Bitbag

Is there an 4.21 CFW out yet?

Dukio — Thu, 23 Aug 2012 17:19:09 +0000

It’s been a while since my last post and you guys deserved an apology from me. From now on, I will try to do my best to keep up with the current PS3 scene news now that there are some dramatic turn of events in the past few weeks. Kudos to noddy4life for keeping the site updated throughout my absence.

Now, the very first question popping out of my head when stepping back home is of course, is there any new CFW out yet?

Well, to answer my question above – a big NO. While 3.60 keys has been discovered, there is no proven formula yet to make a new CFW later than the 3.55 version. So, i believe you won’t see any real 4.21 CFW anywhere on the web in the near future.

BUT, thanks to the recent findings on 3.60 keys (and also E3 Team) PS3 users with 3.55 CFW can now enjoy titles that were unplayable before and also the newer ones WITHOUT any dongle. Yes, NO True Blue, JB King or any other DRM-locked devices to connect with.

We’ll talk more on that now

Is there an 4.21 CFW out yet?

PS3Tools GUI Edition v3.0

noddy4life — Thu, 19 Jul 2012 05:58:50 +0000

Your favorite homebrew developer PSDev is back with yet another update to his very well-received application, PS3Tools GUI Edition. Version 3.0 brings a slew of neat features such as SPU emulation, .SELF decryption and debug .PKG decryption, which easily makes it the best version yet. Changes to the program’s interface have also been made.

Earlier this morning the developer tweeted about the possibility of SPU emulation being added and thanks to KDSBest, it has been successfully incorporated. Good job!

PSDev is also accepting donations via PayPal: PSDev@hotmail.com

Hi everyone, here with a new update to my program. Added SPU Emulation, Self Decryption and debug pkg decryption. Along with more accurate loading bars and a interface change to pkg tool, spu emulation, self decryption, edat tool.

SPU EMULATION ADDED

Debug PKG Decryption added

Self decryption added

Logging Errors/successes added to EDAT tool

logging Errors/succession added to PKG tool

loading bars code adjustment, more accurate now

Originally by KDSBest, SPU Emulation has been incorporated in my GUI. It was quite easy, we both coded our programs in C#(Sharp) So I didn’t really have much trouble.

Self decryption is know possible . Just browse for your self/bin file and hit decrypt or, drag and drop. Yes I added it.

Now Debug PKG decryption is a option too, just name the file debugpkg.pkg put in root of program folder and run the tool and it decrypts.

DOWNLOAD:PS3Tools v3.0.rar
Please read the license file in download

OPTIONAL Donations can be sent to psdev@hotmail.com via PayPal. Thanks

[Download]
[PSDev Twitter]

Source:

PS3Tools GUI Edition v3.0

Save editing cheat device out now for PS3 thanks to Hyperkin

noddy4life — Thu, 19 Jul 2012 05:55:28 +0000

The new ‘Game Genie’ cheat device is shipping this week. Nope, Galoob hasn’t returned… this time is developed by Hyperkin.

As we informed you a few weeks ago, Game Genie is ‘returning’ to the PS3.

But it’s not from Galoob. The new developer is Hyperkin. And yes, it is now available.

This is how it works: users are able to transfer game saves to a PC, edit them using pre-programmed edits from a database, and then return the saves to PS3, for the usual benefits of extra money, ammo, experience, etc.

Of course, since the days of ubiquitous cheat devices, there have been some significant changes in the game landscape. During E3, a Hyperkin representative told Joystiq that none of the premade cheats would be usable in multiplayer, and that Hyperkin would routinely remove any that were, in order to avoid cheaters using the Game Genie for online play. But for your own single-player games? Go nuts!

Here’s the official PR:

Hyperkin’s Game Genie: Save Editor for PS3 Set for July 17th Release Date
Affordable game enhancement device to assist any gamer

NEWPORT BEACH, CA (July 2012)– After a successful premier at E3, the Game Genie: Save Editor for PS3 will finally be released on July 17th and will be available on Amazon and several local retailers. The Game Genie: Save Editor for PS3 is a game enhancement device that allows players to write modifications directly onto their save files with their PC and transfer them back to their PS3.

The Game Genie: Save Editor for PS3 comes in a USB drive containing the Game Genie setup program. Users install the program onto their PC (the program permits only two installations in order to prevent piracy) and use the USB drive to transfer save files between the PS3 and the PC. Using an Internet connection, the program links the user to a continually updated database of available games and enhancements. Users can pick enhancements that could potentially unlock maximum ammo, money, as well a variety of other power-ups. Popular games that will have modifications at release are Uncharted 3, Batman: Arkham City, Final Fantasy XIII-2, and The Elder Scrolls V: Skyrim.

