Welcome to PS3Hax, your official PS3 hacks, PS3 Homebrew, and PS3 Downloads scene. Check back daily to keep up with the latest PS3 Hacks and drop by our forums for more PS3 Hacks discussions.
  • Posted by GregoryRasputin , on 20/08/2013 , @ 01:43pm


    I was sitting on holiday a couple of weeks ago, thinking about the day PS Jailbreak was revealed, i knew that its birthday was coming up and thought id write an article about it, but when the time came, it totally slipped my mind, until today.

    Anyhow, three years ago on the 18th of August 2010 news broke on PSX Scene that a device was about to be released that would let us play backups on our PS3′s, here is the very first video of said device:

    To read the original article, check this thread:
    PS Jailbreak

    PS Jailbreak was released at an extremely high price, but was soon reversed, leading to PSGroove and PSFreedom, open source alternatives.

    As most of you know, i dislike dongles, but if it hadn’t of been for PS Jailbreak, the machine still might not be hacked, so thank you Sony for giving people the inspiration to release a hacking device for the PS3.

  • Posted by GregoryRasputin , on 20/04/2012 , @ 05:18am


    For a few days, the PS3 Dev Wiki was down due to hosting problems and a lot of information seemed to be lost, but thanks to the hard work of the Wiki’s admin defyboy and a backup from a member called TMAnd, only a couple of days work was lost, you can read about it on this thread.

    So thank you defyboy and TMAnd for rescuing all those precious edits :)

    I would like to point out, that the PS3 Dev Wiki is a community effort, without the work and dedication of a lot of developers and PS3 enthusiasts, the wiki would be quite empty, so if you are doing work on the PS3, keep it documented on the Wiki :)

    You can visit the Wiki here:
    PS3 Dev Wiki

    I would like to give thanks to euss, deroad, defyboy, Lady Anne Blunt, sandungas and the many other editors who keep the Wiki alive.

  • Posted by GregoryRasputin , on 02/01/2011 , @ 07:20pm


    I have read quite a few histories on game consoles, they all have been greatly written by great authors, but they all seemed incomplete, they didn’t portray the full history, the full essence of the machine, so as i am involved in the PS3 scene and know quite a bit about it, i thought i would write a complete history, containing the good, the bad and the ugly and believe me the PS3 has quite an exciting history and future, i wanted to write a history that will be enjoyed by everyone, one where people like myself wouldn’t finish the story, thinking there is something missing, i would also like to mention, that this work is my creation, i have written it in my own words, most of it from memory, sourced from various places over the internet, but mostly from ps3hax.net, so without any more interruption, here is the history of the PS3:


    16th of May 2005
    The world was awoken, to the news of a brand new console, this wouldn’t be a console, but a super computer, it would have everything that you needed for your gaming/media/computing needs, for ten years at least, the original console which was showcased, was silver in colour and had what appeared to be a brand new control pad design, it resembled a boomerang, it had three 10/100/1000 Ethernet ports, two HDMI ports and six USB ports, though unfortunately that wouldn’t be the final design, here are the specs revealed at Sony’s E3 presentation 2005:

    Product Name: PlayStation 3


    CPU: Cell Processor

    PowerPC-base Core @3.2GHz
    1 VMX vector unit per core
    512KB L2 cache
    7 x SPE @3.2GHz
    7 x 128b 128 SIMD GPRs
    7 x 256KB SRAM for SPE
    * 1 of 8 SPEs reserved for redundancy
    Total floating point performance: 218 GFLOPS

    GPU: RSX @550MHz

    1.8 TFLOPS floating point performance
    Full HD (up to 1080p) x 2 channels
    Multi-way programmable parallel floating point shader pipelines


    Dolby 5.1ch, DTS, LPCM, etc. (Cell-based processing)


    256MB XDR Main RAM @3.2GHz
    256MB GDDR3 VRAM @700MHz

    System Bandwidth:

    Main RAM — 25.6GB/s
    VRAM — 22.4GB/s
    RSX — 20GB/s (write) + 15GB/s (read)
    SB — 2.5GB/s (write) + 2.5GB/s (read)

    System Floating Point Performance:

    2 TFLOPS


    Detachable 2.5″ HDD slot x 1


    USB Front x 4, Rear x 2 (USB2.0)
    Memory Stick standard/Duo, PRO x 1
    SD standard/mini x 1
    CompactFlash (Type I, II) x 1


    Ethernet (10BASE-T, 100BASE-TX, 1000BASE-T) x 3 (input x 1 + output x 2)
    Wi-Fi IEEE 802.11 b/g
    Bluetooth 2.0 (EDR)


    Bluetooth (up to 7)
    USB 2.0 (wired)
    Wi-Fi (PSP)
    Network (over IP)

    AV Output

    Screen size: 480i, 480p, 720p, 1080i, 1080p
    HDMI: HDMI out x 2
    Analog: AV MULTI OUT x 1
    Digital audio: DIGITAL OUT (OPTICAL) x 1

