• PS3HEN is now supporting 4.93 Firmware

    View Official Release Post for additional information HERE

PS3HEN PS3HEN Open Beta Testing [For Advanced Users Only]

esc0rtd3w said:
When I was testing last night, all the http links were working but https gives 80010006 error.

The bug that caused 8002AE04 error was because the content id was wrong in xml and not same as new hybrid PKG.

I dont know much else about it
Click to expand...


Error 80010006 is related to SSL certificates. I think it's actually the other way around: if you use HTTP for links from GitHub, it will give you this error, HTTPS works just fine.


BTW, it's not related but check this out:
https://github.com/Evilnat/Cobra-PS3/pull/65
 
LuanTeles said:
Error 80010006 is related to SSL certificates. I think it's actually the other way around: if you use HTTP for links from GitHub, it will give you this error, HTTPS works just fine.


BTW, it's not related but check this out:
https://github.com/Evilnat/Cobra-PS3/pull/65
Click to expand...
Hmmm ok. Have to do a bit more digging on that. I tested with http ps3xploit.me links and those worked fine. Haven't tried GitHub links yet
 
The release version of PS3HEN 3.5.0 is out, so please dont use the /dev installer link, cause it will install the beta version still, since pkgs are still on server. I left them there so 404 errors wouldnt happen. The page is now also tagged with a "Development Only" text on page so users are aware. It was used to quickly support 4.93 for testing.

@LuanTeles please remove dev link from 4.93 post or point to normal auto installer

http://ps3xploit.me/hen/installer/auto/
 
To fix error 80710A06 (at 4.93 with ported 4.84 VSH DEX) in Github/Github.io (and maybe more sites) you need the following certificates:
  • #ISRG Root X1
  • #USERTrust RSA Certification Authority

This is ONLY for DEX VSH, in CEX VSH works as it should. DigiCert Global Root G2 certificate is not needed in this case

Like my other post talking about info in vsh.self, you need to hardcode cert's info in VSH, like this:

upload_2026-3-24_5-9-31.png

​
Code: 
Offset 0x703A20 - Value 0x6A8EA0: Reference to /dev_flash/data/cert/CA_LIST.cer
Offset 0x703A24 - Value 0x794C: Offset where starts the certificate in CA_LIST.cer, in this case #USERTrust RSA Certification Authority (-----BEGIN CERTIFICATE-----)
Offset 0x703A28 - Value 0x07D0: Certificate size
Offset 0x703A2C - Value 0x02136F085083FFDC0554456B28EE22E801C3605D: SHA1 hash
Offset 0x703A40 - Value 0x6F7454B3: Unknown

Code: 
Offset 0x703A50 - Value 0x6A8EA0: Reference to /dev_flash/data/cert/CA_LIST.cer
Offset 0x703A54 - Value 0x68FC: Offset where starts the certificate in CA_LIST.cer, in this case #ISRG Root X1 (-----BEGIN CERTIFICATE-----)
Offset 0x703A58 - Value 0x07B2: Certificate size
Offset 0x703A5C - Value 0x2265B14F7F2772636453406D4BB459FE3CECAAAF: SHA1 hash
Offset 0x703A70 - Value 0x6187B673: Unknown

This time I replaced a certificate: Certplus Class 2 Primary CA, because there isn't room for more than one and I haven't had time to investigate if I can reorganize certs entries to add more

I hope these patches are useful to some of you; for me, they've allowed me to reactivate firmware updates via the internet and CFW patches :D
 
Here is a small update to mainly test kernel plugin debug output. Debug Mode must be enabled in HFW Tools, just like normally getting UDP output. You will be able to capture UDP traffic on both LAN and Wireless, depending on which you connect to on PS3.

There is a batch script included that should automatically get local IP address. If it fails to do so, here is the manual command needed. The wifi kernel plugin broadcasts on 230.1.33.7. Also works on Android, using Termux or other terminal app.

Code: 
socat -lu stdout UDP4-RECV:18194,ip-add-membership=230.1.33.7:<YOUR_IP_HERE>,reuseaddr


3.5.1 Open Beta: Test #2: (4.80 - 4.93 CEX / 4.82 & 4.84 DEX)

Changes:

Payload Changes
- Added support that allows kernel plugins to access stage2 debug output

Resource Changes
- Added "Toggle Internal Plugins" options to HFW Tools - Development
- Added "WiFi UDP Debug Output" kernel plugin toggle

Plugin Changes
- Added "WiFi UDP Debug Output" kernel plugin to capture UDP traffic over multicast

4.80 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_debug-480C.pkg
4.81 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_debug-481C.pkg
4.82 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-482C.pkg
4.83 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-483C.pkg
4.84 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-484C.pkg
4.85 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-485C.pkg
4.86 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-486C.pkg
4.87 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-487C.pkg
4.88 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-488C.pkg
4.89 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-489C.pkg
4.90 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-490C.pkg
4.91 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-491C.pkg
4.92 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-492C.pkg
4.93 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-493C.pkg

