PS3 Newcomer to PS3 Modding - Issues with PS3Xploit

[anon4567q]

Hi,

I recently purchased a CECH-2001A PS3 at government surplus auction. After I got it back home, it didn't want to boot up, but from some sleuthing around the internet, it looked like it's issue was due to a bad hard drive. Sure enough, after replacing the hard drive I was able to get it to boot into safe mode, and reinstall OFW 4.82 (it was asking for 4.82 or higher).

I was able to successfully get to the XMB and use the PS3, but I didn't want to update the OFW at all anymore, I have an old PSN account, but I don't even know if PSN is still up for PS3 anymore, nor do I really care if it is. I wanted to use CFW on this for fun.

I was able to use the PS3Xploit flashwriter and flashdump based on the guide on ConsoleMods https://consolemods.org/wiki/PS3:PS3Xploit

I needed to self host the exploits as there was some error code when trying to go to the github links (appears to have been due to SSL errors, not unexpected I guess).

After dumping / verifying the flash successfully (only warnings on the ROS hash, which from what I've read is not a big deal?), I turned off the console to try and boot into safemode again to install evilnat CFW.

This is where I got stuck. Everything was great up to this point. After turning off console, I haven't been able to get it to power on again. When I press the power button, it turns green, then after a few seconds it will then switch directly over to a flashing red light (not super fast). From looking at what it could be in the PS3 Dev Wiki it says something about the bootloader / CoreOS? https://www.psdevwiki.com/ps3/Boot_modes#RLOD

I'm not sure where to go from here, any advice?

Link to flash dump: REMOVED BY MOD

Output from PyPS3Checker:

 python3 checker_py3.py dump.hex                                                                                                                             16:22:42



  ____        ____  ____ _____      _               _            
 |  _ \ _   _|  _ \/ ___|___ /  ___| |__   ___  ___| | _____ _ __
 | |_) | | | | |_) \___ \ |_ \ / __| '_ \ / _ \/ __| |/ / _ \ '__|
 |  __/| |_| |  __/ ___) |__) | (__| | | |  __/ (__|   <  __/ |  
 |_|    \__, |_|   |____/____/ \___|_| |_|\___|\___|_|\_\___|_|  
        |___/                                               v0.11.x

 Python checker script for PS3 flash memory dump files
 Copyright (C) 2015 [email protected]


Loading file "dump.hex" to memory...
 Done


******* Getting flash type *******
  Flash type : NOR
  Reversed : NO


******* Getting SKU identification datas *******
  idps = 0x09
  metldr0 = 0xE890
  metldr1 = 0x0E85
  metldrkey = 0xBC78B8F02879A81184A0DA74
  bootldr0 = 0x2F13
  bootldr1 = 0x2F13
  bootldrsize = 0x2F170

  Matching SKU : OK
   CECH-20xxx (DYN-001)
   Minimum version 2.70


******* Getting SDK versions *******
  ROS0 : (unknown)
  ROS1 : (unknown)
WARNING! : unable to get all versions.


******* Checking first_region_header *******
001.01   First Region Header 0x00 Filled Area 0 : OK
001.02   First Region Header Magic : OK
001.03   First Region Header 0x00 Filled Area 1 : OK


******* Checking flash_format *******
002.01   Flash Format String : OK
002.02   Flash Format Version : OK
002.03   Flash Format 0xFF Filled Area : OK


******* Checking flash_region_table *******
003.01   Flash Region Table Header : OK
003.02   asecure_loader Offset - Length : OK
003.03   asecure_loader Name : OK
003.04   eEID Offset - Length : OK
003.05   eEID Name : OK
003.06   cISD Offset - Length : OK
003.07   cISD Name : OK
003.08   cCSD Offset - Length : OK
003.09   cCSD Name : OK
003.10   trvk_prg0 Offset - Length : OK
003.11   trvk_prg0 Name : OK
003.12   trvk_prg1 Offset - Length : OK
003.13   trvk_prg1 Name : OK
003.14   trvk_pkg0 Offset - Length : OK
003.15   trvk_pkg0 Name : OK
003.16   trvk_pkg1 Offset - Length : OK
003.17   trvk_pkg1 Name : OK
003.18   ros0 Offset - Length : OK
003.19   ros0 Name : OK
003.20   ros1 Offset - Length : OK
003.21   ros1 Name : OK
003.22   cvtrm Offset - Length : OK
003.23   cvtrm Name : OK
003.24   Flash Region Table 0x00 Filled Area : OK


