you wish to use an earlier firmware such as REBUG 4.81 for example, once on 4.82 CFW you must TOGGLE QA using a toggle tool, which allows CFW user's to freely switch CFW version from past and present.

Read more about this in the Frequently Asked Question (FAQ) and more info in the details provided:

Flash Writer Compatible with these PS3 Models:
  • Supports FAT Models Axx/Bxx/Cxx/Exx/Gxx/Hxx/Jxx/Kxx/Lxx/Mxx/Pxx/Qxx
  • Supports SLIM Models 2xxx (minver 3.56 or lower ONLY, check with minverchk.pup)
PS3 OFW 4.82 NAND/NOR FLASH WRITER v1.0

:alert: Important -- AVOIDING A BRICK
  • Verify flsh.hex file on a flash drive and in the far right USB slot!
    • 4.82 flsh.hex MD5: 8E156C99101BF36EC3EDB832982AE46D
  • DO NOT USE ON CFW (Custom Firmware) (Only Supports OFW)
  • DO NOT USE ON PS3 Models 3xxx/4xxx (aka SuperSlims / Late Slim models) you will brick those console.
:stop: As noted by esc0rtd3w: YOU NEED TO BE ON OFW 4.82 TO USE WRITER....PERIOD! DO NOT DO THIS!!!!!!!!!!!!!
  • DO NOT RENAME THE flsh.hex FILE!!!!
  • VERIFY THE MD5 WHILE THE FILE IS ON THE USB STICK BEFORE PROCEEDING!!!
  • VERIFY THE USB STICK SHOWS UP UNDER XMB
PLEASE READ FIRST:
  • It's essential not to flood the browser memory with junk before running the exploit. The reason for this is that due to javascript core memory usage limitations we are scanning several times a small range of browser memory (a few Mb) to find some essential data in RAM, if the memory is flooded then the range to scan becomes much larger & the probabilities that our data is found in the smaller range decrease dramatically..
  • So in short, never use the browser or set a homepage you cancel before running the exploit!
  • If you need to, set the homepage to 'blank', close the browser then reopen it to start the flash writer.
v1.0.0 - Initial Release
  • Supports Direct OFW to CFW patching for All Phat and 2xxx Slim (minver 3.56 Dec 2010 and lower)
  • the NOR/NAND writer will just copy 3Mb of CoreOS data to both ros0 & ros1 in the flash memory.
  • There is only one version released for 4.82. The same hex patch file can be used on nor & nand.
  • It's as safe as possible, with a check for usb device & patch file making the exploit hang instead of corrupting flash if file is not found.
  • In case of corruption (extremely rare but could always happen), it's only a partial brick because no per console info ever gets erased so a hardware flasher could still be used if ever a recovery reboot was impossible.
Usage Tips:

1) Try using a LAN connection or a solid WiFi connection during exploitation. A weak signal can cause problems.
2) If the exploit takes more than 5 minutes to work, reload page, browser, or restart console and try again.
3) If you are using a LAN connection and experience network issues, make sure all cables to router are in working order.

Steps:

1.
Setup a small Web server on pc or smartphone. A custom miniweb application has been created by Aldo, and supplied to host files if you would like to use it. Don't come to us for explanations about how to run a http server though. Google it.

2. Extract the files from release to your http server root folder.

3. Copy the "flsh.hex" file from release folder to root of flash drive.

4. Put a FAT32 USB key in port closest to BD Drive (/dev_usb000).

5. DOUBLE-CHECK your flash drive on XMB to make sure it shows up under Music, Photos, Videos, etc.

6. Open the PS3 browser File Address window, write the IP address of your server (and the port if not 80) & press the Start button.

7. Select the appropriate button for your console and wait for PS3 to power down. DO NOT STOP THE PROCESS ONCE STARTED!!

8. Once PS3 has powered down, reboot console and install CFW matching OFW version. If installing through XMB does not work, boot to recovery and install.

:arrow: PS3 4.81/4.82 NAND/NOR Flash Dumper v1.0

THE CORRECT FIRMWARE VERSION BETWEEN 4.81 and 4.82 IS AUTOMATICALLY SELECTED!

PLEASE READ FIRST:
  • It's essential not to flood the browser memory with junk before running the exploit. The reason for this is that due to javascript core memory usage limitations we are scanning several times a small range of browser memory (a few Mb) to find some essential data in RAM, if the memory is flooded then the range to scan becomes much larger & the probabilities that our data is found in the smaller range decrease dramatically....
  • So in short, never use the browser or set a homepage you cancel before running the exploit! If you need to, set the homepage to 'blank', close the browser then reopen it to start the flash writer.
v1.0.0 - Initial Release.
  • Supports Dumping NOR on both 4.81 & 4.82.
  • bguerville tried to produce a release that was easy to port & he succeeded. Anyone able to search for offsets in IDA can add support to any firmware version in the dumper in a matter of minutes.
  • For technical reasons, the Full NAND dumper release is postponed. We will now be focusing on self execution & if we succeed there will be no need for the extra ROP work to do the NAND dumper. If we fail, I will finish it in ROP.
  • The dumper will be released in a form extremely easy to port so others can tweak it to their heart content with outcomes having to face complicated searches in the big unicode strings
  • A lot of time has been invested into making the javascript + UI more efficient, as well as the trigger phase faster & more stable. I hope you enjoy the result.
Usage Tips:

1)
Try using a LAN connection or a solid WiFi connection during exploitation. A weak signal can cause problems.
2) If the exploit takes more than 5 minutes to work, reload page, browser, or restart console and try again.
3) If you are using a LAN connection and experience network issues, make sure all cables to router are in working order.