    Disc Media:

    CD PlayStation CD-ROM, PlayStation 2 CD-ROM, CD-DA, CD-DA (ROM), CD-R, CD-RW, SACD, SACD Hybrid (CD layer), SACD HD, DualDisc, DualDisc (audio side), DualDisc (DVD side)
    DVD: PlayStation 2 DVD-ROM, PlayStation 3 DVD-ROM, DVD-Video, DVD-ROM, DVD-R, DVD-RW, DVD+R, DVD+RW
    Blu-ray Disc: PlayStation 3 BD-ROM, BD-Video, BD-ROM, BD-R, BD-RE

    Below, is 2005′s E3 PS3 Presentation, it is split into 14 minute segments for easier viewing:

    8th Of June 2005
    Gotou Shigehiro of Japan’s PC Watch, interviews Sony Computer Entertainment CEO Ken Kutaragi regarding the PS3, i screen capped the below images from the Beyond3D forums, clicking on the images, will enlarge them, making them more readable:

    Original Interview.
    Beyond3D Forum - Translated Version Of Interview.



  • Posted by GregoryRasputin , on 29/12/2010 , @ 09:29am


    Well the PS3 is hacked, what else do we need, well we will find out in about forty minutes, marcan, famous for AsbestOS and hacking Kinect, along with bushing, sven and segher will be holding an hour long conference at the CCC(Chaos Communication Congress), on the circumventing process of the PS3, marcan also promises to reveal information on new hacks, could this be the accidentally leaked recovery mode for PS3, we will all find out quite soon, so check these links for live video or audio streaming:






    grandy over at PSGroove will also be hosting it here

    Official CCC Website

  • Posted by Pirate , on 02/12/2010 , @ 04:31pm


    A few days we reported to you about Graf_Chokolo working on SELF/SPRX decryption, today he has just released his PSGroove port which allows you to decrypt a SELF files and send the data VIA ethernet to your PC!

    To quote:

    Guys, i promised to you to make my SELF decrypter public. I just uploaded it :-) Let me first explain how it works.

    I used only HV calls in my code because i wanted to learn how to decrypt SELFs without GameOS. The decryption and decompression of SELFs is done by isolated module appldr which is prepared and loaded by lv1_undocumented_function_99. After appldr is loaded it sends a message and waits for your instructions to decrypt some encrypted segments. When the message arrives i pass encrypted segment data to appldr through shared memory and it decrypts the passed data. When the decryption is done the payload sends the decrypted data over network to my PC and i capture it with tcpdump :-)

    I’m using IDA to analyze the decrypted code. First i extract the decrypted segments from pcap dump and load them at right addresses into IDA. I created a shell script to make segment extraction from pcap dumps easier. Virtual addresses of decrypted segments you will find in ELF header.

    The target group of this release are again advanced programers among you. The goal of this release is not to give you a tool for SELF decryption but to show you how it can be done :-) So, feel free to ask me any questions about my code. I will support everyone who wants to port my code and create more user-friendly GameOS applications for SELF decryption because i do not intend to write any GameOS tools :-) I’m more interested in HV reversing :-)

    My SELF decrypter is not able to decrypt games and NPDRMs yet but i’m working on it :-) I think you will have enough SELFs now to reverse :-)

    I will document my findings about SELF decryption on my HV page in the next days.

    Download the payload @ his Github page HERE.

  • Posted by PS3Hax Member News , on 02/12/2010 , @ 10:30am


    Jailbreak PS3 using the HTC Desire HD (aka HTC Ace / HTC Spade). The phone needs to be rooted first.

    Power off, then power on the device with ‘volume down‘ pressed and selecting the ‘recovery‘ option, by using ‘adb recovery’, by installing ‘Quick Boot’ from the Market or by installing ‘ROM Manager’ from the Market.
    Navigation in the recovery image as follows:

    • Volume Up / Down to move between options
    • Power key to select an option
    • Select ‘go back’ option to go back

    Step by step install instructions:

    • Download r2 ClockworkMod Recovery for Desire HD - DOWNLOAD (ROMraid Load Balancing) - MD5: f84a93a5ae2fb86ee409fa2609a2c1c8
    • Download fastboot (included in download link below) if you do not have it already.
    • Turn off your phone and take out the battery. Unplug the phone from the PC / charger.
    • Replace the battery and turn the phone back on with ‘volume down’ held, then select ‘fastboot’ (using the power button).
    • Plug the phone into the PC.
    • Extract the fastboot zip file.
    • From a command prompt (at the directory containing these new files!) run ‘fastboot-windows flash recovery recovery-clockwork-’ (subsituting ‘fastboot-mac’ or ‘sudo fastboot-linux’ as required)
    • When this finishes, from the command prompt run ‘fastboot-windows reboot’ (again substituting ‘fastboot-mac’ or ‘sudo fastboot-linux’ as required)
    • Done!

