PS3 4.84.3 STARBUGED (w/ COBRA 8.01) - New update in from Habib

Discussion in 'PS3 Jailbreak CFW and PS3HEN' started by habib, Mar 18, 2019.

By habib on Mar 18, 2019 at 11:21 PM
  1. 1,122

    habib Developer

    Oct 13, 2014
    Likes Received:
    Trophy Points:

    Following the introduction of 4.84 STARBUGED CFW for the PS3, which also gave us the introduction of Cobra v8.0x from developer @habib, Has now followed up that cfw release with 4.84.3 STARBUGED (w/ Cobra 8.01) that contains some more candy for the scene. As the developer has provided new features once again with this update with the ability to Hardcode Kernel Plugins, which can be useful for things like MAMBA (a Cobra Alternative) as it can not be ran as a kernel plugin. Down below you will see the technical aspects of what this update has provided from Ps3 CFW Developer @habib.​



    • 4.84.3 Starbuged + Cobra v8.01 CFW
      Starbuged = Starbucks Release + Rebug Seasoning

      What's New in 4.84.3?
      1. Hardcoded kernel plugin
      2. Whole kernel 8mb is RWX including kernel alloc. you can use sc15 alloc, copy payload and execute like that as well but its better to use opcodes for kernel plugins
      3. Fixed minor bug in non cobra sc15​

      what does it do?

      • it loads plugins from /dev_hdd0/boot_plugins_nocobra.txt and boot_plugins_kernel_nocobra.txt
      • it fixes issue where nocobra and hdd format will make ps2 not work on bc/semi-bc

      what plugins can do?
      • load mamba and isolate cobra functions, modify it. e.g ps3mapi without cobra. i hate cobra being bloated with homebrew blockers etc

      for devs:
      • for mamba payload hdd0 is already mounted, prefer to load your code in main() instead of using the cellfsutil hook...regardless mamba works 90%
      • also dont forget to remove dev_hdd0/tmp/loadoptical flag for bc and semi-bc ps3

