Sponsored Links

PS4 News on Facebook! PS4 News on Twitter! PS4 News on YouTube! PS4 News RSS Feed!
Sponsored Links
Sponsored Links
Home PS4 News - Latest PlayStation 4 and PS3 News

PS3 SCETool, Friday Isolated SPU POC and EIDTool WIP Updates


Sponsored Links
174w ago - This weekend Sony PlayStation 3 hacker naehrwert has released a PS3 SCETool based on the fail0verflow tools, an Isolated SPU binary POC dubbed Friday and some EIDTool work in progress updates for PlayStation 3 developers interested in remarrying Blu-ray drives, motherboard keys, QA tokens, etc via Twitter.

Download: PS3 SCETool / Friday Isolated SPU Binary POC / PS3 SCETool v0.0.3 and VSH.Self Output / PS3 SCETool v0.0.4

Below are the details from the ReadMe files and Tweets, as follows:

SCETool (C) 2011 by naehrwert - This tool will see more features in the future.

Notice: THIS CAN DO NOTHING NEW, IT'S CURRENTLY JUST A REWRITE OF f0f TOOLS.

Keyfile format:

[Register or Login to view code]

A sample keyfile is included.

Shout-outs: I think they know who I mean

Friday (C) 2011 by naehrwert - This is a POC for a isolated spu binary. Generate a self encrypted+signed with the metldr keys out of friday.elf. Then use friday.h to write a PPU application that loads the self by utilizing metldr and DMAs your console's EID2 to the shared SPU LS. It will generate the P and S block from it, that is used to pair the BD drive to the specific console. Yon can then DMA the blocks out from the LS and send them to the drive to remarry it to the console.

Communication with the SPU is done over in_mbox and out_mbox. MSG_OUT_* is send from the SPU code to out_mbox. MSG_IN_* should be written from the PPU to in_mbox. When MSG_OUT_READY arrives the PPU should DMA the EID2 to EID2_START and send MSG_IN_READY. When MSG_OUT_GEN_DONE arrives the PPU should DMA the blocks out from BLOCKS_START and send MSG_IN_DIE.

Note: this is UNTESTED but should just work

POC http://www.mediafire.com/?u8lvl08h1lai2nb

note: self part is only for spu yet!

scetool http://www.mediafire.com/?31r5482wy28sc9c

veeeery nice http://pastie.org/2928187

[Register or Login to view code]

http://pastie.org/private/4dflpsc66d4gngjvmxwqyq

[Register or Login to view code]


[Register or Login to view code]

which I can generate and yes my eid4 passes the hash check

but one would need to get the aes_omac1 key to be able to check it

hmm eid4 digest is stored unencrypted

seems like there are some hardcoded eid4 fallback bytes - http://pastie.org/private/oxy580s4omh8ofbdfgj3dq

[Register or Login to view code]

scetool/eidtool progress is great


PS3 SCETool, Friday Isolated SPU POC and EIDTool WIP Updates

Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter, Facebook and drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene and PlayStation 4 scene updates and fresh homebrew PS3 Downloads. Enjoy!

Comments 295

+ Reply to Thread


#225 - suquip - 75w ago
suquip's Avatar
Thanks for the update.

#224 - PS4 News - 75w ago
PS4 News's Avatar
Following up on the previous updates and SCETool Script, today PlayStation 3 developer Habib (aka smhabib) who recently released Habib CEX 4.50 V1.03 PS3 CFW unofficially updated PS3 SCETool to version 0.3.1 followed by v0.3.2 for Custom Firmware users with the changes below.

Download: scetool v0.3.1.zip / SCETool v0.3.1 (with changes added) by zecoxao / SCETool v0.3.2 by zecoxao / SCETool v0.3.2 by deroad

To quote: Basically what it does is,it encrypts iso modules (needed for cfw creation!) with its respective indiv seeds of eid.now normal people can do amazing things.i first posted this on psx-scene but with not much details.SO HERE IT GOES WITH SRC!!!!

A short NOTE:the keys should be only edited with notepad++ to save its formating or you might get errors(latest keyset included!)

FOR N00BS: you can also use scetool --template spu_token_processor.self(original self) --sce-type=SELF --encrypt spu_token_processor.elf(modified elf) spu_token_processor.self(output modified self)

THANKS:

1. naehrwert
2. my friend anonymous dev

I SALUTE YOU BOTH!!!!!!!!!

CHANGELOG:

1. Fixed makefile
2. Added indiv seed options for creaters of cfw or for some testers

From zecoxao: Here is the tool on github (github.com/zecoxao/scetool) with all the added "changes" (which was commenting one line and uncommenting two, bravo...)

And here's an example of the new features being used: pastebin.com/Cw6uPiaJ

[Register or Login to view code]

Check the label [Optional Header] for more information.

Finally, Habib has made available a proof-of-concept (PoC) for running syscalls based app without porting it to newer firmware with details below.

Download: POC.zip (2.18 MB)

To quote: Now I'll give you example of a Fan Control Utility being ran with my kernel and not with any other 4.50 cfw.if you try you'll simply get an error showing bad temp reading and sys_sm_get_fan_policy error. Currently source code is a lot a mess but ill be sharing it too.

Current Syscalls Added are: 386,389,409,383.

More PlayStation 3 News...

#223 - qwe123123 - 82w ago
qwe123123's Avatar
how to decrypt compressed edat? need what tools?

compressed edat: killer is dead, gundam exvs

#222 - franzes80 - 89w ago
franzes80's Avatar
Hi, new update for 4.46 eboot resigner by acid burn1 in version 0.2 (inside the archive new folder for 4.46 keys update)

Download: 4.46 EBOOT Resigner v0.2.rar

Changelog:

  • Added pkg View
  • Added inside archive folder Root for 4.46 keys update
  • Fixed and added more Keys in Keys file!
  • Fixed all MFW keys file format!

