[GUIDE] Unbrick a PS3 after an unfortunate PS3Xploit flash

Discussion in 'Tutorials & Guides' started by littlebalup, Dec 16, 2018.

  1. 5
    0
    5
    Gurk

    Gurk Forum Noob

    Joined:
    Mar 25, 2019
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    5
    Gender:
    Male
    Damn! will try to look for an expert. The one I got referred to in my town is even more noob than me. Fellow doesn't even know what bricking is!!! :) Hate what I got myself into, but will follow your input. Thanks for your wonderful advice.
     
  2. 8
    0
    30
    ThiagoSza

    ThiagoSza Member

    Joined:
    Feb 28, 2015
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    30
    Exists, CosOFW483.BIN?
    I have a PS3 3k bricked in 4.83

    Thanks for the tutorial
     
  3. 1,170
    1,179
    272
    littlebalup

    littlebalup Developer PSX-Place Supporter

    Joined:
    Oct 16, 2014
    Messages:
    1,170
    Likes Received:
    1,179
    Trophy Points:
    272
    Location:
    43°36'16.0"N 1°26'36.1"E
    ThiagoSza likes this.
  4. 8
    0
    30
    ThiagoSza

    ThiagoSza Member

    Joined:
    Feb 28, 2015
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    30
    I do not know how it was :nonchalance: , I bought this ps3 and the old owner said he had exploit 4.82, when he updated to 4.83, he gave brick.
    Now I applied this patch CosOFW483.BIN (THANK YOU FOR THE PATCH littlebalup), ps3 came back to work, but with RSOD.
    Would you be able to fix RSOD on a Ps3 3K?

    Checking the nor in the PS3 Dump Checker, it accuses error in the sector: 010.02 cvtm0 Header:
    Result of the check: False
    Offset: 0xEC0000
    53 43 45 49 FF FF FF FF FF FF FF FF FF FF FF FF
    00 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF
    00 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF

    Current Date:
    43 53 49 45 FD FF FF FF FF FF FF FF FF FF FF FF
    Any tips to fix?
    thank you
     
  5. 1,170
    1,179
    272
    littlebalup

    littlebalup Developer PSX-Place Supporter

    Joined:
    Oct 16, 2014
    Messages:
    1,170
    Likes Received:
    1,179
    Trophy Points:
    272
    Location:
    43°36'16.0"N 1°26'36.1"E
    We can't use RSOD fix tools on those models. But maybe we can fix the dump manually or even inject clean cvtrm from a donor dump.
    Send me your dump by pm, I'll had a look.
     
    Louay, ThiagoSza and DeViL303 like this.
  6. 8
    0
    30
    ThiagoSza

    ThiagoSza Member

    Joined:
    Feb 28, 2015
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    30
    I sent by pm
    thank you
     
  7. 1
    0
    30
    nark_200

    nark_200 Member

    Joined:
    Mar 1, 2015
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    30
    my console is brick
    i download all programs but link
    CosOFW484.BIN
    is broken please upload in another site
     
  8. 8
    0
    30
    ThiagoSza

    ThiagoSza Member

    Joined:
    Feb 28, 2015
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    30
  9. 1,280
    746
    222
    Louay

    Louay Senior Member

    Joined:
    Jan 23, 2017
    Messages:
    1,280
    Likes Received:
    746
    Trophy Points:
    222
    Gender:
    Male
    Occupation:
    College student
    Location:
    Tunisie
    Home Page:
    @littlebalup i am technician and do jailbraik of many ps3 i can send you a good dump that have all 138 checks OK but how exactly the injection of cvtrm !! by Hex, right ? like this the cvtrm block is from 0xEC0000 to 0xEFFFFF and length is 40000

    upload_2019-3-28_18-42-10.png
     
    Last edited: Mar 28, 2019
  10. 1,170
    1,179
    272
    littlebalup

    littlebalup Developer PSX-Place Supporter

    Joined:
    Oct 16, 2014
    Messages:
    1,170
    Likes Received:
    1,179
    Trophy Points:
    272
    Location:
    43°36'16.0"N 1°26'36.1"E
  11. 1,280
    746
    222
    Louay

