Rebug 3.55.3 / 4.21.1 PS3 CFW REX Editions, 999 Downgrader Out
Following up on their previous release and the Rebug 4.11 Version Spoofer, today PlayStation 3 hackers Cyberskunk and evilsperm of Team Rebug have released Rebug 3.55.3 and 4.21.1 PS3 CFW REX Editions alongside a PS3 '999' downgrader with details below!
It has been a long time since the last firmware release, mainly because we did not see a reason to keep releasing cfw after cfw just to changes files in ‘dev_flash’. We wanted the next release to be something different and we are quietly confident it is.
The first thing users of previous REBUG firmware will notice is the old Rebug Selector has been given a complete overhaul and facelift based off of the multiMAN XXMB engine. We added quite a few features and it has now earned itself a new name Rebug Toolbox 02.00.00 but we will explain the toolbox later in more depth. Right now...
We give you REBUG 3.55.3 and 4.21.1 REX EDITIONS and the ’999′ DOWNGRADER. All the features listed below are in ALL firmware versions unless stated otherwise.
REBUG REX EDITION FEATURES
FEATURE – Dual LV2 Kernels CEX/DEX (Swap your EID0/LV2 kernel using Rebug Toolbox in seconds)
FEATURE – ALL Retail functions available in CEX mode (No need to install different firmware)
FEATURE – ALL Debug functions available in DEX mode (No need to install different firmware)
FEATURE – ProDG Connectivity in DEX mode
FEATURE – QA Token compatibility
FEATURE – OtherOS++ support enabled (Use Rebug Toolbox to Boot OtherOS with different LV1 patches)
UPDATED – Rebug Toolbox 02.00.00
UPDATED – 4.31 Version Spoof files (PSN/SEN Enabled for 4.21.1 REX ONLY)
PATCHED – LV1: Disable System Integrity Check (Safe to use with mismatched COREOS/SYSCON versions or if PS3 is not QA enabled)
PATCHED – LV1: Peek and Poke support (Unused LV1 call 182 and 183)
PATCHED - LV2: Peek and Poke support (LV2 Syscall 6 and 7)
PATCHED - LV2: Peek and Poke support for LV1 (LV2 Syscall 8 and 9)
PATCHED - LV2: LV1 CALL System call (LV2 Syscall 10)
PATCHED - VSH: Allow Unsigned act.dat and *.rif files
PATCHED - VSH: Disable Unlinking/Deleting of act.dat
FUN FEATURE – Fake Save Data Owner in CEX and DEX (Use Game Saves from ANY Owner)
FUN FEATURE – Lock/Unlock Trophies in CEX and DEX
FUN FEATURE – Cinavia protection disabled in CEX and DEX mode
'999' DOWNGRADER FEATURES
FEATURE – All 3.55.3 REX EDITION Features (Firmware is identical)
FEATURE – Downgrade any firmware version CFW with spkg sig check patched
Package Manager is a replacement for the standard Install Package Files option under Game in the XMB. It allows for the install and deletion of .pkg files from dev_hdd0/packages, dev_usb/packages and the standard Install Package Files locations. In addition to this, your downloaded PSN content ‘bubbles’ will appear under this option instead of cluttering your Game menu with uninstalled content.
USAGE: Navigate to Game in your XMB and click on Package Manager (It will be where Install Package Files usually is). You will find three options.
PlayStation Network Content
Manage your downloaded PlayStation Network Content.
Install Package Files
INSTALL package files from Storage Devices and your PS3.
PS3 Hard Disk (dev_hdd0/packages)
Package Folder (dev_usb/packages)
Standard Package Location (Standard Install Package Files locations)
NOTE: The Install All Packages is only available by pressing the TRIANGLE button when the Standard Package Location option is highlighted because the PS3 will only install ALL packages from the root of a storage device as of the moment.
Delete Package Files
DELETE package files from Storage Devices and your PS3.
PS3 Hard Disk (dev_hdd0/packages)
Package Folder (dev_usb/packages)
Standard Package Location (Standard Install Package Files locations)
1: Highlight the file you would like to delete and press TRIANGLE. The sidebar should appear.
2: Press CROSS on either Unlink or Unlink(Folder) (Both do the same thing for now).
Rebug Toolbox is application designed to complete the full function of REBUG REX EDITION firmwares. Besides from performing the CEX/DEX EID0 and LV2 Kernel Swapping it is also an FTP server and is packed with a bunch of other useful tools.
1: In the PS3 XMB go to Game menu
2: Select Package Manager
3: Select Install Package Files
4: Select PS3 Hard Disk
5: Install REBUG-TOOLBOX-02.00.00.pkg
Displays Firmware version, Toolbox version, IP address, current LV2 Kernel and Target ID type and free HDD space.
