• Official PS3 Toolset is now supporting 4.92 Firmware

    View Official Release Post for additional information HERE

PS3 [UPDATE 4] PS3 Toolset by bguerville: A powerful collection of tools fueled by new PS3 exploit

UPDATE FEB 2023 (The domain's of ** ** www.ps3xploit.net > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com) > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com and .com are no longer in poccession of the team, A new address will be posted in future release coverage.
Update (4) Now supporting 4.86 Fully & Issue fixed with NAND console's in rare situations
.You may recall a recent article revealing a few exclusive screenshots of bguerville's latest project, now the time has come to introduce the next evolution in PS3 Jailbreaking solutions. The PlayStation 3 Toolset by @bguerville is a new suite of tools, built upon a new PS3 exploitation framework & fueled by a new exploit discovered on the PS3 by the developer. The new exploit (and the toolset project as a whole) is compatible with all PS3 models running 4.82 - 4.86 OFW/HFW/CFW

While ps3xploit team member's @habib continued research and development of PS3HEN for nonCFW models with assistance from @esc0rtd3w, @bguerville meanwhile was working on his own research and developing other tools and exploits as you will see with this new PlayStation 3 Toolset, which thorough testing was conducted by @esc0rtd3w (whom we recently interviewed). All the team of talented devs have done some amazing work in the scene in recent years with all the PS3Xploit projects and that trend continues with this release.

The PS3 toolset is a project that @bguerville has been working on for some time,
the developer gave us a brief timeline of events since the Ps3Xploit Tools 2.0 framework (flash writer and dumper(s)) that led to this new release (see the timeline section).

Some tools in this project may offer limited features on non-CFW compatible consoles. For instance, the Flash Memory Manager includes the most functionality for CFW-compatible consoles, certain of its features are available on non-CFW models, others aren't. Features such as the dumping of flash memory (for backup purposes) and displaying of various console specific information in real-time such as the IDPS, Factory Installed Firmware version and automatic detection of your console's Custom Firmware (cfw) compatibility status are available on both CFW compatibles & non CFW compatibles console's.

Note that the PS3 Toolset does not feature PS3HEN, bguerville declared having his own plans for a HEN style solution.

The validation and safety checks have advanced greatly in this latest framework of bguerville's tools (since the release of the flashing tools in PS3Xploit v1.0 and v2.0), the toolset detects your console type and only allows the features that are compatible with your console to be used on your system, making it noob proof while also being very user friendly thanks to new automation and detection built in.

Let us now discover this release and how to use various functions of the toolset.

PS3-Toolset_bguerville.png

  • PS3 Toolset by bguerville
    PS3 Toolset by @bguerville.png 9797979.png

    "The PS3 Toolset is a repository project for tools built upon a new ps3 exploitation framework I have been working on for a while. More tools should be added to this repository with time.
    I hope you enjoy using them as much as I enjoy making them ;-)"

    Project Timeline:

    • End 2018, Sony patches one of the bugs the ps3xploit tools exploited to gain ROP execution. (4.83 OFW release)
    • Beginning 2019, I begin to look for a replacement exploit & the release of ps3xploit tools 3.0 is postponed.
    • Spring 2019, I rewrite most of the 3.0 framework to leverage the new capabilities gained with the new exploits.
    • Summer 2019, realizing the potential of the newly written 4.0 framework to create flexible & powerful tools, I decide to cancel the 3.0 release altogether & scrap the 3.0 framework.
    • Beginning 2020, I am releasing this "Toolset" project, as a repository for the tools created around my 4.0 framework that I deem release worthy, each tool being accessible in a toolset tab. This project is the fruit of many sleepless hours during many months, it showcases only part of the 4.0 framework capabilities though, there is still room for more surprises later... ;-)