Steps:

1.
Setup a small Web server on pc or smartphone. A custom miniweb application has been created by Aldo, and supplied to host files if you would like to use it. Don't come to us for explanations about how to run a http server though. Google it.

2. Extract the files from release to your http server root folder.

3. Put a FAT32 USB key in port closest to BD Drive (/dev_usb000).

4. DOUBLE-CHECK your flash drive on XMB to make sure it shows up under Music, Photos, Videos, etc.

5. Open the PS3 browser File Address window, write the IP address of your server (and the port if not 80) & press the Start button.

6. The dumper will detect the firmware version of your console automatically & setup the code appropriately so there is only one version for both 4.81 & 4.82. Run until ps3 beeps & shutdown. The flash dump should be a 16MB file on your USB drive as dump.hex.

:arrow: Frequently Asked Questions & Additional Notes

Will this jailbreak my SuperSlim?
  • NO, (PS3Xploit has strong possibility to eventually evolve into a HEN style exploit (that aspect will take some additional development and time, at this time PS3Xploit exploit has not evolved enough)
Can in install a CFW before 4.82, such as Rebug 4.81 or an earlier CFW?
  • Yes, however you must Toggle QA Flag. Once the Token is activated you have the ability to then freely jump CFW versions. (see below for details)
How do I Toggle QA Flag?
How do I know for sure if my PS3 Model is compatible ?
  • You must have a PS3 Console that has a Factory Firmware of 3.56 and below.
  • To check, its easy with this simple tool for OFW, Download minverchk.rar
  • Then place the .pup file on a FAT32 USB Flash Drive in a PS3/UPDATE folder (create path if needed)
  • Now on the PS3 XMB goto Setting ->> System Update >>> Update via Media Storage
  • Once shown on the list select the PUP and install, shortly after there will be a message showing the factory firmware the console was shipped,
  • For this we want 3.56 and below.
  • ANYTHING HIGHER THEN 3.56 IS NOT ABLE INSTALL A CFW. Sorry this will not work for your console, but there could be a HEN (Homebrew Enabler) possible for running homebrew, but additional research and time is needed for achievement, additional details can be read here.
From Red to quote: In case anyone is too lazy to host the files themselves I threw the files on my webserver if you would prefer to use it :) http://redthetrainer.com/ps3/

Like Darthsternie, @EdiTzZ of PS3.EdiTzZ.net via Twitter (video) also made an unofficial mirror that has been confirmed working in around 2 minutes.

There's also a PS3 4.82 Exploit Tutorial and brief Tutorial by LightningMods with a video below, a PS3 CFW on Latest OFW 4.82 Guide by Zer0xFF available, and ask any questions in the comments below if you get stuck and need additional help. (y)

Hey, if you want to straight update to rebug 4.81 REX you can use this pup the syscon version is modified to 4.82 so you can update right away from 4.82 OFW, That way it is not needed to install 4.82CFW & downgrade & then install rebug

Download: Rebug 4.81.2 REX 4.82Syscon Thibobo.PUP (202.5 MB)

PUP MD5: BEABB70067E56DAFCFAE466E1218C1C2

:alert: Similar to HENkaku and other Web-based exploits BEWARE OF FAKE EXPLOIT PAGES... legitimate PS3Xploit pages can be found on reputable scene sites, so avoid any found in unconfirmed places such as random blogs or YouTube videos! :alert:

:arrow: Update #1: While noting these are read-only and useful just to those who want a NOR Flash Dump of their current PS3 Firmware prior to updating (everyone else can ignore them) from esc0rtd3w comes some PS3Xploit NOR Dumper ports for lower PS3 Firmware to quote:
Spoiler
Sample From 4.81 CEX (For Advanced Users Only)

For anyone that wants to make their own ports, you can refer to this for an example of what to look for in IDA or other debugging tools.
Code:
TOC: 0x6F5520 <-- set in r2

gadget1: seg001:000D9684 sc <-- lands here to make syscall
gadget1: seg001:000D9688 ld r0, 0x80+arg_10(r1) <-- search for this in IDA (easier to find)
gadget2: seg001:00097604 mr r1, r11 <-- initial stack control
gadget3: seg001:0060E59C lwz r11, 0xC0+var_4C(r1) <-- set params
gadget4: seg001:0019D3B0 ld r3, 0xA0+var_20(r1) <-- set params
gadget5: seg001:0042C774 lwz r3, 0(r31) <-- syscall made after here
gadget6: seg001:00423B14 bl _Export_stdc_fopen <-- usb dump actions
gadget7: seg001:00627BF8 addi r9, r1, 0xB0+var_40 <-- set params
gadget8: seg001:000C5234 li r4, 0xA <-- init shutdown request
PS3 Debugging/ROP Porting PS3Xploit NOR Dumper Chain To Lower Firmware
From the video's caption, to quote: This will show you an example of porting the 4.81/4.82 NOR Dumper chain to 4.30 OFW. I am using 2 monitors so I apologize if it's hard to see. The monitor on the right is 4.81 CEX and the left monitor is 4.30 CEX vsh.elf.

