PS3 PS3Xploit Tools v3.0 "HAN" released NoN CFW Compatible Slim & SuperSlim Models)

Discussion in 'PS3 News' started by bguerville, Mar 13, 2018.

By bguerville on Mar 13, 2018 at 11:17 PM
  1. 7,843

    bguerville Moderator

    Feb 25, 2015
    Likes Received:
    Trophy Points:
    UPDATE 1 (OCT. 11 2018) - With the release of OFW 4.83 portions of PS3Xploit have been patched, The team is looking at workarounds, STAY ON 4.82, DO NOT UPDATE TO 4.83 AT THIS TIME:

    UPDATE 2 (MARCH -2019) HFW (Hybrid Firmware) Released - Allows for PS3Xploit Tools / Hacks (including HAN) to work for 4.84 (OFW) OFFICIAL FIRMWARE (See Here) Also the HAN Exploit was updated to v3.01 for 4.84 HFW support

    The PS3Xploit Team has done it yet once again with an incredible breakthrough that has now just gone LIVE for everyone and as the recent teaser recently suggested it's for those later Slim & SuperSlim models who are not capable of using CFW (aka NoN CFW Compatible Models). While not a HEN (Homebrew Enabler) it's a volatile dose of "HAN" (short for etHANol). This version of the hack has evolved to offer something to every PS3 model now. All existing models will now have the ability to get PS3 games backup pkg installation and PS1/PS2/PSP emulators support among other features as outlined by developer bguerville who is going to take from here with this introduction of PS3Xploit v3.0 -- Codenamed: "HAN"


    • PS3Xploit Team is pleased to announce the official release of the PS3Xploit Tools v3.0 project nicknamed 'HAN'.

      PS3Xploit Tools v3.0 is a suite of 6 tools supporting both official firmware versions 4.81 & 4.82. The only pre-requirement to use HAN is to have an activated PSN user account.
      It's recommend not to use your main PSN account but rather a spare one.
      Users should create a new secondary user account on the PS3 then activate a new PSN account in it.
      This secondary ps3 account should be used to perform all the pkg installations. Then for regular gaming, use the primary user account.

      The principle behind HAN is quite simple, due to a vulnerability in the way npdrm content is managed, it is possible to resign game related files with custom keys, patch vsh & install resigned pkg from XMB.

      The first tool, on the PC side, ps3xploit_rifgen_edatresign.exe should be used to generate rif files and create new signed_act.dat. You should place the act.dat/idps.hex, previously dumped with HAN ACT/IDPS Dumper, in the resigner directory and drag matching rap file for your game onto the executable file. Then rename the new "signed_act.dat" to "act.dat" and place it on USB drive along with the new rif file. The files are now ready to be pushed to the PS3 using the HAN ACT/RIF Copier.

      ** It is recommended to resign all the pkgs that require Han enabler with this tool**
      ** Packages which are converts and packages which needs rif activation **
      keep original act.dat in a safe place **

      On the PS3 side, the other 5 ps3xploit tools are:
      1. HAN Installer - Copies necessary system files to PS3 to run HAN.
      2. HAN Enabler - Enables the HAN patches
      3. HAN ACT/IDPS Dumper - Dumps current user profile user act.dat & PS3 IDPS to USB.
      HAN ACT/RIF Copier - Copies the resigned act.dat & generated rif file from USB to the current user profile.
      5. HAN Debug PKG Enabler - Provided optionally for users wishing to install debug pkg. Note that if you run this patch you will not be able to install any pkg resigned with the ps3xploit resigner for HAN anymore until you reboot!

