It was nearly 7 years ago since we have seen a PS3 Official Firmware Exploited (3.55 being the last), which predates many PS3 models and thus why those later Slim & SuperSlim models could never install Custom Firmware (CFW) and/or Downgrade. However that could all change as a team of three have been developing a new project (4.81 OFW Exploit) called PS3Xploit. The "Unhackable PS3 models" will be a term of the past, but the exploits not quite there yet but the possibility of a HENkaku (vita) style hack is very plausible. Currently the exploit has allowed for access to enable Flash dumps on all consoles, Then Write access to Flash, unhackables (25xx +) will not be able to write but all previous PS3 will so that means Goodbye Hardware Flashers and Hello Software Downgradrs. The team is consisting of psx-place's very own @bguerville, @esc0rtd3w and W form the team behind PS3Xploit.
The theory behind the project started off when bguerville was looking through some of the webkit source code (for unrelated research) and stumbled on a discovery and a discussion here on the psx-place forums was formed with theories on how the PS3 could be attacked with his findings. As time passed the team formed and an idea became a full-fledged project in development, A request came to temporary remove the said discussion as the idea spawned a project with alot of potential. Sadly this is not ready for release quite yet (but soon), while we know it is working there is additional development needed to make this complete. The team has a goal of 2018 (first Q1) target for the release of the exploit.
Recently team member esc0rtd3w announced the tentative release date on another forum and it seemed some were so grateful they decided to intrude and breach his MEGA account and leak what they thought was the exploit / key component but was only a small puzzle piece of the entire thing and quite useless itself . While the good news it did not harm the project or discourage the development team behind Ps3Xploit. However esc0rtd3w did lose some personal files and also the community lost the huge collection of NoPSN Apps for the PS3. But don't cancel those subscription service's just yet, as esc0rtd3w is in the process of re-uploading the collection, you can follow the progress here .
Also, I have been personally told by the team that some of the details being reported elsewhere are not 100% accurate, but rest assured we have first-hand information about this upcoming exploit and we will set the record straight and keep you flowing with the facts as they become available. bguerville has provided us with some details about this release and also tells us about what they plan to release first and that is coming in the next 24 hours in the form of a IDPS Dumper for 4.81 (All PS3 Models). (UPDATE >> Released)
Additional details via @bguerville
(NOTICE - Please Read ALL TABS contains IMPORTANT Details about the project !!! )
I started investigating the ps3 webkit about 6/7 months, but at the time, it was only to gather information, I had no idea I would eventually be the one working on it!
End of August, I gave the information I had to esc0rtd3w & expected he would work on it alone. However, he knew nothing about webkit exploitation & he started to collaborate with W. By hijacking webkit, we inherit its privileges which means we are root & we get access to lv2 syscalls. However the ps3 OS is protected by NX (No eXecute is the bsd/linux equivalent of DEP on Windows), no address randomisation though. Executing our own payload is made impossible by NX but we can still execute code despite NX using ROP (Return Oriented Programming).
The principle is simple, select snippets from the system code (snippets like these are called gadgets) & assemble them so execution jumps from one gadget to the next until the task we planned is done. It requires providing values/parameters & offsetting to each gadget instruction as well...
First week of September, I joined their effort & 2 weeks later we had ROP execution.
From that moment, I have been doing all the ROP development work alone while the other 2 helped with testing & researching (and debugging for esc0rtd3w).
Right now I have 2 ROP chains ready, one for idps dumping & the other for flash memory dumping.
The next part of the job is to modify the flash dumper into a flash writer.
- The idps dumper is about to get released. (UPDATE Released >> Click Here)
- The flash dumper will be released later.
When that is done & released, ps3 hardware flashers will have become mostly obsolete.
FYI, the idps dumper should work on any nor/nand model of ps3. Same goes for the flash memory dumper.
It was tested ok on superslim.
Once the ROP work above is finished , there is much more to be done & hopefully more releases to come...
The Current Status
For now the main project we are working on will not jailbreak all consoles.
It will enable flash dumps from all consoles but flash write only to all consoles up to 25xx so consoles that are are not cfw compatible will not really benefit just yet, except for dumping flash & idps but not for JB.
For those with cfw compatible consoles on ofw, once flash is overwritten with a db ofw copy, a user can reboot then install the cfw of their choice. Hardware flashers being then obsolete.. You could also overwrite the flash memory in more recent consoles but that would result in a brick due to metldr2.
It's only after that flash management project is done, in hopefully March that we will begin working on exploiting lv2. If we get the results we wish, we should be able to make a TaiHEN type of hack for all consoles including superslims.
Once lv2 is exploited, I am not sure yet how far I will take it, whether I will also try to take on lv1.. Or leave it for someone else to build on by releasing a fully commented & dev friendly version... We will see how things go, ......
However, even without lv1, direct access to lv2 functions using the right parameters would allow us to run homebrews (except those needing lv1 peek/poke) & backups without problems along with many other things.
I figured i would add this (tab) to add some news and thread related to this project, that has arisen after this article.