    The initial release, contains a couple userland tools, a fully featured Flash Memory Manager & a Memory Editor (mostly for development & research purposes). A file explorer tool should be added to the repository soon, it will be the last userland tool I write for the foreseeable future
    General Information about the PS3 Toolset
    • Toolset supports all ps3 models & official firmware versions from 4.82 to 4.86 (cex & dex) *some ps3 models have exclusive features/tools (note: toolset tools will also work from CFW)
    • PS3 Toolset is executed from the PS3's Web-Browser by visiting the following URL (SSL): ** www.** ** www.ps3xploit.net > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com) > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com)/bgtoolset
    • PS3 Browser Requirements
      • JavaScript (Enabled from browser settings)
      • Cookies (Enabled from browser settings)
      • Flash Plugin (Enabled, but this one has a few caveats that may need explaining, the good news being that the toolset will detect the issue and let you know how to proceed (if there is an issue), see further explanations below)
        • If ever in the past, you agreed to load the Flash Player plugin when prompted and checked the checkbox "Do not show again", you should have no issue & will never even see the plugin popup.
        • If you never before checked the "Do not show again" checkbox, you will be greeted with a popup asking you to allow the Flash player plugin. If you agree to load the plugin, the PS3 toolset should continue to load. Note that if you take more than 15s to agree when prompted by the popup, you will get a PS3 Toolset warning about the plugin being disabled even if you finally agreed to load the plugin, just refresh the page when prompted.
        • If ever you got the Flash Player plugin popup in the past & selected NO and checked the checkbox "Do not show again", the Flash Player plugin will be permanently disabled, consequently the PS3 Toolset will not be able to load. Unfortunately there seems to be no official way to reset this setting in the browser. The PS3 toolset does have automatic detection of this issue and some instructions are given. Currently the easiest workaround is to create a new user profile on the XMB, when launching the toolset on the new profile, you will be greeted with the browser pop-up asking to allow the flash plugin. However it has been found that in some cases, a new user profile is not sufficient to reset the Flash Player plugin status. I hope that other devs & advanced users will look into this situation while I continue working on new tools, if nobody does, I might end up looking into the problem after the next tool release.
    • You are free to use the tools in this project at your own risk. Keep in mind that no official support is provided, if you experience any kind of problem & find yourself in need of help, I strongly recommend that you turn to the PS3Xploit sub-forum on psx-place.com for support & guidance..
    • It is highly recommended that you adjust the console's System Time settings properly to avoid any time related issues with the browser and/or the Flash Player plugin.
    • To avoid potential crashes, you should never attempt to close the browser while toolset operations are in progress, especially when the browser exit confirmation setting is turned off.
    • PS3 Toolset only loads tools & features compatible for your console, this means no accidental use of a feature not compatible with your system.
    • No local/offline version is planned & the source code will remain closed for the time being.

  • Requirements
    • PS3 Console (Any Model) running 4.82 - 4.86 (CEX/DEX) Firmware
    • Internet Connection to access Toolset from PS3's Internet Browser.
    • PS3 Browser Flash Player 9 Plugin enabled (View General Information section for additional info)
    • PS3 Browser Javascript enabled
    • PS3 Browser Cookies enabled

    Quick Overview of Toolset (v1.0.19) Capabilities:

    All Models
    • Display console's IDPS
    • Detects Console's CFW Compatibility + Factory Installed Firmware
    • Detects Internal Flash Type of console: NOR / NAND / eMMc ect...
    • Detects console & firmware information
    • Take's a Full dump (backup purposes) of Internal Flash
    • Memory Editor tool (R&D tool)
    Custom Firmware (CFW) compatible Models Only
    • Patching of OFW Flash (Flash Memory Patch) for Custom Firmware Installations.


  • Included Userland Tools (v1.x)
    1. The Memory Editor tool v1.1
    upload_2020-2-21_22-23-34.png

    • The tool maps up all the currently loaded sprx modules segments (text & data) & allows you to browse them as well as the 2 vsh segments and the browser memory container. Users can also edit the memory as they see fit in all writable memory segments. This is mostly a R&D tool.
    • - Notice - issues caused by RAM synchronisation. The memory editor is not a live debugger, it cannot pause lv2 or userland threads execution. Consequently, the RAM can be modified by the various threads executing in userland between the moment the memory editor tool takes a snapshot of a ram range to create the hex table to display on screen & the moment the table is actually displayed on screen.This means that on rare occasions the values displayed on screen might be different from those actually in RAM. This is especially true for specific memory areas such as the browser container memory.
      • There is no easy way to solve this issue, even the debugging deci3 syscalls available only in DEX would not help us much because while it would enable us to take properly synchronised snapshots of the RAM, displaying the data on screen would still require running js code in the browser, which would modify the RAM & lead to the same synchronisation problem we currently face without using the deci3 syscalls.
      • I implemented code to color out the detected table cells found to be unsynced with RAM so there is as little ambiguity as possible. The text of such detected table cells is set to 'undefined'.

    2. Flash Memory Manager v1.2 tool
    upload_2020-2-21_22-24-9.png

    • Compatible with all PS3 models (patching flash options exclusive to CFW compatible models)
    • FMM displays basic Flash Memory data in a tree.
    • Clicking on appropriate tree nodes reveals context menu entries to launch the tool's features.
    • Among other things, the manager can dump the Flash memory to file on any natively writable partition mounted on the console.
    • To patch (for cfw installation) a console using the no-fsm method, users must first load a patch file in memory. That file will be checked first & if found valid, the context menu entry to apply the patch will be enabled.
    There are 2 ways to acquire the correct patch file to flash.
    1. it can be downloaded to disk first then loaded into memory from file & finally applied to the system
    - or -
    2. it can be loaded via https directly to memory without using disk storage, the data is checked in RAM then if found valid, users can decide to apply it (from the unlocked menu, once file is validated by the toolset automatically).​
    • After applying a patch, the FMM automatically dumps the 2 ROS regions it just overwrote to double check that patching was properly done.
    • Progress dialogs keep the user informed of current operations & outcomes. User logs are provided in the various progress dialogs.

