• PS3 Hacks, PSGroove , 29.09.2010

    KaKaRoTo via his blog has announced PL3 and that he is working on implementing PSGroove on firmwares between 3.01 and 3.15, this is what he said:

    I’ll announce two things, first, let’s talk about PL3.. PL3 is a new project I started in order to have a common repository of payloads that can be used by any ‘jailbreak’ implementation. I got tired of copying payloads from PSGroove, and I had some nice changes in mine that I thought the PSGroove project could benefit from, so I thought I’d create a single repository that both projects, PSFreedom and PSGroove (or any other similar projects) could use.

    You can find it in github, so don’t hesitate to submodule it and use it.

    Second important news… I’ve bought a new PS3 just for homebrew. Thanks to all who donated money so I can buy it (I didn’t get enough donations to pay for it, but enough to help me). I bought this PS3 used and it came with firmware 3.01! This is good and bad news : I can’t use PSFreedom to jailbreak it, so i’ve put on hold any improvements for it, however, it will allow me to actually port PSFreedom to older firmwares! My plan is to get the jailbreak working on 3.01, then move on to 3.10 and 3.15 (depending on how hard it is, i might skip 3.10).

    Another good news is that after 4 days of work, I was finally able to dump the LV2 memory from the 3.01 firmware, and now all that remains is to find the right offsets to patch, and port PSFreedom to 3.01, so all those who are still using this firmware version, you will soon be able to jailbreak it! Once I’m done with that, I’ll try to do the same with the 3.10/3.15 firmware versions!

    To dump LV2, I used a trick and algorithms found by marcan42, so big thanks goes to him, as well as many other people who helped me out, RichDevX and Aaron in particular. I used RichDevX’s idea of ignoring the JIG and bruteforcing the address in which the port1 descriptor gets stored until I get a hit, then use that payload to dump lv2, then find the right JIG offset for that particular firmware from the dump. Marcan’s trick was to send the data through the ethernet cable by using LV1 only hypercalls, and it worked!

    Now the latest git version of PL3 has a new ‘dump_lv2′ payload which you can use, it is firmware independent, and only uses LV1 hypercalls, so it should just work… It will dump all the lv2 memory through ethernet, so fire up wireshark, save the dump to a .pcap file, and use the tool in PL3/tools to extract the memory dump from the .pcap file.

    In other news, I will soon upload to Ps3utils an .idc script that will search and find the syscall table, and correctly resolve all of its functions and name them properly.. maybe even have it automatically find all functions of a dump in order to save time creating procs in IDA. I’ll let you know once I’m done with it.

    KaKaRoTo

    Source
    Download PL3 Via Github
    Just a note, ps3hax.net are not associated nor hold responsibility with files hosted off forum, you download at your own risk.

    Tags: , , ,

    Discuss in Forums (44)


  • 44 Comments

    1. Acci
      09-29-2010
      04:32 AM
      1

      sounds promesing

    2. itdario
      09-29-2010
      04:33 AM
      2

      O_O coooll

    3. whitelightnig
      09-29-2010
      04:55 AM
      3

      haha, "ps3hax.net are not associated nor hold responsibility with files hosted off forum". scared of sony calling you to court huh?

    4. GregoryRasputin
      09-29-2010
      04:58 AM
      4

      Originally Posted by whitelightnig
      haha, "ps3hax.net are not associated nor hold responsibility with files hosted off forum". scared of sony calling you to court huh?
      No but there is nothing wrong with being careful, also telling people to be careful when downloading files not from the forum, has nothing to do with Sony.

      Also, stay on topic in future.

    5. YungClipze
      09-29-2010
      05:46 AM
      5

      Now People Who Didn't Update Can Join In On The Fun Too xD.

    6. Bassflower
      09-29-2010
      05:53 AM
      6

      Yeah just in time...was thinking of killing my other os with an update to 3.41 on my Third PS3....One for online, one for Jailbreak and One for other os is One WITHOUT jailbreak to much ;-)

    7. TheRealChicken
      09-29-2010
      06:28 AM
      7

      he better should try to port it to fw 3.50+

    8. J-panic
      09-29-2010
      06:43 AM
      8

      Nice Idea but i think it is better to make a Firmware 3.40 with linux support.

    9. 0amadeus0
      09-29-2010
      06:45 AM
      9

      Originally Posted by TheRealChicken
      he better should try to port it to fw 3.50+
      It's up to him what he does.
      Sony closed the hole after 3.41 anyway so probably isn't possible at this stage.

      Originally Posted by J-panic
      Nice Idea but i think it is better to make a Firmware 3.40 with linux support.
      You're asking for a custom firmware. Thats not what he's working on.