#221 - PS4 News - 89w ago
PS4 News's Avatar
Following up on the previous updates, today Italian PlayStation 3 developer Acid Burn1 has released a modified version of JjKkYu's PS3 EBOOT.BIN Resigner incorporating the PS3 Firmware 4.46 keys that were recently released.

Also below is a version of BlackBox FTP Resigned to work with 4.46 PS3 Firmware and 4.46 EBOOT Resigner v0.2.

Download: PS3 4.46 EBOOT.BIN Resigner Homebrew App (Final) / PS3 4.46 EBOOT.BIN Resigner v0.2 Homebrew App / BlackBox FTP 4.46 (Resigned)

This application released by Acid Burn1 makes all homebrew resigned, eboot with all cfw 4.46 including Habib v1.13. Thanks jykkyu.

Changelog:

  • Bug fixed
  • Added keys 4.46
  • Work for all CFW 4.46

v0.2 Changelog:

  • Added pkg View
  • Added inside archive folder Root for 4.46 keys update
  • Fixed and added more Keys in Keys file!
  • Fixed all MFW keys file format!

More PlayStation 3 News...

#220 - kaito kid - 90w ago
kaito kid's Avatar
actually I used it but it show me

  • Loaded keysets.
  • Loaded loader curves.
  • Loaded vsh curves.
  • Using keyset [lv0ldr 0x0000 00.00]
  • Error: Could not decrypt header.

why ??

Thank you I decrypt Lv0 ^_^

#219 - PS4 News - 90w ago
PS4 News's Avatar
Here are some articles that may be of use as well:

PS3 SCETool v0.2.9: http://www.ps4news.com/ps3-hacks-jailbreak/ps3-scetool-v0-2-9-by-naehrwert-updated-adds-np-fix-and-more/

OpenSCETool (OSCETool) v0.9.2: http://www.ps4news.com/ps3-hacks-jailbreak/openscetool-oscetool-v0-9-2-by-spacemanspiff-for-ps3-is-released/

#218 - niwakun - 90w ago
niwakun's Avatar
LV0 is a static key and cannot be changed or updated.

#217 - kaito kid - 90w ago
kaito kid's Avatar
Can I have latest version of scetool because I want to decrypt LV0 for 4.46

#216 - PS4 News - 92w ago
PS4 News's Avatar
Following up on his previous updates, today PlayStation 3 developer JjKkYu has released TrueAncestor EDAT Rebuilder v1.42 followed by v1.45 with the changes outlined below.

Download: TrueAncestor EDAT Rebuilder v1.42 for PS3 / TrueAncestor EDAT Rebuilder v1.45 for PS3

The newest version, but for some reason some function is ripped in the public version.

For detail changes, please read history.txt in the package.

Changelogs:

v1.45
1. Fix bug in rebuilding edat version 1 files.

v1.42 Public Release
1. Batch mode is disabled in public release.
2. Compressed EDAT support is disabled in public release.

v1.41 Internal Release
1. Support rebuilding non-compressed zero content edat files.

v1.40 Internal Release
1. Fix bug in rebuild process.

v1.35 Internal Release
1. Use flatz' rap2rifkey.exe to get rifkey now.

v1.31 Internal Release
1. Fix file missing when failing to rebuild files.

v1.30 Internal Release
1. Change rebuilding method.
2. Support rebuilding compressed edat files.
3. Add generate unlock edat function.
4. Add backup files switch, default is off.
5. Add skip java check.

Finally, in related PlayStation 3 hacking news pink1 has made available an R2R+Edat tool followed by a R2R+edat v1.0.1 update with details below, as follows:

Here is a tool I put together. It's pretty much rap2rif, rif2rap and an edat fix tool for C00 type demos. Put your act.dat & idps in the data folder and you're ready for rap2rif & rif2rap. To fix C00 type demos input a .pkg from a C00 demo or the PARAM.SFO and it will output the fixed .edat.

Download: R2R+etat.zip / R2R+etat.zip (Mirror) / R2R+etat_v1.0.1.zip / R2R+etat_v1.0.1.zip (Mirror)

This is a small update to R2R+edat, it fixes edats being a byte short & should speed up pkg2edat a lot by only decrypting the first 5MB instead of the whole pkg. Put your act.dat & idps in the data folder and you're ready for rap2rif & rif2rap. To fix C00 type demos input a .pkg from a C00 demo or the PARAM.SFO and it will output the fixed .edat.

Finally, in related PS3 EDAT news from BuC (aka BuC-ShoTz 1-2013) comes some old EDAT SRC Codes as follows: going through old stuff on my pc, for learning purposes i suppose.

  • line 257 creates edat: pastie.org/8642860
  • incomplete only decrypt EDAT.cs: pastie.org/private/6k2xiyfcojuch5tg73va
  • OMAC.cs: pastie.org/private/nmsml5958fpacqp1jbyya
  • RAP.cs: pastie.org/private/hqligcidxft7h1evxwfuw
  • FORM1.cs: pastie.org/private/la7dagczv6bpgrbtcappq
  • BigEndian.cs: pastie.org/private/6dr5vvab5f2fgwccjlxow
  • Aes.cs: pastie.org/private/kik3q7oe2vvnayi40l3rdw
  • libcomp.dll: mediafire.com/?lr82ft3l11tvs69

More PlayStation 3 News...







Sponsored Links

Sponsored Links






Advertising - Affiliates - Contact Us - PS4 Downloads - PS4 Forums - Privacy Statement - Site Rules - Top - © 2015 PlayStation 4 News