    [FileFactory]: DOWNLOAD HERE

  • Posted by GregoryRasputin , on 30/11/2010 , @ 04:41pm


    Revised/updated version can be found here. The follow information is excellent for firmware 3.41 jailbreakers.

    It has been about three and a half months, since PS Jailbreak was first announced, you can find the first post here, since then there has been a lot of progress in the scene, from an Open Source version(PSGroove/PSFreedom) of PS Jailbreak being created, to Sony blocking any jailbreak methods with firmware 3.42 and much more, here i will attempt to create a very detailed F.A.Q.

    Q.) What firmwares can i jailbreak my PS3 on.
    A.) 2.76, 3.01, 3.15, 3.21, 3.40 and 3.41

    Q.) Can Firmwares higher than 3.41 be Jailbroken
    A.) No, Sony blocked the method when they released Firmware 3.42 and at this present time, there is no way to Jailbreak beyond 3.41.

    Q.) I accidentally upgraded to 3.42/3.50, can i downgrade to a Jailbreakable Firmware.
    A.) Yes, the scene is full of open source downgraders, the following list of devices are able to do downgrading:

    ATTENTION: A word of warning before downgrading, downgrading disables Blu Ray Movie playback.

    Commtivia z71
    Commtivia Z71
    Dream/Sapphire 32A
    Dream/Sapphire 32B
    HTC Aria
    HTC Desire (CDMA)
    HTC Desire (GSM)
    HTC Desire HD
    HTC Droid Eris
    HTC Droid Incredible
    HTC Evo 4G
    HTC G2
    HTC Hero (CDMA)
    HTC Hero (GSM)
    HTC Wildfire
    Motorola Droid
    Nexus One
    T-Mobile myTouch 4G

    Payloads via klutsh.com

    Arduino Duemilanove
    Arduino Mega
    AVR Key
    Blackcat USB
    iPhone 2G/3G
    Maximus AVR
    Minimus AVR
    Olimex AVR
    PS3Break 1.0,1.1 & 1.2
    Teensy 2.0
    Teensy++ 1.0
    Teensy++ 2.0
    TI-84 Plus
    TI-89 Titanium
    Following Via RockBox
    iPod 1G Mini
    iPod 1G Nano
    iPod 2G Mini
    iPod 4G Greyscale
    iPod 4G Phot
    iPod Video
    iRiver H10
    iRiver H10 5G
    Olympus M:Robe100
    Packard Bell Vibe 500
    Philips GoGear HDD 1630-1830
    Philips GoGear HDD 6330
    Philips GoGear HDD 9200
    Sandisk Sansa c200v1
    Sandisk Sansa e200
    Toshiba - GigabeatS

    Payloads via PSGrade.org

    [Tutorial] Downgrade, Using PS Jailbreak

    Q.) When jailbreak came out, i upgraded to 3.41, loosing Linux, can i have Linux again.
    A.1) As i stated above, there is a downgrade method, so using that, it will be possible to downgrade again to 3.15.
    A.2) If you aren’t interested in downgrading or you have a Slim PS3, marcan, is working on a boot loader, that will enable Linux once again on PS3′s past 3.15, check out AsbestOS

    Q.) I cant afford nor am i willing to pay $99 for the Official Jailbreak, is there any other methods.
    A.) Yes you can, you can buy a clone dongle of PS jailbreak, a Dev Board or mobile devices, such as iPhone or HTC Desire.
    PSGroove Devices:
    Arduino Duemilanove
    Arduino Mega
    AVR Key
    Blackcat USB
    Maximus AVR
    Minimus AVR
    Olimex AVR
    PS3Break 1.1 & 1.2
    Teensy 1.0
    Teensy 2.0
    Teensy++ 1.0
    Teensy++ 2.0
    TI 84+
    TI-84 Plus Silver
    TI-89 Titanium
    Bumble Bee
    NEO Jailbreak
    TI-84 Plus
    TI-84 Plus Silver
    TI-89 Titanium
    E3 Card Reader
    Following Via RockBox
    iPod Mini 1G
    iPod Mini 2G
    iPod Nano 1G
    iPod Photo 4G
    iPod Video 5G
    SanDisk Sansa e200
    See below For Payloads

    PSFreedom Devices:
    Nokia N900
    Nokia N800/Nokia N810
    Palm Pre
    Motorola Droid
    Archos 5 IMT
    HTC Desire(HTC Bravo)
    HTC Desire HD
    Google Nexus One
    HTC Dream (G1)
    HTC Sapphire(HTC Magic 32A)
    HTC Sapphire (HTC Magic 32B)
    HTC Droid Incredible
    HTC Raphael (HTC Touch Pro/HTC Diamond) (Android)
    HTC Rhodium (HTC Touch Pro 2/HTC Diamond 2) (Android)
    HTC HD Blackstone (Android)
    HTC Kovsky (Sony Ericsson XPERIA X1) (Android)
    HTC HD2 (Android)
    HTC Hero
    HTC Droid Eris
    HTC Wildfire
    iPod Touch 1G, iPhone 2G/3G

