Welcome to PS3Hax, your official PS3 hacks, PS3 Homebrew, and PS3 Downloads scene. Check back daily to keep up with the latest PS3 Hacks and drop by our forums for more PS3 Hacks discussions.
  • Posted by PS3Hax Member News , on 13/05/2012 , @ 06:43am

     

    PS3 developer  an0nym0us  has released a tool called memdump. You can dump lv1, lv2, NAND/NOR Flash, and eEID from GameOS with one app now.

    Readme

    +===========================+
    | |
    | memdump v0.01 |
    | |
    +===========================+

    For all of you out there intereseted in, or already in the process of reverse engineering the
    PS3, this new tool will make your life a whole lot easier! Now you can dump LV1, LV2, NAND/NOR
    Flash and eEID from one tool! There have been methods in the past that accomplished the same
    goals, but certainly the ease of use and speed hindered many. Of course, none had such a
    beautiful user-interface either.

    Usage:
    ——
    Place the necessary pkg file in the root of an empty USB flash dongle, and install like any
    other pkg.

    1. Place pkg on USB flash dongle.
    2. Select “memdump” icon.
    3. Select type of dump to perform once loaded.

    The following buttons are mapped in the user interface:

    △ Dump LV1 memory
    ◯ Dump LV2 memory
    ✕ Dump FLASH storage
    ☐ Dump eEID storage

    SELECT cycle menus
    UP cycle menus
    DOWN cycle menus
    LEFT cycle menus
    RIGHT cycle menus

    START exit

    Requirements:
    ————-

    CEX or DEX PS3 fat or slim
    MFW 2.70 – 3.55 (with LV2 peek/poke and LV1 hvcall 114 patches)
    USB Flash drive (if no Flash drive is available, dumps will be stored in /dev_hdd0/tmp)

    Testing:
    ——–

    memdump is known to work on CEX or DEX PS3s running firmware versions above 2.70,
    with or without OtherOS++ patches.

    Bug Reports:
    ————

    To submit a report of a bug, please join #memdump on EFNet, and have the log file ready.
    You can find the log file where the files were dumped.

    Files:
    ——

    readme.txt
    memdump.self 5189ca393df77e06794f948c2921814267d54e02
    memdump.gnpdrm.pkg a28a23b7de3380c6917e12352de24cde93cdb817
    memdump.npdrm.pkg 520ec81f89b146926149ef33f2faab2946e2c020

    Download memdump v0.01

    Source PS3DevWiki

    UPDATE

    Form more information and what consoles this software works on, check this link:
    PS3 Dev Wiki

    UPDATE 2

    I created this video, showing the application in action and how extremely easy it is to use:

    All music in the video belongs to PS3HaX member DEFAULTDNB


  • Posted by PS3Hax Member News , on 06/05/2012 , @ 02:12pm

     

    Software developer KDSBest has just recently released, his SPU x86 Emulation tool, here is a quote from the source:

    Hi Community,

    I wanted to contribute to the scene , so I coded a tool that might help the community our members and fellow dev’s.
    This Tool is intended for dev’s so please be careful if you don’t know what you do.
    I will not be held responsible for any harm
    My tool is a emulator for PS3 modules (e.g metldr), it is in pre alpha stage but I thought, it would be great to get some community feedback.
    How to use:
    Not all SPU Commands are implemented yet, but it is easily extendable and I will make it support DMA, all SPU Commands and SPU Mailbox soon.

    First open a .kds file. Check out the metldr.kds to see an example. The rest is like a normal debugger.
    If you put dumps of your reversed functions in the KnownFunctions folder, it will detect it and mark that function for you.

    Just for example Mark the whole cellSpuAesDecryptCbcCfb128 function in HexView in IDA -> Right Click -> Save to File
    Name the File “cellSpuAesDecryptCbcCfb128″ without extension and copy it to the KnownFunctions Directory of the Emulator. Now all similar functions get automatic detected!

    “Step” Executes next command, “Run” runs till breakpoint (Breakpoints are not implemented yet).
    Debug SPU Code in Windows.

     

    Any questions?
    Just get back to me at twitter

    Stay tuned

    KDSBest
    https://twitter.com/#!/KDSBest

    PS: Thx for MK and cfwprophet (Team acid)
    and of course to fail0verflow for anergistic, which helps alot with it and even uses some functions of them.