“The Game Genie Save Editor for PS3 is a breakthrough for gamers everywhere,” said Steven Mar, Hyperkin’s Executive Director. “The Game Genie Save Editor allows for even the most novice gamers to breeze past the hard or boring parts of games, leveling the playing field for a more enjoyable experience.”

Product Highlights
· Ability to load, upload and back up Save Data.
· Automatic profile reassignment
· Ability to trade game save files with other players
· Secure access to comprehensive, continuously updated cheat database

Users can find the most up-to-date information on the Game Genie on www.thegamegenie.com, through their Facebook page at www.facebook.com/thegamegenie, and on their Twitter account @TheGameGenieUSA.

Go to the official Hyperkin website below for more info!

NEWS SOURCE #1: Hyperkin summons the Game Genie on PS3 today (via) JoyStiq
NEWS SOURCE #2: Game Genie save editor PS3 (via) Official Site

Original Source:

Save editing cheat device out now for PS3 thanks to Hyperkin

eEID Cryptography by nbors

noddy4life — Wed, 11 Jul 2012 23:48:31 +0000

When metldr is encrypted at factory, a special keyset is set in the binary before encryption. Later when an isolated loader is loaded by metldr, it will copy the keyset to LS offset 0x00000. It consists of eid_root_key and eid_root_iv. To not having to use the same key for all eEID parts, several subkeys are generated from special data called individual information seed. These seeds are stored in the metadata header of isolated modules loaded by isoldr. When isoldr will load a module, it will call a subroutine that encrypts each seed chunk (0x40 bytes) using eid_root_key and eid_root_iv. Then the so-called individual infos are passed in registers r7 to r22 (= 0x100 bytes in total) to the loaded module where they are used further. Usually isolated modules have a seed section of 0x100 bytes but all of them (except sb_iso_spu_module) have all zeroes but the first 0x40 bytes chunk. You can, for example, find the recently published EID0 seed in the metadata section of aim_spu_module. Appliance info manager is used to get e.g. the target ID or the PSID from EID0. This explains why the seed can also be found in isoldr directly, since that one is checking EID0 too.

As you can probably think, a fair amount of reversing time and knowledge has gone into finding this, so stop calling us *swearwords* for not releasing information that could potentially lead to more piracy, because we think that this would do more harm to the “scene” than just keeping some information in private (for now). Also I can only encourage everyone that thinks about us this way or is greedy demanding for developers/reverse engineers to release their stuff, to fire up isoldr in IDA or disassemble it with objdump and try to reverse all this from start to end. We’ll see, who is able to pull this through on his own…

http://nwert.wordpress.com/2012/07/11/eeid-cryptography/

eEID Cryptography by nbors

Rogero CFW V3.4 with PSN/SEN Access

noddy4life — Mon, 09 Jul 2012 04:41:05 +0000

If you got something on your sleeve, then you should try something from Rogero, or better yet, the CFW itself.

1- Privacy Patch removed.
2- Added built in PSN/SEN access, which allows going online with this CFW without any additional tools required
(This CFW have been tested on many slims tonight, but as usual, use it on your own risk…)

Rogero CFW V3.4 with PSN/SEN Access

CEX-to-DEX Conversion Method

noddy4life — Mon, 09 Jul 2012 04:36:00 +0000

Warning this is not for a average user to do please wait for friendly method

Quote: PS3 Crunch

An anonymous member on PS3NEWS has recently posted up a CEX-to-DEX Conversion Guide so that everyone can now modify an ordinary retail PS3 for use with debug firmwares, which can allow you to run unsigned PKG files (and is ideal for those who use DEX PS3s for development-related reasons) and also allow any game to be played regardless of what firmware keys they are signed with (although Squarepusher stated on the PS3Hax thread that “you would need debug EBOOTs for newer games”).