    See below For Payloads

    Q.) So i have been hearing about payload’s
    A.) KaKaRoTo and Hemes are the two most famous payload creators, these payloads add various functions, for example, the payload that allowed 3.41 users to access PSN, original created by Xoeo, make sure you have the most up to date payload.
    For a vast amount of payloads for your device, check this site:
    Hermes V4
    KaKaRoTo Pl3
    Payloads via PSGrade.org

    Q.) So how do i actually Jailbreak the PS3
    A.) Well each jailbreak device is different, for instance, on the HTC Desire, you put the phone into recovery mode and select the payload, you then plug the phone into the USB cable, which should be plugged into the first USB port on the left of your console, then(this applies to all jailbreak devices) Power of the PS3, with switch at back for Fat and pull the plug out for Slim’s, re-switch/plug on/in, then press power followed by eject, if done correctly, you should be greeted with two new folders in the games list on the XMB

    Q.) Is my console permanently Jailbroken
    A.) No, you need to Jailbreak each time you power on your device.

    Q.) So how do i Backup games
    A.) You need to install a Backup manager, there are quite a few available

    Open Manager
    Gaia Manager
    Rogero Manager
    Th@nkYou Manager

    Flex Manager
    Sexy Manager

    Q.) What are my options for backing up games.
    A.) You can install games on the PS3′s internal HDD or use an External USB HDD, which needs to be formatted to FAT32, you can also use a FAT32 USB Thumb Drive, note that with FAT32 you are limited to games with single files under 4GB, if you prefer all your games to be on the internal HDD, you can get up to 1TB 2.5″ HDD, or you can use the Xecuter PS3 HDXT method and have your internal HDD on the outside of the machine, the benefit of this, is that you can use 3.5″ Sata and IDE HDD’s as internal storage.
    Some more PS3 HDD Information submitted by ieder-zijn-meis(Thanks again)
    - maximum height is 9,5mm (many 2.5″ drives above 640GB are too high too fit inside)
    - maximum PS3 filesystem is 1TB (512KB block size)
    - maximum FAT32 theoretical size is 8TB, practical limit on the PS3 is 2TB
    - 7200rpm can be used, as well as Flashdrives (although the 1/5th lower loadingtime of GTA5 can be considered too low to justify the higher pricetag of SATA Flashdrives.
    - SATAII-300 can be used, although it will work on SATA1-150 speed interface.
    - If using external 3.5″ drives hooked up to the internal SATA, you’ll need an external powersupply (some drivebays include them).
    - If on low budget or you like DIY: use a normal extension (male to female) SATA cable (and make sure it doesn’t get loose) and recycle the case + powersupply of an external USB harddisk (without using the USB connection/conversion).
    - Don’t use RAID or SAN drives with (e)SATA interface, just a plain single drive with a bare SATA connector (many controllers don’t work without drivers/software).
    - Games can be hardcoded for BluRay speeds (9MB/s) so sticking a 85~220MB/s harddrive inside will not speedup everything/allways (but most do).
    - If you plan on exchanging the drive, download the full PUP of your FW you are using and put it on an USB Mass Storage Device formatted with FAT32 in PS3UPDATEPS3UPDAT.PUP and disconnect the LAN before repowering the PS3 (or you’ll bound to end up with the latest (3.55 now) unjailbreakable/undowngradable version).
    - Use a good fitting X screwdriver, the screws fitted to the HD<>tray are made of very soft aluminium.
    View here

    An image of the Xecuter PS3 HDXT.

    Q.) Ok, i have downloaded a Backup Manager, that i want to use, how do i install it.
    A.) You need to put the PKG on the root of a thumb drive and install, by selecting “Install Package Files” on the XMB, in the games section.

    Q.) Ok im fed up with using my thumb drive, is there a way to download apps directly to the PS3.
    A.) Yes, though you will have to install this one last app via thumb drive, it mounts a virtual Thumb Drive on the PS3 MHUFreeStore, here is a video:

    Q.) So i have heard some games will not work, how do i find out, which game does or doesn’t work.
    A.) Well i could list each one here, but i wont, instead visit PSJCL(PS Jailbreak Compatibility List), created by Bash, OnePlayer, Chris, Neowarex, Meeplo and xnt14, it is without a doubt, it is the definitive site for PS3 game Backup compatibility information.