:arrow: Update #2: Esc0rtd3w has now made available both a ps3-4xx-elf.rar (57.61 MB) and a ps3-3xx-elf.rar (25.3 MB) collection for those seeking to save some steps while noting the 3.xx is 3.55 and higher and does not include 3.50 or below.

Also from YouTube comes his latest videos, with the captions below as follows:
Spoiler
Cheers to @B7U3 C50SS, @hyndrid and @Trojaner in the PSXHAX Shoutbox for the heads-up on this PlayStation 3 scene news! :beer:
PS3Xploit 4.82 CFW on OFW, NOR NAND Flash Writer & NOR Dumper.jpg
 

Comments

@esc0rtd3w I have used your release and it results "BAD DUMP"... I'm on OFW 4.81. I have checked it in hex version and renamed then bkpps3.bin for export more logs... What is wrong? HELP ME PLEASE

Esc0rtd3w.jpg

Code:
********************************************
PS3 Dump Checker v1.0 (Build: 488)
Check started: 24/11/2017 10:28:59
********************************************
10:28:59 : Reading image into memory and checking statistics...
10:28:59 : Statistics check skipped!                                              (nothing to check)
10:28:59 :                                                                        Binary check Started!
10:28:59 : Binary check for 001.02   First Region Header Magic Started...         Result: OK!
10:28:59 : Binary check for 002.01   Flash Format String Started...               Result: OK!
10:28:59 : Binary check for 002.02   Flash Format Version Started...              Result: OK!
10:28:59 : Binary check for 003.01   Flash Region Table Header Started...         Result: OK!
10:28:59 : Binary check for 003.02   asecure_loader Offset - Length Started...    Result: OK!
10:28:59 : Binary check for 003.03   asecure_loader Name Started...               Result: OK!
10:28:59 : Binary check for 003.04   eEID Offset - Length Started...              Result: OK!
10:28:59 : Binary check for 003.05   eEID Name Started...                         Result: OK!
10:28:59 : Binary check for 003.06   cISD Offset - Length Started...              Result: OK!
10:28:59 : Binary check for 003.07   cISD Name Started...                         Result: OK!
10:28:59 : Binary check for 003.08   cCSD Offset - Length Started...              Result: OK!
10:28:59 : Binary check for 003.09   cCSD Name Started...                         Result: OK!
10:28:59 : Binary check for 003.10   trvk_prg0 Offset - Length Started...         Result: OK!
10:28:59 : Binary check for 003.11   trvk_prg0 Name Started...                    Result: OK!
10:28:59 : Binary check for 003.12   trvk_prg1 Offset - Length Started...         Result: OK!
10:28:59 : Binary check for 003.13   trvk_prg1 Name Started...                    Result: OK!
10:28:59 : Binary check for 003.14   trvk_pkg0 Offset - Length Started...         Result: OK!
10:28:59 : Binary check for 003.15   trvk_pkg0 Name Started...                    Result: OK!
10:28:59 : Binary check for 003.16   trvk_pkg1 Offset - Length Started...         Result: OK!
10:28:59 : Binary check for 003.17   trvk_pkg1 Name Started...                    Result: OK!
10:28:59 : Binary check for 003.18   ros0 Offset - Length Started...              Result: OK!
10:28:59 : Binary check for 003.19   ros0 Name Started...                         Result: OK!
10:28:59 : Binary check for 003.20   ros1 Offset - Length Started...              Result: OK!
10:28:59 : Binary check for 003.21   ros1 Name Started...                         Result: OK!
10:28:59 : Binary check for 003.22   cvtrm Offset - Length Started...             Result: OK!
10:28:59 : Binary check for 003.23   cvtrm Name Started...                        Result: OK!
10:28:59 : Binary check for 004.01   asecure_loader Header Started...             Result: OK!
10:28:59 : Binary check for 004.02   metldr Offset Started...                     Result: OK!
10:28:59 : Binary check for 004.03   metldr Length Started...                     Result: OK!
10:28:59 : Binary check for 004.04   metldr Name Started...                       Result: OK!
10:28:59 : Binary check for 004.05   metldr RevKey Started...                     Result: OK!
10:28:59 : Binary check for 004.06   metldr Binary Size Started...                Result: OK!
10:28:59 : Binary check for 005.01   eEID Header Started...                       Result: OK!
10:28:59 : Binary check for 005.02   EID0 Offset - Length Started...              Result: OK!
10:28:59 : Binary check for 005.03   EID1 Offset - Length Started...              Result: OK!
10:28:59 : Binary check for 005.04   EID2 Offset - Length Started...              Result: OK!
10:28:59 : Binary check for 005.05   EID3 Offset - Length Started...              Result: OK!
10:28:59 : Binary check for 005.06   EID4 Offset - Length Started...              Result: OK!
10:28:59 : Binary check for 005.07   EID5 Offset - Length Started...              Result: OK!
10:28:59 : Binary check for 005.08   EID0 IDPS0 Started...                        Result: OK!
10:28:59 : Binary check for 005.09   EID0 IDPS1 Started...                        Result: OK!
10:28:59 : Binary check for 005.10   EID0 Static Started...                       Result: OK!