    Louay Senior Member

    Joined:
    Jan 23, 2017
    Messages:
    1,280
    Likes Received:
    746
    Trophy Points:
    222
    Gender:
    Male
    Occupation:
    College student
    Location:
    Tunisie
    Home Page:
    Last edited: Mar 28, 2019
  12. 1,280
    746
    222
    Louay

    Louay Senior Member

    Joined:
    Jan 23, 2017
    Messages:
    1,280
    Likes Received:
    746
    Trophy Points:
    222
    Gender:
    Male
    Occupation:
    College student
    Location:
    Tunisie
    Home Page:
    Haaha i break that cvtrm and do the operation all the dump comes back Good @littlebalup that tool is formidable ;) ;)

    upload_2019-3-28_19-8-45.png
    upload_2019-3-28_19-9-11.png
    upload_2019-3-28_19-10-3.png
    upload_2019-3-28_19-10-12.png
    upload_2019-3-28_19-10-53.png
     
  13. 2
    0
    5
    venenodcuba

    venenodcuba Forum Noob

    Joined:
    May 17, 2018
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    5
    hi, for me work but stock in error 8002f157
     
  14. 4
    0
    5
    Maikeltoledo19

    Maikeltoledo19 Forum Noob

    Joined:
    Apr 2, 2019
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    5
    Gender:
    Male
    [​IMG]

    - Haga clic en el botón "Forzar parche"
    [​IMG]

    - Obtendrá un nuevo archivo de volcado parcheado listo para flashear en su NOR.



    Hola amigo me puedes ayudar Mire, le diré hasta este punto. Pegue el archivo "CosOFW48 x .BIN" que descargó en el paso 1 y su archivo de volcado en la carpeta del script. - Cambie el nombre de "CosOFW48 x .BIN" a "patch.bin"
    there I pass to the bkpps3.bin or the bkpps3.patch.bin ????


    Hello friend, can you help me? Look, I'll tell you until this point. Paste the file "CosOFW48 x .BIN" that you downloaded in step 1 and its dump file into the script folder. - Change the name of "CosOFW48 x .BIN" to "patch.bin"
    there I pass to the bkpps3.bin or the bkpps3.patch.bin ???
     
    Last edited by a moderator: Apr 2, 2019
  15. 1,280
    746
    222
    Louay

    Louay Senior Member

    Joined:
    Jan 23, 2017
    Messages:
    1,280
    Likes Received:
    746
    Trophy Points:
    222
    Gender:
    Male
    Occupation:
    College student
    Location:
    Tunisie
    Home Page:
    you don't have to rename CosOFW in PS3DumpChecker just select it in custom ROS and then click OK then force patch both ros will be on same version and if everything want good ros0 and ros1 will be green and all the dump Should be OK after that flash your ps3 with the good dump
     
    Yugonibblit likes this.
  16. 3
    0
    5
    Panchorrito

    Panchorrito Forum Noob

    Joined:
    Apr 7, 2019
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    5
    Hello, thanks in advance, I have ps3 30xx 4.84, brick Ps3Xploit v2, it shuts down at about 10 seconds, use teensy 2.0 ++ Norway.hex scheduled. I have made 3 dumps, compared are identical. Check with Ps3dumpchecker last version and validate it correctly "OK" in green all, when you see in detail the ROS0 and ROS1 patched (ps3xploit v2) in green. I make the patch CosOFW48x.BIN using PyPs3patcher,. Now with the new file "dump-patched.bin" I check it using Pyps3cheker, all the lines "ok, ok, ok ...."

    I write the patched dump but without success, it does not work. I've read the forum and the answers, I do not know what I'm doing wrong.

    I ask for suggestions. Thank you.



