PS4 News on Facebook! PS4 News on Twitter! PS4 News on YouTube! PS4 News RSS Feed!

Home PS4 News - Latest PlayStation 4 and PS3 News

July 22, 2012 // 5:23 pm - Following up on his Quick PS3 CoreOS Image Tool code release and recent hints, today PlayStation 3 developer Naehrwert has made available PS3 Dump_Rootkey code and a brief guide below so users can dump their own PlayStation 3 root key without Linux.

Download: PS3 Dump_Rootkey Code / PS3 Dump_Rootkey Code (Modified and compiled by Attila for Windows using Cygwin - just provide the IP as parameter after dump_rootkey like this: dump_rootkey.exe / PS3 Resigning Tools by Attila

Naehrwert has also confirmed that Asbestos PKG only works in 3.41. He has posted the AsbestOS and Source Code to change the offset for people to adapt it to other PS3 Firmware versions and tul compiled the ELF to an AsbestOS 3.55 PKG file.

Additionally, jrtux compiled the AsbestOS stage2 for 3.55 with the Toolchain as naehrwert commented on Twitter, stating: "this is the modified stage2 I'm using (I guess you can change the entry and compile this yourself)"

Build resulted in:

  • stage2_raw.bin
  • stage2_raw.elf
  • stage2_raw.lzma

Shortly following, he also compiled the stage1 and stage2 from the original AsbestOS source and the Naehrwert AsbestOS Stage2 source resulting in:

  • stage1.elf
  • stage2_native.elf
  • stage2_raw.elf
  • stage2_raw.lzma

Danixleet has also compiled the PS3 Dump_Rootkey and notes use includes bat file to run the dump_key and just replace with your IP followed by another compilation that assumes the user has everything ready (3.41 lv2 peek/poke) then simply drop "metldr" from console into "data".

If not.. check your connection between PS3/router, make sure nothing is blocked or add the trusted IP's to dump_rootkey in firewall and ping must be allowed, each setup is diff.. if it fails check your firewall/router settings, it worked out of the box for me connected to the wired router.

From voldemar_u2: Upload release build, try this one:

From the included ReadMe file, to quote: dump_rootkey - 2012 by naehrwert


[1] Install asbestos_ldr.g.pkg on your PS3 (a firmware with lv2 peek/poke is required to run it).
[2] Compile the client (make sure PS3HOST in main.cpp points to your PS3).
[3] Make sure you got your metldr in './data' as 'metldr'.
[4] A prebuilt 'dumper' is included in './data' (dumper.elf and build.bat is
included too if you want to change parameters).
[5] Start asbestos_ldr on your PS3.
[6] Start the client on your PC.
[7] Unicorns!

Asbestos License
Copyright (C) 2010-2011 Hector Martin "marcan" hector AT

From cory1492: OK, I had to repackage it a couple different ways but once I got it to install it worked great. The ps3 is a slim running 3.41 hermes cfw, when the app starts the PS3 black screened, I then ran the client after editing in my PS3's IP and copying a metldr extracted from my NOR dump over to the folder as instructed), compiled under cygwin using the supplied .sh script which is really just a gcc command (I added the ULL to those two vars to fix any problems that 'int is not a long' causes under windows) and got:

[Register or Login to view code]

I reflashed from 4.11 dex back to hermes to test this easy way to get the RPC server going that doesn't involve installing asbestos and not only does the RPC server work a treat, I can also confirm this release dumped the same EID root key that I had obtained previously via a metldr dump.

I'm a happy camper now, with a RPC server I can just run like an app. Sure beats going back to those old graf dongle payloads thanks naehrwert or marcan, whoever made that pkg!

Tut: follow the info deank posted to use multiman to take a dump of your console flash, and use one of the existing tools to extract the crypted metdlr - that is all you need to do to get metldr for this.

  • Create a dump of your NOR/NAND (use multiMAN to create a .NORBIN/.NANDBIN file - USB connected as /dev_usb000 required)
  • To dump flash: mmOS->Select any file->Open in HEX viewer->[SELECT]->[START]->DUMP LV2(NO)->DUMP LV1(NO)->DUMP FLASH(YES)
  • Transfer to your PC and unpack it with norunpack.exe or cex2dex to a folder and grab "metldr" from the "asecure_loader" folder
  • Put "metldr" into the "metldrpwn" folder on your USB

From aldostools: To get the "metldr", just dump your flash with the latest build of multiMAN: mmOS->Select any file->Open in HEX viewer->[SELECT]->[START]->DUMP LV2(NO)->DUMP LV1(NO)->DUMP FLASH(YES)

Transfer the dumped file of the NOR or NAND flash (copied to the USB) to your PC, and use norunpack.exe:
norunpack.exe flash.BIN extract_folder. In the extract_folder you will find the "metldr" (59KB) inside the folder "asecure_loader".

An alternative method to extract "metldr" is using the CEX2DEX application by Gunner54. You first have to downgrade to 3.55 (DEX or CEX), to apply any flash patch using multiMAN.

Btw, this is the fix for line 243:

[Register or Login to view code]

Tt was missing ULL and many (well mostly just windows/32bit ones really) compilers will treat it as a 32bit value instead of a 64bit value when you forget that.

From KitsunePaws: To get this to compile is VS 2010 alter the header of main.cpp

[Register or Login to view code]

Using Dump_Rootkey on Ubuntu 12.04 Guide by jrtux:

1- Extracting :

[Register or Login to view code]

2- Edit PS3HOST in main.cpp with the IP of your ps3 :

[Register or Login to view code]

gedit main.cpp
edit :

[Register or Login to view code]


3- Compile :

[Register or Login to view code]

4- Extract the metldr from your flash dump and copy your metldr in 'data' dir as 'metldr' : (Get your flash dump with mmOs or memdump_0.01-FINAL and extract METLDR with CEX2DEX Application)

5- Run :

[Register or Login to view code]


From his Twitter (linked above) some recent related Tweets:


[Register or Login to view code]

look ma, no linux

Thanks to mrlowalowa for the news tip!