10:28:59 : Binary check for 005.11   EID2 BlockSize/Padding Started...            Result: OK!
10:28:59 : Binary check for 005.12   EID3 Static0 Started...                      Result: OK!
10:28:59 : Binary check for 005.13   EID3 Static1 Started...                      Result: OK!
10:28:59 : Binary check for 005.14   EID3 Static2 Started...                      Result: OK!
10:28:59 : Binary check for 005.15   EID5 IDPS0 Started...                        Result: OK!
10:28:59 : Binary check for 005.16   EID5 IDPS1 Started...                        Result: OK!
10:28:59 : Binary check for 005.17   EID5 Static Started...                       Result: OK!
10:28:59 : Binary check for 006.01   cISD Header Started...                       Result: OK!
10:28:59 : Binary check for 006.02   cISD0 Offset - Length Started...             Result: OK!
10:28:59 : Binary check for 006.03   cISD1 Offset - Length Started...             Result: OK!
10:28:59 : Binary check for 006.04   cISD2 Offset - Length Started...             Result: OK!
10:28:59 : Binary check for 006.06   cISD1 IDLog Header Started...                Result: OK!
10:28:59 : Binary check for 006.07   cISD1 Semistatic 1 Started...                Result: OK!
10:28:59 : Binary check for 006.08   cISD1 Semistatic 2 Started...                Result: OK!
10:28:59 : Binary check for 006.10   cISD1 Static Started...                      Result: OK!
10:28:59 : Binary check for 006.11   cISD1 Semistatic 3 Started...                Result: OK!
10:28:59 : Binary check for 006.14   cISD2 Started...                             Result: OK!
10:28:59 : Binary check for 007.01   cCSD Header Started...                       Result: OK!
10:28:59 : Binary check for 007.02   cCSD Entry Table Started...                  Result: OK!
10:28:59 : Binary check for 008.01   trvk_prg0 SCE Started...                     Result: OK!
10:28:59 : Binary check for 008.02   trvk_prg1 SCE Started...                     Result: OK!
10:28:59 : Binary check for 008.03   trvk_pkg0 SCE Started...                     Result: OK!
10:28:59 : Binary check for 008.04   trvk_pkg1 SCE Started...                     Result: OK!
10:28:59 : Binary check for 009.01   ROS0 Header Started...                       Result: OK!
10:28:59 : Binary check for 009.04   ROS1 Header Started...                       Result: OK!
10:28:59 : Binary check for 010.02   cvtrm0 Header Started...                     Result: OK!
10:28:59 : Binary check for 010.04   vtrm0 Magic Started...                       Result: OK!
10:28:59 : Binary check for 010.05   vtrm0 Reserved Entries Started...            Result: OK!
10:28:59 : Binary check for 010.07   cvtrm1 Header Started...                     Result: OK!
10:28:59 : Binary check for 010.09   vtrm1 Magic Started...                       Result: OK!
10:28:59 : Binary check for 010.10   vtrm1 Reserved Entries Started...            Result: OK!
10:28:59 : Binary check for 011.02   Second Region Header Magic Started...        Result: OK!
10:28:59 : Binary check for 011.03   Second Region Header Count Started...        Result: OK!
10:28:59 : Binary check for 011.05   Second Region Unknown Block 0 Started...     Result: OK!
10:28:59 : Binary check for 011.07   Second Region Unknown Block 1 Started...     Result: OK!
10:28:59 : Binary check for 013.01   CELL_EXTNOR_AREA Header Started...           Result: OK!
10:28:59 : Binary check for 014.01   bootldr0 Started...                          Result: OK!
10:28:59 : Binary check for 014.02   bootldr1 Started...                          Result: OK!
10:28:59 : Binary check for 014.03   bootldr Rev key Started...                   Result: OK!
10:28:59 :                                                                        Data check Started!
10:28:59 : Data Statistics check for 004.07   metldr Statistics Started...        Result: OK!
10:28:59 : Data Statistics check for 005.19   eEID Statistics0 Started...         Result: OK!
10:28:59 : Data Statistics check for 005.20   eEID Statistics1 Started...         Result: OK!
10:28:59 : Data Statistics check for 006.13   cISD1 Statistics Started...         Result: OK!
10:28:59 : Data Statistics check for 014.04   bootldr Statistics Started...       Result: OK!
10:28:59 :                                                                        Hash check Started!
10:28:59 : Hash check for 009.02   ROS0 Hash Started...                           Result: FAILED!
10:29:00 : Hash check for 009.05   ROS1 Hash Started...                           Result: FAILED!
10:29:00 :                                                                        ROS Version check Started!
10:29:00 : ROS Version check for ROS0 Started...                                  Result: OK! (481.000)
10:29:00 : ROS Version check for ROS1 Started...                                  Result: OK! (481.000)
10:29:00 :                                                                        Repetitions check Started!
10:29:00 : Repetitions check for Header Magic0 Repetitions Started...             Result: OK!
10:29:00 : Repetitions check for Header Magic1 Repetitions Started...             Result: OK!