    3. Logs v1.0 Tool
    PS.png

    Technically the log section is also a tool of this Toolset. Its tab contains all the logs, warnings, errors & debug output of the toolset & its different tools.
    • Whenever something goes wrong, it's the first place to look & screenshots can be used to identify problems.
    • I also included a UDP broadcast similar to Cobra's. Users can use socat to listen on UDP to the Toolset broadcast. However for the moment, only some data gets broadcasted but not the entire contents of the log tab because of the performance impact. With the file explorer release, I plan implement a few changes to this feature as well, the UDP broadcast will be done in a separate thread & all logged data should be broadcasted to UDP.

  • colored.png
    Legend:
    • Displays firmware information
      • PS3 Firmware: (version)
      • VSH Mode: (Retail (CEX) or Debug (DEX))
      • Kernel Mode: (Retail (CEX) or Debug (DEX))
      • Custom Syscalls:
        • 1. detects 'Mamba' (if syscall 1022 exists)
        • 2. detects 'Cobra' (if 1022 does not exist but syscall 8 works)
        • 3. detects CFW (if 1022 & 8 are unavailable but syscall 6 works)
        • 4. Displays 'No' (if neither sc 1022, 8 & 6 are unavailable)
    • Flash Memory
      • the tree contains alot of information about any PS3 console and also provide option for taking a backup (dump) of internal flash
    • Quickly determines if your console is a NOR/NAND/eMMc type
      • Displaying of console info, also note previous tools user's had to select NOR/ NAND/ eMMc Tools (depending on model), now the toolset automatically checks and detects tools needed.
    • Displays your IDPS (option to hide onscreen)
      • Will display any Ps3 models IDPS
    • Displays Factory Installed Firmware
      • If your console < 3.60 that means you can install CFW
    • Displays Custom Firmware Installation Compatibility,
      • No longer have to check the sticker of your console and run minverpup and check min factory installed firmware, the toolset displays the compatibility of a Custom Firmware (CFW) Installation for your console.
    • ROS Bank 0/1
      • Display's hash checks of ROS 0 /1 (technically the hashes are not calculated from the entire ros ranges but from the range corresponding to a noFSM patch so that ROS hashes & patch file hashes can be compared.
    • Flash Memory Patch (CFW Compatible Console Only)
      • Patch Flash for CFW installations

    .
    Flash Dumper:
    - Notice - dumps should always be validated with PyPS3Checker to ensure a proper dump took place before using it for future backup purposes)

    Purpose of dumping the Flash?

    • Having a Clean backup of your system internal flash memory is a vital piece of information to have stored, its something that may never be used but can be extremely important in some instances where a brick occurs, having a clean backup can help restore your system along with a hardware flasher
    PS3 Toolset by @bguerville_2.png 33.png 6666.png


    Patch Flash (aka Flash Writer Tool) - CFW compatible console's only
    Purpose of patching flash?
    • Patching the Flash (ROS 0/1) allows for Custom Firmware Installations on applicable models
    PS3 Toolset by @bguerville_1.png
    2222.png
    3333.png
    4444.png
    55555.png
    666666.png
    7777.png
    8888.png
    9999.png
    Userland Memory Editor
    Purpose of using Userland Memory Editor?
    • The memory editor is a R&D tool. It's useful mostly for devs & hackers who can use it to peek/poke the RAM, either to verify certain results or to search for flaws.
    PS3 Toolset by @bguerville_4.png 888.png 101010.png
    Toolset detecting various PS3 models
    PS3 Toolset by @bguerville_3.png ps3-toolset-nor-4201b.png ps3-toolset-nand-phat-a01.png ps3-toolset-emmc-4201a.png
    Toolset Themes Options
    The toolset contains 4 Themes as shown below
    PS3 Toolset by @bguerville_5.png
    PS3 Toolset by @bguerville_10.png
    PS3 Toolset by @bguerville_6.png
    PS3 Toolset by @bguerville_7.png
    PS3 Toolset by @bguerville_8.png

  • Acknowledgements
    My warmest thanks to Jason, for his friendship & support of course, but in the context of this project, also for testing my work on a daily basis, not just before this release but all year round.


    The PS3 Toolset & its GUI were built in native js upon various open source js libraries including jQuery, jQueryUI, bigInteger, jstree, mCustomScrollbar, js-cookie, sjcl, switchButton & toastmessage as well as the Fork Awesome CSS icon library .
    Thanks to all the coders involved in the various projects.


    Thanks to all the psdevwiki contributors, scene hackers & developers who have brought us to this point.
    - @bguerville
    .
    Help and Donations
    You can show your appreciation for my (@bguerville) work & help fund future projects with a donation in BTC at either of the addresses below
    Thank you for your support.