    Download

    Source PSX Scene

  • Posted by PS3Hax Member News , on 02/05/2012 , @ 05:57am

     

    Updated it to 1.1B. Enjoy

    CHANGES

    • Added Dev_flash and Dev_flash3 dumper
    • Removed conf editor
    • Removed space wasting buttons
    • Added other tools section
    • cleaner GUI
    • No extra tab screen
    • faster
    • less memory by about 4mb

    BUG FIXES

    • No more random cmd box popping up.
    • Fixed memory issue
    • Fixed permissions glitch

    FEATURES:

    • Can unpack any PS3 firmwares dev_flash.
    • Can unpack any “PS3″ Firmware up to date. Gets really fast after first or second use.
    • a console is built into the program showing you the exact log a cmd would.
    • Can Decrypt PS3/PSP retail PKG files (Signed by sony installable via OFW).
    • Can readself of, Appldr, lv0, lv1ldr, lv2ldr, isoldr, EBOOT.BIN or if any of the things that you want to read are not listed on a button you can run a custom command to do it, for example: aim_spu_module.self just type that in where it says input and it will read it. So any file that is possible to use via readself, can be done in a fast manor 1-2 sec.
    • A awesome Core_os_package tool that can decrypt, extract and encrypt the Core_os_package.pkg all in about 1-2 sec.
    • Sign pkg for 3.55 or 3.41
    • UnSELF a file.
    • Build SELF a file.
    • Whenever a tar file is modified, it’s permissions need to be set, this tool can do that for you. fix the tar file for the following FW. retail fw up to 3.72, debug fw up to 3.72 and retail and debug fw 4.0.

    HOW TO USE:

    Lets use a example: If you want to unpack a ps3 update just get the PS3UPDAT.PUP
    (Don’t change the name of any file in ps3 FW keep original) and put in tool folder, run
    my program click unpack and it will unpack it.

    so like if you want to fix tar make sure the update_files.tar stays the same name and put in the main folder where program is located. same for anyfile keep the original name. So it’s pretty simpe just drag the file that you want the tool to do something with and keep the original name.

    Here is a video I made (I am pretty bad a videos) to help it’ a tutorial that covers everything. If some one else could make a better one that would be awesome.
    THIS VIDEO IS FOR THE BETA VERSION. STILL HELPFULL


    NOTES:

    PS3Tools GUI Edition will create two new files for the Core_os_package. “decrypted_core_os” and “CORE_OS_PACKAGE_ENCRYPTED.pkg” don’t change the name of the decrypted one or else you won’t be able to encrypt it

    Download

  • Posted by PS3Hax Member News , on 27/04/2012 , @ 05:26am

     

    Yesterday a Dutch site posted information on Blu Ray Drive emulation, stating that the PCB has been cracked, here is badly translated quote from the source:

    No hacking, no flashing, no modding .

    Emulation is the future. A team is currently working on a new hack for the Playstation3.

    The blueray player, Sony’s PCB has been cracked and costs can thus be gekloont. The team probably Wasabi or Wiikey team is currently working on this for the board to connect to an external HDD. This can be downloaded games played as Wasabi360 and Xkey for the Xbox360.

    A major retailer in China has also indicated that this year is released.

    Source

  • Posted by GregoryRasputin , on 08/02/2012 , @ 08:26am

     

    PS3 Dev KaKaRoTo tweeted a link this morning and when i clicked on it, i was greeted with a page containing images of a dismantled PS3 control pad, they were the beginnings of quite an interesting control pad modification, what is just as interesting is they thread is on the Official PS3 Forums.

    Doppelgangergang a member of Sony’s official PS forum, was fed up with loosing his Bluetooth ear piece and annoyed at the terrible battery life it had, so he decided to mod the BT headset into his control pad, here is a quote from the source:

    I’m a rather heavy Online Player on PSN, and it’s not the same without voice chat, being unable to tell what you see or need to tell to make your team mates do something.

    The problem is, my state-of-the-fart $8 Bluetooth Headset, while having decent audio quality, is too small, easily gets lost and the batteries are so bad that it can cut out at any given time.

    One day on the boring night of July 3, I was cleaning my DualShock because the right analog was sticking and I noticed that there is a small space you can use to cram in a small item.

