Dismiss Notice

BEWARE of IMPOSTERS, posing as the PS3Xploit Members/Team:


  -PS3Xploit does NOT have a discord channel, some imposter are using one
 

  -If the info can't be found on ps3xploit.com or psx-place.com its fake
 

  -ZuKuTo / OFWModz is one of the fake names of these imposter's are using to represent the PS3xploit team.

 

 

PS3 Extract data about users on the console

Discussion in 'PS3Xploit HAN (nonCFW Compatable Models)' started by hp2121, Sep 1, 2018.

  1. 12
    4
    7
    hp2121

    hp2121 Forum Noob

    Joined:
    Aug 9, 2018
    Messages:
    12
    Likes Received:
    4
    Trophy Points:
    7
    Gender:
    Male
    Hello,

    I read the pswiki and I wonder if someone has created a tool to extract data about users.
    That could be useful for users that forgot which their PSN ID online (not the mail , the pseudo) or the birth day on their account
     
    blakluv69 likes this.
  2. 306
    225
    97
    Zazenora

    Zazenora Member

    Joined:
    May 18, 2018
    Messages:
    306
    Likes Received:
    225
    Trophy Points:
    97
    Gender:
    Male
    Occupation:
    Amateur Game Developer
    Location:
    Lost In Space
    Home Page:
    Edit - This post was incorrect and may have confused anyone reading about this topic. Therefore I decided to delete it.
     
    Last edited: Sep 1, 2018
  3. 1,903
    2,055
    397
    pink1

    pink1 Moderator Developer

    Joined:
    Feb 25, 2015
    Messages:
    1,903
    Likes Received:
    2,055
    Trophy Points:
    397
    Gender:
    Male
    Your info should be in the XRegistry.sys it shouldn't be to hard to get if you have that file. You can also find a few tools on the wiki for working with it.
     
    Zazenora likes this.
  4. 306
    225
    97
    Zazenora

    Zazenora Member

    Joined:
    May 18, 2018
    Messages:
    306
    Likes Received:
    225
    Trophy Points:
    97
    Gender:
    Male
    Occupation:
    Amateur Game Developer
    Location:
    Lost In Space
    Home Page:
    Guess I was wrong xD, like I said though I wasn't an expert on such topics.
    I learn things here everyday.
     
    cygmon0 likes this.
  5. 1,903
    2,055
    397
    pink1

    pink1 Moderator Developer

    Joined:
    Feb 25, 2015
    Messages:
    1,903
    Likes Received:
    2,055
    Trophy Points:
    397
    Gender:
    Male
    I think most of us are still learning new stuff all the time :)
     
  6. 13,033
    5,224
    647
    pinky

    pinky Retired Developer

    Joined:
    Mar 8, 2015
    Messages:
    13,033
    Likes Received:
    5,224
    Trophy Points:
    647
    Gender:
    Male
    Location:
    The Great Gig in the Sky
    yes, the xregistry editor is on brewology. the xregistry is separated by profile/uxer number (i.e. 0000000x), so first turn the content into a text file (there's an option for this), then search for the info using that profile number where x is the profile/user id. that x could be 000000xx, like mine, if you're created multiple profiles. ;)
     
    cygmon0 and Zazenora like this.
  7. 12
    4
    7
    hp2121

    hp2121 Forum Noob

    Joined:
    Aug 9, 2018
    Messages:
    12
    Likes Received:
    4
    Trophy Points:
    7
    Gender:
    Male
    Thanks @pink1 : also never heard of this part ^^
    I personaly think that could help users (like me) that forgot some data many years later ^^

    In the backup export folder I got, only basic information are extracted :

    netshare.bX : a xml file that stores sharing stuff (Facebook , etc)
    np_cache.dat : a file that contains the PSN ID ( aka pseudo ^^) and latest avatar url from psn
    localusername : as the name says XD

    So information like /setting/user/<userid>/npguest/birth cannot be retrieved normaly after some restore/backup operations
     
    blakluv69 and Zazenora like this.
  8. 13,033
    5,224
    647
    pinky

    pinky Retired Developer

    Joined:
    Mar 8, 2015
    Messages:
    13,033
    Likes Received:
    5,224
    Trophy Points:
    647
    Gender:
    Male
    Location:
    The Great Gig in the Sky
    the xregitry editor comes with a sample--with the personal information stamped out of course! you might look for it in there before you start messing with your own.
     
  9. 12
    4
    7
    hp2121

    hp2121 Forum Noob

    Joined:
    Aug 9, 2018
    Messages:
    12
    Likes Received:
    4
    Trophy Points:
    7
    Gender:
    Male
    Yes : an example is always useful ^^

    In their example, I got 07C0 03 08 (YYYY MM DD in hex) so their example gives 1984/03/08 .
    Next step , find a way with ps3Xploit HAN to retrieve this file ( /dev_flash2/etc/xRegistry.sys ) ^^
     
  10. 205
    263
    122
    NewFile

    NewFile Developer

    Joined:
    Oct 11, 2017
    Messages:
    205
    Likes Received:
    263
    Trophy Points:
    122
    Gender:
    Male
    Use the Backup Utility in the System settings to create a backup of the your PS3. Then go to PS3Xploit site and use the IDPS dumper to dump your IDPS to USB and reanme the idps.hex to idps.bin.
    Use TABR , place backup folder of the usb in the backup folder of TABR amd idps in the idps folder. Open retailer.exe and select the backup and then select the extract option.
    Check the extract folder. If done correctly you will dev_flash2 in the folder with the same name as the backup of the PS3.
    The only other option would be to wait for such a feature (dump/inject of xregistry for HAN) from the PS3xploit team.
     