    Q.) Ok so i have backed up a game, i want to save that game to my computer as an extra backup, or i want to mod the game, how do i transfer it from my PS3.
    A.) There are two methods, FTP, there are three of those at the moment:
    PS3 FTP Server
    by CJCP
    blackb0x FTP Server
    by blackb0x
    by stoneMcClane
    Alternativley you can use
    Comgenies Awesome Filemanager

    Simple Filemanager
    if you cant use FTP, or have an External HDD, Comgenies Filemanager is the best choice.

    Q.) So is PS Jailbreak all about Backup’s, or can i run Homebrew too.
    A.) In the past three months, quite a lot of Homebrew has been released, from the very first app, which was the FTP Server created
    by CJCP, to most recently a PS1 Emulator.

    Comgenies Awesome Filemanager
    PS3 FTP Server by CJCP
    blackb0x FTP Server by blackb0x
    PS3FTP by stoneMcClane
    NZHawk’s Awesome MountPoint Manager
    NZHawk’s Awesome Peek Poker
    NZHawk’s QuickDumpR
    Jochen Hippel Tribute Music Disk
    TXT Reader

    Mednafen PS3

    Cubicle Shooter
    Dont Get Crushed
    Maze Generator
    The World Drowns
    Cascade Beneath
    Neo Tanks
    Neo Race
    PS3 DOOM
    Heretic And Hexen

    Q.) I want to be able to create my own Homebrew, is it possible.
    A.) Yes, using the Open Source PS3 SDK, named PSL1GHT, you can create Homebrew, PSL1GHT was created by AerialX

    Q16.) So can i play online or view the PSN store, when my PS3 is Jailbroken
    A.) No, it isn’t possible, Sony has blocked all attempts to access PSN, we had it back for a while thanks to Xoeo, but that was also blocked, who knows, perhaps in the future.

    Q.) So there is no way i can play multiplayer games with my friends(Thanks Spok)
    A.) Yes you can, but not via PSN, you need to use XkaiLink and XBSlink and this will have you playing via LAN.
    [Tutorial] 1
    [Tutorial] 2
    [Tutorial] 3

    Q.) To what lowest firmware can I downgrade?(Thanks ieder-zijn-meis)
    A.) The only safe downgrade with full support of your HW specific variation is to the lowest version available for your SKU when it was released, e.g.:

    PS3 Fat (FW 1.00 or 1.50):
    model, releasedate, FW@releasedate
    CECHA 8/2006-8/2007, FW 1.00/1.90
    CECHB 8/2006-4/2007, FW 1.00/1.70
    CECHC 8/2006-8/2007, FW 1.50/1.90
    CECHE 8/2007, FW 1.90
    CECHG 10/2007, FW 1.94
    CECHH 10/2007, FW 1.94
    CECHJ 8/2008, FW 2.42
    CECHK 8/2008, FW 2.42
    CECHL 8/2008, FW 2.42
    CECHM 8/2008, FW 2.42
    CECHP 10/2008, FW 2.50
    CECHQ 4/2009, FW 2.70

    PS3 Slim (FW 2.7x, 2.85 or 2.90):
    model, releasedate, FW@releasedate
    CECH-20 9/2009, FW 3.0
    CECH-21 3/2010, FW 3.21
    CECH-25 7/2010, FW 3.41

    Check here for more information.

    Q.) People are saying that i can get banned from PSN, if i Jailbreak my PS3, is this true
    A.) At the moment no, there is no actual cases of bans happening because of Jailbreak

    Q.) I decided to downgrade my console using a debug firmware, i got five beeps then it shut down, is it bricked, can i fix it
    A.) When you start messing with different firmwares, you run the risk of bricking your console, forum member gliitch did exactly that
    though he was able to fix it and wrote quite an informative tutorial on how to fix it here

    Q.) Ok so i have gone through the process of jailbreaking and successfully unbricking etc, i want to be braver and attempt more exiting exploits, like writing to the flash, is this possible.
    A.) JaiCraB & ps3mrenigma released an app called Mount Alejandro which enables you to write to flash, you can read more about it here

    Q.) I would like to modify the XMB, make it more custom, is this possible
    A.) TeaM-ACiD1C brought out a modified XMB, you need to use Mount Alejandro if you want to write to the flash, you can find more about it here, it also has the download link

    Q.) I have always hated that annoying boot sound the PS3 makes, when it is turned on, can i change it
    A.) You certainly can, gliitch has written a great tutorial here it will show you how to change the sound and make yourown, or you can simply download the sounds made by gliitch and other members

    People who deserve thanks and respect, for making this great PS3 Scene what it is, without them, it wouldn’t really exist Mathieulh, RichDevX, GeoHot, The PS Jailbreak Team, KaKaRoTo, Hermes, klutsh, Amon-Ra, marcan, ThatOtherPerson, AerialX, Comgenie , NZHawk, CJCP, blackb0x, MohammadAG, The PSJCL Team, gliitch and any other person, who has also created a payload, made homebrew, or contributed to the scene.

