• Smell a sweet mini victory? I sure do, an anonymous source has figured out how to get on PSN on PS3 Kmeaw CFW 3.55 even after the DNS block which occurred a few days ago. The tutorial below deals with messing with SSL certificates and is not an exact newb proof guide, so if you don’t know how to do a particular thing – Google is your best friend. If someone decides to make a full blown-newb proof tutorial, drop it in our Tutorials Section and I will be sure to front page it.

    How to connect to PS3 FW 3.55:

    Courtesy of PS3-Hacks.com for providing the tutorial.

    The following assumes you’re technically inclined and/or very resourceful, i.e. you know how to use Google. You’ll likely need to reference Google when it comes to generating/signing a certificate and creating a CA (certification authority). That said lets get started; here we’re using a combination of two tactics:

    1. DNS server trick: Set Primary DNS to 67.202.81.137 under Network Settings
    2. Simple SSL proxy that basically modifies the headers for outgoing packets to auth.np.ac.playstation.net’s to change “PS3 03.55″ to “PS3 03.56″ — this makes PSN believe the PS3 is using the proper firmware version

    Got it? Now here is how we accomplish tactic #2:

    1. Replacing a SSL cert in the CFW (in /dev_flash/data/cert) with your own CA SSL certificate
    2. Creating an SSL certificate for “auth.np.ac.playstation.net” signed with your CA certificate
    3. Run a DNS server on your machine that resolves auth.np.ac.playstation.net to your PC’s internal IP
    4. Create a Java SSL proxy (basically PS3 <-> PC <-> PSN). The PC claims (to the PS3) that it is “auth.np.ac.playstation.net” and is successfully accepted because a CA signed the SSL certificate
    5. Replace the headers sent PS3 -> PSN to specify “PS3 03.56″

    Here is a proof of this working:

    Post your results below. If you have any questions reply below and someone will surely help :)

    [Update1]

    Virtu from PSX-Scene posts a great explanation of exactly how this hack works for those trying to learn and understand it:

    I’ll explain the principles of this hack. You need to understand how SSL works, and a few more things, and that’s it.

    SSL creates an encrypted tunnel between 2 points, the CLIENT and the SERVER. A CLIENT can be a web browser, or a PS3 for example. A SERVER is a website.

    Each CLIENT and SERVER has to have matching certificates.

    There are 5 or 6 companies that make SSL certificates. When you install your web browser it comes with certificates pre-installed from all of those companies. When you want to make a server that uses SSL, you go to one of those companies that buy your certificate because their certificates are already installed on all browsers.

    Each SERVER certificate is linked to a web address.

    So say you go to your bank’s website. Your browser makes a connection, and the SERVER responds and says here is my certificate for bank.com, and I got it from company X. Your browser looks in its list of certificates for a certificate from company X. If you have one, the connection works.

    The PS3 connects to Sony servers, and Sony’s certificates are all purchased from the company called Verisign. The PS3 has Verisign certificates already installed on it, just like your web browser.

    For this hack, you need to fake a sony webserver, but you do not have a verisign certificate for a sony server.

    So you make a fake certificate good for a sony server address on your own. When the PS3 asks your proxy server for the sony server you give it the fake certificate you made. But there’s a problem. The PS3 does not trust your certificate, it only trusts Verisign certificates.

    So, you must install your fake cert on the PS3. These certs are held in dev_flash. So you do that. Now the PS3 connects to your proxy server, and it pretends to be a sony server and gives the PS3 the fake cert, and the PS3 believes your proxy server because you installed the fake cert already. Now the PS3 will encrypt its data with your fake cert instead of the real versign cert, and your fake cert on the proxy server can unencrypt the data. Now you can modify the data.

    Once your proxy server modifies the data, it sends it along to the real sony server and off you go.

    (to the techies, yes I know, they are signed not purchased, etc etc. but that just confuses the issue)

    Tags:

    Discuss in Forums (115)


  • 115 Comments

    1. sportsstar89
      02-12-2011
      12:52 AM
      1

      I honestly dont understand any of this even with google so guess ill just have the wait for the guide that will be up by tomorow

    2. rbober316
      02-12-2011
      12:54 AM
      2

      this is being posted all over the place yet nobody is giving a real detailed tutorial.. it will be well thanked amongst the noobs like me

    3. Wateva
      02-12-2011
      12:56 AM
      3

      So I assume that this 'trick' has to be a 'console only' trick?
      Meaning, since we have to alter our CA than that means that we can't just create a 'commodity' CA file. Am I right?

      Also, I'm not so sure everyone will be able to 'reroute' to it's own PC (of course I can just use my CFW on my Linksys -openwrt- to send any dns entries to my PC) but that would be impossible to the 'normal' users..

      And.... Wouldn't it be possible to us to just 'proxy' the PS3 through someone's PC/Server so that 'proxy' would answer the PSN with a 3.56 CA?? I would say it isn't exactly safe, but... Asking won't hurt.

    4. Rudeboy
      02-12-2011
      01:19 AM
      4

      what if the video was taken when the dns trick was working? cuz there are no xplanation(s) yet? but we ill c 2morrow or few days!! hope it works

    5. Doze98
      02-12-2011
      01:29 AM
      5

      This only works on kneaw or can u do this in wutangrza??