    For full story, visit:
    Source

    Here is an image from
    There I Fixed It

    Thanks to KaKaRoTo for originally tweeting about it and thanks to CrashSerious for reminding me about it :)

  • Posted by PS3Hax Member News , on 08/02/2012 , @ 07:24am

     

    I release new version of my bypasser named a ‘YAB’

    Yet Another Bypass 1.3

    How to use:
    1. Start bat file YABStart
    2. Set up on PS3/Proxy Seetings IP: of your computer
    3. Set up on PS3/Proxy Seetings Port: 27 u can change them on config folder (port.txt)
    4. Connect to PSN

    Succesfully bypassed 4.10 on 4.00

    NOTE:
    -No It no gain you PSN on CFW.
    -No You can’t connect to PSN on firmware below 4.00.

    You can download all stuff from PSStore without error.
    Enjoy.

    Download: http://www.mediafire.com/?ybu4cn73cdbs2tc

  • Posted by PS3Hax Member News , on 21/12/2011 , @ 08:30pm

     

    It seems some talented dev behind the DS scene is interested on the ps3 and has been hard at work by dumping the dev_flash of the 4.0 firmware… thats right guys you heard it right UpSilon managed to dump the dev_flash contents for other to have a look, here is a rough translation of what he had to say:

    Here is a dump of the version 4.00 dev_flash
    I dump my earlier leaked firmware 3.73 (Available for download in the ” Download “), but my site was still under construction and I lost a lot of time to update due to the time I devote to my studies (Terminal LAC) and I did not have much time was devoted to the scene. During the holidays I am responsible, but I will try to give as much information as possible waiting for a response from Kakaroto.
    I shared these dumps for the attention of developers to program an emulator we dev_flash. For those who want to test dumps on 3.41JB with “FIRM JaiCrab Load” because you can try on my side, I used “CFWLoad 1.0″ in 3.41JB (PL3).
    Emulation looked heavy, I do could not leave the program because after a few seconds the console would have been totally blocked. I thought at first the problem was my jailbreak. However, this was not the case, because after I tried with a 3.41 dump (edit) and loading it well. I finally concluded that the emulator should help the dev_flash home to work, for this reason that when you make a NAND emulated with SHIFT it resets everything to ultimately make a regular MAJ that will change the real dev_flash your console. Attention, the emulator does not emulate completely dev_flash stored in your USB drive. (Internal HDD etc …).
    If developers are interested in these dumps, I hope they will do something. I for my part I work on the Factory / Service Mode firmware higher than 3.56 and the Nintendo 3DS.

    Source

    Download 4.0

    Also a dump of 3.73 for those interested
    Download 3.73

  • Posted by PS3Hax Member News , on 10/12/2011 , @ 11:23am

     

    naehrwert has updated his scetool, adding 32 bit ELF “unselfing.

    Source naehrwert’s Twitter

    Download

  • Posted by PS3Hax Member News , on 07/11/2011 , @ 05:12pm

     

    PS3Hax member bubba has brought us the first Jailbreak 2 (aka TrueBlue) dongle review! TB information started to pour on our forums a few weeks ago as a dongle being able to play FW 3.6+ plus on CFW 3.55.

    To quote:

    Here is the JailBreak 2 (True Blue)
    Yes!! It works for all the games they sent me .. I do Have Five games.. I will try to make a video of them.. Today
    1. I install the OFW 3.55
    2. I install the CFW from JB 2
    3. I install the Dongle Updater.pkg file
    4. Then I went to the Dongle updater App.. then it install 2.1 ver on the Dongle.
    5. Put game in and Run the game..

    When you Install the JB2 firmware you are good to go.
    You can change back to your own CFW Also.
    I Think its good for the Money bc you can play Newer Games is a Plus..
    It took the Dongle’s to come here around 4 days..
    I just Try to Run Call of Duty The new one from HDD.. Did Not Work ..
    No Games work from the HDD yet.. I am talking to the person now to give me the Update JB2
    The Dongle is Heavy!!!
    Sniper Ghost Warrior Works on Disc..
    Driver Works on Disc.
    Fifa 12 Works on Disc.

    We are Trying to Dump the Dongle Also!!!! More to Come on That!!