    The other guys that deserve a big thank you, are the site admins, that work to keep you up to date with news and bring you those all important exclusives, the most important being:
    Pirate , here @ PS3HaX

    Also i would like to thank you, the readers, without you this F.A.Q would be pointless, thanks to those that have given me tips, to make this F.A.Q better, like Gonesuper, Spok, ieder-zijn-meis and the guys on IRC.

    This F.A.Q is a work in progress, it will be updated and renewed from time to time, if anything is missing, or anything you feel needs added, don’t hesitate to post and let me know, i really hope this helps those of you, just starting out in the PS3 Jailbreaking scene, thanks for reading, your faithful Moderator/News Editor GregoryRasputin :)

  • Posted by PS3Hax Member News , on 27/11/2010 , @ 12:32pm


    KaKaRoTo author of PL3 payloads and PSFreedom ports has been studying a way to capture all the Hypervisor calls, and now he has released his final working payload, so other PS3 Developers can make use of it to study more of the inner-workings of the PS3 system!

    As we reported earlier this week, KaKaRoTo, had successfully dumped LV1 Syscalls, by using an updated PL3 payload. Today, he has kept good on his promise, and has publically released his updated PL3 payload. The new payload can trace all syscalls and hypercalls. What this means to the average user, is an increased knowledge of how the PS3 system works.

    * Released the hypercall tracer payload! Also merged syscall tracer, and a payload that traces hypercalls+syscalls.

    * Adding a payload to trace all sc calls (syscalls and hypercalls). Use carefully, this generates race conditions easily!!

    * Add a payload to trace all read/writes to the vuart by showing the hypercall and the data buffers sent/received

    Authors Blog: http://kakaroto.homelinux.net/

    Authors Twitter: http://twitter.com/KaKaRoToKS

    KaKaRoTo’s PL3 GIT: https://github.com/kakaroto/PL3

  • Posted by GregoryRasputin , on 22/11/2010 , @ 04:29pm


    greg, the admin of ps3-hacks.com, has offered a $500 reward, for anyone who is able release an open source version of PS Downgrade, here is a quote from the source:

    I know many of you out there are just dying to hack your PS3, but unfortunately you’re sitting at firmware 3.42 or 3.50, right? Now if you have a few extra bucks to blow then no biggie — buy the PS Jailbreak device and PS Downgrade software — you’re set. But lets say you’d rather save your money for something cooler, or better yet, you possess mad skills and want to pocket some extra duckets to take your girlfriend somewhere nice, well here’s your chance to shine… Be the first to deliver us (Dashhacks) a working open-source solution of PS Downgrade and we’ll give you $500 USD (via PayPal).

    We have some files that may help get you started:

    1. PS Downgrade Files: contains a modified 3.41 PUP file, Lv2diag.self.1 (used to flash the PUP), Lv2diag.self.2 (takes the console out of factory/service mode after the fact), PS Updater (the software used to flash the PS Jailbreak device), and an FLA file specific to my PS Jailbreak (this file is flashed to PS Jailbreak via PS Updater).
    2. Pendragon and Co. has dumped the USB traffic from PS Downgrade. You can find those data dumps right here. You’ll also need Beagle Data Center software to read/analyze ‘em.

    If anyone else has/knows anything that may be of use in reverse engineering PS Downgrade, please share via the comments. Otherwise, if you’re the one who succeeds, we owe you $500 big ones and you can contact us via [email protected]. Any questions?

    Thanks to D_O_A on IRC for the tip.

  • Posted by PS3Hax Member News , on 22/11/2010 , @ 09:40am


    zAxis, of PSX-Scene has been working diligently on an open source version of psdowngrade known as “PSGRADE”. Today he shares his work with the public however it is not fully functional. As his code still requires the dongle master key which is buried under the PS3 console. The good news however s that zAxis can retrieve the key via 3.15 Firmware

    He is asking the community, anyone with a 3.15 console, to help retrieve this key. Once retrieved, PSGrade should become fully functional. Below, is his request to the public.

    To anyone who wants to help, here is what you have to do:
    1- run the PSGrade I posted (just like jp)
    2- reboot into linux (no power cycling!!)
    3- dump HV (and post it)

    if you dont know how to dump HV in linux, then google it (you will need to open your ps3 and solder it DONT DO IT IF YOU ARE NOT AN EXPERT!!!)

    Good Luck

    once you get the key, post it in key.h and try it.