    6. thatguy
      02-12-2011
      01:32 AM
      6

      will this work on waninkoko or just kmeaw because it sounds like it would work on any cfw but my biggest question is how do i make this CA file and sign it it would be better if there was a pre-signed CA file that everyone could just download and copy to the right place via FTP

    7. dbanga
      02-12-2011
      01:54 AM
      7

      I dont if this is a good thing or very bad

      but in the dns 67.202.81.137 into a browser and press enter..........,

    8. Kiba1335
      02-12-2011
      02:03 AM
      8

      noob tutorial plz

    9. sronsr
      02-12-2011
      02:42 AM
      9

      not calling FAKE or anything but...
      1. change date and time set to near future(in his case, Feb 11)
      2. record while DNS trick still works
      3. release the vid on the day set on the PS 3

    10. Qraze1
      02-12-2011
      02:44 AM
      10

      oh boy.

      i believe if sony sniffs this one and detects it on the machine, permanent console bans will be a flying. this ain't some simple dns trick that ain't breaking the rules, this is a full on psn attack using false certificates to get in. i'm sure they'll be able to sniff this dog and the only way to stop it is by doing full on console bans if caught.

      i'm all for freedom and stickin it to sony, but this is something i do not support at all. this would be fraud if it was dealing with something a bit different and something actually worth money.

      y'all know how i feel. i will not be doing this, this is going too far and for what? online gaming? trophy levels?

      not worth it.

    11. mr puffin
      02-12-2011
      02:49 AM
      11

      sweet will be able to play AC Brotherhood online some more

      i'm addicted to it online

    12. carldenning
      02-12-2011
      03:16 AM
      12

      who cares if our ps3 gets banned from the psn , its not like we need it , if i wanted psn so badly i would of upgraded to 3.56 but no i want homebrew so im staying put if ppl work out how to get on psn im not gunna turn down the offer to go online for a bit till 1 i get banned wow i wasnt bothered about it i want home brew lol or 2 they patch it up till the next time

    13. BobbyBlunt
      02-12-2011
      03:17 AM
      13

      Originally Posted by Qraze1 View Post
      oh boy.

      i believe if sony sniffs this one and detects it on the machine, permanent console bans will be a flying. this ain't some simple dns trick that ain't breaking the rules, this is a full on psn attack using false certificates to get in. i'm sure they'll be able to sniff this dog and the only way to stop it is by doing full on console bans if caught.

      i'm all for freedom and stickin it to sony, but this is something i do not support at all. this would be fraud if it was dealing with something a bit different and something actually worth money.

      y'all know how i feel. i will not be doing this, this is going too far and for what? online gaming? trophy levels?

      not worth it.
      I agree this is a network hack. Fake certificates....no thanks. Sony is on a sue happy rampage. Get caught logging in like this and Sony has your IP and has you for hacking/computer fraud. Sorry, but I like not being banned, in court or worse possibly jail for breaking into a secure network. I'm good on that.

    14. carldenning
      02-12-2011
      03:29 AM
      14

      Originally Posted by BobbyBlunt View Post
      I agree this is a network hack. Fake certificates....no thanks. Sony is on a sue happy rampage. Get caught logging in like this and Sony has your IP and has you for hacking/computer fraud. Sorry, but I like not being banned, in court or worse possibly jail for breaking into a secure network. I'm good on that.
      i see ya point but im sweet as a nut cos they not my ip address cos im hook up to next man net and he dont know lol

    15. cesar3569
      02-12-2011
      03:43 AM
      15

      it does work . if i didn't already update to 3.56 i would've been all over this . i had to update , the new map pack for call of duty is about to come out and i just can't wait . i'm the BEST . jjust sucks there's no way to do it without a computer .

    16. Tae
      02-12-2011
      03:43 AM
      16

      To clear this up you need a few things.

      1. Server - basic LAMP,DNS server should do..I'm pretty sure a virtual machine will do.
      2. Self signed SSL certificate- you need to create self signed ssl certificates, if you don't know how to then I would just say give up now, you don't have the proper knowledge for this project.
      3. CSR for Java- you need to create a CSR for Java servers, I'm guessing this is what Sony has in place to verify their SSL certificates
      4. Set the header for the CSR going to Sony to “PS3 03.56″

      In a nutshell you're tricking your PS3 in to thinking your PC/Server is a PSN server, and then tricking the PSN servers in to thinking your PC/Server is a PS3.

      This is really risky since Sony can see your IP Address. If they find out what you are doing you'll probably end up a Co-D with GeoHotz

    17. Rudeboy
      02-12-2011
      03:43 AM
      17

      it dun matter if u r on ya neighbours wifi ,,, mac of ur ps3 will get banned..if thats the case! but i think that would not be happening from sony! cuz they got lots of other things to focus on

    18. MastaOfEvil
      02-12-2011
      03:48 AM
      18

      Originally Posted by Rudeboy View Post
      it dun matter if u r on ya neighbours wifi ,,, mac of ur ps3 will get banned..if thats the case! but i think that would not be happening from sony! cuz they got lots of other things to focus on
      Your MAC address doesn't get seen past your router. its for LAN purposes, Sony can't see it.

    19. japsander
      02-12-2011
      03:49 AM
      19

      Originally Posted by carldenning View Post
      i see ya point but im sweet as a nut cos they not my ip address cos im hook up to next man net and he dont know lol
      well in that case, for your sake i hope you have never registered your address to a psn account as they wont even need your ip.

    20. carldenning
      02-12-2011
      03:50 AM
      20

      Originally Posted by Rudeboy View Post
      it dun matter if u r on ya neighbours wifi ,,, mac of ur ps3 will get banned..if thats the case! but i think that would not be happening from sony! cuz they got lots of other things to focus on
      i know i get my ps3 banned im not bother about that im never gunna use it cos im never updating unless it cfw so i can do with out psn , but if there a hack 2 get online im not gunna turn the offer down to go on witch i said a few post ago , i was saying about the ipadress to replie to a post about sony is on a mission to sue ppl and this psn hack would be fraud and i said they cant find me cos they not got my ipadress , all they can do is ban me .