******* Checking asure_loader_region *******
004.01   asecure_loader Header : OK
004.02   metldr Offset : OK
004.03   metldr Length : OK
004.04   metldr Name : OK
004.05   metldr RevKey : OK
004.06   metldr Binary Size : OK
004.07   metldr Statistics : OK
004.08   asecure_loader 0x00 Filled Area : OK


******* Checking eEID_region *******
005.01   eEID Header : OK
005.02   EID0 Offset - Length : OK
005.03   EID1 Offset - Length : OK
005.04   EID2 Offset - Length : OK
005.05   EID3 Offset - Length : OK
005.06   EID4 Offset - Length : OK
005.07   EID5 Offset - Length : OK
005.08   EID0 IDPS0 : OK
005.09   EID0 IDPS1 : OK
005.10   EID0 Static : OK
005.11   EID2 BlockSize/Padding : OK
005.12   EID3 Static0 : OK
005.13   EID3 Static1 : OK
005.14   EID3 Static2 : OK
005.15   EID5 IDPS0 : OK
005.16   EID5 IDPS1 : OK
005.17   EID5 Static : OK
005.18   eEID Region 0xFF Filled Area : OK
005.19   eEID Statistics0 : OK
005.20   eEID Statistics1 : OK


******* Checking cISD_region *******
006.01   cISD Header : OK
006.02   cISD0 Offset - Length : OK
006.03   cISD1 Offset - Length : OK
006.04   cISD2 Offset - Length : OK
006.05   cISD0 0xFF Filled Area : OK
006.06   cISD1 IDLog Header : OK
006.07   cISD1 Semistatic 1 : OK
006.08   cISD1 Semistatic 2 : OK
006.09   cISD1 0xFF Filled Area 0 : OK
006.10   cISD1 Static : OK
006.11   cISD1 Semistatic 3 : OK
006.12   cISD1 0xFF Filled Area 1 : OK
006.13   cISD1 Statistics : OK
006.14   cISD2 : OK
006.15   cISD 0xFF Filled Area : OK


******* Checking cCSD_region *******
007.01   cCSD Header : OK
007.02   cCSD Entry Table : OK
007.03   cCSD 0xFF Filled Area : OK


******* Checking Revokation_region *******
008.01   trvk_prg0 SCE : OK
008.02   trvk_prg0 Hash : OK
  Size = 0x2E0
  MD5 = 16CB4E101F0D6D24525B0E6F1A6681AD
  Version = 3.30 (from PUP)

008.02   trvk_prg0 0xFF filled area : OK
008.03   trvk_prg1 SCE : OK
008.04   trvk_prg1 Hash : OK
  Size = 0x2E0
  MD5 = E537DE954DCF25D4DE961DF44549BAF7
  Version = 3.50 (from PUP)

008.04   trvk_prg1 0xFF filled area : OK
008.05   trvk_pkg0 SCE : OK
008.06   trvk_pkg0 0xFF filled area : OK
008.07   trvk_pkg1 SCE : OK
008.08   trvk_pkg1 0xFF filled area : OK


******* Checking CoreOS_region *******
009.01   ROS0 Header : OK
009.02   ROS0 Hash : WARNING!
  Size = 0x6FFFE0
  MD5 = 5168E0C2D29FECF66F52EC58A829752F
  Version = (unknown)

009.03   ROS0 unused 0xFF Filled Area : OK
009.04   ROS1 Header : OK
009.05   ROS1 Hash : WARNING!
  Size = 0x6FFFE0
  MD5 = 5168E0C2D29FECF66F52EC58A829752F
  Version = (unknown)