    Video:

    More pictures:

    Bubba is answering various questions on the forums, so to ask him one or get more information, hit discuss in forums link below for more information!

    Stay tuned for more exciting news only @ PS3Hax :)

  • Posted by PS3Hax Member News , on 14/10/2011 , @ 10:24am

     

    Version 4 final of PS Multi Tools  is finally released!

    Full Changelogs:
    - Version 4 final now running again on Mac OS X with CrossOver and .Net Framework 2
    - Fullscreen Mode
    - Style Changes
    - Loads wallpaper(PIC0/PIC1) and icon(ICON0/ICON1) from gamesfolder
    - Again for Windows XP, Vista (Mac OS X on full release)
    - Fixed old imageloading bugs
    - Official Firmware 3.72 added
    - Some Emulators updated
    - OpenPS3FTP updated
    - Added Login for Developers (More informations later)
    - Advanced Multitasking
    - Reporter updated
    - PKG Sign Tool removed for normal users
    - Official Firmware 3.41, 3.55 & 3.6X removed for normal users
    - MD5 Hashes removed completely (temporary?)
    - Removed other servers
    - Fixed: Requesting a developer account should now work
    - Fixed: Downloading older firmwares with a developer account should now work
    - Added Tool: You can now convert DOS Games into a PS3 Game (thx do d0zs)!
    - Style: All PS3 Forms are now in PS(Photoshop) Design
    - Added latest Backup Managers

    For my birthday I will give you 1 day access to all tools and downloads of PS Multi Tools until 15th october.

    Login with:
    User: DEVACC
    Password: hpbdaysvengdk

    Download:
    V4 for Windows 7, Vista, XP and Mac OS X with Crossover

  • Posted by PS3Hax Member News , on 11/10/2011 , @ 07:40pm

     

    A guy by the name [Hazer] has released his method that makes the ps3 controller fully remapable.

    [Hazer] managed to take a PlayStation 3 SixAxis controller and modify it so that all of the buttons can be remapped in hardware. Aside from this being really cool, he had a good reason for doing it. Regular readers should remember the feature regarding [Chuck Bittner's] internet petition calling for button mapping as a feature in all games. As the industry still hasn’t taken up the torch in this area, [Hazer] developed this mod for [Chuck] to use and has released it for any others out there who wish to give it a try.

    The hardware alterations are pretty hardcore. On the left of the image, just below the rumble motor, a DIP microcontroller is nestled dead-bug style. This is a PIC 18F14K50. It’s running a bootloader, and has its own USB port on the opposite side of the controller. By cutting traces and soldering to vias, this chip intercepts button presses and shoots them off to the controller’s processor based on alternative mapping stored in EEPROM. There’s a helper app that lets you plug the controller into a computer to specify what each button does, including features like toggle for the buttons. Check out [Chuck's] thoughts on the hardware in the video after the break.


    [Download Schematics + PC Tools]
    [VIA AcidMods via HackADay]

  • Posted by PS3Hax Member News , on 14/09/2011 , @ 07:02am

     

    Remember this? Condorstrike has updated his awesome screensaver with added support for FTP and MP3 Playback.

    Well guys, by popular demand here’s Solar v2.0.

    This is a multiMAN edition and stand-alone. The app would need to be spawned by multiMAN, so it’s up to Dean. But the stand-alone will spawn multiMAN. FTP works really well, and it’s very fast, but sadly only one session…lol, so use it wisely. I will fix in the future. Will add more stuff in future releases, but 1st I have to fix my setup…lol which caused my delay.
    Hope you guys enjoy it, CAW!

    Usage:

    SELECT pauses the music.

    START resumes it.

    X starts the FTP.

    And all the other buttons will launch multiMAN

    Changelog:

    - FTP

    - Particles effects.

    - Light effects

    - Added Text

    - Major memory fixes

    - Some resolutions and cosmetic changes

    - Fixed Sound loop bug

    Here’s what we can except in the future:

    - Fix some minor bugs.

    - More screens.

    - More Dynamic effects.

    - More MP3 stuff

    EDIT:
    Version 2.0.1 released, which fixes some graphical bugs.

