PS4 News on Facebook! PS4 News on Twitter! PS4 News on YouTube! PS4 News RSS Feed!

Home PS4 News - Latest PlayStation 4 and PS3 News

November 15, 2011 // 4:15 pm - Today the True Blue PS3 JB2 v2.2 USB JailBreak dongle update has arrived, and similar to the first version also came the free True Blue Unpkg'd / Unself'd PKG file and Payload from PlayStation 3 scene hackers!

Download: True Blue Update v2.2 (PKG) / True Blue Update v2.2 (PKG) (Mirror) / True Blue v2.2 User's Guide (PDF) / True Blue v2.2 User's Guide (PDF) (Mirror) / True Blue v2.2 Dongle 3.55 CFW / True Blue v2.2 Dongle 3.55 CFW (Mirror) / True Blue v2.2 Dongle 3.55 CFW (Mirror #2 for TrueBlue-3.55-CFW.zip) / True Blue v2.2 Dongle Update (UnPKG'd/UnSelf'd) / True Blue v2.2 Payload (BIN)

To quote from the PDF File: True Blue User Guide v2.2

Introduction

Unlock the true potential of your PS3 with True Blue – keep your PS3 on a homebrew enabled custom firmware, while at the same time enjoying the newest and most popular PS3 games.

Features Include:

  • Booting of games designed for PS3 system software v3.6 and above
  • Runs your existing games and new v3.6+ games from HDD in conjunction with standard backup managers
  • Does not require the power/eject trick
  • Custom v3.55 Dongle firmware behaves like OFW when True Blue is not inserted
  • Manufactured from highest grade components and Actel based
  • Durable and high quality metal case design
  • Tough and durable plastic packaging
  • Further features to be added as they are developed
  • On board 2 MBytes SPI flash
  • Supports Fat and Slim PS3 consoles currently running any firmware up to v3.55 and any PS3 which can be downgraded successfully from v3.6+ to v3.55 (NOTE: requires other tools, True Blue cannot downgrade a console)
  • Supports all regions of consoles
  • Supports all regions of v3.6+ games
  • Rock solid crystal oscillator on board for flawless timing

Setting up your PS3

Before you may use True Blue, you must first install the 3.55-Dongle custom firmware onto your PS3. This is similar in function to the well known kmeaw CFW; however it also includes modifications which allow True Blue to operate correctly. The 3.55-Dongle firmware updater is distributed in a file labelled “TrueBlue-3.55-CFW.ZIP”, and may be obtained through an internet search – once you have obtained it, please confirm the validity of the PS3UPDAT.PUP file contained within the ZIP archive by matching with one of the following hashes:

MD5: 43C522F8897D77B6165F95BCF3409090
SHA1: A64B010DB98996C7E53768D37D4D346F271D5950

Once you have confirmed that you have obtained the correct updater file, proceed with the update as follows:

  • Obtain a USB storage device such as a USB HDD or USB flash memory stick
  • Create a folder on the storage device in which to save the update file. Using a PC, create a folder named “PS3” on the storage device. Within the PS3 folder, create a folder named "UPDATE"
  • Copy the PS3UPDAT.PUP file to the “UPDATE” folder created in step 2. Thus, you will have this path structure on your USB storage device: \PS3\UPDATE\PS3UPDAT.PUP
  • Boot your PS3 and insert the USB storage device into the PS3
  • From the home menu, select (Settings) -> (System Update) -> (Update via Storage Media)
  • The PS3 will notify you that the “3.55-Dongle” update was found. Select OK then follow the onscreen instructions to complete the update
  • After the update has completed, your PS3 will restart and you now be running the 3.55‐Dongle custom firmware. You may now enjoy the use of the True Blue dongle

(NOTE: The above procedure is only applicable to PS3’s on or below system software v3.55)

Using True Blue

To use True Blue, simply insert the dongle into one of the USB ports on your PS3 and power the system up. Do not remove the dongle at any point while the PS3 is running.

True Blue for the most part functions just like a regular jailbreak/CFW in that you may install and run any homebrew software and all of the standard backup managers are supported. The most notable difference is that games designed for PS3 system software v3.6 and above are also supported.

