• PS3 Hacks , 02.03.2009

    While some sites were quick to falsely label the recent discovery of HDD discovery “fake”, a tutorial is now available on how to decrypt your own Playstation 3 HDD (yes retail). Just to shed some light on the confusion that has been spread around the scene of this “discovery”; This method was discovered a while ago but was never released publicly. knightsolidus stumbled upon this during his research and brought it to the public’s attention.

    The following method is a brief explanation on what to do (detailed tutorial will be available soon, though what is below should suffice).



    1.) Make a dump of your PS3 HDD (connect to your PC via SATA)
    2.) Plug HDD back to your PS3
    3. Copy a large-dummy file to the HDD
    4.) Unplug HDD from PS3, and plug it back into your PC
    5.) Dump the HDD image again
    6.) Compare the two dumps you know have, and locate the encrypted dummy data (use HxD or any hex editor to do this)
    7.) Replace the encrypted dummy data with sections of the data you want to decrypt
    8.) Place the HDD back into your PS3
    9.) Copy dummy data from PS3 to external media (USB drive/flash drive)
    10.) Inspect the dummy file on PC from USB stick/flash drive.

    And there you have it. Let us know what your discoveries lead to, we already have interesting things popping up :)

    Tags: , ,

    Discuss in Forums (63)

  • 63 Comments

    1. Tcraw77813
      03-02-2009
      12:32 AM
      1

      Thanks once again Pirate for posting this tutorial. Hopefully people will realize that this is real and will get something going with this new bit of intel.

    2. weed37
      03-02-2009
      03:17 AM
      2

      nice yet 1 more step in the right direction lets hope we keep making steps forward and not backwards

    3. apie
      03-02-2009
      06:34 AM
      3

      Has anybody tried it? The encryption algorithm seems a little bit too easy to me (if it's really possible to decrypt the HDD via this method)... I would have at least integrated a position-dependent encryption function...


      How to dump the PS3 HDD when it is connected to the PC?


      Please excuse my bad english :-)

    4. cassis2k
      03-02-2009
      09:23 AM
      4

      Originally Posted by apie View Post
      Has anybody tried it? The encryption algorithm seems a little bit too easy to me (if it's really possible to decrypt the HDD via this method)... I would have at least integrated a position-dependent encryption function...


      How to dump the PS3 HDD when it is connected to the PC?


      Please excuse my bad english :-)
      All is writing.

      The following method is a brief explanation on what to do (detailed tutorial will be available soon, though what is below should suffice).
      Thx Pirate

    5. Pirate
      03-02-2009
      09:52 AM
      5

      This is patchable by Sony.

    6. Disane
      03-02-2009
      09:53 AM
      6

      Great finding Pirate!

      thanks for trying it out before posting
      Was it hard to reproduce it?

      though i can`t try it out ,yet. Once i get home i`ll start working on it

    7. ajpowerranger
      03-02-2009
      11:35 AM
      7

      Woo good news, wish I could help in some way! Guess I won't be updating my ps3 for a while!

    8. Avanaboy
      03-02-2009
      02:12 PM
      8

      This is just an AWESOME news !!!

      I will do it on my ps3-hdd this night

    9. Pockets69
      03-02-2009
      02:49 PM
      9

      see told you guys :P not fake... still not as useful as we thought, at least thats SKFU's opininion... lets see how this turns up...

    10. dasda_
      03-02-2009
      03:40 PM
      10

      The problem with this trick being leaked is that it will certainly get patched by Sony soon. I hope someone can share some files/chunks/dumps, other than just a image containing some strings in a hex-editor.

    11. Gloris
      03-02-2009
      06:12 PM
      11

      would i be correct in thinking that, if i decrypted my HDD, i could actually back up all my singstar downloads, or transfer them to another ps3, so long as I could re-encrypt them on the target ps3?

      i ask because me and my girlfriend BOTH have ps3's, and both have the singstar game, but kinda begrudge paying to download the same songs onto BOTH consoles. If i buy a song, i can only download it to ONE console.

      so lets we're at my house, i buy us a song to enjoy together...next time i'm at hers, if i want to use the same song, that i've already paid for, even if i log into MY account, it will not let me download it again to her drive.

      if i could decrypt both our drives, the transfer would be possible?