10:29:00 : Repetitions check for asecure_loader Repetitions Started...            Result: OK!
10:29:00 : Repetitions check for eEID Repetitions Started...                      Result: OK!
10:29:00 : Repetitions check for cISD Repetitions Started...                      Result: OK!
10:29:00 : Repetitions check for cCSD Repetitions Started...                      Result: OK!
10:29:00 : Repetitions check for trvk_prg0 Repetitions Started...                 Result: OK!
10:29:00 : Repetitions check for trvk_prg1 Repetitions Started...                 Result: OK!
10:29:00 : Repetitions check for trvk_pkg0 Repetitions Started...                 Result: OK!
10:29:00 : Repetitions check for trvk_pkg1 Repetitions Started...                 Result: OK!
10:29:00 : Repetitions check for ros0 Repetitions Started...                      Result: OK!
10:29:00 : Repetitions check for ros1 Repetitions Started...                      Result: OK!
10:29:00 : Repetitions check for cvtrm Repetitions Started...                     Result: OK!
10:29:00 :                                                                        Data Match check Started!
10:29:00 : Datamatch for: bootldr size Started                                    Result: OK!
10:29:00 : Datamatch for: per console nonce Started                               Result: OK!
10:29:00 : Datamatch for: CELL_EXTNOR_AREA Hash1 Started                          Result: OK!
10:29:00 : Datamatch for: CELL_EXTNOR_AREA Hash2 Started                          Result: OK!
10:29:00 : Datamatch for: metldr size Started                                     Result: OK!
10:29:00 : Datamatch for: vtrm0 Started                                           Result: OK!
10:29:00 : Datamatch for: vtrm1 Started                                           Result: OK!
10:29:00 : All is OK!
10:29:00 :                                                                        Data Fill check Started!
10:29:00 : Data Fill check for: 001.01   First Region Header 0x00 Filled Area 0 Started! Result: OK!
10:29:00 : Data Fill check for: 001.03   First Region Header 0x00 Filled Area 1 Started! Result: OK!
10:29:00 : Data Fill check for: 002.03   Flash Format 0xFF Filled Area Started!   Result: OK!
10:29:00 : Data Fill check for: 003.24   Flash Region Table 0x00 Filled Area Started! Result: OK!
10:29:00 : Data Fill check for: 004.08   asecure_loader 0x00 Filled Area Started! Result: OK!
10:29:00 : Data Fill check for: 005.18   eEID Region 0xFF Filled Area Started!    Result: OK!
10:29:00 : Data Fill check for: 006.05   cISD0 0xFF Filled Area Started!          Result: OK!
10:29:00 : Data Fill check for: 006.09   cISD1 0xFF Filled Area 0 Started!        Result: OK!
10:29:00 : Data Fill check for: 006.12   cISD1 0xFF Filled Area 1 Started!        Result: OK!
10:29:00 : Data Fill check for: 006.15   cISD 0xFF Filled Area Started!           Result: OK!
10:29:00 : Data Fill check for: 007.03   cCSD 0xFF Filled Area Started!           Result: OK!
10:29:00 : Data Fill check for: 010.01   Pre cvtrm 0xFF Filled Area Started!      Result: OK!
10:29:00 : Data Fill check for: 010.03   cvtrm0 0xFF Filled Area Started!         Result: OK!
10:29:00 : Data Fill check for: 010.08   cvtrm1 0xFF Filled Area Started!         Result: OK!
10:29:00 : Data Fill check for: 011.01   Second Region Header 0x00 Filled Area 0 Started! Result: OK!
10:29:00 : Data Fill check for: 011.04   Second Region Header 0x00 Filled Area 1 Started! Result: OK!
10:29:00 : Data Fill check for: 011.06   Second Region Header 0x00 Filled Area 2 Started! Result: OK!
10:29:00 : Data Fill check for: 011.08   Second Region Header 0x00 Filled Area 3 Started! Result: OK!
10:29:00 : Data Fill check for: 012.01   unreferenced area 0xFF Filled Started!   Result: OK!
10:29:00 : Data Fill check for: 013.02   CELL_EXTNOR_AREA 0x00 Filled Area 0 Started! Result: OK!
10:29:00 : Data Fill check for: 013.03   CELL_EXTNOR_AREA 0x00 Filled Area 1 Started! Result: OK!
10:29:00 : Data Fill check for: 013.04   CELL_EXTNOR_AREA 0x00 Filled Area 2 Started! Result: OK!
10:29:00 : Data Fill check for: 013.05   CELL_EXTNOR_AREA 0x00 Filled Area 3 Started! Result: FAILED!
The byte @ offset: 0xF60060
has the value: 0x13
Please check the data further down the line manually...
10:29:00 : Data Fill check for: 013.06   CELL_EXTNOR_AREA 0xFF Filled Area 0 Started! Result: OK!
10:29:00 : Data Fill check for: 013.07   CELL_EXTNOR_AREA 0x00 Filled Area 5 Started! Result: OK!
10:29:00 : Data Fill check for: 013.08   CELL_EXTNOR_AREA 0x00 Filled Area 6 Started! Result: FAILED!
The byte @ offset: 0xFA0060
has the value: 0x13
Please check the data further down the line manually...
10:29:00 : Data Fill check for: 013.09   CELL_EXTNOR_AREA 0xFF Filled Area 1 Started! Result: OK!
10:29:00 : Data Fill check for: 014.05   bootldr 0xFF Filled Area Started!        Result: OK!
10:29:00 :                                                                        SKU List check Started!
10:29:00 : SKU Model: CECH-20xx (DYN-001)
10:29:00 : All checks (138 Checks) have been completed after 0 Second(s) and 721 Millisecond(s)
Bad count: 4 of 138 Tests                                                         Result: Failed!
 