    ** www.** ** www.ps3xploit.net > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com) > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com)/bgtoolset/assets/images/qr-legacy-P2PKH.png
    ** www.** ** www.ps3xploit.net > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com) > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com)/bgtoolset/assets/images/qr-native-segwit-BECH32.png
    ** www.** ** www.ps3xploit.net > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com) > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com)/bgtoolset/assets/images/qr-PayNyms.png
    Legacy P2PKH
    Segwit BECH32
    PayNyms

    The PS3Xploit team also needs your continued help to cover its growing web hosting costs.
    Please consider a donation to PS3Xploit via Paypal at https://www.paypal.me/ps3xploit

From the PS3 web browser you can access the toolset @: (SSL only)
** www.** ** www.ps3xploit.net > D... (NEW URL = http://ps3toolset.com)/bgtoolset

UPDATE (2) - Regarding 4.86 Support via @bguerville

PS3 Toolset is fully supporting 4.86

UPDATE (3) -A limited number of user's have been complaining of errors, the information often provided by user's is incomplete, which means tracking the issue is not easy based on the information provided, Developer bguerville is asking those user's who are experiencing issue to provide a dump of the flash to diagnose a possible issue and fix for the problem, here is a thread by fellow developer @esc0rtd3w setup here to acquire those dumps from affected user's:


Update (4) - Issues has been resolved and FMM has been updated to
v1.0.22. A fix for the handful of ppl with NAND consoles who are stuck unable to install another firmware at
** www.** ** www.ps3xploit.net > D...http://ps3toolset.com)/bgtoolset/fix_nand.php

Instructions here for NAND ISSUE:
https://www.psx-place.com/threads/bg-toolset-user-issues-and-dump-submissions.28868/
 
Last edited:
Thanks to the few members who reported that possible freeze issue on loading the Toolset.

I still cannot reproduce the issue so I cannot be 100% sure but I may have found something that could be a cause of problems in very specific situations, I just pushed a fix.
If you have a minute, could you please try loading the toolset again in the same conditions you used when you experienced the freezes & let me know if it still happens..


I will try now and come back to you :)
 
I need to go through a process of elimination. Several possible culprits..lol
Can someone experiencing freezes pls try this?

on fresh console start:
Open the browser
Set your homepage to blank.
Clear cookies.
Close the browser
Open the browser & type the full URL.
** www.** ** www.ps3xploit.net > D... (NEW URL = http://ps3toolset.com)/bgtoolset
Tell me if it still freezes
 
Last edited:
Post the checksums for 4.86 please, which should be after the patch.

MD5 Hash: 0669179877AE23F5C918E6E62E930BAC ?
 
Post the checksums for 4.86 please, which should be after the patch.

MD5 Hash: 0669179877AE23F5C918E6E62E930BAC ?


SHA256: B5B7D07D0432D1876C9DD19D780A80AF67CF9BA82FCD09ECBEDF236F30C3C44A

But you don't need it. When you load the file in Strict Mode On (always), via https or via file on disk, the checksum of the file data loaded in RAM is calculated & compared to the official checksum. If the checksums are not identical, the loading operation fails, if the checksums match, the loading operation is successful, you can apply the patch.
 
I need to go through a process of elimination. Several possible culprits..lol
Can someone experiencing freezes pls try this?

on fresh console start:
Open the browser
Set your homepage to blank.
Clear cookies.
Close the browser
Open the browser & type the full URL.
** www.** ** www.ps3xploit.net > D... (NEW URL = http://ps3toolset.com)/bgtoolset
Tell me if it still freezes

Yes it freeze again.

Did I have to update my PS3 to 4.86 from official instruction before :

-Apply patch with your toolset and
-Install CFW 4.86 ?
 
sorry for stupid questions, I am a new user, I using toolset to install cfw, after this I can update PS3 to 4.86 ? Or I must update console first and then install cfw?
 
Given the fact that using a different user profile solves this freeze issue, the problem could come from 2 things really:
1. your current configuration files (in the user profile folder) -> THE MOST LIKELY CULPRIT
2. homepage choice (not to be dismissed out of hand, for some reason I won't explain here, it can have an impact on Flash loading), cookies & cache -> The last test says it's not that

I assume that there is some data somewhere in the configuration files of your profile folder that messes with the exploit, it could be webbrowser/settings.xml or another config file. Without being able to reproduce the issue, there is little more I can do about it at this stage.
Maybe esc0rtd3w will be willing to investigate those files further.

For the few users experiencing this problem, the workaround for the moment is to create a temporary ps3 user profile that can be deleted after you are done working with the Toolset.
Hopefully a fix will come in due time..
 
I added some more log entries to try to locate the snippet or even better the instruction that freezes the system.
It should help identifying the setting or whatever that is messing with us..