From JayDee78: This is the MFW 3.41 PUP I myself used, with the patches added, use if you trust me.. Get OFW and do it yourself otherwise. Download Mirrors:

Finally, below is a brief guide on how to do it from him as follows:

On PC:

  • Extract the dump_rootkey.7z (or the precompiled dump_rootkey modified by Attila) to c:
  • Put the metldr in the c:\dump_rootkey\data folder (read below on how you get this file)


  • Get your flash dump with Memdump v0.01 Final, and extract the metldr with cex2dex etc, and put it in the data folder on the pc
  • Install the asbestos_ldr.g.pkg from Naehrwert's original download (dump_rootkey.7z)
  • As I was on 3.55 kmeaw and could downgrade I just got the 3.41 OFW and ran it through MFW Builder v0.2

The settings I used:

  • Patch LV1 hypervisor
  • Patch LV2 kernel
  • Patch package installer
  • Patch application launcher

Went into recovery on the ps3 and flashed the mfw 3.41

Started the asbestos loader after boot up and then started dump_rootkey on my pc with the right IP and as promised: UNICORNS!

[Register or Login to view code]

Hope this helps some of you (at least you that CAN downgrade). From IRC:

[Register or Login to view code]

PS3 Dump_Rootkey Code and Brief Guide Arrives from Naehrwert

Follow us on Twitter, Facebook and drop by the PS3 Hacks and PS3 CFW forums for the latest PlayStation 3 scene and PS4 Hacks & JailBreak updates with PlayStation 4 homebrew PS4 Downloads.

#14 - Luckystar - July 26, 2012 // 6:14 pm
Luckystar's Avatar
yes... my ps3 has 3.50 as min firmware install

#13 - Brenza - July 26, 2012 // 1:10 pm
Brenza's Avatar
i know qa downgrade won't lose data but my ps3 has 3.50 as min firmware install

a 3.55 asbestos_ldr would be awesome!

#12 - niwakun - July 26, 2012 // 10:01 am
niwakun's Avatar
the only main thing you need on linux is your PCK an IV keys. you can just go over downgrade your console to 3.41 and use naehwert's key dumping tool. Downgrading won't lose your data, as long as it's QA downgrade. And yes, I dont even see the difference installing a OtherOS CFW and a 3.41 Hermes CFW anyway.

#11 - Tidusnake666 - July 26, 2012 // 8:49 am
Tidusnake666's Avatar
Yeah, it's obvious, I thought of that, but do not have a spare 2.5" HDD. It's not the problem of wiping games, it's the problem of trophies, do not want run through their backup process once more.

Anyways, waiting for the port of asbestos_ldr to 3.55. Although it may be more difficult that it would seem, assuming it's not the simple mater of resigning eboot, but finding an appropriate LV2 patching zones IIRC.

#10 - aldostools - July 25, 2012 // 10:34 pm
aldostools's Avatar
Tidusnake666 if you have a 2nd HDD that fit internally in the PS3 (eg. your old PS3 HDD if you upgraded it), then you don't need to wipe all your data.

1- Turn off your PS3.
2- Remove the current internal HDD from your PS3 and replace it with a new HDD.
3- Turn on your PS3, it will start in Recovery Mode and will ask you to format the HDD and plug an USB drive/pen drive with a 3.55 PUP.
4- Go to your PC and copy the OtherOS++ 22GB PUP in the USB/pen drive as /PS3/UPDATE/PS3UPDAT.PUP
5- Plug the USB/pen drive and install the OtherOS++ PUP. Follow the instructions.
6- Once the PS3 finish the installation, it will restart with System Factory settings and it will ask for the date/time and network settings.
7- Follow deank's tutorial carefully (you can continue from step 4).

Once you get your dump_eid0.bin, you can re-install your original 3.55 CFW (eg. kmeaw or Rebug), then shut down your PS3, remove the HDD and put back your original HDD. Turn on your PS3 and all your data (games, videos, music, trophies, save data, users, activations, etc) will be there

#9 - Tidusnake666 - July 25, 2012 // 5:29 pm
Tidusnake666's Avatar
naehrwert's asbestos loader is for 3.41 only, tul's 3.55 port doesn't work, voldemar_u2's asbestos is also for 3.41.

There's no point for me to downgrade to 3.41 to use it, it's simplier to install linux and wipe out data.

#8 - Luckystar - July 25, 2012 // 4:27 pm
Luckystar's Avatar
not working on 3.55 CFW

I need AsbestOS 3.55 PKG

#7 - henno - July 24, 2012 // 4:58 am
henno's Avatar
This one is not working for me. I have 3.55 CFW and built dump_rootkey.exe and started it while running the 3.41 version of the included tool on the ps3 - the 3.55 version will just exit when starting.

I get the Info "Connecting to ..." when connecting to i tried forcing but it won't work.

What did i do wrong? Do i need AsbestOS running for that?

#6 - romantizma - July 23, 2012 // 9:07 am
romantizma's Avatar
We need an easy method for CEX/DEX conversion on NOR consoles please..

#5 - niwakun - July 23, 2012 // 6:18 am
niwakun's Avatar
abestos provided on this tool only works on 3.41 Hermes, so expect that it wont work above firmware requirements.

But hey, at least you're not going to install linux and demand for command for it. I just do hope that the abestos also works on 3.55 firmware.