    Please remember, this is a work in progress, nothing is working yet (so dont ask for hexes), and nothing is for sure.
    Good Luck

    oh, and thanks to graf_chokolo for … everything, Hansi for the dump, and mathieulh for PSGroove (PSGrade is a derivative of PSGroove) and everyone else.
    accorking to graf_chokolo, to get the ps3 to decrypte the master key, then you have to call “Verify Response” and the master key will saved in plain text. it is called when plugin a jig, and that is what PSGrade is.
    once we have the key, we will have a working jig :-)
    And no 3.41 is no good even if you have dump the HV

    Download PSGrade (not yet fully functioning): https://github.com/zAxis/PSGrade


  • Posted by GregoryRasputin , on 18/11/2010 , @ 06:49pm


    Around three days ago, we posted here that Xoeo, responsible for PSN on Jailbroken machines had released his custom payload, the only problem with this payload, is that it only worked with PS3′s on the 3.15 firmware, PSX Scene member evilsperm, along with Cyberskunk have released their own modified version of Xoeo’s payload, for 3.41 machines, here is a quote from his thread:

    This payload is a port of Xoeo custom PL3 for 3.15.
    We have converted it for use with 3.41, major cleaning up of the coding and added/removed some stuff. /the only reason we are releasing this is because we said we would. This is still experimental so don’t complain if something doesn’t work for you.

    What makes this payload different is that it is a hybrid of PL3 and hermes. It is very stable with 0 lock ups, but there is a catch some backups will return a 800xxx error. This payload is very stable but also kind of a backwards step in our goals as it uses syscall36. Either way it is still a very good payload.


    PSN - not working at this time
    3.50 Spoof
    syscall 36 - hermes
    syscall 8 - stealth - peek poke
    modelset - 0×82 - debug
    version - 120gb slim

    *I might have left out a few features I cant recall right now due to lack of sleep*

    I have tested this with Gaia 1.03.1 and I was able to load backups but as I stated above some games will give you a 8000xxxx error and is bing looked into. I have also tested BlackBox FTP, Comagen Filemanager, Snes9x and all run perfectly. If you want to use multiman make sure to set syscall36 in your options.ini.

    Things I haven’t checked (permissions)

    You can all check the git at https://github.com/evilsperm/CE-X-3.41

    Thanx goes out to xeoe for his hard work, as well as the very long hours and sleepless nights of Cyberskunk!
    I need to sleep myself :P

    This hex pack has 20+ boards so I don’t want to see anyone begging for complies check the pack first!
    Also I have included the .bin for those of you who need it.

    Those of you about to ask CE-X? its Cyberskunk evilsperm xeoe
    We needed a way to separate it from the rest of the payloads.

    DOWNLOAD(Contains, HeX, Bin and Source)

  • Posted by PS3Hax Member News , on 17/11/2010 , @ 09:53pm


    Maximus ANYHEX converter is designed for PIC users (e.g PIC18F devices). You can use this PC tool to convert pre-compiled ATMEL .hex files into binary files so that it could be used to flash PIC18F USB devices. (more…)

  • Posted by Pirate , on 17/11/2010 , @ 08:11pm


    A PSX-Scene member known as Graf_Chokolo, who brought you the full hypervisor details (read more about it here), today has released his version of the PSGroove payload that allows developers to finally see full details out of the PS3 system firmware complete with decrypted contents. This is obviously for the more technical and “hardcore” PS3 hackers out there, so if your an average end user, this is not for you. (more…)

  • Posted by PS3Hax Member News , on 15/11/2010 , @ 07:34pm


    Thanks to developer xoeo for releasing the payload with PSN and online play, fl0PPsy for compiling the Rockbox files that supports PSN and 3.50 spoofing, and DJLO for compiling these .hex files for PSN and 3.50 spoofing.

    The SPOOFING feature will trick the PS3 games into thinking that you are running firmware 3.50 on your system.

    -HERMES V4B Payload w/ PSN Online Play & 3.50 Spoofing
    > at90usbkey1287.hex
    > avrkey.hex
    > blackcat.hex
    > maximus v1.hex
    > minimus v1.hex
    > olimex.hex
    > ps2chipper.hex
    > Teensy 1.0.hex
    > Teensy 1.0++.hex
    > Teensy 1.0++.hex
    > Teensy 2.0++.hex
    > xplain.hex
    > OpenKubus_atmega16u4.hex
    > udip_8mhz
    > udip_16mhz

    -Rockbox Files (PL3 Payload w/ PSN Online Play & 3.50 Spoofing)
    > iPod video 5g
    > iPod 4G grey
    > iPod 4G photo
    > iPod mini 1g
    > iPod mini 2g
    > iPod nano 1g
    > gigabeat S
    > gogear hdd 1630-1830
    > gogear hdd 6330
    > gogear hdd 9200
    > iriver h10.5
    > iriver h10
    > mrobe 100
    > sansac 200 v1
    > sansae 200
    > vibe 500

    [FileFactory]: DOWNLOAD HERE (HEX Files for Various USB Devices)


    [Download VIA PS3Hax (HEX and ROCKBOX)]

  • Posted by GregoryRasputin , on 15/11/2010 , @ 05:30pm


    Xoeo, responsible for releasing the PSN payload for jail broken devices, has released his own persobal payload, here is what it does:

    * Based on the PL3 code structure, but contains implementation of Hermes for increased stability.
    * Allows playing of PS1/PS2 games in JB mode
    * Enables Life with Playstation in JB Mode
    * PSN Access (Different implementation from what’s out there right now)
    * 3.50 Spoof
    * Fixed the bug of Linux menu disappearing under XMB



    NOTE This will not enable non BC consoles to play PS2 games.