- November 11 >> IDPS Dumper (PS3 NAND / NOR ) - 4.81 OFW Compatible by Team PS3Xploit
- November 12 >>> PS3 4.81 IDPS Dumper eMMC (Only for 12Gb models) Testing and Research Area
- November 12 >>> PS3Xploit NOTICE - Stay clear of any Incoming Firmware Updates on the PS3.
- November 24 >>> 4.82 OFW Software Flash Writer + Nor Dumper (install CFW on 4.82 OFW)
- November 25 >>> PUBLIC WARNING - Fake Exploit Pages
- November 27 >>> NOR DUMPER (Lower OFW Ports)
Stay tuned to psx-place.com as this story develops, we have the inside scoop on all the details as they flow. This is a huge breakthrough for the PS3 Community and will only progress from here on out!!!
UPDATE : IDPS DUMPER HAS BEEN RELEASED> >> NEWS Coverage
(Please Note - You should not update your PS3 firmware past 4.81 if a Software Update goes Live)
PS3 Official Firmware 4.81 Exploit - Software Downgrader & More Incoming! Could SuperSlim be hacked?
By STLcardsWS on Nov 9, 2017 at 6:45 PM
[Update August 19th] HW Acceleration (RSX) Project Update by RenéRebeUPDATE (August 19) - Now the 29th Video Released >>> The next PS3 NVidia RSX accelerated X.org steps
(Original Article from Nov. 14) Is the PS3 a bit closer to gaining Hardware Acceleration (via RSX) in OtherOS (Linux) with a proper driver to enable the GPU chip? We are not there, but we may be getting closer to a reality. Earlier this year (back in April) we detailed some of the progress that the busy dev RenéRebe has made with unlocking the potential of the PlayStation 3's RSX chip and now today we have been greeted with a new video and what we can expect with this project as the developer starts to undertake the challenge of further unlocking one more component of the Ps3 hardware,. The developer has alot of videos on other intresting subjects in his diverse YouTube channel >>> (Bits and More) <<< many very informative video's..Continue reading
Advanced Power Options (v1.10) Released: A XMB MOD for all CFW & HENA handy XMB (main menu) modification for the PlayStation 3 that is now compatible with either CFW (Custom FirmWare) or HEN (Homebrew ENabler) has been updated to v1.10 with a new name as well. This project has seen contributions from various developer's that include @DeViL303, @kozarovv, @mysis @Joonie and @lmn7 and collectively have created Advance Power Options (v1.10). This sleek mod allows for additional Power Options to be displayed and executed with ease from the comfort of the XMB. The new inclusions for your XMB will include a fast Shut Down (no conformation is asked), A Soft Reboot (a faster reboot, doesn't completely shutdown system) or a Hard Reboot (which shuts down slower, as it's a complete system restart). Plus, the mod provides a few additional Advanced Options and these include the ability to Reboot in Recovery Mode (which can be a handy feature, as the official method from Sony involves a process of holding the power button down on your console for awhile), If you desire even faster access to a few functions within the Recovery Mode the devs have you covered here as well as there is options to Rebuild Database or Check the File-System on reboot by selection those included options on the XMB as well. For HEN user's that about sums up things, but CFW user's you have one more additional function which is optional but Also included is an optional pkg to Boot into OtherOS. Overall, this is a great collection of work and a superb modification for your PS3's XMB to add new functionality. View a preview of this mod before installing it, by checking out the developer's YouTube video included below (video coverage is of v1.04) to get an idea of what this mod is all about for CFW and now HEN user's also. Continue reading
PCSX-R (PS4 Port) - PlayStation (PS1 on PS4) Emulator by ZnullptrThis news is a bit late but wanted to get everyone caught up on this project for the PlayStation 4 as Developer Znullptr (David Miller) has recently developed a new emulator port for exploited PS4 console (currently 5.05 being the latest exploitable firmware in public) called PCSX-R which as you may of guessed is a PlayStation 1 emulator. The developer has said he ceased emulation development (source code release is planned) on the PS4 but we have seen a few tweets (1, 2) that could suggest he is still working on a few things (like a mednafen port that maybe is a better options for PS1 gameplay(?) ) but that remains to be seen. This PS1 emulator port seems to be working good enough to play many titles (some issue's are outlined below in the notes by markus95). PS4 gameplay footage can viewed in the videos provided below. So far we have seen this emulation developer soft release several PoC emulators for the PS4 that have included Yabause (A Sega Saturn Emulator w/ speed issue's) / Reicast (DreamCast w/ speed issue's) & ,mGBA (GameBoy Advance). Since this is an early concept and build you have to manually swap your roms for a game you want to play, details about the process can be seen below courtesy of @Markus95 .Continue reading
Share This Page
- henkaku homebrew
- playstation 2
- playstation 2 resources
- playstation portable
- playstation portable cfw
- playstation portable resources
- playstation tv
- ps vita
- ps2 resources
- ps3 cfw
- ps3 han
- ps3 homebrew
- ps4 homebrew
- psp cfw
- psp resources
- pstv homebrew
- vita homebrew
- webman mod
- xmb mod
- User Record:
- Latest Member:
- Neeta panchal
MegaMan- War of the Past OpenBOR OPL ready ISO -Neill Corlett