On a 4k model?

Yes! by the looks of it.

Code:
********************************************
PS3 Dump Checker v1.0 (Build: 491)
Check started: 11/24/2017 1:56:08 AM
********************************************
1:56:08 AM : Reading image into memory and checking statistics...
1:56:09 AM : Statistics check skipped!                                              (nothing to check)
1:56:09 AM :                                                                        Binary check Started!
1:56:09 AM : Binary check for 001.02   First Region Header Magic Started...         Result: OK!
1:56:09 AM : Binary check for 002.01   Flash Format String Started...               Result: OK!
1:56:09 AM : Binary check for 002.02   Flash Format Version Started...              Result: OK!
1:56:09 AM : Binary check for 003.01   Flash Region Table Header Started...         Result: OK!
1:56:09 AM : Binary check for 003.02   asecure_loader Offset - Length Started...    Result: OK!
1:56:09 AM : Binary check for 003.03   asecure_loader Name Started...               Result: OK!
1:56:09 AM : Binary check for 003.04   eEID Offset - Length Started...              Result: OK!
1:56:09 AM : Binary check for 003.05   eEID Name Started...                         Result: OK!
1:56:09 AM : Binary check for 003.06   cISD Offset - Length Started...              Result: OK!
1:56:09 AM : Binary check for 003.07   cISD Name Started...                         Result: OK!
1:56:10 AM : Binary check for 003.08   cCSD Offset - Length Started...              Result: OK!
1:56:10 AM : Binary check for 003.09   cCSD Name Started...                         Result: OK!
1:56:10 AM : Binary check for 003.10   trvk_prg0 Offset - Length Started...         Result: OK!
1:56:10 AM : Binary check for 003.11   trvk_prg0 Name Started...                    Result: OK!
1:56:10 AM : Binary check for 003.12   trvk_prg1 Offset - Length Started...         Result: OK!
1:56:10 AM : Binary check for 003.13   trvk_prg1 Name Started...                    Result: OK!
1:56:10 AM : Binary check for 003.14   trvk_pkg0 Offset - Length Started...         Result: OK!
1:56:10 AM : Binary check for 003.15   trvk_pkg0 Name Started...                    Result: OK!
1:56:10 AM : Binary check for 003.16   trvk_pkg1 Offset - Length Started...         Result: OK!
1:56:10 AM : Binary check for 003.17   trvk_pkg1 Name Started...                    Result: OK!
1:56:10 AM : Binary check for 003.18   ros0 Offset - Length Started...              Result: OK!
1:56:10 AM : Binary check for 003.19   ros0 Name Started...                         Result: OK!
1:56:10 AM : Binary check for 003.20   ros1 Offset - Length Started...              Result: OK!
1:56:10 AM : Binary check for 003.21   ros1 Name Started...                         Result: OK!
1:56:10 AM : Binary check for 003.22   cvtrm Offset - Length Started...             Result: OK!
1:56:10 AM : Binary check for 003.23   cvtrm Name Started...                        Result: OK!
1:56:10 AM : Binary check for 004.01   asecure_loader Header Started...             Result: OK!
1:56:10 AM : Binary check for 004.02   metldr Offset Started...                     Result: OK!
1:56:10 AM : Binary check for 004.03   metldr Length Started...                     Result: OK!
1:56:10 AM : Binary check for 004.04   metldr Name Started...                       Result: OK!
1:56:10 AM : Binary check for 004.05   metldr RevKey Started...                     Result: OK!
1:56:10 AM : Binary check for 004.06   metldr Binary Size Started...                Result: OK!
1:56:10 AM : Binary check for 005.01   eEID Header Started...                       Result: OK!
1:56:10 AM : Binary check for 005.02   EID0 Offset - Length Started...              Result: OK!
1:56:11 AM : Binary check for 005.03   EID1 Offset - Length Started...              Result: OK!
1:56:11 AM : Binary check for 005.04   EID2 Offset - Length Started...              Result: OK!
1:56:11 AM : Binary check for 005.05   EID3 Offset - Length Started...              Result: OK!
1:56:11 AM : Binary check for 005.06   EID4 Offset - Length Started...              Result: OK!
1:56:11 AM : Binary check for 005.07   EID5 Offset - Length Started...              Result: OK!
1:56:11 AM : Binary check for 005.08   EID0 IDPS0 Started...                        Result: OK!
1:56:11 AM : Binary check for 005.09   EID0 IDPS1 Started...                        Result: OK!
1:56:11 AM : Binary check for 005.10   EID0 Static Started...                       Result: OK!
1:56:11 AM : Binary check for 005.11   EID2 BlockSize/Padding Started...            Result: OK!
1:56:11 AM : Binary check for 005.12   EID3 Static0 Started...                      Result: OK!
1:56:11 AM : Binary check for 005.13   EID3 Static1 Started...                      Result: OK!
1:56:11 AM : Binary check for 005.14   EID3 Static2 Started...                      Result: OK!
1:56:11 AM : Binary check for 005.15   EID5 IDPS0 Started...                        Result: OK!
1:56:11 AM : Binary check for 005.16   EID5 IDPS1 Started...                        Result: OK!
1:56:11 AM : Binary check for 005.17   EID5 Static Started...                       Result: OK!