      Why not just say "well done mate for all your hard work" instead of telling him what he should do?

    10. japsander
      09-29-2010
      06:51 AM
      10

      Good luck to the guy.
      I already wish I hadn't updated past otheros and now I REALLY wish I hadn't.
      I guess soon 3.41 will no longer be the magic number.

    11. advocatusdiaboli
      09-29-2010
      07:09 AM
      11

      Originally Posted by TheRealChicken
      he better should try to port it to fw 3.50+
      I think the most common idea is to wait for a substantial FW upgrade, then make a new JB.

      Some are also working on making a FW loader I read for loading 3.50 FW from 3.41 or 3.15, similar to that of the PSP. But I think it�s very hard.

    12. pimpspter
      09-29-2010
      07:31 AM
      12

      Excellent work - glad to see someone working on hacking the all important 3.15....

      Once 3.15 is hacked could you dump the flash to an external HD and upload it somewhere. It may allow the rest of us to emulate that firmware through USB emulation re-enabling OtherOS - at least until someone can manage to make it propperly operational in current firmwares - I'm not sure if it will help those of us with slims but you never know - perhaps a dump of the firmware performed while running will have the necessary tweaks aleady done to get a slim working with OtherOS??) It'll certainly be great progress!

      Thanks for your help and contribution to the scene

    13. advocatusdiaboli
      09-29-2010
      08:03 AM
      13

      Originally Posted by pimpspter
      dump the flash to an external HD
      You can download FW 3.15 from several places there is also a PUP extractor that will give you what you ask for. How to make use of it? I don�t know.

    14. Tokobo
      09-29-2010
      08:06 AM
      14

      Sounds good.

      Glad I kept my PS3 at 3.15.

      Cheers for your continued work!

      Though, the firmwares at 3.15 and below can't play newer games (my FFXIII won't work, it's the special edition japanese voice acting with english/mandarin subs), but that's for another time.

    15. frederic1
      09-29-2010
      08:56 AM
      15

      People don't care about a 3.01-3.15 compatibility.

      PEOPLE WANT 3.50 COMPATIBILITY !

    16. GregoryRasputin
      09-29-2010
      09:04 AM
      16

      Originally Posted by frederic1
      People don't care about a 3.01-3.15 compatibility.

      PEOPLE WANT 3.50 COMPATIBILITY !

      That proves you know very little about the scene, loads of people care about 3.15 compatibility as they have stayed on that firmware in order to keep OtherOS, its simple, if you wanted Jailbreak but were stupid enough to update to 3.42/3.50, then its your own fault.

    17. frederic1
      09-29-2010
      09:11 AM
      17

      you're stupid because no one is interested in using a firmware that can't go online !

      see how many people are saying that the authors had better put effort in adding 3.5+ compatibility !

    18. GregoryRasputin
      09-29-2010
      09:18 AM
      18

      Originally Posted by frederic1
      you're stupid because no one is interested in using a firmware that can't go online !

      see how many people are saying that the authors had better put effort in adding 3.5+ compatibility !
      lol only you and one other person are moaning about 3.50 on this thread, everyone else supports what KaKaRaTo is doing, if you want 3.50 support, go do it yourself, you seems to think your smart enough.

    19. mccartercar
      09-29-2010
      09:21 AM
      19

      @frederic1
      your stupid for not knowing any better than to tell a mod what to do firstly.
      secondly if you want 3.50 cracked with jb then learn some leet hacker skillz and do it your damn self.
      third and foremost, if you dont like the FREE work that other people are contributing then GTFO!
      -The1

    20. DubKira
      09-29-2010
      09:22 AM
      20

      Originally Posted by frederic1
      you're stupid because no one is interested in using a firmware that can't go online !

      see how many people are saying that the authors had better put effort in adding 3.5+ compatibility !
      hmmm you do know it shows alot of insecurity when claiming others to be stupid right?

      dude stop whining and gain respect for the coders / developers on this site. They arnt your fkn dog, they have lives and research or develop what intrests them. We are god damn lucky they actually think of releasing some of their work to us. You make me sick...

    21. TheGrimReefer
      09-29-2010
      09:24 AM
      21

      Originally Posted by frederic1
      you're stupid because no one is interested in using a firmware that can't go online !

      see how many people are saying that the authors had better put effort in adding 3.5+ compatibility !
      ^I believe that was a threat..
      The number of pissed-off little girls who updated passed 3.41 is entertaining at best, annoying at worst.

      On topic: Great news! I was thinking about selling my current 3.41 and making some money off it to buy another console and get it at 3.41 as well. Looks like the better course of action may be to wait and see if I can't have a jailbroken 3.15 instead!