Originally Posted by Some Anonymous Hong Kong-Based Weirdo on PS3NEWS

Hi Scene Sorry for my bad English. I want to give you info you pls make public. I want be anonymous. I only can say Im from Hong Kong. I have way to get a dex, it works and is complete nothing missing

Manual to get a dex (here is everything you needed) and you have a full working dex

EID0 Key Seed and EID0 Section Key Seed are hardcoded in the isoldr

EID0 Key Seed
AB CA AD 17 71 EF AB FC 2B 92 12 76 FA C2 13 0C
37 A6 BE 3F EF 82 C7 9F 3B A5 73 3F C3 5A 69 0B
08 B3 58 F9 70 FA 16 A3 D2 FF E2 29 9E 84 1E E4
D3 DB 0E 0C 9B AE B5 1B C7 DF F1 04 67 47 2F 85

EID0 Section Key Seed
2E D7 CE 8D 1D 55 45 45 85 BF 6A 32 81 CD 03 AF

If you dump they isoldr key (EID Root Key) with metldrpwn you got from 0×00 to 0x1F the EID Root Key and from 0×20 to 0x2F the EID Root IV

use AES Encrypt to Encrypt EID0 Key Seed as data with EID Root Key as Key and EID Root IV as IV

the result contains from 0×10 to 0×20 the EID0IV and contains from 0×20 to 0×40 the EID0Key

Use AES Encrypt to Encrypt the EID0 Section Key Seed as data with the EID0Key as Key and no IV

the result will be the first 0×10 bytes of the EID0 First Section Key

the second 0×10 bytes of the EID0 First Section Key are only 0×00 bytes

EID0 is located in NAND at 0×80870 and in NOR at 0x2f070

the first 0×20 bytes of EID0 are not encrypted

at the fifth byte of EID0 (NOR example 0x2f075) your target ID is located change it to 0×82 (Debug Target ID)

use AES Decrypt to decrypt the first EID0 Section (NOR example 0x2f090). The size of the first Section is 0xC0 bytes. Use the EID0 First Section Key as Key and the EID0 IV as IV

Build the CMAC (OMAC1) hash of the decrypted EID0 Section from 0×00 to 0xA8 with EID0 First Section Key as Key. The calculated hash has to be the same as the bytes in the decrypted EID0 Section from 0xA8 to 0xB8.

At 0×5 of the decrypted EID0 Section is your target id again change it to 0×82 again

0xB8-0xC0 of the decrypted EID0 Section should be just 0×00 bytes

after you changed the target ID of the decrypted EID0 Section, create the CMAC hash of the new decrypted EID0 Section and write the new hash to the decrypted EID0 Section

use AES Encrypt to encrypt the EID0 Section and write it back to the NOR (NAND).

Now install dex Firmware with the recovery menu.

HINT: Got Petitboot on emer init go to boot gameos and do emer init again to get to the recovery menu. However, you cant login to the PSN because IDPS is obviously not valid from now on.

THIS CAN BRICK YOUR CONSOLE IF NOT DONE CORRECTLY.

有志者，事竟成 Where a will, there is way 一不做二不休 You start something, you have to finish it

Additionally, zecoxao from PS3Hax has confirmed this, and here’s what he had to say:

Originally Posted by zecoxao on PS3Hax

btw, you can use flasher, linux or jaicrab’s preloader (basically anything that flashes the dump)aicrab’s preloader only works correctly on NOR’s, you’ll have problems with NAND’s, or so i’ve tested (thanks to a friend of mine )

NEWS SOURCE #1: CEX-to-DEX Conversion Method (original source) – PS3NEWS
NEWS SOURCE #2: CEX-to-DEX Conversion (confirmed by zecoxao] – PS3Hax
NEWS SOURCE #3: CEX-to-DEX Conversion Guide (news posted by tthousand) – PSX-SCENE

CEX-to-DEX Conversion Method

Showtime Disc Access

noddy4life — Sat, 07 Jul 2012 03:43:38 +0000

Developer andbey0nd has released an app/plugin in for Showtime, here is a quote from the ReadMe:

Showtime Disc Access
=======================================

Requirements:

* CFW/MFW 3.41/3.55 with peek/poke/lv1 access (KMEAW/REBUG/ROGERO/HERMES)
* Showtime media player 3.99+ or Showtime for multiMAN (installed in default location)
* Data DVD/CD/BD in the PS3 tray (video/music/photo content)

Purpose:

* Allows access to optical data discs (DVD-R/RW, CD-R/RW, BD-R/RE) which usually are not accessible in homebrew apps
* Minimizes the steps to access content stored on such optical discs (no need to launch multiMAN with DirectDiscAccess)
* Allows Showtime to play all your backup videos/music if you used optical media

Extras:

* You can take screenshots of movies while Showtime is playing
* You can play music from XMB [Music] column while Showtime is displaying photo slideshow
* You can use “Remote Play” to watch videos on your PSP / PS Vita or other compatible devices

Installation:

* Copy “stDISC.pkg” to the root of a USB drive/stick
* Install from [Game] column -> [* Install Package Files]
* “Showtime (Disc access)” entry will appear in the [Video] column in XMB
* Launch it with data disc in the tray
* In 5-10 seconds your Showtime Media Player will load with disc access