    Enviado desde mi CAM-L23 mediante Tapatalk
     
  17. 3
    0
    5
    Panchorrito

    Panchorrito Forum Noob

    Joined:
    Apr 7, 2019
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    5
    Code:
    PyPS3checker v0.9.x. Check log.
    
    Checked file : C:\Users\Isaias\Downloads\PyPS3tools-8dd32bdd2923e08bc86cb1aae6c8c2eef41e65df\PyPS3tools-8dd32bdd2923e08bc86cb1aae6c8c2eef41e65df\PyPS3checker-standalone-package_2019-03-03_130427\dump1_patched.bin
    
    
    ******* Getting flash type *******
      Flash type : NOR
      Reversed : NO
    
    
    ******* Getting SKU identification datas *******
      idps = 0x0C
      metldr0 = 0xF920
      metldr1 = 0x0F8E
      metldrkey = 0x656EC1D96595F85C1F9C6196
      bootldr0 = 0x2FFB
      bootldr1 = 0x2FFB
      bootldrsize = 0x2FFF0
    
      Matching SKU : OK
       CECH-30xxx (KTE-001)
       Minimum version 3.65
     WARNING: The machine this dump belongs to is currently not downgradeable!
    
    
    ******* Getting SDK versions *******
      ROS0 : 484.000
      ROS1 : 484.000
    
    
    ******* Checking first_region_header *******
    001.01   First Region Header 0x00 Filled Area 0 : OK
    001.02   First Region Header Magic : OK
    001.03   First Region Header 0x00 Filled Area 1 : OK
    
    
    ******* Checking flash_format *******
    002.01   Flash Format String : OK
    002.02   Flash Format Version : OK
    002.03   Flash Format 0xFF Filled Area : OK
    
    
    ******* Checking flash_region_table *******
    003.01   Flash Region Table Header : OK
    003.02   asecure_loader Offset - Length : OK
    003.03   asecure_loader Name : OK
    003.04   eEID Offset - Length : OK
    003.05   eEID Name : OK
    003.06   cISD Offset - Length : OK
    003.07   cISD Name : OK
    003.08   cCSD Offset - Length : OK
    003.09   cCSD Name : OK
    003.10   trvk_prg0 Offset - Length : OK
    003.11   trvk_prg0 Name : OK
    003.12   trvk_prg1 Offset - Length : OK
    003.13   trvk_prg1 Name : OK
    003.14   trvk_pkg0 Offset - Length : OK
    003.15   trvk_pkg0 Name : OK
    003.16   trvk_pkg1 Offset - Length : OK
    003.17   trvk_pkg1 Name : OK
    003.18   ros0 Offset - Length : OK
    003.19   ros0 Name : OK
    003.20   ros1 Offset - Length : OK
    003.21   ros1 Name : OK
    003.22   cvtrm Offset - Length : OK
    003.23   cvtrm Name : OK
    003.24   Flash Region Table 0x00 Filled Area : OK
    
    
    ******* Checking asure_loader_region *******
    004.01   asecure_loader Header : OK
    004.02   metldr Offset : OK
    004.03   metldr Length : OK
    004.04   metldr Name : OK
    004.05   metldr RevKey : OK
    004.06   metldr Binary Size : OK
    004.07   metldr Statistics : OK
    004.08   asecure_loader 0x00 Filled Area : OK
    
    
    ******* Checking eEID_region *******
    005.01   eEID Header : OK
    005.02   EID0 Offset - Length : OK
    005.03   EID1 Offset - Length : OK
    005.04   EID2 Offset - Length : OK
    005.05   EID3 Offset - Length : OK
    005.06   EID4 Offset - Length : OK
    005.07   EID5 Offset - Length : OK
    005.08   EID0 IDPS0 : OK
    005.09   EID0 IDPS1 : OK
    005.10   EID0 Static : OK
    005.11   EID2 BlockSize/Padding : OK
    005.12   EID3 Static0 : OK
    005.13   EID3 Static1 : OK
    005.14   EID3 Static2 : OK
    005.15   EID5 IDPS0 : OK
    005.16   EID5 IDPS1 : OK
    005.17   EID5 Static : OK
    005.18   eEID Region 0xFF Filled Area : OK
    005.19   eEID Statistics0 : OK
    005.20   eEID Statistics1 : OK
    