    hp2121, Zazenora and sandungas like this.
  11. 12
    4
    7
    hp2121

    hp2121 Forum Noob

    Joined:
    Aug 9, 2018
    Messages:
    12
    Likes Received:
    4
    Trophy Points:
    7
    Gender:
    Male
    Code:
    ===============================================================================
     Backup Folder List
    ===============================================================================
     1. 201501021612
    ===============================================================================
     Note: Backup folder should named like 20YYMMDDHHMI.
    ===============================================================================
    [?] Enter Backup Folder number to extract / B to Back:1
    [*] idps.bin is ok, the whole backup can be extracted.
    [*] Extracting Backup 201501021612...
    Error making directories
    [*] Extracting finished, get files in extracted\201501021612.
    [*] Press any key to continue...
    Strange , used as administrator on path : C:\Users\jy95\Documents and I got this error "Error making directories" ...
     
  12. 205
    263
    122
    NewFile

    NewFile Developer

    Joined:
    Oct 11, 2017
    Messages:
    205
    Likes Received:
    263
    Trophy Points:
    122
    Gender:
    Male
    I had this happen to myself aswell. You see the tools are a little buggy and things don't always work out like we want to. Eitherway, just some more extra work to get your info. Let me guide you along, tested by myself and a very good workaround.

    In the PS3 backup folder, you will an archive2.dat,archive2_00.dat ,archive2_0x.dat.
    For all those archive_2_0x.at you need to decrypt them.

    *Copy from TABR tool folder the files: keys.conf & ps3xport.exe to the TABR/backup folder, not in your PS3 backup folder in there. Also copy the idps.bin to it.

    *Create a .bat file in the root of the TABR/backup folder and add this:
    Code:
    ps3xport.exe SetDeviceID idps.bin Decrypt 200601010304/archive2_00.dat  decrypt1.dat
    pause
    
    200601010304 ** Replace this with your PS3 backup folder name.

    A new decrypt.dat will appear in the root folder of TABR/backup. You need to repeat this process of all files of archive2_0x.dat. You may or may not have more than one.
    If you do then repeat it, ex:
    Code:
    ps3xport.exe SetDeviceID idps.bin Decrypt 200601010304/archive2_01.dat  decrypt2.dat
    pause
    
    After you finish with these you already have the data from flash2 decrypt but packed. To get the xresigtry.sys you need to extract it.
    Get Hxd (The hex editor)
    Open all the .dat decrypt files that you have generated.

    *For each of them:
    Search->Find->Hex Values Search type (this is important) ->
    Code:
    BCADADBC
    There will be several results. press F3 to go to the next one. If no results at all then search in the next .dat file.

    How do you know the correct results? Look for readable string after the result and not hex garbage, example:

    [​IMG]

    While those bytes are highlighted, press CTRL + E

    In the size field enter:
    Code:
    40000 
    [​IMG]

    Pres ok. Copy the highlighted bytes, File-New , paste the bytes , press OK and then save the file as xregistry.sys!
    There you go, should work for you if done correctly.

    **After this keep doing the search with those four bytes, There are 2 xregistry.sys , because one is in the etc folder and the other in the /ext/backup folder
    Example. (in my case the other registry was right after the first one)
    [​IMG]

    The error about directories most likely comes dues to weird filename, directory of the files of the backup. There are probably accepted in the PS3 filesystem but not in Windows.
     
  13. 12
    4
    7
    hp2121

    hp2121 Forum Noob

    Joined:
    Aug 9, 2018
    Messages:
    12
    Likes Received:
    4
    Trophy Points:
    7
    Gender:
    Male
    Very good tutorial (that could be on psdevwiki ^^) ; guess what the researched data was in the first register. I found this information in the 2015 backup but inside the archive2_28.dat ....

    xRegistry.sys Editor 0.75 provided the requested data ^^
     
    Zazenora likes this.
  14. 205
    263
    122
    NewFile

    NewFile Developer

    Joined:
    Oct 11, 2017
    Messages:
    205
    Likes Received:
    263
    Trophy Points:
    122
    Gender:
    Male
    So what was the researched data in the forst registry?
    The 28 archive, you certainly had a big backup.
     
    Last edited: Sep 3, 2018
  15. 12
    4
    7
    hp2121

    hp2121 Forum Noob

    Joined:
    Aug 9, 2018
    Messages:
    12
    Likes Received:
    4
    Trophy Points:
    7
    Gender:
    Male
    Old accounts I don't remember the passwords / date of birth / email ^^
    It was the good time I was forced to create multiple accounts because some games simply doesn't exist on the Europe store (example : Counter Strike ) or were cheap with the eur/dollar ratio at this time ^^

    Now that I retrieved most of them , gotta backup the games inside the recent backup. Hope I can find a tutorial about that ^^

    Edit : ps3xportGUI extract with path "/dev_hdd0/game/ " seems to take only not-protected data ... Thanks PSDLE exists to got them as pkg on these accounts
     
    Last edited: Sep 4, 2018

Share This Page