1:56:11 AM : Binary check for 006.01   cISD Header Started...                       Result: OK!
1:56:11 AM : Binary check for 006.02   cISD0 Offset - Length Started...             Result: OK!
1:56:11 AM : Binary check for 006.03   cISD1 Offset - Length Started...             Result: OK!
1:56:11 AM : Binary check for 006.04   cISD2 Offset - Length Started...             Result: OK!
1:56:12 AM : Binary check for 006.06   cISD1 IDLog Header Started...                Result: OK!
1:56:12 AM : Binary check for 006.07   cISD1 Semistatic 1 Started...                Result: OK!
1:56:12 AM : Binary check for 006.08   cISD1 Semistatic 2 Started...                Result: OK!
1:56:12 AM : Binary check for 006.10   cISD1 Static Started...                      Result: OK!
1:56:12 AM : Binary check for 006.11   cISD1 Semistatic 3 Started...                Result: OK!
1:56:12 AM : Binary check for 006.14   cISD2 Started...                             Result: OK!
1:56:12 AM : Binary check for 007.01   cCSD Header Started...                       Result: OK!
1:56:12 AM : Binary check for 007.02   cCSD Entry Table Started...                  Result: OK!
1:56:12 AM : Binary check for 008.01   trvk_prg0 SCE Started...                     Result: OK!
1:56:12 AM : Binary check for 008.02   trvk_prg1 SCE Started...                     Result: OK!
1:56:12 AM : Binary check for 008.03   trvk_pkg0 SCE Started...                     Result: OK!
1:56:12 AM : Binary check for 008.04   trvk_pkg1 SCE Started...                     Result: OK!
1:56:12 AM : Binary check for 009.01   ROS0 Header Started...                       Result: OK!
1:56:12 AM : Binary check for 009.04   ROS1 Header Started...                       Result: OK!
1:56:12 AM : Binary check for 010.02   cvtrm0 Header Started...                     Result: OK!
1:56:12 AM : Binary check for 010.04   vtrm0 Magic Started...                       Result: OK!
1:56:12 AM : Binary check for 010.05   vtrm0 Reserved Entries Started...            Result: OK!
1:56:12 AM : Binary check for 010.07   cvtrm1 Header Started...                     Result: OK!
1:56:12 AM : Binary check for 010.09   vtrm1 Magic Started...                       Result: OK!
1:56:13 AM : Binary check for 010.10   vtrm1 Reserved Entries Started...            Result: OK!
1:56:13 AM : Binary check for 011.02   Second Region Header Magic Started...        Result: OK!
1:56:13 AM : Binary check for 011.03   Second Region Header Count Started...        Result: OK!
1:56:13 AM : Binary check for 011.05   Second Region Unknown Block 0 Started...     Result: OK!
1:56:13 AM : Binary check for 011.07   Second Region Unknown Block 1 Started...     Result: OK!
1:56:13 AM : Binary check for 013.01   CELL_EXTNOR_AREA Header Started...           Result: OK!
1:56:13 AM : Binary check for 014.01   bootldr0 Started...                          Result: OK!
1:56:13 AM : Binary check for 014.02   bootldr1 Started...                          Result: OK!
1:56:13 AM : Binary check for 014.03   bootldr Rev key Started...                   Result: OK!
1:56:13 AM :                                                                        Data check Started!
1:56:13 AM : Data Statistics check for 004.07   metldr Statistics Started...        Result: OK!
1:56:13 AM : Data Statistics check for 005.19   eEID Statistics0 Started...         Result: OK!
1:56:13 AM : Data Statistics check for 005.20   eEID Statistics1 Started...         Result: OK!
1:56:13 AM : Data Statistics check for 006.13   cISD1 Statistics Started...         Result: OK!
1:56:14 AM : Data Statistics check for 014.04   bootldr Statistics Started...       Result: OK!
1:56:14 AM :                                                                        Hash check Started!
1:56:14 AM : Hash check for 009.02   ROS0 Hash Started...                           Result: OK!
1:56:14 AM : Hash check for 009.05   ROS1 Hash Started...                           Result: OK!
1:56:14 AM :                                                                        ROS Version check Started!
1:56:14 AM : ROS Version check for ROS0 Started...                                  Result: OK! (480.000)
1:56:14 AM : ROS Version check for ROS1 Started...                                  Result: OK! (481.000)
1:56:14 AM :                                                                        Repetitions check Started!
1:56:14 AM : Repetitions check for Header Magic0 Repetitions Started...             Result: OK!
1:56:14 AM : Repetitions check for Header Magic1 Repetitions Started...             Result: OK!
1:56:14 AM : Repetitions check for asecure_loader Repetitions Started...            Result: OK!
1:56:14 AM : Repetitions check for eEID Repetitions Started...                      Result: OK!
1:56:14 AM : Repetitions check for cISD Repetitions Started...                      Result: OK!
1:56:14 AM : Repetitions check for cCSD Repetitions Started...                      Result: OK!
1:56:14 AM : Repetitions check for trvk_prg0 Repetitions Started...                 Result: OK!
1:56:14 AM : Repetitions check for trvk_prg1 Repetitions Started...                 Result: OK!
1:56:15 AM : Repetitions check for trvk_pkg0 Repetitions Started...                 Result: OK!