    21. CryonicCore
      02-12-2011
      04:03 AM
      21

      Wow seriously? Anybody that thinks that their precise PS3 is going to get banned hammered, I personally think ur a pussy and need to stop coming on this webpage. A lot of hard work and sacrifice went into making people happy for custom stuff. And personally I HATE $ony for the BS they are pulling so at this moment I don't care about banning or PSN hacking. I am sure if it came down to it, there will be a way around the ban too lol. Peace *****es.

    22. Nova
      02-12-2011
      04:40 AM
      22

      Damn been working on sock proxy for days now in php, forget that and will try this

      Thanks

    23. TnF
      02-12-2011
      04:57 AM
      23

      will it work on 3.41 also?;p

    24. dansp
      02-12-2011
      05:14 AM
      24

      wow guys, such a drama for messing with SSL.

      you're not fooling sony, you are fooling your console when he's verifying if your connection with psn is legit. I don't see why the **** this is more illegal than any other thing we ever did (with cfw spoofing 3.55, homebrews and backup managers), u did worse things and now you're all "omg this is so wrong". lol srsly.

    25. dreamcrawler
      02-12-2011
      06:05 AM
      25

      :aetsch: Exactly. couldnt have told it better than dansp :aetsch:

    26. Sphaa80
      02-12-2011
      06:06 AM
      26

      God I hope Sony finds a way to ban people with CFW on PSN!!!
      Don't you realize that PSN will be destroyed if people can play their backup live. People will hack and cheat on games so much that it will be unplayable.

      Stop destroing for people that actually payed for their games.

    27. carldenning
      02-12-2011
      06:11 AM
      27

      Originally Posted by Sphaa80 View Post
      God I hope Sony finds a way to ban people with CFW on PSN!!!
      Don't you realize that PSN will be destroyed if people can play their backup live. People will hack and cheat on games so much that it will be unplayable.

      Stop destroing for people that actually payed for their games.
      STFU not every one cheats , special running back ups . ppl cheat with out backups so nothink new there , just have get on with it , its there problem when they get banned eg black opps sever etc .

    28. xQuiik
      02-12-2011
      06:14 AM
      28

      Originally Posted by Sphaa80 View Post
      God I hope Sony finds a way to ban people with CFW on PSN!!!
      Don't you realize that PSN will be destroyed if people can play their backup live. People will hack and cheat on games so much that it will be unplayable.

      Stop destroing for people that actually payed for their games.


      Then Why The **** are u registered on Ps3Hax?? if u want ppl to be banned from playing backups??

    29. japsander
      02-12-2011
      06:27 AM
      29

      Originally Posted by xQuiik View Post
      Then Why The **** are u registered on Ps3Hax?? if u want ppl to be banned from playing backups??
      whether you admit it or not, hacked machines have no place on psn whatsoever.
      people who play backups online do deserve a ban. hell, just hacking the console deserves a ban, we broke the rules and should just accept it.
      all this bypassing just to get back online is only going to anger sony even more than they are already.

      I myself have 2 ps3's on CFW so that applies to me too.

    30. carldenning
      02-12-2011
      06:28 AM
      30

      also with black opp i swear it was the update that got hacked for cheaters it wasnst the back up game , i know how to install game updates with out even being on cfw so hoew does that come in to cheater with back ups when u can install the mod game updates on ofw

    31. clipper01745
      02-12-2011
      06:30 AM
      31

      If this just fools the ps3 into thinking your pc/server is PSN, then why not set up a server to act like are our own Custom PSN and do away with Sonys PSN all togeather.

      If this could be done then i am sure that it would be alot better then Xlink as that only supports games with lan option, Where as are own modded version of PSN would support all games.

      The server would need to be hosted in a country where the it can not be taken down by sony legal team.

      But i wont how ever be using this method to get on to Sonys PSN as its really just asking for trouble.

    32. dansp
      02-12-2011
      06:50 AM
      32

      God I hope Sony finds a way to ban people with CFW on PSN!!!
      Don't you realize that PSN will be destroyed if people can play their backup live. People will hack and cheat on games so much that it will be unplayable.

      Stop destroing for people that actually payed for their games.
      Wow. Now that's the most basic mistake. Generalization.

      If you have the narrowminded idea that everyone here is a cheater, you could just as well think everyone black is a rapist and everyone chinese can't drive.

      Yeah, we should ban everyone that has the potential to do something bad.

      FYI Most ppl here don't agree with editing trophies or cheating, they're just trying to make the console they bought (for rather an expensive price) literally "do everything" like sony announces it does.

      To me, sony can go to hell if they announce that their console is a media center and it can't even put softsubs in a video. or play mkv.

      this thing doesn't do everything, and in every update they take more from it, instead of making it better.

      Maybe you could try not accessing this site. since you're very frustrated that some people are trying to improve your console -for free-. and sony, to whom you pay rivers of money is doing nothing. they're just doing you the -favor- of letting you play online in a ridiculous system that doesn't even support backgroung voice chat in every game.

    33. rYugen
      02-12-2011
      06:58 AM
      33

      best thing about it is "Hey i'm on a site called "ps3haxx000rzthe****outoftheps3.net an i'm totally scared of gettin banned" ;D

    34. dansp
      02-12-2011
      07:05 AM
      34

      best thing about it is "Hey i'm on a site called "ps3haxx000rzthe****outoftheps3.net an i'm totally scared of gettin banned" ;D
      guess when people reads keywords like "certificates" they panic.