      cobra plugins will NOT work when cobra disabled

      • FEATURE – COBRA 8.01 (Enabled by default)
        • Background running plugins at boot time (sprx)
        • ISO Support: PS1/PS2/PS3/PSP/DVD/BluRay (Split ISO support on FAT32 drives)
        • Network Support: PS1/PS3/DVD/BluRay /PKGs
        • Blu Ray Movie region free functionality NTFS HDD Support (prepNTFS, or multiMAN Required to scan contents)
        • PS2 ISO Support for BC (HW) / non-BC (SW) Consoles
        • Syscall 11 – Cobra lv1 Peek
        • Syscall 15 – Allow execution of any LV2 internal function
        • PSNPatch stealth plugin support
          • ***ISO rips are required to get 100% support, for ex) after disabling syscalls, games like Call of Duty will not be able to play unless you use ISO rips, please DO NOT expect everything to be fully functional when you are disabling the built-in features from COBRA. Folder rips are NOT compatible with PSNPatch’s stealth mode due to its ability to disable COBRA’s disc-less feature for folder JB rips****
        • PS3MAPI support, allows you to attach process on both CEX/DEX via its own API app.
        • Backup Protection Removal, Add full PS3 Backup support on all multiMAN/sMAN/webMAN,IRIS manager forks and Managunz.
        • Allow modification on Syscall 6/7/8/9/10/11/15.
        • Burned/Burnt optical media support for PS1/PS3 Games on All models
        • Homebrew blocker – blocks homebrew access while Syscalls are disabled
        • Added in v8.00 Run payload with Kernel privileges - Added option to run payload with kernel privileges like ps vita skprx. this is a big thing! one can make hooks, printf to socat, do whatever they feel like they need to do. at the current time only one payload is supported at a time. in the future i might increase this
        • Added in v8.00 Boot times speed improved - as there is no stage1.
        • Added in v8.00 PS2 bc and semi bc consoles wont load iso when cobra disabled - disable cobra using opcode)
        • Added in v8.01 Added support for dynamic memory payloads, 5 of them can be started from "/dev_hdd0/boot_plugins_kernel.txt"
        • Added in v8.01 toolchain updated to support dynamic address loading.
          Added in v8.01 For applications, you can also mount em, and unmount em separately
      • FEATURE – Full Polish support for XMB/PS2 Emu (Provide full Polish character support)
      • FEATURE – Cinavia protection fully disabled (Supports optical media/bd iso, AACS must be decrypted)
      • FEATURE – Homebrew store compatibility (Downloading debug signed packages is now available on retail CFW.)
      • FEATURE – PSN/SEN Accessibility (PSN /SEN Accessible , until the next OFW update)
      • FEATURE – XMBM+ Compatibility (XMB Manager Plus developed by Team XMBM now supported via standalone pkgs.)
      • FEATURE – HAN Toolbox Compatibility (HAN Toolbox Support added for testing HAN Signed pkgs on CFW)
      • FEATURE – Enhanced Remote Play (This unlocks the limitation of working apps/games for remote play, by disabling SFO flag check)
      • FEATURE – In Game Screenshot (Allows taking screenshots in Game
      • FEATURE – QA Token compatibility
      • FEATURE – OtherOS++ support enabled (Use Rebug Toolbox to Boot OtherOS with different LV1 patches)
      • FEATURE – Package Manager (Replacement for the standard ‘Install Package Files’ option)
      • FEATURE – FSELF compatibility (Fake Signed ELF is supported)
      • FEATURE (Optional) Toolbox 02.03.00
        • TOGGLE XMB CFW SETTINGS Enable or Disable mysis’s XMB CFW settings plugin v0.1. The feature is available via Network Column on XMB after Enabled.
        • TOGGLE COBRA MODE: COBRA mode ACTIVE by default, this option can toggle COBRA mode to enable COBRA 8.00 payload on boot
        • TOGGLE QA: Enable/Disable QA flag. Enable for easy downgrade and other extra features on all 3.55-4.84 CFW.
        • TOGGLE RECOVERY MODE: Enable/Disable Recover Mode flag. When enabled your PS3 will reboot into Recovery Mode.
        • LOAD LV2 KERNEL: Load lv2_kernel.self.[KERNEL_NAME] from USB or /dev_hdd0
        • BACKUP/RESTORE XREGISTRY: Backup or Restore the PS3 system settings from USB
        • RESIZE VFLASH/NAND REGIONS: Resize VFLASH/NAND Region 5 to allow install of OtherOS.
        • INSTALL PETITBOOT: Install Petitboot to VFLASH/NAND Region 5 from USB.
        • SET GAMEOS BOOT FLAG: Sets the GameOS boot flag. Use this if your PS3 is having trouble booting PS2 titles after running OtherOS or is accidentally sending you back to OtherOS when trying to enter recovery mode.
        • CREATE PACKAGES FOLDER ON PS3: Create /dev_hdd0/packages folder or your PS3 to be used with Package Manager.
        • EXPORT HYPERVISOR LV1 MEMORY: Save LV1 memory to dev_usb000 or dev_usb006 or dev_hdd0 if usb is not found.
        • EXPORT GAMEOS LV2 MEMORY: Save LV2 memory to dev_usb000 or dev_usb006 or dev_hdd0 if usb is not found.
        • EXPORT FLASH TO FILE: Backup your current NOR/NAND to file on dev_usb000. Takes about 45secs for NAND
        • DUMP EID ROOT KEY: Dump your eid root key.
      • FEATURE – XMB CFW settings v0.1a (Optional)
        • XMB Icons for various CFW tasks, available in Network Column (on XMB) Simply select and the task is executed!
        • Settings – Toggle COBRA
        • Dump Tools – Klicense, File Secure ID, IDPS, Disc Hash keyService Tools – Display Minimum Downgrade FW Version, Rebuild Database, Check File System, Entering Recovery Mode (NOR Models Only)
        • Advanced Service Tools – Entering FSM (!!!DO NOT Install FW while on FSM that may lead RSOD!!!), Remarry BD drive and RSOD fix
      • PATCHED – Appldr: LV2 memory hash check is disabled (Memory protection on LV2 is disabled in higher level)
      • PATCHED – LV1: Disable System Integrity Check (Safe to use with mismatched COREOS/SYSCON versions or if PS3 is not QA enabled)
      • PATCHED – LV1: Undocumented function 114 (Allow mapping of protected memory)
      • PATCHED – LV1: Skip all ACL Checks (Needed to allow booting of OtherOS)
      • PATCHED – LV1: Peek and Poke support (Unused LV1 call 182 and 183)
      • PATCHED – LV2: Peek and Poke support (LV2 Syscall 6 and 7)
      • PATCHED – LV2: Peek and Poke support for LV1 (LV2 Syscall 8 and 9)
      • PATCHED – LV2: LV1 CALL System call (LV2 Syscall 10)
      • PATCHED – LV2: Allow execution of any LV2 internal function (LV2 Syscall 15)
      • PATCHED – Recovery: Prevent accidental OFW update while on Recovery mode
      • PATCHED – VSH: Allow Unsigned act.dat and *.rif files
      • PATCHED – VSH: Disable NEW PSP DRM Check (Allowing unsigned PSP pkg contents on 4.75 or higher CFW)
      • PATCHED – VSH: Disable Epilepsy Warning for Faster Boot-Up Speed