      The 'HAN' project is solely relying on userland exploitation to provide digital backups support for the majority of PS3 Games as well as PS1/PS2/PSP Emulators (within the ps3 firmware) and the ability to install PKG files from USB. PS3 PKG Game backups need to be prepared using TABR like technique and only ps3 games having an available "game update" are supported.
      PKG files are installed from the Games XMB column, using a version of the Rebug Package Manager tweaked for this project. On USB of course, the FAT32 limitation of 4Gb is still in effect, it's a partition type limitation, nothing we can do about that. However workarounds using a local server can be used to remedy the situation if required.
      To get best results initializing the exploit, remember to load the pages directly from a clean browser session. Never browse to an exploit page from other pages & never use a homepage other than blank or the exploit page you wish to use.
      We recommend to:
      1. Go to the ps3 browser homepage option & choose blank homepage.
      2. Create favourites to HAN Enabler & the other HAN pages you wish to use.
      3. Restart the browser.
      4. Use the favourites to access any page from complete scratch.
      5. Reload the browser between exploits.

    • PS3Xploit Tools v3.0 - PS3 HAN Installer.png
      PS3Xploit Tools v3.0 Overview
      1. HAN style packages allowed (Patched external modules ecdsa)
      2. PSX/PSP Free license type allowed (Patched sceNpdrmHeader check)
      3. Resigned ACT.DAT & RIF allowed
      4. Cinavia protection removed on HDD content
      5. OFW Package Manager
      6. Debug pkg file support added (optional)
      7. reactPSN alternative solution for OFW users

    • Instructions for Each Tool in v3.0

      PS3 HAN Installer
      This tool will copy files from USB to Flash Memory to install OFW Package Manager.
      • Extract all files from "" on target USB drive root
      • Load Exploit Page
      • Select Root Path where these files are (default /dev_usb000/)
      • Click "Initialize HAN Installer" button
      • When init ready, click "Launch HAN Installation" button to copy files to flash and reboot
      • Once rebooted, you can now use the HAN Enabler and Debug Package Enabler

      PS3 HAN Enabler
      This tool will enable the HAN patches.
      • Load Exploit Page
      • Click "Initialize HAN Enabler" button
      • When init ready, click "Enable HAN" button to activate patches
      • Once browser closes (default option) you can install HAN packages from XMB

      PS3 HAN ACT/IDPS Dumper
      This tool will dump your activation file (act.dat) and your IDPS.
      • Load Exploit Page
      • Select Dump Path From Dropdown Box (default /dev_usb000/)
      • Click "Initialize ACT/IDPS Dumper" button
      • When init ready, click "Dump ACT.DAT & IDPS" button
      • The browser will close automatically by default

      PS3 HAN ACT/RIF Copier
      This tool will write back to the PS3 a modified act.dat and *.rif file
      • Load Exploit Page
      • Change RIF File Name to match your target
        • example PS2 Placeholder: 2P0001-PS2U10000_00-0000111122223333
      • Select Root Path where act.dat/*.rif is located (default /dev_usb000/)
      • Click "Initialize AC/RIF Copier" button
      • When init ready, click "Copy Files" button to transfer to HDD

      PS3 HAN Debug PKG Enabler
      This tool will allow Debug Package types to be installed if required. Do not use this tool if you install pkg files resigned with the ps3xploit resigner app.
      • Load Exploit Page
      • Click "Initialize HAN Debug PKG Enabler" button
      • When init ready, click "Enable Debug PKG" button to activate patches.
      • Once browser closes (default option) you can install Debug pkg packages from XMB.

    • All files are hosted on
      (See ScreenShot below)


    Official Website: / Official Forum @

    Last edited by a moderator: Mar 25, 2019


Discussion in 'PS3 News' started by bguerville, Mar 13, 2018.