      "omg it's like i'm hacking a bank! FBI will show up"

      lolerz

    35. ps3convert
      02-12-2011
      07:05 AM
      35

      As much as i'm happy that they have found a way of getting back on PSN, it seems a bit of a tedious task, but also you need a pc to be constantly on...you might as well get a PC Gaming machine and play directly off that.

      sorry...just the way i feel.

    36. takuma120981
      02-12-2011
      07:07 AM
      36

      Try not to fight so much about who thinks this and who thinks that and try to respect everiones opinion...
      Now just you all stfu and find a way to do a tutorial about this so WHO WANTS to try cause last time i saw NO ONE gave me money to buy mi ps3 and i do believe since IM THE ONE THAT BOUGHT THE PS3 its mine to do whatever i want..:aetsch:.
      If it bricks or i get ban ITS MI DAM PROBLEM , unless someone is gonna give me the money to buy a new one if that happens just stfu like i said a few words ago...:thefinger:
      For the guys that are trying to help us TY VERY VERY MUCH YOU GUYS ROCK...
      For the guys that are always talking crap FU AND JUST LEAVE THE SITE...:thefinger:


      SORRY FOR THE BAD ENGLISH IM PORTUGUESE SO I BELIEVE I HAVE A DISCOUNT

    37. pimpspter
      02-12-2011
      07:18 AM
      37

      This is great work and I'm delighted to hear such progress being made.

      I would suggest that people connect to a VPN before performing the hack (the easiest way would be using a router that supports it as you'll need your ps3 and the computer performing the hack to be on the same VPN.....and I don't think the ps3 supports VPNs itself. There are some good free VPNs out there. Also spoof your console ID (I'm sure I remember there being a way of doing this) and create a new psn account for it.

      I wonder if this discovery explains the phonomenon we used to see where after every upgrade the dns/proxy attack would work for a little while then suddenly Sony would do something and we couldn't connect anymore......

      I wonder If the certificates are different between different firmwares....and all Sony was doing when the proxy hacks failed was disabling the old cert? Might see if I can decrypt a few firmwares and compare the hashes on these certificates. Could it be that an alternative to this damned elegant hack may simply be switching the certificate file of our custom firmwares with the latest retail?


      Or do I not understand something fundamental here?

    38. [_DaNCeR_]
      02-12-2011
      07:20 AM
      38

      Make mine takuma120981's words... Portuguese also!!!!

    39. squadraphonic
      02-12-2011
      07:22 AM
      39

      willl read up on it on monday i dont expect anyone to give me all the answers like everyone else

    40. D4RKENPACHI
      02-12-2011
      07:36 AM
      40

      **** i updated

    41. kambody
      02-12-2011
      07:37 AM
      41

      can replacing the CA SSL certificate in the ps3 and spoofing 3.56 work?

    42. Sphaa80
      02-12-2011
      07:55 AM
      42

      I see some are getting angry because I want people using CFW on PSNto be banned
      Let me be more precise:

      - I too have CFW on one of my PS3. I use it for homebrew, that's why I'm here on ps3hax

      - The other is used online with OFW. And I'm going to get really pissed when the losers are coming online with their CFW (again) and start cheating. I have payed good money for my PS3 and games, and I don't want my online experience destroyed by some poor lowlives

      - No, I don't think most people with CFW cheat. But as long as 1% cheat it messes up for everyone.

    43. afmamoon
      02-12-2011
      08:00 AM
      43

      @pimpspter
      There are many CAXX.cer certificates in //dev_flash/data/cert directory. It seems we need to replace all of them. But how it is gonna work. Do we just need to create our own self signed certificates with the same names as in //dev_flash/data/cert directory and replace them.

      Can anyone explain in a bit details.

    44. gliitch
      02-12-2011
      08:14 AM
      44

      all this wanting to play online? And for what, a few hours of measly COD time? This is getting rediculous. I think they should take this post down, not because it enables PSN, but enables it in the wrong way. This is just giving Sony a proper reason to sue, and to be honest, if you get caught doing this, you will not have a leg to stand on at all.

      I didnt really understand that legallity of this at first, but after reading posts from mature sensible hax members, i completely aggree with them.

      Although to be fair, some idiot is going to try it, just to play some COD. This principle is much like Adam and Eve with the apple. One bite and you're history.

      This PSN attack = "BITING METAPHORICAL SAID APPLE!"

      cannot make my point more clear.

    45. djhazardous
      02-12-2011
      08:24 AM
      45

      Stop getting your panties in a twist, the majority of users here can't even do it using this method anyway.

      Hope we get a more thorough step by step tutorial soon.

    46. robster71
      02-12-2011
      09:15 AM
      46

      All these methods can be simplified for everyone and I'm sure 3.56 is cracked already.. We just have to be happy this website gives us the opportunity to be where we are at.. Enjoy our lovely machines we payed alot of money for..PSN to me is overated

    47. cesarhell
      02-12-2011
      09:18 AM
      47

      How can you write the certificate on to dev-flash? Cause I tried and wasn't possible, if someone did please tell me how.

    48. WinMaker
      02-12-2011
      09:24 AM
      48

      How i make a SSL Certifikate and must i have a Root or other?
      Can some make a Certifikate what i must edit for my own IP-Adress and replace then?

    49. ninjanutta
      02-12-2011
      09:32 AM
      49

      does anyone here have a real clue about how to do this because ive read that sever access is needed and with loads of people hitting it,well,its going to slow down etc?not sure on the truths of it all.anyway,ive got access to a sever that hosts pc lobbys for blackops or anything i choose really that can handle traffic in other words,anyone thats not full of **** and knows what they are doing can pm me and i will see what can be done,im NOT giving the whole internet access to the server but i will share with a select few,get my drift.