    12. Pockets69
      03-02-2009
      08:01 PM
      12

      ^^ in theory yes... but we don't now to re-encrypt it so, this is still ahead of our game, just keep in mind that the hdd has been decrypted but the files in the hdd are still encrypted and you can't mess with them yet, still we can see whats inside but can't do anything with it as of now...

    13. dasda_
      03-03-2009
      02:35 AM
      13

      Reencrypt works the same way. Copy the unencrypted data to the dummy file, let PS3 encrypt it, locate it and dump it. Then it's encrypted.

    14. knightsolidus
      03-03-2009
      07:12 AM
      14

      Please delete the post howto decryt HDD, post this its very bad for scene, sony can patch the method. thanks!!!

    15. Pockets69
      03-03-2009
      07:59 AM
      15

      Originally Posted by knightsolidus View Post
      Please delete the post howto decryt HDD, post this its very bad for scene, sony can patch the method. thanks!!!
      Agree with knightsolidus please PIRATE remove the tutorial most of the people already had time to try it or to copy somewhere so please remove it for the scene's sake.
      And knightsolidus congrats for your discovery to you to demonhades and all the team members, its people like you that make a difference.

    16. MisterX334
      03-03-2009
      09:24 AM
      16

      So what can this lead to?

    17. MIDASA
      03-03-2009
      01:45 PM
      17

      to an exploit, what else?^^
      If you are able to decrypt now the files of course

    18. ajpowerranger
      03-03-2009
      03:16 PM
      18

      So how is work coming along on this? Not really seen anyone mention it anywhere else online! thought it would be all over by now.

    19. Gloris
      03-03-2009
      05:57 PM
      19

      anyone have a more in depth tutorial yet?

      i really would like to try it the singstar tranfer that i mentioned, but the tutorial isn't easy to understand....for one, when i connect the drive to my PC it's not even recognised, so how do i dump it?

    20. SniperSnake
      03-03-2009
      06:47 PM
      20

      use the program winhex, and use disc tools to make a backup file of the ps3 hdd

    21. red8316
      03-03-2009
      09:42 PM
      21

      yeah ...might be nice to delete this information. For future benefit.

    22. MIDASA
      03-04-2009
      02:49 PM
      22

      So, is the decryption key on every HDD, for the data we can now access, that are encrypted, variable, or is the decryption key on every HDD the same?
      Do all Data have the same decryption key?
      And could we Bruteforce the decryption key?

      Or am I totally wrong with the expection, that we can access the files?

    23. hitsndc
      03-04-2009
      04:33 PM
      23

      Can someone plz make a video of accessing the files. I dont want to do it myself, but im curious to what can be done. Also can u add things inside of the image dump or alter anything and dump back to the ps3 hdd? If so I will do this myself to test.

    24. kayser
      03-04-2009
      05:14 PM
      24

      It's weird that no one talk about this exploit, when it's already been 3 day
      that this HDD Decrypted thing has been made public.

      Does this mean that it doesn't lead anywhere?

      Or is it that everybody is too busy testing it
      to post what they have discovered so far in there test?

    25. Gloris
      03-04-2009
      06:08 PM
      25

      okay, so with winhex the drive can be viewed in hex code, but my problem now is simply having enough space to do a backup of my hard drive lol.

      my ps3 hdd is actually an external 750GB drive hooked up with the HDXT....its currently got 300GB of data on it, and my pc has no such capacity.

      is there any other way of comparing thigns without backing up the entire drive?

      i also have the original 60GB drive that came with my PS3, so i could put that back in my ps3 and use that......but if i do that, will my ps3 still recognise the 750GB drive if i re-insert it?

      because last time i swapped over (from 60 to 750) it straight away asked me to format the drive......obviously i don't want to lose all my data, but i am curious to try this out.

      also, how do you make a dummy file? and why kind of file should it be?

      because i thought that the only type of files that the ps3-os would let you copy TO the hdd, were media files......so, copy a large blank video, is that what it means?

    26. Pockets69
      03-04-2009
      07:46 PM
      26

      Originally Posted by MIDASA View Post
      So, is the decryption key on every HDD, for the data we can now access, that are encrypted, variable, or is the decryption key on every HDD the same?
      Do all Data have the same decryption key?
      And could we Bruteforce the decryption key?

