PS4 News on Facebook! PS4 News on Twitter! PS4 News on YouTube! PS4 News RSS Feed!

Home PS4 News - Latest PlayStation 4 and PS3 News

195w ago - Following up on the previous PS3 NOR Flash dumping updates from uf6667 and No_One, today judges has released Teensy++ 2.0 Flasher Software called NORway for PlayStation 3 developers.

Download: NORway v0.1 for PS3 / NORway v0.1 for PS3 (Mirror) / PS3 NOR Testpoints / NORway v0.2 for PS3 / NORway v0.3 for PS3 / NORway (Python Script) v0.3 for PS3 by jevin / NORway v0.4 for PS3 / NORway v0.5 for PS3 / PS3 NOR Dump with Teensy 2.0++ Guide / GIT

To quote: Here comes my initial release of a NOR flasher soft for the PS3 called "NORway". I know, there are other "WIP" projects, but I got a little impatient, so I've decided to create my own solution. It's a port of "noralizer" by marcan, a pretty good working NOR flasher implementation for another FPGA board.

Anyway, here's the README.txt, which should explain everything: NORway v0.1

This project has been ported for the Teensy++ 2.0 from the original NOR flasher tool ("noralizer" by Hector Martin "marcan" ) that was used to flash AsbestOS onto the demo PS3 at 27C3, and for experimentation.

Contents:

\teensy\NORway.avrsln - Source code for the Teensy++ 2.0 (AVR Studio 5.0)
\teensy\default\NORway.hex - Compiled hex-file for the Teensy++ 2.0 (AT90USB1286)
\hwinstall\install-*.jpg - Some pics of how I've mounted the Teensy (CECH-2504A/B)
\hwinstall\nor_testpoints.png - Connection diagram of the NOR testpoints (CECH-2504A/B)
\serial_install.exe - Teensy serial drivers for Windows
\README.txt - this file
\NORway.py - PC Python client

Hardware connections (see "\hwinstall\nor_testpoints.png"):

PS3 Teensy
A0-7 PF0-7
A8-15 PA0-7
A16-22 PB0-7
D0-7 PD0-7
D8-15 PC0-7
CE# PE0
OE# PE1
RESET# PE4
WE# PE5
RY/BY# PE6
TRISTATE# PE7
GND GND

There are no modifications to the Teensy itself required. Don't install any power regulators, don't cut any traces.

DON'T CONNECT THE VCC SOLDER PADS TO ANYTHING!

Connection diagrams for other boards can be found at: http://ps3devwiki.com/index.php?title=Hardware_flashing

Prerequisites for Windows:

Python 2.7.2 (http://www.python.org/ftp/python/2.7.2/python-2.7.2.msi)
pyserial 2.5 (http://pypi.python.org/packages/any/p/pyserial/pyserial-2.5.win32.exe)

Usage:

Install Python + pyserial (see "Prerequisites for Windows"). Install drivers. Connect Teensy to your PC. Flash Teensy with "\teensy\default\NORway.hex" and reset it after completion. Start Windows' "Device Manager", expand the "Ports (COM & LPT)" node, you should see something like "USB Serial (Communication Class, Abstract Control Model) (COM4)". This tells you that "COM4" (or whatever shows up) is the COM port used by Teensy.

At the command prompt enter "NORway.py" to display help.

Procedure to dump your flash:

- PS3 is turned off
- At the command prompt enter:

NORway.py
- Turn on your PS3, it shouldn't boot
- At the command prompt enter:
NORway.py dump flash.bin
- When dumping is finished enter:
NORway.py release
- Power off your PS3 (disconnect Teensy if PS3 doesn't boot when restarted)

Dumping takes about 3 minutes. A file "flash.bin" with a size of exactly 16 MB (16.777.216 bytes) has been created in your current directory.

Flashing is rather slow. Writing a complete flash with the "write" command takes about 2 hours. Might be improved in future versions...

IMPORTANT:

Before you flash your PS3 with anything new, make sure that the content of your dump is correct (e.g. compare ros0/ros1 area of your dump against "CORE_OS_PACKAGE.bin" from an actual PS3UPDAT.PUP of your current firmware). And keep your original dump in a safe place. You might need it.

It's tested on Win7 x86, but should also work just fine on any x86 Windows >=XP. Basically it should also work on Linux, but I didn't test. If you're running Linux, you probably know what to do. Serial drivers are not required for Linux.

Unfortunately I couldn't manage to make it work on any x64 version of Windows, because of the Python pyserial module.

Thanks to "marcan" for the original implementation.