  • Posted by PS3Hax Member News , on 14/11/2010 , @ 11:31am


    RockBox PSGroove Installer
    version: 2.1.1
    runs on: PC Only
    posted on: 11/13/10

    RockBox is a computer application what will assist you in installing PSGroove onto various portable devices; such as the iPod (classic, nano, mini), Sansa, iRiver, etc.
    for the purpose of jailbreaking your PS3.

    Change log for v2.1.1:

    RockBox Psgroove Installer 2.1 weigh less than 5MB.
    - Updater: RockBox-PSGroove Installer will check automatically if there   is available update for download and will allow you to download it   without opening any browser.
    - Rewrote the Installation process again
    - Added a progress bar.
    - RockBox-Psgroove Installer 2.1 will download the required files just for your device.
    - Made the installation process of the iPods much more flexible.
    - Added a loader.cfg generator: It will auto-recognize if RockBox andor   iPodLinux are installed on your device and will add it to the iPL  menu.
    - Added support for id10terror‘s CBL (Custom Bootloader) wich means that   you can store up to 4 diffrent payloads in the same time and launch   them using different buttons.
    - You don’t need to select RockBox-PSGroove Installer’s directory anymore.
    - The iPL installation process use some .bat scripts that I wrote; This   should fix any issues that occurred with the old installation process.

    - CBL installation is currently disabled – I’ll activate it in a few days.
    *loader.cfg Editor:*
    loader.cfg Editor feature will allow you to customize your iPL menu.

    *- Added support for cbl.cfg.
    (Update to Plug-In Creator will come later.)

    - Fixed the “blinking” bug.

    [FileFactory]: **DOWNLOAD HERE* (http://www.filefactory.com/file/b443hh4/n/RockBox-PSGroove_Installer-2.1.1.zip)

    VISIT MY HOMEBREW THREAD (http://www.ps3hax.net/showthread.php?t=15398) FOR MORE HOMEBREWS

    source (http://rockbox-psgroove.com/)

  • Posted by PS3Hax Member News , on 11/11/2010 , @ 01:58pm


    Thanks to developer Xoeo, who developed this PSGroove PSN Payload, we can now play games online and access the PSN store on firmware 3.41 and 3.15 by

    using the .hex files below.

    Note: I’ve updated and organized this thread to make everyone’s life a lot easier.

    You now have a choice of either PL3 payloads or Hermes v4b payloads and it has been broken down into separate sections. Enjoy.

    Change log (Added PL3 and Hermes v4b Payload HEX files):

    -PL3 Payload
    >Arduino (Duemilanove and Mega)
    >PSFreedom for Dingoo
    >Minimus 32
    >Minimus v1
    >Teensy 1.0
    >Teensy 2.0
    >Teensy++ 1.0
    >Teensy++ 2.0

    -HERMES V4B Payload
    >Arduino (Duemilanove and Mega)
    >PSFreedom for Dingoo
    >PS3 Break
    >PS3Break 1.1
    >Minimus 32
    >Minimus v1
    >Teensy 1.0
    >Teensy 2.0
    >Teensy++ 1.0
    >Teensy++ 2.0

    -Rockbox Files (Hermes v4b w/Mathieulh fix)

    Also, another thanks to RaZoR No1 for this tip for those with PS3Break USB dongle and reala for the rockbox tip.

    [FileFactory]: DOWNLOAD HERE (for USB HEXs)



  • Posted by GregoryRasputin , on 08/11/2010 , @ 05:43am


    klutsh responsible for the popular PSFreedom recovery images(psfMOD) on, HTC Desire, Nexus One, Evo 4G, Motorola Droid, HTC Hero and Droid Eris, has written a tutorial on compiling PSFreedom Payloads.

    Here’s a real quick guide on getting Ubuntu 10.10 ready to compile the PSFreedom payloads.


    * A Working install of Ubuntu 10.10

    The Guide:

    First thing we need to do is install some applications through apt, so open a terminal and do the following

    Now we need to clone PSFreedom from github to our local PC, pull it’s submodules and get the toolchain installed

    Now go get a Coffee/sleep, installing the toolchain can take a few hours (6-7 hours if you are running Ubuntu in a Virtual PC)

    Ok, so you have had your Coffee or sleep and you have the toolchain installed & PSFreedom cloned to your home directory, the hard part is over.

    Now you need to edit your .bashrc file

    add the following line to the end of the file

    To compile PSFreedom’s payloads is simple now, open a terminal and do the following

    That’s it, you can now find the payload .bin files in the PSFreedom/pl3 folder.

    klutsh’s Twitter