If someone experiencing freezes can load the Toolset using this url
** www.** ** www.ps3xploit.net > D...p://ps3toolset.com)/bgtoolset/index.php#tblog
take a screenshot (with smartphone) & post it here
 
sorry for stupid questions, I am a new user, I using toolset to install cfw, after this I can update PS3 to 4.86 ? Or I must update console first and then install cfw?
It makes no difference.
You can install ofw 4.86, patch using the Toolset, reboot & finally install a CFW 4.86.
Or you can patch an earlier ofw version, say you are currently on OFW 4.84, you can patch, reboot & install the 4.84+ CFW of your choice..and anyway, once on CFW you can also update to another CFW, so really it's up to you..
 
It makes no difference.
You can install ofw 4.86, patch using the Toolset, reboot & finally install a CFW 4.86.
Or you can patch an earlier ofw version, say you are currently on OFW 4.84, you can patch, reboot & install the 4.84+ CFW of your choice..and anyway, once on CFW you can also update to another CFW, so really it's up to you..
I have big problem now, I try update OFW to 4.86 and I have update loop and error 8002F334 :(
 
I try to goto the url on the ps3 and it just shows page cannot be displayed. I have a CHECH-21xx model with HFW 4.86.
"error 80710A06" (SSL Connect Handshake error, or SSL certificate verification failed) I do not understand lol

*Solved, had to goto **ps3xploit.com >Domain no Longer owned by team** (ps3xploit.me =new) first.
*Everything worked fabulous, thanks for the great work all!
 
Last edited:
Hi just used the new bg tool kit for downgrading my cech c 03 and seems like ive messed somthing up as when i reboot after using the exploit it wiil not take any update ive tried rebug 4.86.1 and ferrox 4.85 tried in safe mode just says corrupt or lowest updat 2.20 or ffff.ffff ? is there any way i can just use the original xploit page i had no issues at all with that exploit site? thanks
 
Given the fact that using a different user profile solves this freeze issue, the problem could come from 2 things really:
1. your current configuration files (in the user profile folder) -> THE MOST LIKELY CULPRIT

If the issue is my configuration files, should I create a new user and use it permanently and delete my original user?

If someone experiencing freezes can load the Toolset using this url
** www.** ** www.ps3xploit.net > D...p://ps3toolset.com)/bgtoolset/index.php#tblog
take a screenshot (with smartphone) & post it here

Thats all I can get before it freeze

IMG-0072.jpg
 
I have big problem now, I try update OFW to 4.86 and I have update loop and error 8002F334 :(
new systems lol if it aint broke dont fix it huh.

Update (2) Now supporting 4.86 Fully & Also a warning about deleting cookies
.You may recall a recent article revealing a few exclusive screenshots of bguerville's latest project, now the time has come to introduce the next evolution in PS3 Jailbreaking solutions. The PlayStation 3 Toolset by @bguerville is a new suite of tools, built upon a new PS3 exploitation framework & fueled by a new exploit discovered on the PS3 by the developer. The new exploit (and the toolset project as a whole) is compatible with all PS3 models running 4.82 - 4.85 OFW/HFW/CFW

While ps3xploit team member's @habib continued research and development of PS3HEN for nonCFW models with assistance from @esc0rtd3w, @bguerville meanwhile was working on his own research and developing other tools and exploits as you will see with this new PlayStation 3 Toolset, which thorough testing was conducted by @esc0rtd3w (whom we recently interviewed). All the team of talented devs have done some amazing work in the scene in recent years with all the PS3Xploit projects and that trend continues with this release.

The PS3 toolset is a project that @bguerville has been working on for some time,
the developer gave us a brief timeline of events since the Ps3Xploit Tools 2.0 framework (flash writer and dumper(s)) that led to this new release (see the timeline section).

Some tools in this project may offer limited features on non-CFW compatible consoles. For instance, the Flash Memory Manager includes the most functionality for CFW-compatible consoles, certain of its features are available on non-CFW models, others aren't. Features such as the dumping of flash memory (for backup purposes) and displaying of various console specific information in real-time such as the IDPS, Factory Installed Firmware version and automatic detection of your console's Custom Firmware (cfw) compatibility status are available on both CFW compatibles & non CFW compatibles console's.

Note that the PS3 Toolset does not feature PS3HEN, bguerville declared having his own plans for a HEN style solution.

The validation and safety checks have advanced greatly in this latest framework of bguerville's tools (since the release of the flashing tools in PS3Xploit v1.0 and v2.0), the toolset detects your console type and only allows the features that are compatible with your console to be used on your system, making it noob proof while also being very user friendly thanks to new automation and detection built in.

Let us now discover this release and how to use various functions of the toolset.