Enjoy!

andbey0nd

Download

Source Tortuga Cove

Showtime Disc Access

mmCM ver 04.04.03

noddy4life — Tue, 03 Jul 2012 06:00:52 +0000

Changelog:

* Fixed 4.20 “Fimware Version Spoof” option in “Settings” for (Cobra 3.55CFW)

* Changed function “Game Updates” (different server; function will not work in older versions)

* Changed function “Download Game Covers” (different server; function will not work in older versions)

* Added option “Blu-ray Movie Disc Region” in “Settings” to change current PS3 region/targetid for movie compatibility (for non-Cobra / TB 3.55CFW)

* Added support for ICON1.PAM in themes

mmCM ver 04.04.03

oct0xor releases ps3usercheat v2.2

noddy4life — Fri, 29 Jun 2012 06:01:35 +0000

Release:

Cracked ps3usercheat v2.2 + cheatlist.dat v6.0

Thanks to Khaled Alshabak and all contributors, you motivates me.

Will release a way to modify cheatlist.dat in future.

Have Fun!

http://depositfiles.com/files/07regb2v8

MIRROR LINK: ps3usercheat_v2.2_by_oct0xor_-_flat_z.rar (11.44 MB) via PS3SceneFiles

NEWS SOURCE: http://www.twitlonger.com/show/i2pgq1

oct0xor releases ps3usercheat v2.2

PS3 PSN / SEN Enabler and Disabler

noddy4life — Thu, 28 Jun 2012 04:59:36 +0000

Download: PS3 PSN / SEN Enabler and Disabler / PS3 PSN / SEN Enabler and Disabler (Mirror) / PS3 PSN / SEN Enabler and Disabler (Mirror #2) / PS3 Clear History PSN Stealth Version Mod

To quote, roughly translated: PS3 PSN / SEN Enabler and Disabler

Here’s a Mod homebrew “version spoofer enabler / disabler 9.99″ (creator Evilnat) that allows you to enable or disable the connection to the PSN with a simple package to run.

In this mode, I used the code in the file vsh.self Rebug the team in passing that I make available for their homebrew is compatible for all CFWs.

Installation and use:

Download and unzip the package => PSN_SEN Enabler_Disabler
In the case of the pack, choose the version that matches your CFW (this is very important, not to be mistaken).
Unpack the archive you have chosen and copy / paste the package on a USB FAT32 formatted.
Plug into the console and proceed to “install_package_file” and install the package.
Start PSN_SEN Enabler_Disabler from this icon in the XMB
Put “YES” twice to both questions then asked to ROUND, the console restarts, log on to PSN / SEN in a normal manner.
Disable access to the PSN: Restart PSN_SEN_Enabler_Disabler
Answer “Yes” to the first question, then “NO” to the second then “Yes” to the third, the console reboots, connect to the PSN / SEN is disabled.

NOTE => for those with CFW v2 with update 2.7, you must start your PS3 without the dongle, then activate the connection PSN / SEN, and above all, consider the Disable if you want to raise the console with your dongle. Or you can downgrade to version 2.5, as that will work perfectly with the dongle. Thank T3rr3ur for accuracy provided.

NOTE 2 => if a RSOD (red screen), do not panic, turn on your PS3 in recovery mode (Recovery) and then reinstall all your CFW simply, it will replace files altered by PSN_SEN_Enable_Disabler dev_flash in / vsh / module and dev_flash / vsh / etc. I release myself from all liability for banishment, you know the risks!

PS3 Clear History PSN Stealth Version Mod

Here is a homebrew that lets you clear the cache and history of your PS3 and be a little less recognizable:

Clear History PSN Stealth version (Mod PSNinja_v4):

Download and unzip the archive => clear-history-psn-stealth-version-mod.rar and install the package via “install_package_file”
Clear Run History PSN

Use:

Wipe History, Clear History files
Replace History-history by replacing files in – dev_hdd0/game/BLUS30017/USRDIR/files
Make History Files Only-read your history files become read only. Games and homebrews after you launch will no longer be added to files.
Lets Make History Writable-again writing about history files
Clear Browser History-history.xml deletes the file from the webbrowser
Hide from Friends did you appear offline even if you’re connected to PSN.
Be seen again did you appear online again

Note => Read Only function remains active even after a restart of the console. You must disable the management functions of the history of your managers if they include such options.

Credit => Team Rebug and Evilnat. ARCH.

PS3 PSN / SEN Enabler and Disabler