4.82 DEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_debug-482D.pkg
4.84 DEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_debug-484D.pkg


Socat with batch files to dump UDP: http://ps3xploit.me/hen/dev/socat-ps3hen-test.zip
upload_2026-4-2_5-28-59-png.47530


upload_2026-4-2_5-29-55-png.47531


WiFi UDP Dump Kernel Plugin: http://ps3xploit.me/hen/plugins/kernel/wifi_debug.bin (Already included in pkg)

There is a toggle to enable and disable the wifi_debug.bin plugin (reads and writes entries in boot plugins txt files)
upload_2026-4-2_5-27-9-png.47527


upload_2026-4-2_5-27-28-png.47528


upload_2026-4-2_5-27-46-png.47529


For anyone curious or confused about providing or getting a socat debug log, please see this thread post:
https://www.psx-place.com/threads/r...but-goes-back-to-xmb.44674/page-2#post-398227

Have Fun :)
 
Last edited:
esc0rtd3w said:
Here is a small update to mainly test kernel plugin debug output. Debug Mode must be enabled in HFW Tools, just like normally getting UDP output. You will be able to capture UDP traffic on both LAN and Wireless, depending on which you connect to on PS3.

There is a batch script included that should automatically get local IP address. If it fails to do so, here is the manual command needed. The wifi kernel plugin broadcasts on 230.1.33.7. Also works on Android, using Termux or other terminal app.

Code: 
socat -lu stdout UDP4-RECV:18194,ip-add-membership=230.1.33.7:<YOUR_IP_HERE>,reuseaddr


3.5.1 Open Beta: Test #2: (4.80 - 4.93 CEX / 4.82 & 4.84 DEX)

Changes:

Payload Changes
- Added support that allows kernel plugins to access stage2 debug output

Resource Changes
- Added "Toggle Internal Plugins" options to HFW Tools - Development
- Added "WiFi UDP Debug Output" kernel plugin toggle

Plugin Changes
- Added "WiFi UDP Debug Output" kernel plugin to capture UDP traffic over multicast

4.80 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_debug-480C.pkg
4.81 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_debug-481C.pkg
4.82 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-482C.pkg
4.83 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-483C.pkg
4.84 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-484C.pkg
4.85 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-485C.pkg
4.86 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-486C.pkg
4.87 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-487C.pkg
4.88 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-488C.pkg
4.89 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-489C.pkg
4.90 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-490C.pkg
4.91 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-491C.pkg
4.92 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-492C.pkg
4.93 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_signed-493C.pkg

4.82 DEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_debug-482D.pkg
4.84 DEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test2_debug-484D.pkg


Socat with batch files to dump UDP: http://ps3xploit.me/hen/dev/socat-ps3hen-test.zip
upload_2026-4-2_5-28-59-png.47530


upload_2026-4-2_5-29-55-png.47531


WiFi UDP Dump Kernel Plugin: http://ps3xploit.me/hen/plugins/kernel/wifi_debug.bin (Already included in pkg)

There is a toggle to enable and disable the wifi_debug.bin plugin (reads and writes entries in boot plugins txt files)
upload_2026-4-2_5-27-9-png.47527


upload_2026-4-2_5-27-28-png.47528


upload_2026-4-2_5-27-46-png.47529


For anyone curious or confused about providing or getting a socat debug log, please see this thread post:
https://www.psx-place.com/threads/r...but-goes-back-to-xmb.44674/page-2#post-398227

Have Fun :)
Click to expand...


Finally, I'll be able to use SOCAT :)

I'm too lazy to do it via cable hahaha, and via Wi-Fi never worked for me. Thanks, Jason!

I'll report back as soon as possible.
 
This is just a small update that adds a few more pkg links to homebrew HFW Tools menu and some small stage2 cleanup, mostly text formatting and consolidated makefiles for compilation.

04-15-2026
3.5.1 Open Beta: Test #3: (4.80 - 4.93 CEX / 4.82 & 4.84 DEX)

Changes:

Payload Changes
- Added support that allows kernel plugins to access stage2 debug output

Resource Changes
- Added "Toggle Internal Plugins" options to HFW Tools - Development
- Added "WiFi UDP Debug Output" kernel plugin toggle
- Added Apollo Save Tool, Artemis PS3, Movian M7, PKGi, and PS3 ezRemote Client to Homebrew Apps menu

Plugin Changes
- Added "WiFi UDP Debug Output" kernel plugin to capture UDP traffic over multicast

4.80 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_debug-480C.pkg
4.81 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_debug-481C.pkg
4.82 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-482C.pkg
4.83 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-483C.pkg
4.84 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-484C.pkg
4.85 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-485C.pkg
4.86 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-486C.pkg
4.87 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-487C.pkg
4.88 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-488C.pkg
4.89 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-489C.pkg
4.90 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-490C.pkg
4.91 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-491C.pkg
4.92 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-492C.pkg
4.93 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-493C.pkg

4.82 DEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_debug-482D.pkg
4.84 DEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_debug-484D.pkg
 
You must log in or register to reply here.

Similar threads

Back
Top