View attachment 24764

  • PS3 Toolset by bguerville
    View attachment 24164 View attachment 24769

    "The PS3 Toolset is a repository project for tools built upon a new ps3 exploitation framework I have been working on for a while. More tools should be added to this repository with time.
    I hope you enjoy using them as much as I enjoy making them ;-)"

    Project Timeline:

    • End 2018, Sony patches one of the bugs the ps3xploit tools exploited to gain ROP execution. (4.83 OFW release)
    • Beginning 2019, I begin to look for a replacement exploit & the release of ps3xploit tools 3.0 is postponed.
    • Spring 2019, I rewrite most of the 3.0 framework to leverage the new capabilities gained with the new exploits.
    • Summer 2019, realizing the potential of the newly written 4.0 framework to create flexible & powerful tools, I decide to cancel the 3.0 release altogether & scrap the 3.0 framework.
    • Beginning 2020, I am releasing this "Toolset" project, as a repository for the tools created around my 4.0 framework that I deem release worthy, each tool being accessible in a toolset tab. This project is the fruit of many sleepless hours during many months, it showcases only part of the 4.0 framework capabilities though, there is still room for more surprises later... ;-)

    The initial release, contains a couple userland tools, a fully featured Flash Memory Manager & a Memory Editor (mostly for development & research purposes). A file explorer tool should be added to the repository soon, it will be the last userland tool I write for the foreseeable future
    General Information about the PS3 Toolset
    • Toolset supports all ps3 models & official firmware versions from 4.82 to 4.85 (cex & dex) *some ps3 models have exclusive features/tools (note: toolset tools will also work from CFW)
    • PS3 Toolset is executed from the PS3's Web-Browser by visiting the following URL (SSL): ** www.** ** www.ps3xploit.net > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com) > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com)/bgtoolset
    • PS3 Browser Requirements
      • JavaScript (Enabled from browser settings)
      • Cookies (Enabled from browser settings)
      • Flash Plugin (Enabled, but this one has a few caveats that may need explaining, the good news being that the toolset will detect the issue and let you know how to proceed (if there is an issue), see further explanations below)
        • If ever in the past, you agreed to load the Flash Player plugin when prompted and checked the checkbox "Do not show again", you should have no issue & will never even see the plugin popup.
        • If you never before checked the "Do not show again" checkbox, you will be greeted with a popup asking you to allow the Flash player plugin. If you agree to load the plugin, the PS3 toolset should continue to load. Note that if you take more than 15s to agree when prompted by the popup, you will get a PS3 Toolset warning about the plugin being disabled even if you finally agreed to load the plugin, just refresh the page when prompted.
        • If ever you got the Flash Player plugin popup in the past & selected NO and checked the checkbox "Do not show again", the Flash Player plugin will be permanently disabled, consequently the PS3 Toolset will not be able to load. Unfortunately there seems to be no official way to reset this setting in the browser. The PS3 toolset does have automatic detection of this issue and some instructions are given. Currently the easiest workaround is to create a new user profile on the XMB, when launching the toolset on the new profile, you will be greeted with the browser pop-up asking to allow the flash plugin. However it has been found that in some cases, a new user profile is not sufficient to reset the Flash Player plugin status. I hope that other devs & advanced users will look into this situation while I continue working on new tools, if nobody does, I might end up looking into the problem after the next tool release.
    • You are free to use the tools in this project at your own risk. Keep in mind that no official support is provided, if you experience any kind of problem & find yourself in need of help, I strongly recommend that you turn to the PS3Xploit sub-forum on psx-place.com for support & guidance..
    • It is highly recommended that you adjust the console's System Time settings properly to avoid any time related issues with the browser and/or the Flash Player plugin.
    • To avoid potential crashes, you should never attempt to close the browser while toolset operations are in progress, especially when the browser exit confirmation setting is turned off.
    • PS3 Toolset only loads tools & features compatible for your console, this means no accidental use of a feature not compatible with your system.
    • No local/offline version is planned & the source code will remain closed for the time being.

  • Requirements
    • PS3 Console (Any Model) running 4.82 - 4.85 (CEX/DEX) Firmware
    • Internet Connection to access Toolset from PS3's Internet Browser.
    • PS3 Browser Flash Player 9 Plugin enabled (View General Information section for additional info)
    • PS3 Browser Javascript enabled
    • PS3 Browser Cookies enabled

    Quick Overview of Toolset (v1.0.19) Capabilities:

    All Models
    • Display console's IDPS
    • Detects Console's CFW Compatibility + Factory Installed Firmware
    • Detects Internal Flash Type of console: NOR / NAND / eMMc ect...
    • Detects console & firmware information
    • Take's a Full dump (backup purposes) of Internal Flash
    • Memory Editor tool (R&D tool)
    Custom Firmware (CFW) compatible Models Only
    • Patching of OFW Flash (Flash Memory Patch) for Custom Firmware Installations.