    
    ******* Checking cISD_region *******
    006.01   cISD Header : OK
    006.02   cISD0 Offset - Length : OK
    006.03   cISD1 Offset - Length : OK
    006.04   cISD2 Offset - Length : OK
    006.05   cISD0 0xFF Filled Area : OK
    006.06   cISD1 IDLog Header : OK
    006.07   cISD1 Semistatic 1 : OK
    006.08   cISD1 Semistatic 2 : OK
    006.09   cISD1 0xFF Filled Area 0 : OK
    006.10   cISD1 Static : OK
    006.11   cISD1 Semistatic 3 : OK
    006.12   cISD1 0xFF Filled Area 1 : OK
    006.13   cISD1 Statistics : OK
    006.14   cISD2 : OK
    006.15   cISD 0xFF Filled Area : OK
    
    
    ******* Checking cCSD_region *******
    007.01   cCSD Header : OK
    007.02   cCSD Entry Table : OK
    007.03   cCSD 0xFF Filled Area : OK
    
    
    ******* Checking Revokation_region *******
    008.01   trvk_prg0 SCE : OK
    008.02   trvk_prg0 Hash : OK
      Size = 0x2E0
      MD5 = 667E18A1D319D0C6F4736A1C8A0068C4
      Version = 3.65 (from factory)
    
    008.02   trvk_prg0 0xFF filled area : OK
    008.03   trvk_prg1 SCE : OK
    008.04   trvk_prg1 Hash : OK
      Size = 0x2E0
      MD5 = 667E18A1D319D0C6F4736A1C8A0068C4
      Version = 3.65 (from factory)
    
    008.04   trvk_prg1 0xFF filled area : OK
    008.05   trvk_pkg0 SCE : OK
    008.06   trvk_pkg0 0xFF filled area : OK
    008.07   trvk_pkg1 SCE : OK
    008.08   trvk_pkg1 0xFF filled area : OK
    
    
    ******* Checking CoreOS_region *******
    009.01   ROS0 Header : OK
    009.02   ROS0 Hash : OK
      Size = 0x6FFFE0
      MD5 = E2396DD395E095128BCB69AABA2D1978
      Version = 4.84 CEX/SEX OFW
    
    009.03   ROS0 unused 0xFF Filled Area : OK
    009.04   ROS1 Header : OK
    009.05   ROS1 Hash : OK
      Size = 0x6FFFE0
      MD5 = E2396DD395E095128BCB69AABA2D1978
      Version = 4.84 CEX/SEX OFW
    
    009.06   ROS1 unused 0xFF Filled Area : OK
    
    
    ******* Checking cvtrm_region *******
    010.01   Pre cvtrm 0xFF Filled Area : OK
    010.02   cvtrm0 Header : OK
    010.03   cvtrm0 0xFF Filled Area : OK
    010.04   vtrm0 Magic : OK
    010.05   vtrm0 Reserved Entries : OK
    010.07   cvtrm1 Header : OK
    010.08   cvtrm1 0xFF Filled Area : OK
    010.09   vtrm1 Magic : OK
    010.10   vtrm1 Reserved Entries : OK
    
    
    ******* Checking Second_Region_Header *******
    011.01   Second Region Header 0x00 Filled Area 0 : OK
    011.02   Second Region Header Magic : OK
    011.03   Second Region Header Count : OK
    011.04   Second Region Header 0x00 Filled Area 1 : OK
    011.05   Second Region Unknown Block 0 : OK
    011.06   Second Region Header 0x00 Filled Area 2 : OK
    011.07   Second Region Unknown Block 1 : OK
    011.08   Second Region Header 0x00 Filled Area 3 : OK
    