      Or am I totally wrong with the expection, that we can access the files?
      ok to answer your questions... the decryption key is in every Ps3, (i wouldn't say in every HDD because we don't know where the decryption keys are)
      the decryption key is not the same (on every machine) at least that is what we think.
      Finally bruteforcing the decryption key is impossible.

      hope it clears some doubts

    27. g_85_g
      03-05-2009
      01:44 AM
      27

      I've managed to decrypt start blocks (86016bytes - 0-4 first data blocks, just for test) of my hard drive with this method. I can confirm, this is working solution, thanx to DemonHades.

      I have wrote some simple utility to find differences in two hard drive images, and get some statistics to text file - this greatly simplifies finding destination offset for data to decrypt.

      Main problem there is, that ps3 splits dummy file to many chunks on filesystem (3Gb of dummy file my system have split into ~67Mb chunks), so you can't decrypt all data at once, only chunks, you are interested in - it would take a lot of time to decrypt full partition.

      If anyone interested in mentioned utility - let me know, but any person, who is interested in reverse engeneering of hard drive partition is educated enough to write needed software himself.

    28. nirving
      03-05-2009
      03:58 AM
      28

      Originally Posted by knightsolidus View Post
      Please delete the post howto decryt HDD, post this its very bad for scene, sony can patch the method. thanks!!!
      Yes Sony could patch this method, but surely Sony would have known about this method a long time ago when deciding on the encryption method. This is hacking 101 we are talking about here, and I remember this approach with my Action Replay back on the Commodore 64 when I wanted to get unlimited lives with Robocop. Take a snapshot of the Memory, then loose a life, and then take another and detect those values that went down by one. Okay we are dealing with higher functions, but the principal is the same.

      The horse has bolted, so there is no point closing the gate now. :musicus:

    29. ajpowerranger
      03-05-2009
      11:27 AM
      29

      So is this leading to anything? I'm willing to give it a try if the results will help?

    30. jaasumbra
      03-05-2009
      02:13 PM
      30

      as I've said loads of times before, posts like this, should be posted in a strictly private area on the board, only for people who are trusted, and can benefit of the information. ESPECIALLY, tutorials and detailed information on something that can be patched, otherwise we will never get anywhere.

      details for 95% of this board are useless, perhaps the news about it would be okay, but anything specific and detailed is just stupid, making it patchable, and spreading it all over the internet within a blink of an eye, and making sony aware of it seconds after.

      just my two cents though,

    31. Pockets69
      03-05-2009
      02:13 PM
      31

      Some news about the suposed fake... So ******* was calling this fake so most people wouldn't believe and ignore it... so sony wouldn't know if the encryption was broken or not... Those guys just make me laugh... stupid asses, one thing they are right though this project was from knightsolidus and Pirate should have removed the instructions from the front page as he asked (and some of the members incluiding me). But hey Pirate you can still do it.

      cheers

      P.S Don't want start a war here Pirate i have much respect for you m8.

      P.P.S Agree with Jasumbra this shouldn t be posted in front page but in a special section of the forum where only some members would have acess...

    32. jaasumbra
      03-05-2009
      02:27 PM
      32

      Originally Posted by nirving View Post
      Yes Sony could patch this method, but surely $ony would have known about this method a long time ago when deciding on the encryption method. This is hacking 101 we are talking about here, and I remember this approach with my Action Replay back on the Commodore 64 when I wanted to get unlimited lives with Robocop. Take a snapshot of the Memory, then loose a life, and then take another and detect those values that went down by one. Okay we are dealing with higher functions, but the principal is the same.

      The horse has bolted, so there is no point closing the gate now. :musicus:
      It's not as simple as that... There could certainly be something $ony hasn't thought of when choosing the encryption. there could be unknown holes in it etc. anything can me circumvented you know, any exploit can and will be bypassed if spent enough time on it. and posting this, was a mistake, even though $ony probably is aware of it now, there's no point in shouting it all over the internet, we have to keep as low as possible, and not create ANY attention when we have any progress... otherwise they will always be one step ahead of us, with a new patch etc.

      and come on, you are comparing principals of a game cheat on the commodore 64, with a next gen console with the far best anti-piracy security yet known for a gaming console.

