* PS3HENtai Package Is No Longer Required For v2. We can all stop saying that now *
WARNINGS: 1) DO NOT UNDER ANY CIRCUMSTANCES ENABLE FSM (Factory Service Mode) ON A PS3 WITH PS3HEN!
2) CONNECTION TO PSN SHOULD BE DONE AT YOUR OWN RISK. DISABLING CFW SYSCALLS MAY NOT HIDE YOUR HEN WHILE ON PSN (a popular method used by CFW user's may not be suited for PS3HEN user's)
3) DO NOT INSTALL CCAPI (ControlConsole API)
What Is HEN:
HEN stands for Homebrew ENabler. it also consists of much more new functions relatively close to a CFW
Upgrading HEN From v1.x.x to v2.x.x
There are no special steps required, just follow instructions for v2 HEN installation
Note: Users coming from v1 HEN, can either leave the old /dev_hdd0/plugins/CFW/ folder, or remove it, as it is no longer required for v2 HEN.
Plugins Support (Online and Offline Methods)
Place boot_plugins.txt on dev_usb000 if using plugins
Place boot_plugins_kernel.txt on dev_usb000 if using kernel plugins
Standard Online/Local Host HEN Setup Instructions
HEN status is verified with /html/ps3hen.html, and will display an error if HEN does not load from USB
1) Copy PS3HEN.BIN and stackframe.bin to /dev_usb000/
2) Run the /html/ps3hen.html
Offline HEN Setup Instructions (Recommended) thanks to @lmn7 for offline js
Offline packages do not verify HEN load. This should not be a problem and people reported issues with verify on
** PACKAGE MANAGER REQUIRED BEFORE STARTING **
Run HAN Installer To Get Package Manager
http://**ps3xploit.com >Domain no L...3_tools-v3.0-HAN484_HFW_release_PS3XPloit.zip
Run From Hard Drive (Recommended)
1) Run /html/han_flash_mount.html
2) Install HEN_v2_Offline_Installer_HDD_signed.pkg
3) Reboot PS3
4) Launch From New "Enable HEN" XMB Icon, Under Game Column
Run From USB
* This method requires that the USB drive be plugged in to load PS3HEN
* Some USB drives are not compatible and will not work
* If PS3HEN.BIN is missing, you will get a failed message and need to reboot console
* If stackframe.bin is missing, your console will freeze, and you will need to reboot
1) Run /html/han_flash_mount.html
2) Install HEN_v2_Offline_Installer_USB_signed.pkg
3) Reboot PS3
4) Place PS3HEN.BIN and stackframe.bin on dev_usb000
5) Launch From New "Enable HEN" XMB Icon, Under Game Column
All Other Package Variations
Load Plugins From HDD
This will load plugins txt from /dev_hdd0/hen/boot_plugins.txt and /dev_hdd0/hen/boot_plugins_kernel.txt *WARNING: Loading bad plugins can force a firmware reinstall!
To change plugins, edit the boot_plugins.txt or boot_plugins_kernel.txt file and use FTP to transfer new file, then reboot and enable HEN again to activate plugins
Run From HDD
Debug payloads allow capturing output using socat and other tools
These methods will store payload and stackframe in /dev_hdd0/hen/
HEN_v2_Offline_Installer_HDD_DEBUG_signed.pkg
Load Plugins From HDD
This will load plugins txt from /dev_hdd0/hen/boot_plugins.txt and /dev_hdd0/hen/boot_plugins_kernel.txt *WARNING: Loading bad plugins can force a firmware reinstall!
To change plugins, edit the boot_plugins.txt or boot_plugins_kernel.txt file and use FTP to transfer new file, then reboot and enable HEN again to activate plugins
- Fake flash is no longer used, in favor of on-the-fly patching
- Fixed blackscreen crashes
- Fixed random recovery kicks
- ISO support added
- PS3MAPI support can now read/set process mem using webman
- KW stealth extensions added
- Random lv2 panic fixed
- Added check in html for hen success
- Kernel plugins support
- Photo gui opcode support for webman
- Syscall 389/409 product mode check disabled
- Opcode 1339 added, returns HEN version (0x0200)
- Full BD/DVD ISO support (AACS decryption required for BDRip)
Notes:
WebmanMOD tested with 1.47.17 and 1.47.19, with fan control and PS3MAPI working
v1.0.0
- Managunz backup manager works best for jb rips(ISO not supported)!
- MULTIMAN works too but compatibility is not the same.