-- judges (judges at eEcho.com)

P.S: I've already managed to downgrade my OFW 3.61 to CFW 3.55. There're minor things to rule out, but expect a downgrade tutorial coming soon..
PPS: Thanks to defyboy for the original idea of using a Teensy for flashing!

Update 28th July, 2011: v0.2 released! Documentation updated to include the required 3.3V voltage regulator plus Teensy clock rate changed to 8 MHz!

Update 9th August, 2011: NORway v0.3 has been released!

Dumping now only takes 45 secs instead of over 5 mins! Writing now only takes about 8.5 mins instead of over 2 hours!

[jevin] judges check out http://pastie.org/2527251
[jevin] its modified to support samsung chips
[jevin] it does chip erase twice (a22 low/high)
[jevin] and does single-word, unlocked programming of the entire chip
[jevin] it doesnt support programming ranges because i haven't bothered with partial erases yet
[jevin] 99% untested
[jevin] it executes when not hooked up to my ps3


NORway PS3 NOR Flasher Software for Teensy++ 2.0 Dev Boards

NORway PS3 NOR Flasher Software for Teensy++ 2.0 Dev Boards

NORway PS3 NOR Flasher Software for Teensy++ 2.0 Dev Boards

Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter, Facebook and drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene and PlayStation 4 scene updates and fresh homebrew PS3 Downloads. Enjoy!


  • Sponsored Links




#31 - slappyg69 - 24w ago
slappyg69's Avatar
can someone direct me to a picture of the pin out for teensy with the various motherboard types?

#30 - Kenturo - 25w ago
Kenturo's Avatar
Nice, I need 2 posts to see the links

#29 - hafizaziz - 26w ago
hafizaziz's Avatar
thanks.

please help me downgrade 3.65

#28 - petergotsole - 35w ago
petergotsole's Avatar
Hello everyone, thank you for taking the time to read this as im writing this 310am after 7+ hours of searching how to 'jailbreak/downgrade' my ps3 to 3.55.

Note I am a complete noob and im sorry if this has been asked a million times but believe me when i say i tried putting peoples opinions and answers together and still couldn't come up with a solution.

I have 2 Slim PS3's (second gen) and only want to jailbreak 1 due to reading a bunch of forums and opinions how one shouldn't be jailbroken, sooo...

Both are running on 4.60 but the upgrades before were 2.70 (cech2001A) for one of them and 3.40 (cech2501A) for the other so both of them are good to go but i plan on downgrading my 3.40.

I'm aware i need a flasher and I've seen plenty tutorials but they're a little out of my price range so i was leaning more towards the NORway teensy but even then there are many options to choose from.

So what im asking of you guys/girls is a complete checklist of things i need to get and maybe how to disassemble and solder (also wondering 1-10 how hard and chances of me bricking my system) the board or whatever it is and what i need to program to downgrade. I know theres a difference between NOR and NAND and i think i have a NOR since all slims are NOR but haven't seen any tutorials for them.

After all that downgrading now what? do i begin jailbreaking and what sources do i need? (if its anything like the iphone lol if not i apologize)

My main intention isn't to pirate anything but i have my reasons and maybe have some fun on mw3 hosting lobbies (with friends) since a lot of people are against hacking online.

Also i've read many that if i were to hack online i would get banned instantly for any game especially well known games.

so thank you to whoever can respond to these question, i really do appreciate anyone taking the time to help me with my troubles. i have an empty shopping cart waiting....

Reason why i leaned towards the teensy is after reading about NORway.. it's the software for Teensy++ 2.0 development board and brings stability and reliability to NOR flash reading.

most importantly Teensy++ 2.0 development board is made by US company and it costs USD 27 with pins solder to it, which means no custom import taxes for people in the US. so, what you need:

  • NORway: free and open source software
  • Teensy++ 2.0 development board with pins soldered to make it easier for you
  • 360-clip NOR clip 58-pin
  • female jumper wires

bottom line for less money you get much better solution, which is something from the past for me. last, but not least and for completeness i want to mention that you will need to solder few extra pins to Teensy++ 2.0, because the version with soldered pins doesn't have all necessary for NORway work pins soldered.

that again can be done from someone for you for just a few bucks - at the end you will end up with a actually NOR programmer with professional quality and reliability and you can even help other people with it and make money.

#27 - nikolass - 139w ago
nikolass's Avatar
can i downgrade 4.xx ps3 with just a Teensy ++ 2.0 ?

#26 - PS4 News - 143w ago
PS4 News's Avatar
Following up on his previous release, today PlayStation 3 developer judges has updated the Teensy++ 2.0 NOR flasher NORway for PS3 to version 0.5 with additional updates and their changes outlined below.