    50. sysrez
      02-12-2011
      09:52 AM
      50

      This is actually extremely clever.

      Big respect to the person who discovered this, good work on thinking 'outside the box' . Having study networking security this shows impressive logic.

    51. JPOrtiz831
      02-12-2011
      10:09 AM
      51

      I have my laptop on all the time anyway. this is perfect for me. I dont give a sh** about getting banned i have 3 ps3s and one has broken bluray drive and it still plays all kinds of games.

      And since i cant play on psn right now anyway gettin banned doesnt seem like much of a threat.

      Even though i have more xbox 360s than ps3s and all my stuff is modded. I never get banned with anything.

      But ive been wanting to play MAG and little big planet 2 So im gonna try this fa sho.

      With my modded modem and modded router and modded console

    52. d34thc0d3
      02-12-2011
      10:13 AM
      52

      I already created my own SSL CA+CERT, but I'm somewhat unsure how I'd go about the SSL proxy thing, anyone know which SSL proxy could be used to fake the certificates/headers ?

      btw, the only way to be able to write to dev_flash on 3.55 currently might be installing asbest os. (!!! don't mess with dev_flash though if you have no clue, it will brick your console most likely !!!)

    53. THE_GR81
      02-12-2011
      10:14 AM
      53

      that's cool let's c how long it's gonna take sony to ruin this method 4 us

    54. MasterCrucifier
      02-12-2011
      11:15 AM
      54

      you can't brick you ps3 in the Dev_flash you might have to reinstall the 3.55 but that's about it.

    55. Pirate
      02-12-2011
      11:19 AM
      55

      1st post updated

    56. rainrix
      02-12-2011
      11:56 AM
      56

      WHy can't we spoof verisign servers?

    57. Mattr92
      02-12-2011
      12:08 PM
      57

      Originally Posted by rainrix View Post
      WHy can't we spoof verisign servers?
      Because you don't have the verisign CA on your proxy thus the neeed to make your own CA so ps3 check the CA installed on it with the one on your proxy and gets the go ahead.

    58. jman12311
      02-12-2011
      12:14 PM
      58

      I can't believe people are still expecting to see a cfw for 3.56. There won't be one until the brand new games stop working on 3.55.

    59. duskpoet
      02-12-2011
      12:14 PM
      59

      Wanted to ask, what need in DNS trick in this hack scheme? If our packages are already have 3.56 in their headers?

    60. fahadj2003
      02-12-2011
      12:18 PM
      60

      im sure every one takes a 2 min 30 sec video to show everyone that it works but wont take 2 min and 30 sec to simplify this **** for others..

      next time, make a video to show HOW it works..
      thanks

    61. Qraze1
      02-12-2011
      12:30 PM
      61

      well, to each their own. if you want online that bad, go for it!

      i won't be, this is my opinion. sony will sniff it, and who knows what will happen. i just think i have a clue about what will happen.

      i don't need the psn, but i still like the fact that if i do ever decide to update, i won't be banned.

      i have that choice. and i have a legal right to create and play backups and use my machine how i want to.

      i don't however, have a legal right to falsify certificates/documents to break into a secure network, whatever that network may be. there's a long list of real laws broken doing things of this nature. i don't expect sony to just patch it out or update it away.


      just my opinion and my piece of mind, do whatever your little heart wants.
      be yourself, by yourself. stay away from me.

    62. jerseydvd
      02-12-2011
      12:34 PM
      62

      I don't care about gaming, I just want my Netflix to work without updating!!

    63. ps398632
      02-12-2011
      12:34 PM
      63

      Hmm Mucking with SSL certificates...ouch...I'll hold out for a more legal way.. I don't want to try something only to have the Local sheriff knocking at my Front Door with the FBI asking is so and so here? we need his computer, PS3 and Him...I have a baby on the way and can't afford that kind of trouble lol..That and my Moral values says "Two wrongs don't make a rite"
      I know were angry, but we a need to use our anger in a justifiable way.

    64. duskpoet
      02-12-2011
      12:37 PM
      64

      Originally Posted by ps398632 View Post
      Hmm Mucking with SSL certificates...ouch...I'll hold out for a more legal way.. I don't want to try something only to have the Local sheriff knocking at my Front Door with the FBI asking is so and so here? we need his computer, PS3 and Him...I have a baby on the way and can't afford that kind of trouble lol..That and my Moral values says "Two wrongs don't make a rite"
      I know were angry, but we a need to use our anger in a justifiable way.
      Oh, they won't come to your house, too many worries. They'll just burn it with a laser, from satellite

    65. axg
      02-12-2011
      12:39 PM
      65

      the video is gone...

    66. takuma120981
      02-12-2011
      12:44 PM
      66

      Iupiiiiiiiiiii....Great news lol
      Btw i do believe we are not all tech brains so you just say you need to do this and understand that and blablabla , and we are suppose to do what??Google it???Well maybe its just me but for learn to do this and study this matter in a way i can actually try to do it maibe it would be a little more simple to someone do some charity and make a tutorial step by step or a video because we all see the video post here we all saw the ''explanations'' and we all, well majority of us lol , understand the same .
      Please guys if an expert of this subject(s) could help us we would all apreciated and make an ovation or wathever you whant .
      For the guys that just cry and cry about ppl cheat online with CFW news flash you dont need CFW to do that so if ppl cant buy 2 or 3 Ps3 i support ppl buying a ps3 and take some games from net and play them but that just me that is poor so for all the rich *****es :thefinger:...
      I do believe piracy is wrong and all that crap and companies need money and blablabla but i also need money and i also like to play games online and offline but like most ppl (unfortunally) i cannot buy all the games i wanna play.
      In my own case i bought around 15 games on the stores till today so i do believe that getting 3 or 4 games and play them on a CFW maibe SOny dosent lose that much and to play games ,backups or originals i still need to buy the console so think about it and do the math.
      Just a small and personnal opinion

    67. jordanmoore
      02-12-2011
      12:56 PM
      67

      I've managed to get myself a working DNS server now providing a fake update list to the ps3 (even though that's not necessary).