    22. 0amadeus0
      09-29-2010
      09:36 AM
      22

      Originally Posted by frederic1
      People don't care about a 3.01-3.15 compatibility.

      PEOPLE WANT 3.50 COMPATIBILITY !


      Originally Posted by frederic1
      you're stupid because no one is interested in using a firmware that can't go online !

      see how many people are saying that the authors had better put effort in adding 3.5+ compatibility !

      Blimey

      Been here 5 seconds and making demands of developers...
      Sticky caps lock key...
      Calling a mod stupid ...

      Can I suggest a little light reading?



      Uploaded with ImageShack.us

    23. advocatusdiaboli
      09-29-2010
      09:56 AM
      23

      Originally Posted by frederic1
      People don't care about a 3.01-3.15 compatibility.
      I do

      Just think of the amount of knowledge there is in the diffs between the different version numbers!

      Not to mention we will have to be able to isolate "the junk gene" also known as signature in which practically are ciphered checksums.

      I expect someone to make the hughest find in the diff between 3.41 and 3.42 as there are no new features and only the closing of 1 function; AFAIK, and therefore not much data to analyze compared to the other diffs.

      How much power does the PS3 have if someone manages to turn off the ciphering?

    24. ZanderCross
      09-29-2010
      10:02 AM
      24

      Originally Posted by frederic1
      you're stupid because no one is interested in using a firmware that can't go online !

      see how many people are saying that the authors had better put effort in adding 3.5+ compatibility !
      Entitled little girl... You're lucky I'm not a mod...

      Anyway, thank the Maker! (Starwars reference must!)

      This is great news! I think this will get us closer to custom firmwares in the future as well. Although I could be totally wrong, I could just see how this would be useful, since you could get lvl2 dumps of multiple firmwares now and see how they tick!

    25. denero1
      09-29-2010
      10:04 AM
      25

      thats why i say they have the best mods here they let alottttt slide lol

    26. michael903
      09-29-2010
      10:38 AM
      26

      Thats very good news i was almost going to update from FW 3.15 to FW 3.41,Had my Minimus for about a week now and i am itching to try out all the good stuff! Well done Excellent work.

    27. danarthas
      09-29-2010
      11:28 AM
      27

      Hi guys! That's great news!
      Unfortunately I'm using 3.41 on my YLOD PS3 (lucky eh?).
      I've read about a Service Mode, that let you downgrade and even fix your YLOD, I think that would be great with FW 3.15 + PSGroove. We all could downgrade and have homebrew for free.

      Thx for your hard work, guys!

    28. thevoiceover
      09-29-2010
      12:02 PM
      28

      Originally Posted by frederic1
      People don't care about a 3.01-3.15 compatibility.

      PEOPLE WANT 3.50 COMPATIBILITY !

      Speak for yourself... Many people want OtherOS back and the ones who have not upgraded their PS3's because they want to keep OtherOS I am sure want a Jailbreak. These people (which are many as you should be able to tell by all the lawsuits over them taking OtherOS away from us) have been waiting a little bit longer for a jailbreak on their units than those with upgraded firmware.

      The only thing I really noticed from 3.50 is the ability to play BR 3D movies and at that, not so great from the sound of it. One other thing, you lose true < 5.1 audio on the 3D portion if you use the PS3 as a BR 3D player, it is better to get a TRUE standalone BR 3D player - one with true HDMI 1.4..

    29. TheMartian
      09-29-2010
      02:00 PM
      29

      Great news, as I'm still on 3.15.

      Question tho: does a 3.15 compatibility of the PSGroove 'automatically' mean a 3.15 compatibility of another dongle like the PS3Key for instance?

    30. ZanderCross
      09-29-2010
      02:20 PM
      30

      Originally Posted by TheMartian
      Great news, as I'm still on 3.15.

      Question tho: does a 3.15 compatibility of the PSGroove 'automatically' mean a 3.15 compatibility of another dongle like the PS3Key for instance?
      No, the manufacturers of these devices would have to take the Open Source code and apply it to their devices specifically, and after the news of Sony trying to shutdown all these clone sellers I wouldn't expect anything like that anytime soon. Just order a dev board. Teensy boards are only back-ordered till the end of October. Then when they release it you could just compile it on one and go. Someone correct me if I'm wrong please.