009.06   ROS1 unused 0xFF Filled Area : OK


******* Checking cvtrm_region *******
010.01   Pre cvtrm 0xFF Filled Area : OK
010.02   cvtrm0 Header : OK
010.03   cvtrm0 0xFF Filled Area : OK
010.04   vtrm0 Magic : OK
010.05   vtrm0 Reserved Entries : OK
010.07   cvtrm1 Header : OK
010.08   cvtrm1 0xFF Filled Area : OK
010.09   vtrm1 Magic : OK
010.10   vtrm1 Reserved Entries : OK


******* Checking Second_Region_Header *******
011.01   Second Region Header 0x00 Filled Area 0 : OK
011.02   Second Region Header Magic : OK
011.03   Second Region Header Count : OK
011.04   Second Region Header 0x00 Filled Area 1 : OK
011.05   Second Region Unknown Block 0 : OK
011.06   Second Region Header 0x00 Filled Area 2 : OK
011.07   Second Region Unknown Block 1 : OK
011.08   Second Region Header 0x00 Filled Area 3 : OK


******* Checking Unreferenced_Area *******
012.01   unreferenced area 0xFF Filled : OK


******* Checking CELL_EXTNOR_AREA_Region *******
013.01   CELL_EXTNOR_AREA Header : OK
013.02   CELL_EXTNOR_AREA 0x00 Filled Area 0 : OK
013.03   CELL_EXTNOR_AREA 0x00 Filled Area 1 : OK
013.04   CELL_EXTNOR_AREA 0x00 Filled Area 2 : OK
013.05   CELL_EXTNOR_AREA 0x00 Filled Area 3 : OK
013.06   CELL_EXTNOR_AREA 0xFF Filled Area 0 : OK
013.07   CELL_EXTNOR_AREA 0x00 Filled Area 5 : OK
013.08   CELL_EXTNOR_AREA 0x00 Filled Area 6 : OK
013.09   CELL_EXTNOR_AREA 0xFF Filled Area 1 : OK


******* Checking bootldr_region *******
014.01   bootldr0 : OK
014.02   bootldr1 : OK
014.03   bootldr Rev key : OK
014.04   bootldr Statistics : OK
014.05   bootldr 0xFF Filled Area : OK


******* Checking datamatches *******
bootldr size : OK
per console nonce : OK
CELL_EXTNOR_AREA Hash1 : OK
CELL_EXTNOR_AREA Hash2 : OK
metldr size : OK
vtrm0 : OK
vtrm1 : OK


******* Checking repetitions *******
Header Magic0 Repetitions : OK
asecure_loader Repetitions : OK
eEID Repetitions : OK
cISD Repetitions : OK
cCSD Repetitions : OK
trvk_prg0 Repetitions : OK
trvk_prg1 Repetitions : OK
trvk_pkg0 Repetitions : OK
trvk_pkg1 Repetitions : OK
ros0 Repetitions : OK
ros1 Repetitions : OK
cvtrm Repetitions : OK


******* Additional information *******
HDD : SanDisk SDSSDH3 512G 222710801326
MAC address : 00:24:8D:81:E9:DF
CID : 0x000201AC961B
eCID : 01CA0442C10C27181507A74200000000
board_id (part of console S/N) : 27453354
kiban_id (board barcode) : 401324115047



******* Checks completed *******

Total number of checks = 155
Number of dangers = 0
Number of warnings = 3

Following check(s) returned a
WARNING!
  SDK versions
  009.02   ROS0 Hash
  009.05   ROS1 Hash

All checks done in 1.05 seconds.

Appreciate any and all help in advance!

 

[Coro]

i removed the link to dump. don't share it, your ipds can be stolen and your ps3 could be banned by somebody using it online.

4.85 or above is needed for github ssl certs to work.

you do not need safe mode (usually). you could have tried installing cfw pup from xmb.

warnings are usually okay. "dangers" are the problems.

did you replace the old hdd with an ssd? ps3 can use some models but many cause issues eventually. some do not work at all.

take the new hdd/ssd out and turn on ps3. see if anything will show on the screen.

good luck!

 

[anon4567q]

Thanks

It does the same thing even with the SSD removed.

Green for a few seconds and then straight to flashing red.