    1. pinky
      I don't know.
    2. Louay
      for that reason i ask bugerville
      pinky likes this.
    3. pinky
      I can understand the frustration. I plan to do use the "install all" option on the ps4.. thus far, I've only installed one pkg at a time. I've been keeping a copy of each pkg for when I format the hdd. I suggest you do the same. all that's technically needed for an install on the ps3 is the PARAM.SFO which is only 100KBs as a pkg. ;)
    4. bguerville
      As far as we know, an exploited kernel is needed to enable QA toggling.
      We would definitely have used QA otherwise because if it were possible to toggle it without exploiting the kernel, we would already have resigned homebrews running.
      Last edited: Aug 19, 2018
      STLcardsWS likes this.
    5. SMN
      please put a video to make package from game-backup
    6. SMN
      again hi.

      i have question : according the post

      1-can use for injecting/installing game from dvd-files instead of extracted-package-file at ofw 4.82 superslim jailbrocken?
      2- is not final-game-injected-backup-file larger than 4g ? (is it been multi-file or single-file?)
      if single-file larger 4g ; how copy to fat32-usbstick?

      Last edited by a moderator: Sep 11, 2018
    7. SMN
      i have a question:

      with method; for installing game through inject game to backup file then making rif file from act.dat & idps.hex & RAP file; how do i install several games together?

      PS3xploit-resigner-master app just accept single RAP file to make Sign-Act.dat file while any game have a rap file partly.

      should i install any game partly with injected backup & act.dat +rif file?
    8. pink1
      The act.dat is for your account and the idps is from your system so you only need one of each of those. The rap/rif files are for the games so you need one for each game. So you put the raps in the rap folder the idps in the idps folder and the act.dat in act.dat folder then run the resign_windows.bat and you'll get a "PKG_RIF-INSTALLER.pkg_signed.pkg" with all of rifs.
    9. rick-solfa
      hi everybody! this is my first post! :)
      ((i'm italian sorry 4 my bad english :( ))

      i have a question please:
      after I installed han and I also got it off, in the han menu I download a game... han unpacked it for me... when I go there to click on with the X of the joy I get out this screen:
      what passage did I forget to do?

      Attached Files:

    10. Ps3_dev
      Have u checked this exploit named as "kakaroto/ps3xport"
    11. bguerville
      I can remember using the utility long ago.
      Why do you ask?
    12. Bloodmoons366466
      You need to inject the rif file for the game backup you installed by finding the games rap file,using the resighner tool to convert the rap file into a rif,then using the act/rif copier in v3 han tools to inject your modified act.dat and rif file for your game to work with han enabled.
    13. bguerville
      What do you mean you downloaded a game in the han menu? What HAN menu?
      Official ps3xploit HAN Tools do not have such a feature so what are you using?
    14. Ps3_dev
      In past utility is working for some Console so with help of rop chain we can develop them to work on han consoles it is possible ?
    15. bguerville
      I never considered it so I cannot say for sure but in theory you could make a ps3 backup manipulation utility like ps3xport using ps3xploit.
      Currently, that wouldn't just require help from some rop chain though, it would require implementing every needed feature in ROP & using multiple chains.
    16. Ps3_dev
      I there any way to run Linux on ps3 han
    17. bguerville
      Not as far as we know.
      Currently we don't know any way to get Linux running without first exploiting the kernel.

      Anyone curious enough can have a look at the Rebug Toolbox source code for instance to get an idea of how QA gets enabled or how Linux gets setup to start. It doesn't matter if you don't understand all the ins & outs of the code, the important thing you will notice is that for all those features the Toolbox needs to peek/poke lv2 and lv1 in some cases. That means the homebrew features need to make changes to the kernel memory (patches if you prefer) during their execution.
      ROP can reproduce any homebrew code but as long as the kernel is not exploited, lv1/lv2 peek/poke are unavailable & the kernel memory address space is unaccessible.

      Of course there might also be other avenues to research & other hacks to be found. In theory a kexploit is not the only possible solution to this problem, look at cfw for instance. But I think it is the most likely & most promising at this stage.
      Last edited: Oct 4, 2018
    18. gamiznet

      cech 4204a Can install han without problems
    19. Ps3_dev
      Yes of course follow the steps
    20. NiHuShu
      Can someone tell me the state of PS3 OFW because it didn't move for about 4 months. Did everybody just leave it?

Share This Page