However, in order to enjoy such titles, you must first obtain special “True Blue versions” which have been modified to function with True Blue. Such modified versions are available for download through the “usual channels” and are clearly labelled as being True Blue compatible.

Once you have obtained True Blue modified games, simply copy them to your PS3 internal or external USB HDD as you would with any usual jailbreak game and launch in the usual manner through any one of the many available backup managers.

Updating True Blue

From time to time, we will release firmware updates for True Blue which will add new features.
Directions and a list of changes will be provided inside the firmware update archive file.

True Blue Dongle Update v2.2

How to update:

1. Make sure your PS3 is running the True Blue "3.55-Dongle" CFW (custom firmware)
2. Copy TrueBlueUpdate-2.2.pkg from this archive to a USB flash drive
3. Boot your PS3 _WITHOUT_ True Blue inserted, and then insert the USB flash drive
4. Navigate to (Game) -> (Install Package Files), and then select TrueBlueUpdate-2.2.pkg
5. The True Blue updater will be installed onto your PS3 HDD
6. Navigate to (Game) and load "True Blue Update v2.2"
7. The updater will start, and will then prompt you to insert the True Blue dongle. Insert it only at this point, and continue. Your dongle will then be updated
8. After the update procedure has completed your PS3 will reset, and you will then be able to enjoy your updated dongle
9. You may delete the True Blue Updater from your HDD after the update is complete

Change log:

- v2.2

  • Initial worldwide release
  • Support for running "True Blue" titles directly from HDD via standard backup managers

From the PS3 Dev Wiki: ps3devwiki.com/index.php?title=PS3JB2_Reverse_Engineering#Content_Releases

Content Releases

Paradox TB

Note: Releases seen in the wild are full BD content prepatched for TrueBlue. We are only interested in documenting/reversing, so please don't post full links (only stripped).


EBOOT.BIN details

FW analysis

FW Changes (1.0/2.1)

Compared to OFW 3.55: ofw-vs-jb2.rar

EULA.xml

[Register or Login to view code]

Version.txt
[Register or Login to view code]

CORE_OS_PACKAGE.pkg

lv1.self

One patch to lv1_map_htab (lv1 undocumented function 114) to allow for RW mapping of all RAM. So who knows how many other lv1 patches are done at runtime.

[Register or Login to view code]

lv2_kernel.self

http://pastie.org/private/onlbfdxjdtaddb9blu0sq

only 1 function change, and a section added
sub_28fe30 is replaced
the new section is loaded at 0x80000000007f0000 (which is where those payloads are being loaded) lv2_kernel.bin

dev_flash_010.tar.aa.2010_11_27_051337

\dev_flash\vsh\module\nas_plugin.sprx

[Register or Login to view code]

"standard pkg patches"

dev_flash_016.tar.aa.2010_11_27_051337

\dev_flash\vsh\resource\explore\xmb\category_game.xml

standard app_home and install package files from mfw builder.

http://pastie.org/private/ixsiyvycqmgmcdmv7swcsg

\dev_flash\vsh\resource\explore\xmb\category_video.xml

netflix removed

http://pastie.org/private/4i02xv2onvaezfiy3i56a

Finally, also from the PS3 Developer Wiki: ps3devwiki.com/index.php?title=PS3JB2_Reverse_Engineering#Dongle_2.0

Dongle 2.0

Supposed to be massproduced instead of manually soldered like the 1.0 dongle. Not seen in the wild yet.

Update 2.2


Dongle Updater PKG

True Blue Dongle Update v2.2 - Initial worldwide release

SHA1: 504D53CD6EDFA3382510CCB40CE49F802073FBD4
MD5: A09CBCD5B3AEC31B07D974BEB4AC21FE
CRC32: 82F977CC
CRC16: 92D4


Payload (2.2)

located in unself'ed eboot.bin @ offset:

[Register or Login to view code]

SHA1: 69953C9CF60E67E798A22C1016ABCB44A1D42CDF
MD5: F0826BA059B352BC6100647DB7EFDE5F
CRC32: 4B3C2132
CRC16: 8181


lv2 dump (2.2)

payload @ file offset 0x8698 - 0x7b598

http://pastie.org/private/byhfezysb8iz2hed8o2hva

From an0nym0us: http://pastie.org/pastes/2875491/text

descriptors (2.2)

[Register or Login to view code]

Finally, in related PS3 scene news today fail0verflow have Tweeted the following hint on what may be some interesting PlayStation 3 developments to come:

"Don't worry all, we are just warming up the twitter engine - getting ready for more tweeting in December "

Odds are if it isn't done by other PlayStation 3 hackers beforehand, by December they will have made enough cash on the dongle and release a PSGroove-esque version to the PS3 scene for free... so definitely hold off blowing money on this useless device.