    33. NeoSabin
      03-05-2009
      04:56 PM
      33

      Ths is retarded...
      People go around complaining about no progress on ps3, calling a hack or exploit fake and want proof, but as soon as they have proof they complain that the proof should be removed because Sony will patch it??

      Seriously WTF!?

      Be happy you got to know something new and play with it. Next time some kind of info is released don't start bïtching about fake or real or wanting proof, just say thanks, live your life and hope it leads to something.

    34. Pockets69
      03-05-2009
      05:45 PM
      34

      Originally Posted by NeoSabin View Post
      Ths is retarded...
      People go around complaining about no progress on ps3, calling a hack or exploit fake and want proof, but as soon as they have proof they complain that the proof should be removed because Sony will patch it??

      Seriously WTF!?

      Be happy you got to know something new and play with it. Next time some kind of info is released don't start bïtching about fake or real or wanting proof, just say thanks, live your life and hope it leads to something.
      Hey neo. you never heard me complaining about anything here, i would prefer if people would stop posting stuff and really get stuff done, than posting and not acomplish anything...
      I never doubt knightsolidus and demonhades had found a way to decrypt the hdd as you can see from my posts so i never asked for any proof... cause what i saw was enogouh...
      About the removal of the methood, well if you don't agree with me and some other members thinking it should be removed from the front page its fine you are a mod and can do what you want, but when this was asked by the person who found it, i think you guys should listen to him...

      That's what i do m8, I read about it, and don't go out screaming fake, don't ask for any proof, people give proof if they want...

      Take care Neo

      P.S don't take this the wrong way man as i said for Pirate i do have much respect for you too...

    35. Pirate
      03-05-2009
      05:50 PM
      35

      I would have had no problems in removing it (knight contacted me), but the time he contacted me was way too late (it was already on many sites), removing it then would make no sense.

      Also for a particular someone that is lurking on these forums;
      "We try to control it by put fake but now is too late"
      I find that laughable, they just wanted to obviously take all the "e-fame".
      You shot at us this was fake, here is the proof that it isn't.

      This method is real, scared of Sony patching it? Don't update your PS3.

    36. Pockets69
      03-05-2009
      06:49 PM
      36

      Originally Posted by Pirate View Post
      I would have had no problems in removing it (knight contacted me), but the time he contacted me was way too late (it was already on many sites), removing it then would make no sense.

      Also for a particular someone that is lurking on these forums;
      "We try to control it by put fake but now is too late"
      I find that laughable, they just wanted to obviously take all the e-fame.
      You shot at us this was fake, here is the proof that it isn't.

      This method is real, scared of Sony patching it? Don't update your PS3.
      Thanks for the carification Pirate
      .
      About the moron that lurks around here... those guys oh my god, calling fake to control it, OMFG...

      Like you said scared of sony patching it don't update, I am still on 1.5 =D

      cheers Pirate.

    37. Ortorin
      03-05-2009
      09:50 PM
      37

      II just hope this leads to full use of the hardware for otheros.

      It's my dream to run full PC games on my ps3.... don't know why excatly, i just wanna!

    38. ufo88
      03-05-2009
      10:43 PM
      38

      sorry guys im new to this but wat dose HDD Decrypting mean ? and wat happen when u HDD Decrypted a ps3 hd ? lol

    39. Ps3Rips
      03-06-2009
      03:22 AM
      39

      It means that we can view which files are stored on the HDD think of looking at explorer on a windows pc (cmd and then dir /w)
      What it doesn't mean is that we can do anything with the files. The files have their own encryption - we can't decode those yet.

      Attempting to call it fake is pointless, however calling the other site names is not going to help??,
      The thing is not only did ps3nеws call it fake, but also so did QJ.net, and both sites front paged it.
      "FAKE CONFIRMED"
      Confirmed don't make me laugh.

      Some People must think that Sony hasn't infiltrated the hacking groups which is crazy as they have.
      If you want to keep it quiet then keep it to yourself. If you tell one person then you should also be willing for everyone else to know, No one can be trusted.
      That's the one thing I've learnt in my time talking with people involved in PS3 stuff. Its sad but that's the sorry state of affairs. - Site owners want new members and new members want new news it a vicious circle.

      personally I do think it should have been kept quiet but as soon as it was front paged at DemonHades then the game is over and its already out the bag. Attempting to hush it up is never going to work.