    Download

    Scroll to the bottom of the post to download, was asked not to mirror

    Source

  • Posted by GregoryRasputin , on 12/09/2011 , @ 09:54am

     

    For those of you that have Progskeet, AnGeL DiGiTaLAnGeL.iT has released a patchfile.txt needed for proskeet “patcher”, here is a quote from the source:

    |————————————————————————–|
    | ProgSkeet Patcher’s PS3 NOR Downgrade v2 patchfile |
    | by |
    | AnGeL |
    | WwW.DiGiTaLAnGeL.iT |
    |————————————————————————–|
    |========================================================|
    |============================= HOW TO USE IT ================|
    |-Just extract the folder “downgrade v2 ProgSkeet” anywhere on your PC. |
    |-Open WinSkeet40000/LinuxKeet/iSkeet on your computer. |
    |-Create a dump of your 3.70 OFW if you haven’t already done it. |
    |-Call it “OFW370.bin” -IT MUST BE A BYTESWAPPED DUMP!- |
    |-Open the “Patcher” tab and select “OFW370.bin” as the input file. |
    |-Select the progskeet_patch.txt as the patch file. |
    |-Go for it :) Now you have a fully working downgrade.bin to flash ! |
    |============================================================|
    |============================================================|
    |==============================================================|
    |This release is based on the patchset of the downgrade v2 released by |
    |dospiedra, and you should check BYTESWAP while reading NOR and when you |
    |flash your downgrade.bin file back! |
    |===========================================================
    |-uf6667. |
    |-Ago. |
    |-bmx. |
    |-and dospiedra for his work :) Kudos to him for the downgrade patches! |
    |=======================================================

    Source And Download

  • Posted by GregoryRasputin , on 10/09/2011 , @ 11:39am

     

    The awesome glevand has managed to get wlan working on slim PS3′s using using the OtherOs++ function, here is a quote from the source:

    Wlan now working on slim ps3s. http://git.gitbrew.org/repos/?p=ps3/ps3linux/ps3-jupiter.git;a=summary Linux based for now. Freebsd and petitboot with wireless to come next.

    Source Twitter

  • Posted by GregoryRasputin , on 10/09/2011 , @ 06:50am

     

    Now whilst others try and stall the scene, by leaking information and other important stuff that should be kept secret, there are decent people hard at work, trying to keep the scene alive, like the cool guys at Digital Angel, who have released this important application, which works in conjunction with Progskeet, here is a quote from the source:

    Hi Guys!
    Today i would like to introduce you the new step in the Progskeet evolution: the “QT” Flasher…

    The actual public version is a bit “buggy” and difficult to use, and it works well only on Windows XP, as Windows 7 and other OS have compatibility problems with it (some are just crappy things that you can fix with some tricks, while other makes the Flasher crash).
    During the last times, the Flasher developer which constantly works on it to improve the stability and the features, has gave a big push to the Flasher, making the choice of using a powerful and multi-platform framework such as QT!
    QT is a framework which can allow the developer to write a program and make it work the same way on the 3 main platforms : Windows,Linux and Mac OS X without worrying about write tons of lines to make it work on the currently running platform: QT will do the dirty work for you.
    Because of this, @uf6667, helped by two other good coders named Ago and bmx, started to port the original Flasher to QT… and as always we (DiGiTaLAnGeL) and some others have the privilege to beta-test this new and awesome version of the Flasher.
    Let’s start with some hightlights: at the moment, the version we have is the Windows one, which then will be called WinSkeet40000,followed by Linuxkeet (Linux) and iSkeet(MAC OS X).

    The interface is full of new things… and for now we can use these features:

    The “evil” progskeet.log is gone, and the event log is now embedded in the flasher itself, in realtime!
    You can manually read,write and now erase too.
    You can use presets and create new ones, matching your NOR/NAND flash -now there are some presets for the PS3 flashes and XBOX360 NAND-.
    You can change the write method, between buffered write (the default one) or use the “single word” or “double word” mode (you can use it when something goes wrong or your tasks fails).
    Now the flasher is splitted in tabs: “Common”,”NOR”,”NAND” and “Patcher” making it more easier and faster to use.
    The byteswap function is still here, working flawlessly on both writing and reading.
    You can use the “patcher” tab:useful to apply patch to your dump on the fly.
    There is an option to change to refresh-cycle of the flash (for slower/faster flashes).
    Progskeet Flasher is being translated! For now there are english,french and german languages :) -italian and all the others are coming-
    The “verify” task is now done at the end of the read->erase->write process.