    
    ******* Checking Unreferenced_Area *******
    012.01   unreferenced area 0xFF Filled : OK
    
    
    ******* Checking CELL_EXTNOR_AREA_Region *******
    013.01   CELL_EXTNOR_AREA Header : OK
    013.02   CELL_EXTNOR_AREA 0x00 Filled Area 0 : OK
    013.03   CELL_EXTNOR_AREA 0x00 Filled Area 1 : OK
    013.04   CELL_EXTNOR_AREA 0x00 Filled Area 2 : OK
    013.05   CELL_EXTNOR_AREA 0x00 Filled Area 3 : OK
    013.06   CELL_EXTNOR_AREA 0xFF Filled Area 0 : OK
    013.07   CELL_EXTNOR_AREA 0x00 Filled Area 5 : OK
    013.08   CELL_EXTNOR_AREA 0x00 Filled Area 6 : OK
    013.09   CELL_EXTNOR_AREA 0xFF Filled Area 1 : OK
    
    
    ******* Checking bootldr_region *******
    014.01   bootldr0 : OK
    014.02   bootldr1 : OK
    014.03   bootldr Rev key : OK
    014.04   bootldr Statistics : OK
    014.05   bootldr 0xFF Filled Area : OK
    
    
    ******* Checking datamatches *******
    bootldr size : OK
    per console nonce : OK
    CELL_EXTNOR_AREA Hash1 : OK
    CELL_EXTNOR_AREA Hash2 : OK
    metldr size : OK
    vtrm0 : OK
    vtrm1 : OK
    
    
    ******* Checking repetitions *******
    Header Magic0 Repetitions : OK
    Header Magic1 Repetitions : OK
    asecure_loader Repetitions : OK
    eEID Repetitions : OK
    cISD Repetitions : OK
    cCSD Repetitions : OK
    trvk_prg0 Repetitions : OK
    trvk_prg1 Repetitions : OK
    trvk_pkg0 Repetitions : OK
    trvk_pkg1 Repetitions : OK
    ros0 Repetitions : OK
    ros1 Repetitions : OK
    cvtrm Repetitions : OK
    
    
    ******* Additional information *******
    HDD : Hitachi HTS543216A7A384 E2025342DG5E0M
    MAC address : FC:0F:E6:EC:14:55
    CID : 0x000202F166A8
    eCID : 01CA04F043148718120E0A4200000010
    board_id (part of console S/N) : 27449904
    kiban_id (board barcode) : 402106509268
    
    
    
    ******* Checks completed *******
    
    Total number of checks = 156
    Number of dangers = 0
    Number of warnings = 1
    
    Following check(s) returned a WARNING!
      SKU identification
    
    All checks done in 7.15 seconds.
     
  18. 1,170
    1,179
    272
    littlebalup

    littlebalup Developer PSX-Place Supporter

    Joined:
    Oct 16, 2014
    Messages:
    1,170
    Likes Received:
    1,179
    Trophy Points:
    272
    Location:
    43°36'16.0"N 1°26'36.1"E
    Your dump is fine. Issue is probably in the write process or hardware.
    Ensure you flashed the good dump or the write has been done correctly (dump again and compare).
     
    Yugonibblit likes this.
  19. 3
    0
    5
    Panchorrito

    Panchorrito Forum Noob

    Joined:
    Apr 7, 2019
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    5
    Hello, thank you very much for your answer. I will perform a new dump, I have another teensy and E3. I hope to have good news tomorrow.

    Enviado desde mi CAM-L23 mediante Tapatalk
     
  20. 5,440
    4,994
    472
    sandungas

    sandungas Moderator Developer

    Joined:
    Dec 31, 2014
    Messages:
    5,440
    Likes Received:
    4,994
    Trophy Points:
    472
    Location:
    Babylon 20xxE series
    You dont need to make more dumps, he meant you are doing it well, and your dumps are correct

    The problem you seem to have is at the time you try to write in the flash
    It could be because your E3 is not well attached to the flash chip
     
    Yugonibblit likes this.
Tags:

Share This Page