      Lets hope that now its out people try differing HDD sections and we discover new things.
      *****************EDIT ***************************
      Edit I've just noticed that ps3nеws is hashed out -
      yes I can get around it however, Pirate sort it out.
      It then means that members can't give credit where its due.

      And who said the PS3 scene is not childish?.

    40. Gloris
      03-06-2009
      05:52 AM
      40

      do you think it would one day be possible that someone can write an application to read the directories on a ps3 hdd, like windows explorer for ps3 drives?

      i would try this mehod myself, but my pc lacks the space to do one backup, letalone backing up twice.

    41. ufo88
      03-06-2009
      06:48 AM
      41

      now it makes sense kind of lol thanks alot

    42. Sublimewulf
      03-06-2009
      11:38 PM
      42

      I don't believe you can produce a tangible file from this method, you can decrypt and view in hex, but no more than that. (or at least thats all i can do)

    43. dasda_
      03-07-2009
      03:04 AM
      43

      Originally Posted by g_85_g View Post
      I've managed to decrypt start blocks (86016bytes - 0-4 first data blocks, just for test) of my hard drive with this method. I can confirm, this is working solution, thanx to DemonHades.

      I have wrote some simple utility to find differences in two hard drive images, and get some statistics to text file - this greatly simplifies finding destination offset for data to decrypt.

      Main problem there is, that ps3 splits dummy file to many chunks on filesystem (3Gb of dummy file my system have split into ~67Mb chunks), so you can't decrypt all data at once, only chunks, you are interested in - it would take a lot of time to decrypt full partition.

      If anyone interested in mentioned utility - let me know, but any person, who is interested in reverse engeneering of hard drive partition is educated enough to write needed software himself.
      Where can I get in touch with you?

    44. Gloris
      03-07-2009
      05:04 AM
      44

      Originally Posted by Sublimewulf View Post
      I don't believe you can produce a tangible file from this method, you can decrypt and view in hex, but no more than that. (or at least thats all i can do)
      surely.....if you can recognise where the file starts and ends.....you can cut and paste into a new hex screen and then just save the file as whatever type of file extension you want?

      so viewing a file and having a usable file, ammount to the same thing?

      unless you mean that you can ONLY decrypt the file/folder STRUCTURE, without seeing the actual contents of a file?

    45. Pockets69
      03-07-2009
      10:17 AM
      45

      Originally Posted by Gloris View Post
      surely.....if you can recognise where the file starts and ends.....you can cut and paste into a new hex screen and then just save the file as whatever type of file extension you want?

      so viewing a file and having a usable file, ammount to the same thing?

      unless you mean that you can ONLY decrypt the file/folder STRUCTURE, without seeing the actual contents of a file?
      yes that's what he means... we can decrypt the hdd as you know so we can view the file structure and the files itself... but those files are also encrypted so we can't do anything right now... its like a step by step job, we have broken the hdd encryption, later will be the file encryption (if we are lucky)...
      i hope i shed some light

      cheers

    46. Sublimewulf
      03-07-2009
      11:55 AM
      46

      Thank you Pockets for straightening that out for me.

    47. turtleboy900
      03-07-2009
      05:46 PM
      47

      attention

      Attention

      Stop assuming things



    48. Gloris
      03-07-2009
      05:57 PM
      48

      Originally Posted by turtleboy900 View Post
      leave the ps3 alone cause we know yall just trying to pirate gmes stop being cheap just buy it

      or maybe it's just interesting to find out how thigns work?

      but for some things i don't think we should have to pay anyways. as my example.....my grilfriend and i EACH own a PS3......so we have already spent over £600 on the consoles.....we enjoy playing singstar together, sometimes at my house and sometimes at her house.

      but the singstore downloads can only be downloaded and used on ONE console....not 5 like all other DLC.

      why should i have to pay TWICE to use a song that i have BOUGHT and paid for on my console and on my girlfriends console.

      it's rediculous, so if this method eventually leads to me being able to copy the files i have legally paid for to ehr hdd, i feel that i will be doing nothing morally wrong, even if it's legally wrong.

      same thing really with the issue of playing ps2 backups on the ps3 via USB hdd......if i already OWN loads of PS2 discs, why should i not benefit from the convenience of being able to store them all on ONE DRIVE and play them from there?

      i take your point, and undoubtably, some people might use hacks only to get thigns for free......but you ust remember also that some people are just interested in how thigns work, and others have more morally justified reasons for "hacking".

      besides from which, if you are against hacking the PS3, why come to a site and register an account on the forum, when it's called "PS3 HAX", and "Hax Network"......don't you think there is a clue in the name?