- PSXISO Support is there!!!!
- BD/DVD Region patches
- BDISO support(stutter with xmb, use showtime)
- BOOTPLUGINS WORK location "/dev_usb000/boot_plugins_nocobra.txt"(Use webman original one and not the mod one. also disable - content scan on boot in settings)
- Discless games work with disc icon!
- Syscall 6 added
- Syscall 7 added(address>0x8000000000352230) and disabled overwriting syscall 0->15
- Syscall 15 added
- Syscall 8 opcodes added for detection HEN and for advanced lv2 poke(read DEVELOPER SECTION)
- Whole kernel memory RWX(execute kernel payload like this at high locations or hook syscalls etc)
- PS3MAPI support for modding
- Debug PKG install
- Homebrew resigned for 3.55 and less support!
- Homebrew Root Flags enabled!
- HAN PKG insall support
- PSN Connectivity
- All process executed after HEN have rwx permissions!
- HAN Enabled by default!
CFW PATCHES:
CFW settings
Retail/DEBUG pkg installation
Unlink to Delete
Remote play with PC
Download debug pkg on retail
Remote play ignores SFO check
Cinavia protection
videoplayer_plugin
DVD region check (not cracking RCE)
REBUG themed RCO & XML
AIO copy
NOTES:
if you get error 80010017 launching homebrew that simply means HEN failure, restart console and try again!(restart is important!)
also try deleting cache, browsing data, cookies and the likes from browser, make the exploit page the home page
DEVELOPERS:
#define SYSCALL8_OPCODE_IS_HEN 0x1337
using this if return 0x1337 its hen
ADVANCED POKE:syscall8(0x7003, addr, value);
this allows poking any location in lv2 memory BUT you have to restore original value before exiting to another application or exiting to xmb.USE WISELY OTHERWISE PS3 SHUTS DOWN
BDMIRROR:Managunz FTW!(please use Cobra payload because by default its MULTIMAN)
NOTE:mounting dev_blind will actually mount dev_flash. change files directly from dev_flash instead or hdd0/plugins/CFW/
Kernel Mode returns 0x53434500 on success to user webkit 0x8a000000. its good to measure HEN success. right now hen is already close to or is 100%
when running han_flash_mount.html locally taking a long time to enable and didnt work
but when run it from ps3xploit web site it work good
i need to run it locally
when running han_flash_mount.html locally taking a long time to enable and didnt work
but when run it from ps3xploit web site it work good
i need to run it locally
Guys, ¿which of these 3 pkg should I install to solve the infinite load error of hen activation?
1)HEN_v2_Offline_Installer_HDD_LOAD_PLUGINS_FROM_HDD_signed.pkg
2)HEN_v2_Offline_Installer_HDD_DEBUG_signed.pkg OR 3)HEN_v2_Offline_Installer_HDD_LOAD_PLUGINS_FROM_HDD_DEBUG_signed.pkg ????
when running han_flash_mount.html locally taking a long time to enable and didnt work
but when run it from ps3xploit web site it work good
i need to run it locally
Does anyone know if disabling CFW syscalls through PS3MAPI functions the same as PSNPatch cfw syscall disabling? I noticed that this release mentioned 'KW stealth extensions included', was wondering if it had anything to do with that.
I have a question, since there is no longer the PS3HENTAI that would be the cfw files, can we play online with the HEN disabled without being afraid of banishment? Or is the risk still too high?
I have a question, since there is no longer the PS3HENTAI that would be the cfw files, can we play online with the HEN disabled without being afraid of banishment? Or is the risk still too high?
I thought about it, well I guess I'll take a risk, before I was afraid of the ban because of act.dat and idps.hex but now I just need the package installer.
The main change is that Mamba / PS3HEN now can start with a pre-defined fan speed (manual) even if webman is not loaded.
Other changes include:
- Added support for load settings from /dev_hdd0/vm/ps3hen_cfg.bin when PS3HEN starts
- The initial fan speed is defined in that file (in the last byte). SYSCON is used the value is < 0x33 (lower than 20%)
- Advanced lv2 poke behaves like do_patch (ie. it also executes clear_icache)
- Added 2 opcodes via PS3MAPI call for set/get fan speed.
- I included the initial code for an integrated fan controller. I need to find the symbol for sm_get_temperature. The code is commented.
- set_fan_policy and get_fan_policy syscalls now also apply the additional advanced poke and restore the original value
- Used mappath.c from Mamba