    31. japsander
      09-29-2010
      03:14 PM
      31

      these ports to lower fw could proove very useful to people on our current 3.41 fw.
      once these lower fw consoles have been hacked, more can be examined and maybe the usb custom fw loader can be used as a way to downgrade or at least re-enable the otheros bootloader

      why do people moan about not being able to play online with a hacked console and ***** about devs not fixing it for them?

      we hack it for 1 of 2 reasons.

      reason 1.
      to enable homebrew and open the console up to other possibilities such as:
      bringing back retro gaming,
      a true multimedia experience,
      desktop computing,
      extending the functions of the already existing OS as well as maybe creating a new one that is maybe faster, prettier and more functional.
      hobbyist coding (i may even try and learn)

      or

      reason 2.
      pirate games.

      the people who choose option 1 are mostly ok with the fact that online play is most likely lost as the benefits outweigh the loss.
      most of us will most likely buy a second console for online play and happily carry on buying the games just like we did before this breakthrough occured.

      the people who choose to hack the ps3 for reason 2 should just STFU and GTFO or at least be show appreciation for anything they are getting for free

    32. calnorak
      09-29-2010
      05:14 PM
      32

      @KaKaRoTo thank you I am looking forward to it, I do not have a phat but I can see this helping those individuals out that want Linux and cannot afford another ps3

      forget the whiners, this thread is proof of what my friends mom used to always say "don't beat yourself up there are always lots of others willing to do it for you" just ignore them and keep on doing what YOU want to do we are with you in your efforts

    33. XMuzzlerX
      09-29-2010
      05:20 PM
      33

      What are the reasons people would want to run linux on the ps3 rather than on a pc? Are thier specific reasons? Also i'm shur somone is trying to work around $ony's latest 3.50 firmware, but chances are if you want to use PSgroove and all of its awsomness we will probably never be able to go online.

    34. advocatusdiaboli
      09-29-2010
      05:24 PM
      34

      Originally Posted by XMuzzlerX
      What are the reasons people would want to run linux on the ps3 rather than on a pc?
      One less box in the living room.

    35. japsander
      09-29-2010
      05:41 PM
      35

      @xmuzzlerx
      My pc interferes with my tv. I lose most channels when it's switched on but my ps3 never has any adverse effect on it. Linux on ps3 would be perfect. Especially on my slim.

    36. Pockets69
      09-29-2010
      05:49 PM
      36

      linux on the ps3 will be really usefull if we can get full suport meaning hardware acceleration and all, other than that, its really slow, but i like having it on my ps3, well when i had it on my ps3 that is...

    37. TheMartian
      09-30-2010
      02:25 AM
      37

      Another super noob question: where is stored the firmware of the PS3?
      I mean, if I remove my 3.15 hdd and install a new disk under 3.41, would it be possible to downgrade by simply re-switching to the 3.15 hdd?
      (on the fat 60GB PS3 if I'm correct you don't have to update to the latest firmware after changing the hdd)

    38. advocatusdiaboli
      09-30-2010
      02:32 AM
      38

      Originally Posted by TheMartian
      Another super noob question: where is stored the firmware of the PS3?
      I mean, if I remove my 3.15 hdd and install a new disk under 3.41, would it be possible to downgrade by simply re-switching to the 3.15 hdd?
      (on the fat 60GB PS3 if I'm correct you don't have to update to the latest firmware after changing the hdd)
      I have tried that; No go!, the PS3 still remembers the highest FW number used and wants to go from there.

    39. TheMartian
      09-30-2010
      02:35 AM
      39

      Would have been too good to be true... Thanks!

    40. calnorak
      09-30-2010
      02:51 AM
      40

      Originally Posted by advocatusdiaboli
      I have tried that; No go!, the PS3 still remembers the highest FW number used and wants to go from there.
      it would be nice to find a way to edit that

    41. advocatusdiaboli
      09-30-2010
      05:16 AM
      41

      Originally Posted by calnorak
      it would be nice to find a way to edit that
      I am not sure what happens if the battery clock is removed.

    42. Saner
      09-30-2010
      05:27 AM
      42

      Originally Posted by advocatusdiaboli
      I am not sure what happens if the clock battery is removed.

      It would forget the time.


      Downgrading is only going to be possible via some kind of service mode, outside of that you wont be able to downgrade.

      Removing the click battery, replacing hard disks, swearing at the console, standing in a bowl of hot (or cold) water, whilst eating a sausage roll and singing "The Great Gig Int he Sky" is not, never ever going to allow you to downgrade.


      Lets face it, even if you completely bork the existing firmware, and then hit recovery it still will only allow you to install the existing (or newer) firmware.

    43. Philious
      09-30-2010
      01:29 PM
      43

      I bought a second hand 40gb, its on firmware 2.41 so I'm well pleased about this news and my minimus avr came this morning :aetsch:

    44. msergiu9r
      10-16-2010
      02:41 PM
      44

      thanx K.
      i'm surprised of the number of people who couldn't say(blah blah..,oh btw thanx kakaroto )
      wat's wrong with u guys?..u always have to argue like that?...pathetic..