PS3 [RESEARCH] Downloading all unknown file types to HDD and Flash

[lmn7]

oh yeah, I know whats in there. the xreg idea was just as POC and for people who would trust the server or have offline PS3 and nothing to worry about, we could have debug options enabled by a server for example, working on OFW. Anyway that is only only small part of that idea, its more the sprx/self/xml patches that can be done that are interesting. For example, we could have a "Add whats new on PSX-place" button on a website, you press it, and a patched explore_plugin.sprx starts downloading with instructions to choose vsh/module/ as location, Or "add package manager" and a category_game.xml starts downloading. Many many possibilities there with direct downloads to flash, even locally hosted downloads from webmans webserver could be used in some way i bet.

Multiple concurrent downloads to flash, no, background downloading is only possible to hdd0. Even if we could enable it for other partitions I guess it would download it to dev_hdd0/vsh/task/xxxxxxxxx anyway as that is how BGDL works really.

Damn that would've been great if we could've had concurrent downloads. The whole downloading to flash thing is actually kind of a security concern right? I mean people can literally host sites that brick your PS3. I think you said in another post that you can't hard brick from messing with files in flash, but it's still a big issue IMO.

So if we can't have concurrent downloads, is there a way to trigger a download, wait for it to finish, then download another file? I've tried doing this with javascript but the PS3's browser is so dated, a lot of stuff simply doesn't work. I'm sure it can be done though.

 

[DeViL303]

Damn that would've been great if we could've had concurrent downloads. The whole downloading to flash thing is actually kind of a security concern right? I mean people can literally host sites that brick your PS3. I think you said in another post that you can't hard brick from messing with files in flash, but it's still a big issue IMO.

Background downloading to all partitions would be great, but I doubt possible really.

I see it as no more of a security concern than someone offering some files on here and saying "put these on your usb stick and copy to flash" , basically same risk, it will just be a little quicker to complete, but if you are following someones instructions to download a file or copy a file to flash its all the one really. You have already made the decision to trust the uploader and take the risk.

Also yeah, soft brick is all that is possible on dev_flash afaik, I have deleted it all before in tests.

So if we can't have concurrent downloads, is there a way to trigger a download, wait for it to finish, then download another file? I've tried doing this with javascript but the PS3's browser is so dated, a lot of stuff simply doesn't work. I'm sure it can be done though.

Not sure about chaining them in the browser, maybe possible

I think the best way to do multiple files is to use your dev_blind pkg discovery. If you use it with the net_package_install method the pkg automatically installs and deletes after, so its just one button press once dev_blind is enabled. Things like adding Debug settings to HFW could just be 1 button press away. or coldboots etc. With the added benefit of pkg hash checks etc so you wont ever get corrupt downloads installing.

 

[lmn7]

I think the best way to do multiple files is to use your dev_blind pkg discovery. If you use it with the net_package_install method the pkg automatically installs and deletes after, so its just one button press once dev_blind is enabled

Yeah think I agree with you here, the problem is the prerequisite of enabling flash and debug packages. Even though we have this in one script now, I wanted installation to be all in one click, but it just doesn't seem possible at the moment.

 

[DeViL303]

Yeah think I agree with you here, the problem is the prerequisite of enabling flash and debug packages. Even though we have this in one script now, I wanted installation to be all in one click, but it just doesn't seem possible at the moment.

I suppose enabling dev_blind and HDD1 could just be part of normal HAN enabler and debug package enabler maybe. So you just have to enable HAN , then download your files. Kind of is one step then as enabling HAN or debug packages is just standard procedure before doing anything hacky.

Most CFW users have it enabled all the time afaik for FTP etc, its not really a big risk IMO. Even less on OFW really as the only way to delete stuff is with the file explorer.

 

[lmn7]

I suppose enabling dev_blind and HDD1 could just be part of normal HAN enabler and debug package enabler maybe. So you just have to enable HAN , then download your files. Kind of is one step then as enabling HAN or debug packages is just standard procedure before doing anything hacky.

Most CFW users have it enabled all the time afaik for FTP etc, its not really a big risk IMO. Even less on OFW really as the only way to delete stuff is with the file explorer.

I think making it default for debug packages is fine, but some games check for signs of CFW so it may not be the best idea to use it for the HAN enabler. I'll talk to ShaolinAssassin about it.

 

[aaryan]

Ok, I have made some nice progress on this over last couple of hours. I decided to make a new thread, as that old one cover tonnes of methods, most of them not working. This is working, Ive actually got 2 new methods, but there is a few issues, hopefully we can solve them.

So first of all, I found this list of filetypes in download_plugin.sprx.