Download: NORway PS3 NOR Flasher for PS3 v0.5 / NORway PS3 NOR Flasher for PS3 v0.5 (Mirror) / NORway PS3 NOR Flasher for PS3 v0.6 Beta / NORway Latest Beta / norpatch.exe (v4.60.0) / norpatch.exe (v4.65.0) / norpatch.exe (v4.66.0) / norpatch.exe (v4.70.0) / GIT

NORway v0.5 Changelog:

  • Added block table for Samsung K8Q2815UQB. The programming modes "writeword" and "writewordubm" don't require manual chip/sector erase prior to writing anymore!
  • Bugfix: "NORway.py COMx release" didn't work. Now you can leave Teensy powered at all times and console will boot up correctly after issuing a "release" command
  • Bugfix: increased TRANSMIT_TIMEOUT for Teensy's serial device to 10000ms (required for OS X)
  • Bugfix: disabled DSR/DTR flow control (wasn't working reliably on OS X)
  • Bugfix: TRISTATE wasn't set correctly
  • Added additional verification when writing is done. Although each write command verifies each written sector/block, it happened that written bytes weren't persistent
  • Added "verify" command

NORway v0.6 Beta Changelog:

  • Changed programming modes "write", "writeword" and "writewordubm" to "vwrite", "vwriteword" and "vwritewordubm".
  • Added new programming modes that skip verification for single 4KB blocks: "write", "writeword" and "writewordubm".
  • Moved verification algorithm to Teensy.

Update: From littlebalup: Hi ladies and gents, As an alternative to WAYgui by Swizzy, here comes my personal simple programs, written in batch and compiled as exe, to easily launch and work with the well known NORway and NANDway python scripts by Judges.

Download: NANDway_launcher.zip / NORway_launcher.zip / WAY-launchers v2.01.zip / WAY-launchers v2.02.exe / WAY-launchers v2.03.exe / NORway_launcher.sh / NORway_launcher.sh (Fully Compatible Linux / Mac) /

NORway_launcher.sh (NORway_launcher scrip) / NANDway_launcher.sh (NANDway_launcher script) / WAY-launchers-master.zip / GIT

Features:

  • Multi-lingual (English and french only for the moment, with auto-detection per windows language) If someones would like to translate to another languages, sources are available.
  • Teensy COM port auto-detection
  • Multi-dumps (I mean you can define a quantity of dumps to perform)
  • Binary dumps comparison after dumps (if multi-dumps) with log file.

Install note:

  • Simply paste the exe files into the same directory as NORway.py / NANDway.py
  • Execute

Update #2: Small update of the batch versions (now v1.9, same download links above).

New release v1.01 of the GUI:

  • Added Teensy programming feature: can load .hex file by clicking on the teensy picture.
  • Dump file extention changed: was "*.x.bin", now is *.bin" if only one dump and "*_x.bin if multi-dumps.

New version v2.00 of the GUI:

  • Removed embeded console due to problems with scripts output redirection.
  • Now scripts launched in a separate regular console prompt window.
  • "Save screen" and "Kill process" buttons removed as well. Instead, you can copy from console to save screen and use Ctrl+C to kill process if needed.

New version v2.01:

  • v2.01: Bug correction about Multi-dumps and binary checks. (Thanks to Joris 73 from LS)

WAY-launchers v2.02:

  • v2.02: Added compatibility with the latest USB serial drivers from PRJC: "Teensy USB Serial" driver now detected as well as the old one.

Here a new release of my GUI for NORway/NANway/SPIway: v2.02: Added compatibility with the latest USB serial drivers from PRJC. "Teensy USB Serial" driver now detected as well as the old one. Also means it is working well on Windows 8.1 now.

WAY-launchers v2.02 - GUI to run NORway, NANDway & SPIway scripts by Judges.

WAY-launchers v2.03:

  • v2.03: Correction of a minor bug concerning error level detection from python scripts.

ATTENTION: The use of this program is at your own risk! The author can not be held responsible for the consequences of its use.

Simple GUI, written in VB.net and batch, to easily launch and work with the well known NORway, NANDway and SPIway python scripts by Judges for PS3 and PS4 hardware flashing using Teensy++ 2.0.

ADDITIONAL FEATURES:

  • Teensy COM port auto-detection
  • Teensy programming (load .hex file by clicking on teensy picture)
  • Multiple dumps (you can define a quantity of dumps to perform)
  • Binary dumps comparison after dumps (if multi-dumps) with log file.