      Now that I've got the know-how with the DNS server I'm going to take a look at that "auth" part and try decrypting that with wireshark to see what's exactly going on.

      That'll be a job for tomorrow/much later tonight though.

      If I ever get something that's working then I may work on a tutorial.



      ==================


      Anyway, seriously, they're not going to go after every end user! And if we protect ourselves then they wont catch us! We are sending out the EXACT packet the ps3 generated just from a different IP than the ps3 just editing the header a teeny bit. So long as you're not running backups without cleaning your run history then how can they know you're not legit? (other than port scanning the ip )

    68. takuma120981
      02-12-2011
      12:58 PM
      68

      And we say TY

    69. depblkman
      02-12-2011
      01:07 PM
      69

      Are we really that desperate to play CFW online? I understand sticking it to Sony right in their arse but come on. Before online play, we actually invited our friends over to give them a royal thumping. The best solution is to go out and buy another ps3, upgrade it to 3.56 and have at it with online play. Right now, i'm sitting on the best of both worlds. i have one with CFW and another that is official.

      It seems to me for some people, playing online is like smoking crack. always chasing after the first high that you can never get back.

    70. soplox2
      02-12-2011
      01:13 PM
      70

      @depblkman

      Not all people can afford 2 PS3

    71. Superhero15
      02-12-2011
      01:15 PM
      71

      Well I hope nice noob tutorial gets realeased soon. I have read some posts and some people think we will need to keep our pc's running all the time, my experience with these type of things is a no, once you bypass and succesfully log into PSN using ur PS3 you will be able to shut down your pc. I might be wrong on this one but just giving my opinion.

    72. takuma120981
      02-12-2011
      01:17 PM
      72

      Maibe we all shoud ask depblkman to buy us another PS3 if you will just tell us so we can send you the adresses:thefinger:

    73. rainrix
      02-12-2011
      01:57 PM
      73

      Can't we just patch 3.55 to 3.56 in memory so that we avoid the hassle?

    74. mysteryhacker
      02-12-2011
      02:29 PM
      74

      i kind of understand it? never going to give up, until i get it right.

    75. lernatix
      02-12-2011
      02:54 PM
      75

      Originally Posted by Sphaa80 View Post
      God I hope Sony finds a way to ban people with CFW on PSN!!!
      Don't you realize that PSN will be destroyed if people can play their backup live. People will hack and cheat on games so much that it will be unplayable.
      Stop destroing for people that actually payed for their games.
      I'll start by saying that I only ever played my legit copy of BC2 when
      we were online on 3.55, no cheating here. :thefinger:

      (I also downloaded the KZ3 open beta which wouldn't connect to Sony fail servers.)

      I remember when Sony made me choose between one half of the machine
      I purchased and the other half of the machine I purchased. Even though I
      probably couldn't bring myself to do it. I hope PSN gets raped to death.

      I will admit that this method is beyond me but it's great that someone is
      fighting back. Suck Fony.

    76. Joel
      02-12-2011
      03:11 PM
      76

      Hope Sony can block this soon. If you guys want online so bad just get another ps3. As long as jailbreak ps3's can get on psn there will always be cheaters.

    77. mrpitman
      02-12-2011
      03:16 PM
      77

      Originally Posted by Joel View Post
      Hope Sony can block this soon. If you guys want online so bad just get another ps3. As long as jailbreak ps3's can get on psn there will always be cheaters.
      Now you're wrong. Not everyone who jailbreaks there PS3 is cheating. I have JB PS3 and I played legit games online, BFBC2, MW2, Black OPs, and I never cheated or used any cheats.

    78. Joel
      02-12-2011
      03:18 PM
      78

      Originally Posted by mrpitman View Post
      Now you're wrong. Not everyone who jailbreaks there PS3 is cheating. I have JB PS3 and I played legit games online, BFBC2, MW2, Black OPs, and I never cheated or used any cheats.
      It doesn't matter if you don't cheat, others will just take a look at black ops.

    79. duskpoet
      02-12-2011
      03:22 PM
      79

      And what encryption algorythm does PS3 use? how can we unencrypt data without knowing that

    80. keeperX
      02-12-2011
      03:22 PM
      80

      Got one question regarding the explanation on how this works: What SSL cert and key does the SSL proxy server to use to communication with PSN?

      I don't see the step to upload PS3's SSL cert and key to SSL proxy. Does the 67.202.81.137 server do the trick? Does each PS3 has different SSL cert and key?

      Sorry for the question, I missed all the previous parts of DNS things.

    81. fahadj2003
      02-12-2011
      03:25 PM
      81

      black ops?
      dunno
      its kidna lame
      bc2 is better :-/

    82. duskpoet
      02-12-2011
      03:27 PM
      82

      And it looks like few steps in this guide are missing

    83. Schnippshly
      02-12-2011
      03:29 PM
      83

      Originally Posted by duskpoet View Post
      Oh, they won't come to your house, too many worries. They'll just burn it with a laser, from satellite
      LOL
      True story.