True Blue PS3 JB2 v2.2 Update Arrives, Payload Released for Free

True Blue PS3 JB2 v2.2 Update Arrives, Payload Released for Free

Follow us on Twitter, Facebook and drop by the PS3 Hacks and PS3 CFW forums for the latest PlayStation 3 scene and PS4 Hacks & JailBreak updates with PlayStation 4 homebrew PS4 Downloads.



#852 - StanSmith - August 25, 2012 // 5:27 am
StanSmith's Avatar
So I used this and dumped 2 files from Ghost Recon FS. Now what?

They aren't near the size of the eboot.bin so what are they good for?

#851 - Brenza - August 25, 2012 // 1:10 am
Brenza's Avatar
You shouldn't have released it... now they'll fix the exploit! >.>

#850 - violato135 - August 24, 2012 // 9:40 pm
violato135's Avatar
Can I NOT use a dongle and jailbreak a ps3 without it???

#849 - imajei - August 24, 2012 // 8:43 pm
imajei's Avatar
I don't have a dongle so can someone with a tb upload a decrypted ghost recon eboot i have an idea please

thats a pretty please i'm bored and need something to do thanx to the good ol community lol.

do i need a tb dongle to do this?

#848 - fantopoulos - August 24, 2012 // 7:39 pm
fantopoulos's Avatar
i have a true blue will do my best to get a dump for you to proceed where we were stuck for a long time but no it seems like we are going uphill again thanks shadoxi for starting this elf dumper , amazing work cheers triple thumbs up

#847 - Asure - August 24, 2012 // 9:21 am
Asure's Avatar
shadoxi we can figure out the original ELF size using SCEtool to get this info right? (find start of elf64 header, + size = end of elf)

Example

[Register or Login to view code]


Then we know the section headers start at 0x17EC228

Last section STRTAB:

[Register or Login to view code]


So elf ends at 0x17EC0F7 + 0x12C. We add padding to 0x17EC228, and insert clean elf64 section headerd dump from original eboot.bin, right? Or does this dump ELF+section headers+some extra stuff we can cut off?

Anybody care to post a dumped elf (raw, with this tool) so i can look at it?

#846 - shadoxi - August 24, 2012 // 8:01 am
shadoxi's Avatar
Following up on the previous update, today I am releasing my True Blue USB dongle PS3 ELF dumper which works with any PlayStation 3 Firmware greater than 3.56 to dump the encrypted TB EBOOT / ELF files once they are loaded.

Download: True Blue USB Dongle PS3 ELF Dumper / True Blue USB Dongle PS3 ELF Dumper (Mirror) / True Blue USB Dongle PS3 ELF Dumper (Mirror #2) / True Blue USB Dongle PS3 ELF Dumper (Mirror #3) / True Blue USB Dongle PS3 ELF Dumper (Mirror #4) / True Blue USB Dongle PS3 ELF Dumper (Mirror #5) / True Blue USB Dongle PS3 ELF Dumper (Mirror #6) / True Blue USB Dongle PS3 ELF Dumper Source Code / True Blue USB Dongle PS3 ELF Dumper Source Code (Mirror) / UTEBOOT (DUMPEDBOOT.bin and DUMPEDBOOT1.bin) by arnes_king / Mass Effect 3 BLUS30853 RAMDUMP by gibson25 / TB ELF Dumper v2 (np_trp_prx.rar) / TB ELF Dumper v2 (Mirror) / DUMPEDBOOT PoC by mellss

Tested on:

  • Original 355 -> ok
  • True Blue CFW v2 -> ok
  • ...

There are some bugs (size of dump ...) but it works. It's ELF dumper from memory and it work with True Blue cfw v2 and any 3.55 firmware because it doesn't use lv2 peek/poke.