SYSTEM REQUIREMENTS:


INSTALL INSTRUCTIONS:

  • Install python, pyserial, Teensy drivers, scripts... per Judges's instructions (github.com/hjudges/NORway)
  • Simply paste the "WAY-launchers.exe" file into the same directory as NORway.py / NANDway.py / SPIway.py.
  • Execute

CHANGE LOG:

  • v2.02: Added compatibility with the latest USB serial drivers from PRJC: Teensy USB Serial driver now detected as well as the old one.
  • v2.01: Bug correction about Multi-dumps and binary checks. Thanks to Joris 73 from LS.
  • v2.00: Removed embeded console due to problems with scripts output redirection. Now scripts launched in a separate regular console prompt window. Save screen and Kill process buttons removed as well. Instead, you can copy from console to save screen and use Ctrl+C to kill process if needed.
  • v1.01: Added Teensy programming feature: can load .hex file by clicking on the teensy picture. Dump file extention changed: was *.x.bin, now is *.bin if only one dump and *_x.bin if multi-dumps.
  • v1.00: First release

Update #3: New version of NORPatch available from judges: Norpatch v4.60.0

  • Added OFW 4.60 recognition

Update #4: New version of NORPatch available from judges: Norpatch v4.65.0

  • Added OFW 4.65 recognition

Update #5: New version of NORPatch available from judges: Norpatch v4.66.0

  • Added OFW 4.66 recognition

Update #6: New version of NORPatch available from judges: Norpatch v4.70.0

  • Added OFW 4.70 recognition

Linux Edition

A "Linux Edition" of the "NORway Launcher" console version is now available. Available soon for "NANDway Launcher" as well.

All the features of the Windows batch version are there (teensy port auto-detection, multi-dumps, binary comparisons...)

Developped and tested on debian based system (rpi / raspbian).

Quick guide to run judges scripts with linux:

- Ensure "python" and "python-serial" packages are installed:

[Register or Login to view code]



  • Get the latest Judges' files from his GitHub repo: github.com/hjudges/NORway, then unzip files.
  • Program your Teensy with the NORway.hex file using the PRJC loader and instructions available there : pjrc.com/teensy/loader_linux.html
  • Plug or unplug/re-plug your programmed Teensy, then, just after, run:

[Register or Login to view code]

So, you should obtain something like that at the end:

[Register or Login to view code]

Where " ttyACM* " is your serial port, fully named " /dev/ttyACM* ". Note this port name.

  • Go to your NORway unziped folder then make the NORway.py executable:

[Register or Login to view code]


  • Now you can start to run Judges's script with:

[Register or Login to view code]

example of dump command:

[Register or Login to view code]

To use with my script:

  • Past the "NORway_launcher.sh" file to the same folder as the "NORway.py" file.
  • Make it executable:

[Register or Login to view code]



  • Run:

[Register or Login to view code]

enjoy

Just tested on Mac OS-X as well. It works (partially).. but you have to manually set serial port which is something like /dev/tty.usbmodem*

To find it: ls /dev/tty.usbmodem* once connected. Maybe some bugs. I'll work for a full Mac support as well (so, will be "Linux & Mac edition).

Linked above is a new beta script that should be fully compatible Linux/Mac.

Script revised to v1.01 and renamed "Linux & Mac Edition" now supports Mac as well as Linux and certainly some other Unix based OS. NANDway script also available (linked above).

More PlayStation 3 News...

#25 - evajoly - 151w ago
evajoly's Avatar
love this thanks

#24 - ullasmanju - 151w ago
ullasmanju's Avatar
thanks man it helped me a lot...

#23 - PS4 News - 185w ago
PS4 News's Avatar
NORway - Teensy++ 2.0 NOR flasher for PS3 v0.4 is now released by judges.

Download: NORway v0.4 for PS3 / GIT

Just finished NORway v0.4 beta 10. Implemented CrackMyDay's excellent bulk writing method, which reduces programming time for "writeword" mode from 60mins to less than 10mins. "writewordubm" mode also doubled its speed (

#22 - gokuhs - 186w ago
gokuhs's Avatar
Hi guys!

Thanks for this great tutorial, I try dump my flash on a 3.56v1 FAT Ps3 (the motherboard is the same in this post) but I'm not sure if the dump are correctly dumped. Who I can check it? I would not try to flash it and finally kill the Ps3

Sorry for my bad English, and thanks for the help.

 











Advertising - Affiliates - Contact Us - PS4 Downloads - PS4 Forums - Privacy Statement - Site Rules - Top - © 2015 PlayStation 4 News