  • Included Userland Tools (v1.x)
    1. The Memory Editor tool v1.1
    View attachment 24178
    • The tool maps up all the currently loaded sprx modules segments (text & data) & allows you to browse them as well as the 2 vsh segments and the browser memory container. Users can also edit the memory as they see fit in all writable memory segments. This is mostly a R&D tool.
    • - Notice - issues caused by RAM synchronisation. The memory editor is not a live debugger, it cannot pause lv2 or userland threads execution. Consequently, the RAM can be modified by the various threads executing in userland between the moment the memory editor tool takes a snapshot of a ram range to create the hex table to display on screen & the moment the table is actually displayed on screen.This means that on rare occasions the values displayed on screen might be different from those actually in RAM. This is especially true for specific memory areas such as the browser container memory.
      • There is no easy way to solve this issue, even the debugging deci3 syscalls available only in DEX would not help us much because while it would enable us to take properly synchronised snapshots of the RAM, displaying the data on screen would still require running js code in the browser, which would modify the RAM & lead to the same synchronisation problem we currently face without using the deci3 syscalls.
      • I implemented code to color out the detected table cells found to be unsynced with RAM so there is as little ambiguity as possible. The text of such detected table cells is set to 'undefined'.

    2. Flash Memory Manager v1.2 tool
    View attachment 24179
    • Compatible with all PS3 models (patching flash options exclusive to CFW compatible models)
    • FMM displays basic Flash Memory data in a tree.
    • Clicking on appropriate tree nodes reveals context menu entries to launch the tool's features.
    • Among other things, the manager can dump the Flash memory to file on any natively writable partition mounted on the console.
    • To patch (for cfw installation) a console using the no-fsm method, users must first load a patch file in memory. That file will be checked first & if found valid, the context menu entry to apply the patch will be enabled.
    There are 2 ways to acquire the correct patch file to flash.
    1. it can be downloaded to disk first then loaded into memory from file & finally applied to the system
    - or -
    2. it can be loaded via https directly to memory without using disk storage, the data is checked in RAM then if found valid, users can decide to apply it (from the unlocked menu, once file is validated by the toolset automatically).​
    • After applying a patch, the FMM automatically dumps the 2 ROS regions it just overwrote to double check that patching was properly done.
    • Progress dialogs keep the user informed of current operations & outcomes. User logs are provided in the various progress dialogs.

    3. Logs v1.0 Tool
    View attachment 24323

    Technically the log section is also a tool of this Toolset. Its tab contains all the logs, warnings, errors & debug output of the toolset & its different tools.
    • Whenever something goes wrong, it's the first place to look & screenshots can be used to identify problems.
    • I also included a UDP broadcast similar to Cobra's. Users can use socat to listen on UDP to the Toolset broadcast. However for the moment, only some data gets broadcasted but not the entire contents of the log tab because of the performance impact. With the file explorer release, I plan implement a few changes to this feature as well, the UDP broadcast will be done in a separate thread & all logged data should be broadcasted to UDP.

  • Legend:
    • Displays firmware information
      • PS3 Firmware: (version)
      • VSH Mode: (Retail (CEX) or Debug (DEX))
      • Kernel Mode: (Retail (CEX) or Debug (DEX))
      • Custom Syscalls:
        • 1. detects 'Mamba' (if syscall 1022 exists)
        • 2. detects 'Cobra' (if 1022 does not exist but syscall 8 works)
        • 3. detects CFW (if 1022 & 8 are unavailable but syscall 6 works)
        • 4. Displays 'No' (if neither sc 1022, 8 & 6 are unavailable)
    • Flash Memory
      • the tree contains alot of information about any PS3 console and also provide option for taking a backup (dump) of internal flash
    • Quickly determines if your console is a NOR/NAND/eMMc type
      • Displaying of console info, also note previous tools user's had to select NOR/ NAND/ eMMc Tools (depending on model), now the toolset automatically checks and detects tools needed.
    • Displays your IDPS (option to hide onscreen)
      • Will display any Ps3 models IDPS
    • Displays Factory Installed Firmware
      • If your console < 3.60 that means you can install CFW
    • Displays Custom Firmware Installation Compatibility,
      • No longer have to check the sticker of your console and run minverpup and check min factory installed firmware, the toolset displays the compatibility of a Custom Firmware (CFW) Installation for your console.
    • ROS Bank 0/1
      • Display's hash checks of ROS 0 /1 (technically the hashes are not calculated from the entire ros ranges but from the range corresponding to a noFSM patch so that ROS hashes & patch file hashes can be compared.
    • Flash Memory Patch (CFW Compatible Console Only)
      • Patch Flash for CFW installations

    .
    Flash Dumper:
    - Notice - dumps should always be validated with PyPS3Checker to ensure a proper dump took place before using it for future backup purposes)

    Purpose of dumping the Flash?