Spoiler

View attachment 16234

So that was start of this new path, first of all i was like hold on, we can play PAMs from the XMB can we? So i tried downloading a PAM, and guess what, I could download, it, and i could download it in the background, but XMB would not play it. Anyway, then i knew that this was a whitelist for files allowed to be downloaded to HDD. Success!

So then i noticed further up there was a few other filetypes mentioned, including "pkg"

Spoiler

View attachment 16235

So i edited that a bit, editing 2 references to "p3t" to "pkg"

Spoiler

View attachment 16236

Nice
So that is first method, working 100%, we can download pkgs, from the browser, onto dev_hdd0/theme/ BUT no background download with this method. See video below for how it works. Man if themes had background download we would be sorted.

EDIT: now have them downloading to dev_hdd0/packages/

View attachment 16237

I have attached the download plugin that allows this, see what you think, there are more hacks to be done here, I am guessing we can get file copy working in the same way too.

Anyway, i have another method, which i will put in next post.

 

[DeViL303]

..

You seem to have said nothing there.

 

[Renatinho50]

Is it possible for this tool to have access to CFW Slim 3XX?

 

[DeViL303]

Is it possible for this tool to have access to CFW Slim 3XX?

This download_list.xml mod is working the same on HFW as CFW, including deletion bug. The only difference is that on OFW you need to mount dev_blind or dev_hdd1 with a web exploit to use them.


Note: "CFW Slim 3XX" = CFW is not possible on CECH3xxx.

 

[DeViL303]

Nice , unlocked an official function for downloading PUPs and PBPs with folder creation. Thanks to a tip from kozarovv about mimetypes.

Now I have more options for folder creation as we dont need to waste the sbk/sb2 mod on PUPs, also, we get to see nice icons that might not have been seen for a long time if ever.

I think i will mod the eboot.pbp one to do something else as its not really useful now imo. Cool though, and this has opened up more possibilities with mimetype mods too.

 

[aldostools]

Nice , unlocked an official function for downloading PUPs and PBPs with folder creation. Thanks to a tip from kozarovv about mimetypes.

Now I have more options for folder creation as we dont need to waste the sbk/sb2 mod on PUPs, also, we get to see nice icons that might not have been seen for a long time if ever.

I think i will mod the eboot.pbp one to do something else as its not really useful now imo. Cool though, and this has opened up more possibilities with mimetype mods too.

What MIME type did you use? I has been suggesting you to use "application/octet-stream"

 

[DeViL303]

Yes, you were right too, I just had not tried this particular mod before. It was expecting PUPs and PBP to be served with special mimetypes, but now I patched that in the sprx to be application/octet-stream, and now it treats those files in the proper way even though mimetype is normal.

I have also made a few more discoveries, I can have it treat REBUG.PUP differently to PS3UPDAT.PUP, also can mess with the mnv mimetype and extension. Wish i had a bit more room in the prx, I cant have dev_hdd0/packages/ due to lack of space, only room for "package", there are a few things like that.

 

[DeViL303]

@aldostools, @lmn7, @Niander466 @sandungas @NewFile @Louay

100% Solved the deletion bug, now can download to dev_hdd0 anywhere I want, Only required a 1 byte patch to download_plugin.sprx in the end, just took a while to find it.

Note: Due to sprx patch , this will only work on CFW. Maybe as this patch is so simple, literally 1 byte, that it can be achieved on HFW too with a RAM patch?

This is the byte that needs to be patched, change it to anything else and it no longer checks dev_hdd0 for unknown files and deletes them ..simple That patch and my download_list.xml is all you need really.

See attached files, few extra patches to these, one to allow files to go to root, and another to remove pkg signature check. I have also added 3 different ways for PUPs to be handled, just because I can

1. PS3UPDAT.PUP creates PS3/UPDATE/ folder and downloads into it if you select USB
2. REBUG.PUP creates CFW/UPDATE/ folder and downloads into it if you select USB
3. ANY other PUP with any other name, automatically creates and goes into dev_hdd0/updater/01

See attached download_list.xml/download_plugin.sprx for working download hack.

If there are any more paths that anyone thinks should be added let me know. I think this should become a standard CFW patch in future, I can see no downside.

 

[Louay]

@aldostools, @lmn7, @Niander466 @sandungas @NewFile @Louay

100% Solved the deletion bug, now can download to dev_hdd0 anywhere I want, Only required a 1 byte patch to download_plugin.sprx in the end, just took a while to find it.

Note: Due to sprx patch , this will only work on CFW. Maybe as this patch is so simple, literally 1 byte, that it can be achieved on HFW too with a RAM patch?

This is the byte that needs to be patched, change it to anything else and it no longer checks dev_hdd0 for unknown files and deletes them ..simple That patch and my download_list.xml is all you need really.