    Source And Download

  • Posted by PS3Hax Member News , on 08/09/2011 , @ 08:36am

     

    Well with the stupid drama over the past few weeks, several hidden developer tools have been leaked, many of you probably think these release’s are great, when in fact they aren’t, they are useless to the normal user, so that brings me to the most recent leak, the tools to turn your CEX PS3 into a DEX machine, a small quote from the readme/tutorial:

    **WARNING** IF THIS TUTOTIAL ISN’T FOLLOWED TO THE LETTER YOU MAY BRICK, THE AUTHOR (THAT WOULD BE ME) DENIES ALL KINDS OF RESPONSABILITY SHOULD YOUR PS3 GET DAMAGED IN ANY WAYS. YOU KNOW THE RISKS **WARNING**

    Requirements:

    1. A playstation 3 on firmware 3.55 or below
    2. A dongle to go to Service mode
    3. A usb pendrive
    4. A brain
    5. The author of this little trick.
    6. Have your pc connected directly to the ps3 on ethernet with the ip set to 192.168.0.100 and the hostmask to 255.255.255.0 (make sure no firewall is running, not even windows one, this may prevent your console from connecting to the pc

    Source of story:
    PS3Crunch

    As these files are illegal, we will not be linking them.

  • Posted by PS3Hax Member News , on 29/08/2011 , @ 03:35pm

     

    Here is my tutorial on how to install an IR adapter and optional extra USB port in your PS3 and a couple of tips on setting up a Harmony remote.

    Items you need:
    AUVIO™ Universal Remote Receiver for Playstation®3 (Costs $3 on Radio Shack website)
    USB Hub
    Dremel (Optional)
    Female USB Connector (Optional)
    Soldering Iron
    Some Solder
    Flux (Optional but preferred)
    Some Wire
    Hot Glue Gun
    Drill (I used a 5/32″ drill bit)
    Universal Remote (Preferably a Harmony)

    Lets get started. Obviously first you will need to disassemble your Playstation all the way down to being able to take off the metal shielding on the bottom of the motherboard, there are plenty of tutorials on how to do this (Fat, Slim) so I will not get into that. Here is what you need to look for once you have the motherboards bottom shielding off.


    Start by applying some flux to the USB pins and then soldering the wires to it like so.


    The wires should be hot glued down and curved over like so, then you can replace the metal shielding on the motherboard and slip it back into place.


    Now you will need to take apart your USB hub and remove the male connector and solder the wires from the USB port to it.


    Next remove the female USB connectors and prepare the wires for the IR adapter and the extra female USB if you choose to do it.


    Next solder up the IR adapter and sensor.


    Now you can drill the hole for the sensor. I put mine in between the wifi antennas.


    Now it is time to slip the hub, IR adapter, and IR sensor into place. I put the hub next to the hard drive, the IR adapter partially under the fan, and hot glued the IR sensor in the hole. I also applied hot glue to every open contact on the bottom of the IR adapter because it is going to be resting on metal. Don’t want to cause any shorts.


    Now if you choose to do the extra USB connector you can put it next to the fan. Use a dremel to cut the hole. I used a crap load of hot glue to secure it in place.


    Now it is time to set everything and tidy up the wires. I also put hot glue on the open contacts on the bottom of the hub as well to keep the metal on metal contact from happening.


    When it comes time to put the lid back on, 2 posts are going to have to be cut off.


    When screwing the lid back on remember the posts you cut off and not to shove the screws into those holes.


    That’s it.

    Now when you are setting up your Harmony remote (mine is a 688) for it you will want to choose “DVD”, manufacturer “Sony”, and the model number “BDP-S350″. You are going to need to customize the buttons if you want the “OK” and “Stop” buttons to work. All you have to do is make the command for the Stop button “Select” and the command for the OK button “Stop”. Update your remote and you are all set. It even works in Multiman.

  • Posted by GregoryRasputin , on 25/08/2011 , @ 11:29am

     

    Those of you who entered, will know of the competition we had recently, here is the winner :)

    alternativejohnsmith could you PM Killerbug with your details, thank you.

    And thanks to everyone who entered the competition, we will have a new one, quite soon :)
    Audio in video by Citizen Default

    If you haven’t won one of these awesome devices, you can always get one from  here