    Download (& Source Code): 4.84.3 STARBUGED
    Last edited by a moderator: Mar 19, 2019
    rocknard, RandomDude, T.A.U and 15 others like this.


Discussion in 'PS3 Jailbreak CFW and PS3HEN' started by habib, Mar 18, 2019.

    1. Casavult
      This is a massive thing. Thanks @habib
      esc0rtd3w, DeViL303 and habib like this.
    2. Johnnie
      very good job excellent, thank you very much.
      Rommy667 and DeViL303 like this.
    3. xiaoyang
    4. DEX357
      @habib still surprises me with a great job, it would also be useful to improve backwards compatibility :)
      DeViL303 likes this.
    5. SiegHart93
      thanks @habib for everything you're doing , it's nice to see cool people doing nice stuff for the old beast ps3 :D
      DeViL303 likes this.
    6. habib
      @aldostools wanna update mamba like this? Assume hdd0 is mounted in storage_ext and add to boot_plugins_kernel_nocobra.txt

      uint64_t test=*(uint64_t *)MKA(0x17e0);
      You can add a check if(!cobra && test) hdd0_mounted=1;
      T.A.U, Xx11xx22xX and aldostools like this.
    7. aldostools
      Thanks for the code. I have to find some free time to try it. I've been busy giving some love to webMAN MOD ;)
      T.A.U, Xx11xx22xX and habib like this.
    8. habib
      Just an FYI your non cobra webman works with boot_plugins_nocobra.txt
      T.A.U, Xx11xx22xX and aldostools like this.
    9. aldostools
      LOL it's not mine... it's deank's non cobra webman + MOD :) BTW it uses multiMAN's payload.
      T.A.U and habib like this.
    10. Estox
      Stupid question. What is mamba? :sem blush:
    11. aldostools
      Mamba is a small snake that is very venomous of the same family of cobras: the Elapidae.

      Here is a picture of she :)

      In the PS3 world, "mamba" is the name of a modified version of the Cobra payload. "mamba" was created by the Spanish developer Estwald as way to have universal ISO support for his backup manager Iris Manager without having to rely on a CFW based on Cobra. At that time (2013), Cobra source code was recently released, only 4.46 supported Cobra and Joonie had not started to work on Rebug/Cobra yet.

      Indeed "mamba" is a very clever name. He chose it to avoid confusion with the original payload "cobra", but keeping the association that both belong to the same family.

      Originally "mamba" payload only supported PS3 ISO, PSX ISO and BD/DVD ISO (thus the reference to the "small snake") because they required a minimal amount of "symbols" (offsets of system functions in GameOS), making it easier to port to future firmware versions. PS2 and PSP require much more offsets from other system files (which at that time were very difficult to find). So, being a smaller payload, "mamba 2.x" is very "venomous" because it's easier to port than "cobra", keeping its most important features, and the cherry on top: the payload now can be loaded at any time.

      Later other developers like Rancid-0 and Team PS3ITA added the ability to play PS2 & PSP ISO in "mamba 3.x". And the developer NzV improved the new_core (another tool developed by the developers Estwald and MLT) creating Mamba AutoLoader, a tool that allows to load Mamba payload and prx plugins when the system starts. These 2 developments filled the gap between "mamba" and "cobra", making "mamba 3.x" a complete alternative replacement for "Cobra".

      The recent PS3HEN payload by habib for PS3 consoles non-compatible with CFW, is another modified version of Cobra. So PS3HEN can be considered another elapidae snake, daughter of Cobra payload and sister of MAMBA :)
      Last edited: May 13, 2019
      T.A.U, disyoko, Rommy667 and 8 others like this.
    12. DEX357
      Good material for a documentary video on YouTube :eagerness:
      aldostools and Estox like this.
    13. Estox
      Man thx for your very good reply. So Mamba got the same functions than cobra, or do you pref. on of these? and why.
    14. aldostools
      Mamba 2.x does *not* have the same functions. Mamba 3.x is almost identical to Cobra.