    49. Pockets69
      03-07-2009
      08:15 PM
      49

      Originally Posted by Gloris View Post
      if you are against hacking the PS3, why come to a site and register an account on the forum, when it's called "PS3 HAX", and "Hax Network"......don't you think there is a clue in the name?
      LOLOL true people this days lol

    50. dasda_
      03-08-2009
      08:32 AM
      50

      Hacking isn't Piracy.

    51. MIDASA
      03-08-2009
      12:42 PM
      51

      @Gloris: I think you misunderstand the situation. PS3Hacks isn't against hacking.
      Its against piracy. We want to get control over our own, to let our own to do what it isn't supposed to do from the Inventors point of view, and not to pirate the Inventor.

      We just want to use the Inventors Invention in our own way, and ignore the Inventor,
      because we brought it legaly and want to use it as our own, how we want to.

    52. FartMan
      03-08-2009
      07:06 PM
      52

      So can you edit game updates with this? Take a patch from the HDD and edit it, then upload it to the PS3?

    53. keytor69
      03-09-2009
      07:35 PM
      53

      Originally Posted by FartMan View Post
      So can you edit game updates with this? Take a patch from the HDD and edit it, then upload it to the PS3?
      No - All this does is let us download decrypted files from the HDD 1 by 1 - very slow and laborious method but it works ATM.

    54. ChAoS
      03-09-2009
      10:10 PM
      54

      just wanted to let you guys know that i am pulling for you all every second....i will be the first to tell you with my computer experience, i just have no understanding of coding like encryptions. PROPS goes out to all working on this project....I got blinkin lights and am just tryin to get all my data off of the hdd.

    55. levendi2nv
      03-10-2009
      07:29 AM
      55

      what would this lead too?

    56. enohand
      03-10-2009
      11:28 AM
      56

      the ps3 will soon be able to give you a "Profanity Deleted"

    57. Pockets69
      03-10-2009
      08:16 PM
      57

      Originally Posted by levendi2nv View Post
      what would this lead too?
      if you would read the thread you would already know, i posted two times explaining here what this does, but i will do it again...

      As of now this doesn't do anything, the encryption of the hdd has been broken wich means that we can now see whats inside the hdd (all the files) still there is nothing we can do with them because the files are also encrypted so we can see them but we can't do anything yet...

      I hope i helped and please before asking such questions please read the entire thread its not that long

      Cheers take care.

    58. obiwankenobi702
      03-11-2009
      12:53 AM
      58

      alright, ill see what i get

    59. streetps3
      03-13-2009
      02:20 AM
      59

      a depth tutorial please

    60. keytor69
      03-13-2009
      02:16 PM
      60

      Originally Posted by streetps3 View Post
      a depth tutorial please
      Please read the very first post.

    61. akdm
      03-14-2009
      09:13 AM
      61

      Great !!! Thanks for the tuto !

    62. Creepyfreak
      03-29-2009
      01:10 PM
      62

      Thanks for the tutorial. You realise that Sony is going to pick up on this eventually, right.

    63. gija
      05-18-2009
      09:09 AM
      63

      Hey guys, i have a realy big problem, mye hdd drive has chrashed and i have got alot off family videos on it thats realy importent to me, how do i get it out? it is encrypted. does enybody know how to decrypt it? Im going to send the hdd to a hdd recovery compagny to get it on to a portable hdd. Realy impotant to me. I well be greatfull for eny help =)

    64. brarei200
      07-02-2009
      10:01 AM
      64

      I don't have SATA :'(

    65. suicidalpsycho
      07-13-2011
      12:27 AM
      65

      Can you decrypt ur old ps3 hard drive... so its un-encrypted files... then get a new ps3.. decrypt that file off hte new ps3 hdd... then merge the files.. and re-encrypt it with the new ps3 hdd to save all ur games?! if not how do i fix this.. saving of game issues with no back up... got a no a/v and done all resets.. cooked board... repasted cpu/gpu.. nothing..