    84. perpetrator
      02-12-2011
      03:38 PM
      84

      if u dont support cfw and backups of legit copies, and even moding SSL for free onlinw which is frikkin owed to us who bought a ps3 for that reason, then GET THE **** OUT THIS FORUM. tired of u *****es whinning, if u support sony or are a scared lil puss, then ***** to someone else and leave the real fun to us jailbreakers.

    85. PS3Nation
      02-12-2011
      03:40 PM
      85

      THANK YUKI! (NOT MINES)

      1. Set up dnsmasq to resolve your region’s update server (fuk01.ps3.update.playstation.net in my case) and auth.np.ac.playstation.net to your computer. I just added them to my /etc/hosts and left the rest of the dnsmasq settings at default.
      2. In Charles, set up reverse proxies for these two addresses on port 80 and 443 respectively. Also add auth.np.ac.playstation.net to the list of Locations in the SSL tab of Proxy Settings so you can actually see the data you’ll be changing.
      3. In Charles, under Tools > Map Local, map the /update/ps3/list/uk/ps3-updatelist.txt on your region’s server to a local copy, for example the one attached to this post.
      4. Using the AsbestOS Installer on your PS3, enable R/W access to /dev/flash.
      5. Rename charles-proxy-ssl-proxying-certificate.crt to xx.cer (where xx is a certificate that already exists) then use your preferred method to replace the one in your flash.
      6. Set your PS3 DNS to the one you set up.
      7. In Charles, set a Breakpoint on all https:// POST Requests.
      8. Attempt to connect to PSN.
      9. When you see the request in Charles, edit any instance of 3.55 you see in the headers to 3.56 then click Execute.
      10. If it didn’t work try again, eventually you should sign in. It only took me a couple of tries.

      still would appreciate a little thanks tho

      LINKS:
      http://www.thekelleys.org.uk/dnsmasq/
      http://www.charlesproxy.com/
      http://www.ps3-hacks.com/file/276

    86. speed721
      02-12-2011
      03:51 PM
      86

      I think it is rather funny that people come to this site and whine about hackers. I work in the computer security industry and some of the BEST, if not THE BEST people I have worked with are hackers. Guys or girls who learned everything on their own or by trial and error are my favorite people to work with. Heck, I have a masters degree and I have learned more from hackers than I have ever learned in any classroom...and especially this site. You know what sets hackers apart from people/companies like Sony?
      Hackers do it because they love the challenge and are not driven by money.
      Sony? Well, you can figure that garbage out for yourself! $$$$$
      Keep it up guys! I learn so much from this site. Thanks!

    87. duskpoet
      02-12-2011
      03:58 PM
      87

      Originally Posted by PS3Nation View Post
      THANK YUKI! (NOT MINES)

      1. Set up dnsmasq to resolve your regions update server (fuk01.ps3.update.playstation.net in my case) and auth.np.ac.playstation.net to your computer. I just added them to my /etc/hosts and left the rest of the dnsmasq settings at default.
      2. In Charles, set up reverse proxies for these two addresses on port 80 and 443 respectively. Also add auth.np.ac.playstation.net to the list of Locations in the SSL tab of Proxy Settings so you can actually see the data youll be changing.
      3. In Charles, under Tools > Map Local, map the /update/ps3/list/uk/ps3-updatelist.txt on your regions server to a local copy, for example the one attached to this post.
      4. Using the AsbestOS Installer on your PS3, enable R/W access to /dev/flash.
      5. Rename charles-proxy-ssl-proxying-certificate.crt to xx.cer (where xx is a certificate that already exists) then use your preferred method to replace the one in your flash.
      6. Set your PS3 DNS to the one you set up.
      7. In Charles, set a Breakpoint on all https:// POST Requests.
      8. Attempt to connect to PSN.
      9. When you see the request in Charles, edit any instance of 3.55 you see in the headers to 3.56 then click Execute.
      10. If it didnt work try again, eventually you should sign in. It only took me a couple of tries.

      still would appreciate a little thanks tho

      LINKS:
      http://www.thekelleys.org.uk/dnsmasq/
      http://www.charlesproxy.com/
      http://www.ps3-hacks.com/file/276
      Great thanks, man! But actually stiil don't get how we unencrypt packeges, and how to encrypt them with official key

    88. frederic1
      02-12-2011
      03:59 PM
      88

      it will be very easy for sony to block this ssl trick

    89. speed721
      02-12-2011
      04:04 PM
      89

      Originally Posted by frederic1 View Post
      it will be very easy for sony to block this ssl trick
      Plus it is already in the news.

      http://www.maxconsole.net/content.ph...mentid=1302174

    90. hax3ps
      02-12-2011
      04:05 PM
      90

      Originally Posted by speed721 View Post
      I work in the computer security industry and some of the BEST, if not THE BEST people I have worked with are hackers.
      hackers are people you cannot trust. don't be surprised if confidential data end up being leaked

    91. speed721
      02-12-2011
      04:08 PM
      91

      Originally Posted by hax3ps View Post
      hackers are people you cannot trust. don't be surprised if confidential data end up being leaked
      You don't need to be a hacker to do that. And I DO trust all of my guys and girls in my company.

    92. duskpoet
      02-12-2011
      04:11 PM
      92

      **** if u know of some way for them to block it, then tell how. Otherwise it's just ****talking) The only way i see, is to change certificate they use, but I think this is no cheap procedure)

    93. Joel
      02-12-2011
      04:11 PM
      93

      Originally Posted by fahadj2003 View Post
      black ops?
      dunno
      its kidna lame
      bc2 is better :-/
      It was just an example I'm still on 3.41 been without psn for several months until I got my second ps3 few weeks ago.