    • Having a Clean backup of your system internal flash memory is a vital piece of information to have stored, its something that may never be used but can be extremely important in some instances where a brick occurs, having a clean backup can help restore your system along with a hardware flasher


    Patch Flash (aka Flash Writer Tool) - CFW compatible console's only
    Purpose of patching flash?
    • Patching the Flash (ROS 0/1) allows for Custom Firmware Installations on applicable models
    Userland Memory Editor
    Purpose of using Userland Memory Editor?
    • The memory editor is a R&D tool. It's useful mostly for devs & hackers who can use it to peek/poke the RAM, either to verify certain results or to search for flaws.
    Toolset detecting various PS3 models
    Toolset Themes Options
    The toolset contains 4 Themes as shown below

  • Acknowledgements
    My warmest thanks to Jason, for his friendship & support of course, but in the context of this project, also for testing my work on a daily basis, not just before this release but all year round.


    The PS3 Toolset & its GUI were built in native js upon various open source js libraries including jQuery, jQueryUI, bigInteger, jstree, mCustomScrollbar, js-cookie, sjcl, switchButton & toastmessage as well as the Fork Awesome CSS icon library .
    Thanks to all the coders involved in the various projects.


    Thanks to all the psdevwiki contributors, scene hackers & developers who have brought us to this point.
    - @bguerville
    .
    Help and Donations
    You can show your appreciation for my (@bguerville) work & help fund future projects with a donation in BTC at either of the addresses below
    Thank you for your support.

    ** www.** ** www.ps3xploit.net > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com) > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com)/bgtoolset/assets/images/qr-legacy-P2PKH.png
    ** www.** ** www.ps3xploit.net > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com) > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com)/bgtoolset/assets/images/qr-native-segwit-BECH32.png
    ** www.** ** www.ps3xploit.net > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com) > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com > Domain no Longer owned by team** (NEW URL = http://ps3toolset.com)/bgtoolset/assets/images/qr-PayNyms.png
    Legacy P2PKH
    Segwit BECH32
    PayNyms

    The PS3Xploit team also needs your continued help to cover its growing web hosting costs.
    Please consider a donation to PS3Xploit via Paypal at https://www.paypal.me/ps3xploit

From the PS3 web browser you can access the toolset @: (SSL only)
** www.** ** www.ps3xploit.net > D... (NEW URL = http://ps3toolset.com)/bgtoolset

UPDATE (2) - Regarding 4.86 Support via @bguerville
PS3 Toolset is fully supporting 4.86
[/QUOTYou say noob proof but this is spawn of devil how can it be so much harder to use then original xploit .... ive used last exploit good few time no probs i try use this new one and its impossible any fancy helping me out please im having a nightmare now...

IMG_20200403_160338.jpg


IMG_20200403_165704.jpg


IMG_20200403_175841.jpg

This is what I'm getting now after using the new tool
IMG_20200403_165704.jpg
IMG_20200403_175841.jpg
IMG_20200403_160338.jpg


I updated to hfw 4.86.1 before I used exploit?
 
Last edited by a moderator:
It makes no difference.
You can install ofw 4.86, patch using the Toolset, reboot & finally install a CFW 4.86.
Or you can patch an earlier ofw version, say you are currently on OFW 4.84, you can patch, reboot & install the 4.84+ CFW of your choice..and anyway, once on CFW you can also update to another CFW, so really it's up to you..
@bguerville
Most of the users have PS3 Super Slim
So, is there any chance cfw install to PS3 Super Slim
it'll be very helpful for PS3 Super Slim
Please attempt CFW for PS3 Super Slim
 
@bguerville
Most of the users have PS3 Super Slim
So, is there any chance cfw install to PS3 Super Slim
it'll be very helpful for PS3 Super Slim
Please attempt CFW for PS3 Super Slim
It is not possible to install CFW on consoles which minver is 3.56+ yet.

I added some more log entries to try to locate the snippet or even better the instruction that freezes the system.
It should help identifying the setting or whatever that is messing with us..

If someone experiencing freezes can load the Toolset using this url
** www.** ** www.ps3xploit.net > D...p://ps3toolset.com)/bgtoolset/index.php#tblog
take a screenshot (with smartphone) & post it here
Still getting the freeze but I think I found something.

I tried these 2 different situations:

Using the same new user I created for yesterday´s screenshot I am getting this log (with your new entries)

open


BUT, if I use my main user AND using the link on the ps3xploit main page and then going to logs (as fast as I can) I get 2 more entries before it freezes

open


I hope that helps finding the problem
 
I'm actually having the exact same problem. I've tried to install OFW/HFW/CFW so many times I honestly can't remember if i got from OFW to HWF or if I'm stuck on OFW still
Install HFW twice in succession, and then you're definitely on HFW and your PS3 is ready for either CFW if it's compatible, or HEN if it's not.
 
Back
Top