1:56:15 AM : Repetitions check for trvk_pkg1 Repetitions Started...                 Result: OK!
1:56:15 AM : Repetitions check for ros0 Repetitions Started...                      Result: OK!
1:56:15 AM : Repetitions check for ros1 Repetitions Started...                      Result: OK!
1:56:15 AM : Repetitions check for cvtrm Repetitions Started...                     Result: OK!
1:56:15 AM :                                                                        Data Match check Started!
1:56:15 AM : Datamatch for: bootldr size Started                                    Result: OK!
1:56:15 AM : Datamatch for: per console nonce Started                               Result: OK!
1:56:15 AM : Datamatch for: CELL_EXTNOR_AREA Hash1 Started                          Result: OK!
1:56:15 AM : Datamatch for: CELL_EXTNOR_AREA Hash2 Started                          Result: OK!
1:56:15 AM : Datamatch for: metldr size Started                                     Result: OK!
1:56:15 AM : Datamatch for: vtrm0 Started                                           Result: OK!
1:56:15 AM : Datamatch for: vtrm1 Started                                           Result: OK!
1:56:15 AM : All is OK!
1:56:15 AM :                                                                        Data Fill check Started!
1:56:15 AM : Data Fill check for: 001.01   First Region Header 0x00 Filled Area 0 Started! Result: OK!
1:56:15 AM : Data Fill check for: 001.03   First Region Header 0x00 Filled Area 1 Started! Result: OK!
1:56:15 AM : Data Fill check for: 002.03   Flash Format 0xFF Filled Area Started!   Result: OK!
1:56:16 AM : Data Fill check for: 003.24   Flash Region Table 0x00 Filled Area Started! Result: OK!
1:56:16 AM : Data Fill check for: 004.08   asecure_loader 0x00 Filled Area Started! Result: OK!
1:56:16 AM : Data Fill check for: 005.18   eEID Region 0xFF Filled Area Started!    Result: OK!
1:56:16 AM : Data Fill check for: 006.05   cISD0 0xFF Filled Area Started!          Result: OK!
1:56:16 AM : Data Fill check for: 006.09   cISD1 0xFF Filled Area 0 Started!        Result: OK!
1:56:16 AM : Data Fill check for: 006.12   cISD1 0xFF Filled Area 1 Started!        Result: OK!
1:56:16 AM : Data Fill check for: 006.15   cISD 0xFF Filled Area Started!           Result: OK!
1:56:16 AM : Data Fill check for: 007.03   cCSD 0xFF Filled Area Started!           Result: OK!
1:56:16 AM : Data Fill check for: 010.01   Pre cvtrm 0xFF Filled Area Started!      Result: OK!
1:56:16 AM : Data Fill check for: 010.03   cvtrm0 0xFF Filled Area Started!         Result: OK!
1:56:16 AM : Data Fill check for: 010.08   cvtrm1 0xFF Filled Area Started!         Result: OK!
1:56:16 AM : Data Fill check for: 011.01   Second Region Header 0x00 Filled Area 0 Started! Result: OK!
1:56:16 AM : Data Fill check for: 011.04   Second Region Header 0x00 Filled Area 1 Started! Result: OK!
1:56:16 AM : Data Fill check for: 011.06   Second Region Header 0x00 Filled Area 2 Started! Result: OK!
1:56:16 AM : Data Fill check for: 011.08   Second Region Header 0x00 Filled Area 3 Started! Result: OK!
1:56:16 AM : Data Fill check for: 012.01   unreferenced area 0xFF Filled Started!   Result: OK!
1:56:16 AM : Data Fill check for: 013.02   CELL_EXTNOR_AREA 0x00 Filled Area 0 Started! Result: OK!
1:56:16 AM : Data Fill check for: 013.03   CELL_EXTNOR_AREA 0x00 Filled Area 1 Started! Result: OK!
1:56:17 AM : Data Fill check for: 013.04   CELL_EXTNOR_AREA 0x00 Filled Area 2 Started! Result: OK!
1:56:17 AM : Data Fill check for: 013.05   CELL_EXTNOR_AREA 0x00 Filled Area 3 Started! Result: OK!
1:56:17 AM : Data Fill check for: 013.06   CELL_EXTNOR_AREA 0xFF Filled Area 0 Started! Result: OK!
1:56:17 AM : Data Fill check for: 013.07   CELL_EXTNOR_AREA 0x00 Filled Area 5 Started! Result: OK!
1:56:17 AM : Data Fill check for: 013.08   CELL_EXTNOR_AREA 0x00 Filled Area 6 Started! Result: OK!
1:56:17 AM : Data Fill check for: 013.09   CELL_EXTNOR_AREA 0xFF Filled Area 1 Started! Result: OK!
1:56:17 AM : Data Fill check for: 014.05   bootldr 0xFF Filled Area Started!        Result: OK!
1:56:17 AM :                                                                        SKU List check Started!
1:56:17 AM : SKU Model: CECH-40xx (MSX-001 or MPX-001)
1:56:22 AM : WARNING: The machine this dump belongs to is currently not downgradeable!
1:56:22 AM :
1:56:22 AM : All checks (138 Checks) have been completed after 13 Second(s) and 691 Millisecond(s)
Tests done: 138                                                                   Result: Pass!
 
OK YOU NEED TO BE ON OFW 4.82 TO USE WRITER....PERIOD!

also, some dude bricked his K01 by renaming his flash dump "dump.hex" to flsh.hex and wrote that to his PS3!!!! :eek:

DO NOT DO THIS!!!!!!!!!!!!!

  1. DO NOT RENAME THE flsh.hex FILE!!!!
  2. VERIFY THE MD5 WHILE THE FILE IS ON THE USB STICK BEFORE PROCEEDING!!!
  3. VERIFY THE USB STICK SHOWS UP UNDER XMB
 
my friend has slim cech27 and he is on 4.81 ofw and it is not jailbreaking. can he jailbreaking his ps3 if he upgrade to 4.82 and use this method
 
ok, you are working on the 4k models, it's fine to read, but what is the status? Near end or only at the beginning? Or can you manage it, that Superslim can downgrade to OFW 4.70?
 
Status
Not open for further replies.
Back
Top