      Mamba and Cobra have their own advantages:
      - Mamba 2.x is easier to port to newer CFW
      - Mamba (2.x and 3.x) can be loaded at any time (not only when the system starts)
      - Mamba (2.x and 3.x) is more portable and more stealth, it can be loaded from anywhere (USB, hdd, DVD, etc.)
      - Mamba is safer: as it can be loaded when the system is fully ready, there is less risk of a semi-brick
      - Cobra starts with the system and it does not require extra tools to load it
      - Cobra has more support from devs than Mamba. Cobra generally is ported first, then Mamba
      - Cobra usually is more polished than Mamba (Joonie is insanely meticulous with his work)
      Last edited: Mar 20, 2019
      T.A.U, disyoko, Zar and 5 others like this.
    15. noname99zzz
      From what I understand IRISMAN packages the MAMBA payload. But while IRISMAN has been periodically updated, MAMBA/PRX Loader hasn't been updated in more than two years. So effectively MAMBA can't be used independently on recent CFWs.

      Why hasn't anyone updated the MAMBA/PRX Loader?
    16. aldostools
      That's correct.

      MAMBA/PRX Loader is a project started by NzV, who apparently is retired from the scene. He even removed the source code from his github.

      A very small number of developers are still working on PS3 projects (own or from others).

      IRISMAN can load MAMBA payload on almost any CFW. So you can use MAMBA, what you can't is load it automatically when the console starts on a standard CFW.

      I don't know... possible reasons are:
      - The limited number of developers still interested on PS3 development
      - It's more practical to use a Cobra CFW like Rebug than a standard CFW + MAMBA/PRX Loader
      - The original goal of MAMBA of being easier to port to future CFW has vanished, due the availability of Cobra CFW even the same day of the release of a new firmware version.
      Last edited: Mar 21, 2019
      T.A.U, Rommy667 and noname99zzz like this.
    17. notmeabug
      Hello. I would like to ask a question about PS3's PS2 emulator which loads PS2 iso on CFWs with Cobra abilities.
      I can not understand how exactly it is working. I mean, we do next: using one of the multimanagers, mounting PS2 ISO. Quit from multimanager to XMB and launch it as is. But what is happening at this stage?
      I do not see a special emulator in /dev_flash/ps2emu folder in any of the CFWs.

      I have SuperSlim with FW v4.50 and still working Cobra ODE, with which I can launch non-drm selfs from the prepared PS3 isos mounted using this device.
      So I am asking that question because I would like to know - is there any chance to prepare something like this:
      PS3 iso with one of a resigned ps2emu and a files scratched from PS2 iso?
      Or any other way which represents a non-drm resigned ps2emu?

      Or maybe to make an sprx from ps2emu and launch it using some PRX loaders with some parameter, for example (like a line in prxloader's ***prx.txt),

      If anyone have no idea about this then maybe you'll kindly explain for me what is changed in Cobra CFWs to get launching PS2 iso mounted to /dev_bdvd
    18. aldostools
      1- Mamba/PRX Loader 4.84.1 and its source code:

      This version jumps from 3.1.4 to 4.84.1 to match with the latest CFW version that it supports.
      It adds support to 4.82, 4.83, 4.84 CEX / DEX / DEH(?)

      Mamba 4.84 is based on the source code included in ManaGunZ 1.3.5 by @Zar and @littlebalup, modified with some of the features of Cobra 8.01 by @habib & @Joonie

      Disclaimer: I haven't tested these changes. So I advice to first test the loader & payloads from XMB before try to use the AutoLoader to avoid issues like semi-brick.

      2- This archive has IRISMAN 4.84.2 including the SRC and PKG with the same payloads.

      3- And webMAN MOD 1.47.14 is also available ;)

      FYI @STLcardsWS
      El Marco, T.A.U, STLcardsWS and 4 others like this.
    19. STLcardsWS
      Thanks Aldo :)

      I assume IRISMAN 4.84.2 provides DEX support?

      i see it has the updated mamba autoloader also
      aldostools likes this.

Share This Page