Warning: It will not brick your ps3. But I am not responsible for any damage.

HOWTO:

  • Enable dev_blind with multiman
  • copy libsysutil_np_trophy.sprx from /dev_blind/sys/external/external to dev_hdd0/ and rename it "orignal_libsysutil_np_trophy.sprx"
  • copy my modified "libsysutil_np_trophy.sprx" to /dev_blind/sys/external/
  • load a True blue game from multiman
  • exit multiman
  • run your game
  • wait few minutes (if you get black screen after 3 minutes reboot ps3)
  • exit game
  • go to ftp
  • in dev_hdd0/ there are your decrypted DUMPEDBOOT.bin
  • copy and rename it with another name.

Howto uninstall patch - Two ways:

  • You could uninstall this patch by replacing modified libsysutil_np_trophy.sprx by orginal libsysutil_np_trophy.sprx
  • Or update in recovery mode

Thanks to: Ps3dev

Brief Guide:

1 - Install TB ELF Dumper first as stated in its readme file.
2 - Start Multiman, it will make a dump of multiman eboots, so you must delete it first by browsing to dev_hdd0 then delete all DUMPEDEBOOT.BIN files you found there.
3 - Back to multiman game selection then select any TB game then launch it.
4 - Start the game from XMB then wait for some times until game start.
5 - Exit game now then start multiman again then browse to dev_hdd0 and now you must found a decrypted game dump.

From PlayStation 3 developer deank (via pastebin.com/avcM5iuU) comes a revision as follows:

Download: TB ELF Dumper v2 (np_trp_prx.rar) / TB ELF Dumper v2 (Mirror)
[code]
// Author: Shadoxi
// Modified:

// Backup the original /dev_flash/sys/external/libsysutil_np_trophy.sprx to /dev_hdd0
// Replace /dev_blind/sys/external/libsysutil_np_trophy.sprx by this sprx


#include
#include

#include
#include

#include
#include
#include
#include

SYS_MODULE_INFO (sceNpTrophyhook, 0, 1, 0 );
SYS_MODULE_START( _start );
SYS_MODULE_STOP ( _stop );

SYS_LIB_DECLARE( sceNpTrophyhook, SYS_LIB_AUTO_EXPORT | SYS_LIB_WEAK_IMPORT );
SYS_LIB_EXPORT ( loader_sprx, sceNpTrophyhook );

int _start(void);
int _stop(void);
void DumpELF_Payload(void);
void loader_sprx(const char* PATH_PRX);

static void write_message (char const * message)
{
unsigned int write_length;
char const * end;
for (end = message; *end != '\0'; ++end);
sys_tty_write(SYS_TTYP_PPU_STDERR, message,end - message, &write_length);
}

void DumpELF_Payload(void)
{
write_message("Dumping ELF from RAM...\n");
int fd;
uint64_t nread;
uint64_t ptr= 0x00010000ULL; //ELF offset in RAM;
uint64_t sizeelf = 35*1024*1024; //Need a way to get size of ELF

char dump_path[30]="/dev_hdd0/RAMDUMP-00.BIN";
for(uint8_t i=0; i

#845 - niwakun - August 22, 2012 // 2:11 am
niwakun's Avatar
the thing here is that they didn't tell anything about the dongle itself, maybe they already pawned the dongle's security chip (ATMEL that is) and they didn't tell it publicly so once TB released something new (security or algo or something), DUPLEX, N0DRM or whatever can do the same to piss off the TB makers again and again.

As always, if TB makers decided to do it all over again with new hardware to support their new security system, a lot of existing TB users will be pissed off for sure.

#844 - Tidusnake666 - August 22, 2012 // 1:53 am
Tidusnake666's Avatar
It seems to me so. They'll pull out new TB CFW v3, new dongle payload, change DRM algo so all new games will still require TB.

They won't quit the scene so easily.

#843 - roeykarou - August 22, 2012 // 1:46 am
roeykarou's Avatar
friends, i don't understand. is it the END for TB, or they going to upgrade the cracking (lets say, i don't know to play a 4.2V games) and come back again to the scene?

i'm very confused on what happened to them and why they are very quiet...