    94. duskpoet
      02-12-2011
      04:31 PM
      94

      U know, sometimes i get the feeling, that Sony is church, hackers are herethics, and people in forums are believers, who tell hackers to repent)

    95. denero1
      02-12-2011
      04:37 PM
      95

      goodness i hate that the trolls from n4g have signed up here -_- no peace i guess anyway i will wait -_-

    96. rainrix
      02-12-2011
      05:16 PM
      96

    97. ryukster
      02-12-2011
      06:25 PM
      97

      So here's what I've managed to do so far, to no avail:

      1.got dnsmasq, don't know how to install, or weather i need a virtual machine and a Linux Distro

      2.Created my own ca.key, both public and private, don't know how to sign anything with it, or wether in belongs in /dev_flash/data/cert

      3.I don't know how to make an ssl certificate

      4.I don't know how to setup Charles

      5.Where do i get charles-proxy-ssl-proxying-certificate.crt??

      Im Doin the AbestOS, so all I need to do is the replace cert part, how to setup dnsmasq, argo, what other files do i need, and how to setup charles

      Pls Do this for NOOB

    98. IronHacker
      02-12-2011
      08:32 PM
      99

      Dnsmasq seems to be only for Linux and Mac.

      It figures X_X

      Its just a matter of time until someone makes a tool or something that can let us spoof the cert. Just loaded all my PS3 backups onto a new 2TB drive and purchaced a new 57 inch 1080p HD TV to game on.

      All this and the frickin solution is not for windows users.

      * To: Sony Computer Entertainment*

      Please give up your fight. Its futile and you will not win in the end. The only thing you will accomplish by behaving this way is to piss off ALL of your customer base. Hackers and Non-Hackers alike are sick of these constant updates, changes, removal of features, etc..

      Work WITH the hacking community and make money instead of making enemies.

    99. nekuz
      02-12-2011
      08:56 PM
      100

      u know what i think that all these methods to bypass the restrictions will get us the ban hammer soon i doubt sony will come suing us but yes they will def ban us and thats a price im willing to pay to jailbreak my ps3

    100. lucifer613
      02-12-2011
      11:55 PM
      101

      Originally Posted by hax3ps View Post
      hackers are people you cannot trust. don't be surprised if confidential data end up being leaked
      you should use anti virut as: kaspersky, or AVG

    101. teach me
      02-13-2011
      12:13 AM
      102

      is there any way ya can make a tutorial for us noobs... Please with video... keep up the gr8 work

    102. dodo815
      02-13-2011
      12:25 AM
      103

      they will make cfw with it soon

    103. carldenning
      02-13-2011
      12:43 AM
      104

      u think thy make cfw with it lol i dont think so , all that hassle making cfw for when its just to add a simple file to the ps3 via flash . u still got do all the rest of the stuff on the pc . i suposse they gunna set ya pc up 4 u too , lol keep dreaming lol

    104. o0kilabot0o
      02-13-2011
      12:47 AM
      105

      found this on ps3crunch.com


      1.Set up dnsmasq to resolve your regions update server (fuk01.ps3.update.playstation.net in my case) and auth.np.ac.playstation.net to your computer. I just added them to my /etc/hosts and left the rest of the dnsmasq settings at default.
      2.In Charles, set up reverse proxies for these two addresses on port 80 and 443 respectively. Also add auth.np.ac.playstation.net to the list of Locations in the SSL tab of Proxy Settings so you can actually see the data youll be changing.
      3.In Charles, under Tools > Map Local, map the /update/ps3/list/uk/ps3-updatelist.txt on your regions server to a local copy, for example the one attached to this post.
      4.Using the AsbestOS Installer on your PS3, enable R/W access to /dev/flash.
      5.Rename charles-proxy-ssl-proxying-certificate.crt to xx.cer (where xx is a certificate that already exists) then use your preferred method to replace the one in your flash.
      6.Set your PS3 DNS to the one you set up.
      7.In Charles, set a Breakpoint on all https:// POST Requests.
      8.Attempt to connect to PSN.
      9.When you see the request in Charles, edit any instance of 3.55 you see in the headers to 3.56 then click Execute.
      10.If it didnt work try again, eventually you should sign in. It only took me a couple of tries.


      just wanna share it with you guys

    105. carldenning
      02-13-2011
      01:17 AM
      106

      @ o0kilabot0o next time u post somethink why not read the bloddy thread then u relised its already been posted ages ago , i

    106. Blakka
      02-13-2011
      01:17 AM
      107
    107. carldenning
      02-13-2011
      01:23 AM
      108

      Originally Posted by Blakka View Post
      TuT by Tsukasa035:

      http://www.boerse.bz/out/?url=http:/...9-post631.html
      good find m8 . now that will help a lot of ppl who havent got a clue what to do

    108. o0kilabot0o
      02-13-2011
      01:27 AM
      110

      warning

      Warning

      No flaming





      @blakka thanks for your link, its detailed, ill give it a shot.

    109. carldenning
      02-13-2011
      01:35 AM
      111

      warning

      Warning

      No flaming



    110. o0kilabot0o
      02-13-2011
      02:05 AM
      112

      warning

      Warning

      No flaming



    111. carldenning
      02-13-2011
      02:20 AM
      113

      warning

      Warning

      No flaming



    112. djhazardous
      02-13-2011
      10:54 AM
      114

      I hope someone makes a tool for Windows which simplifies the entire process and has the features of Charles/dnsmasque all in one.

    113. J4U1M3
      02-13-2011
      01:26 PM
      115

      so could you use this to downgrade by making it think ur on 3.41 or something then updating to 3.55 CFW??