View attachment 17091


See attached files, few extra patches to these, one to allow files to go to root, and another to remove pkg signature check. I have also added 3 different ways for PUPs to be handled, just because I can

1. PS3UPDAT.PUP creates PS3/UPDATE/ folder and downloads into it if you select USB
2. REBUG.PUP creates CFW/UPDATE/ folder and downloads into it if you select USB
3. ANY other PUP with any other name, automatically creates and goes into dev_hdd0/updater/01

See attached download_list.xml/download_plugin.sprx for working download hack.

If there are any more paths that anyone thinks should be added let me know. I think this should become a standard CFW patch in future, I can see no downside.

Woww that's greet ps3 scene is more alive then PS4 and hope we continue same way

 

[Casavult]

@aldostools, @lmn7, @Niander466 @sandungas @NewFile @Louay

100% Solved the deletion bug, now can download to dev_hdd0 anywhere I want, Only required a 1 byte patch to download_plugin.sprx in the end, just took a while to find it.

Note: Due to sprx patch , this will only work on CFW. Maybe as this patch is so simple, literally 1 byte, that it can be achieved on HFW too with a RAM patch?

This is the byte that needs to be patched, change it to anything else and it no longer checks dev_hdd0 for unknown files and deletes them ..simple That patch and my download_list.xml is all you need really.

View attachment 17091


See attached files, few extra patches to these, one to allow files to go to root, and another to remove pkg signature check. I have also added 3 different ways for PUPs to be handled, just because I can

1. PS3UPDAT.PUP creates PS3/UPDATE/ folder and downloads into it if you select USB
2. REBUG.PUP creates CFW/UPDATE/ folder and downloads into it if you select USB
3. ANY other PUP with any other name, automatically creates and goes into dev_hdd0/updater/01

See attached download_list.xml/download_plugin.sprx for working download hack.

If there are any more paths that anyone thinks should be added let me know. I think this should become a standard CFW patch in future, I can see no downside.

You absolute beast.

 

[DeViL303]

BTW, if anyone is trying to make a HAN RAM patch for download_plugin.sprx to do this, patch out this extension too, then it will treat pkgs like any other unknown file type, no sig check. I know on CFW it always returns true, but this way, there is no check at all afaik, and so, on HFW it will allow debug packages AND resigned pkgs to download at the same time without any other hacks applied.

I just patched it to "xxx".

 

[ayassinsayed]

BTW, if anyone is trying to make a HAN RAM patch for download_plugin.sprx to do this, patch out this extension too, then it will treat pkgs like any other unknown file type, no sig check. I know on CFW it always returns true, but this way, there is no check at all afaik, and so, on HFW it will allow debug packages AND resigned pkgs to download at the same time without any other hacks applied.

View attachment 17092

I just patched it to "xxx".

Great work , hope to work in HFW and we can use it to download han support files to dev_blind directly ?


Sent from my iPhone using Tapatalk

 

[DeViL303]

Great work , hope to work in HFW?


Sent from my iPhone using Tapatalk

I have no plans to even look at it. so no. Unless someone else wants to look into it.

 

[Niander466]

wowwww thank you, incredible you are genius !!!!

 

[Niander466]

@aldostools, @lmn7, @Niander466 @sandungas @NewFile @Louay

100% Solved the deletion bug, now can download to dev_hdd0 anywhere I want, Only required a 1 byte patch to download_plugin.sprx in the end, just took a while to find it.

Note: Due to sprx patch , this will only work on CFW. Maybe as this patch is so simple, literally 1 byte, that it can be achieved on HFW too with a RAM patch?

about download_plugin.sprx
in case the one you posted only works in cfw? so I would have to edit the original sprx is this?

This is the byte that needs to be patched, change it to anything else and it no longer checks dev_hdd0 for unknown files and deletes them ..simple That patch and my download_list.xml is all you need really.

View attachment 17091


See attached files, few extra patches to these, one to allow files to go to root, and another to remove pkg signature check. I have also added 3 different ways for PUPs to be handled, just because I can

1. PS3UPDAT.PUP creates PS3/UPDATE/ folder and downloads into it if you select USB
2. REBUG.PUP creates CFW/UPDATE/ folder and downloads into it if you select USB
3. ANY other PUP with any other name, automatically creates and goes into dev_hdd0/updater/01

See attached download_list.xml/download_plugin.sprx for working download hack.

If there are any more paths that anyone thinks should be added let me know. I think this should become a standard CFW patch in future, I can see no downside.

about download_plugin.sprx
in case the one you posted only works in cfw? so I would have to edit the original sprx is this?