Quits Toolbox and returns you to PS3 XMB.
Perform either a Full or Soft reboot od the PS3 system.
Soft (LV2 Reboot Only)
Full (On/Off Cycle)
Boot OtherOS with either your currently selected LV1 patches or easily apply ALL LV1 patches and boot.
Boot (LV1 Patches: Apply All)
Boot (LV1 Patches: Use current)
Turn Off System:
Shut down your PS3.
Switches between NORMAL and REBUG mode
NORMAL mode which uses the DEBUG XMB is the default mode after installing Rebug.
REBUG mode sets the PS3 to the latest available version spoof (updatable in the future) and allows swapping between RETAIL and DEBUG XMB in addition to switching between the two different Debug Menu Types menus DEX (debug) and CEX QA (retail).
XMB OPERATION MODE:
This option only works in REBUG mode and lets you select either the RETAIL or DEBUG XMB.
DEBUG MENU TYPE:
Gives you the choice of the CEX QA (retail) or DEX (debug) Debug Settings menu.
A collection of LV1 patches that can be used for better compatibility with some PS3 tools. Any combination of these patches can be applied before booting OtherOS.
SWAP LV2 KERNEL:
Swaps between CEX and DEX LV2 Kernel. This option will only work if your Target ID is set to DEX
REWRITE TARGET ID IN FLASH:
This option requires you have a valid NOR/NAND dump named correctly on dev_usb000. Use EXPORT FLASH TO FILE function to dump your NOR/NAND to dev_usb000 and then use c2d.exe to convert your dump to DEX.
Rename your original CEX dump to CEX-FLASH.EID0.NORBIN (16mb) or CEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Rename your converted DEX dump to DEX-FLASH.EID0.NORBIN (16mb) or DEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Once you have prepared your NOR/NAND dumps place them on a USB device and connect it to dev_usb000.
Now that you have your valid dumps named properly and connected to dev_usb000 it is a simple as selecting the option and following the onscreen prompts. Takes less than 10secs once you have your dumps prepared.
EXPORT FLASH TO FILE:
Backup your current NOR/NAND to file on dev_usb000. Takes about 45secs for NAND
Enable/Disable QA flag. This option is only available in REBUG 3.55.3 REX EDITION as we are not able to set QA token at the moment from GameOS on higher firmware.
TOGGLE RECOVERY MODE:
Enable/Disable Recover Mode flag. When enabled your PS3 will reboot into Recovery Mode.
TOGGLE PRODUCT MODE:
Enable/Disable Product Mode flag. When enabled your PS3 will reboot into Factory Service Mode. This option is only available in REBUG 3.55.3 REX EDITION for safety reasons.
LOAD LV2 KERNEL:
Load lv2_kernel.self.[KERNEL_NAME] from USB or /dev_hdd0
CREATE PACKAGES FOLDER ON PS3:
Create /dev_hdd0/packages folder or your PS3 to be used with Package Manager.
EXPORT HYPERVISOR LV1 MEMORY:
Save LV1 memory to dev_usb000 or dev_usb006 or dev_hdd0 if usb is not found.
EXPORT HYPERVISOR LV2 MEMORY:
Save LV2 memory to dev_usb000 or dev_usb006 or dev_hdd0 if usb is not found.
CHANGE ACTIVE PS3ID:
Spoof IDPS in LV2 memory. Choose from a list of Target ID’s or Use EID5 which will spoof your original CEX IDPS allowing you to connect to PSN if your PS3 is running REBUG 4.21.1 REX EDITION in DEX mode.
OTHER TOOLBOX FEATURES:
L3 changes clock/temperature display
L2+R2 enable screensaver
START+R2 take a raw rgb screenshot
Remote-play via PSP/PSVITA
Auto-turn-off if idle for 1 hour
Telnet to PS3 ip at port: 8080
FTP access with writable dev_flash mounted as dev_rebug (port: 21, user: anonymous, password: (anything))
QA is supported in all REBUG REX EDITIONS but at this point in time we are unable to set the QA Token from GameOS on 3.55+ firmware.
It is good practice to enable QA in 3.55 before updating to any CFW not just REBUG.
OtherOS++ is supported by all REBUG REX EDITIONS and will detect your existing OtherOS HDD partition.
However none of the REBUG REX EDITIONS have emer_init.self patched (create smaller GameOS partition). We are working on a solution to this from GameOS.
In the meantime if you do want to create an OtherOS partition you have two options:
1: Use a 3.55 firmware that already has emer_init.self patched to the size you want.
2: Patch REBUG 3.55.3 REX EDITION in PS3MFW Builder
If you choose option 2 we highly recommend that you ONLY patch emer_init.self. Also the resulting PUP will only be able to be installed on 3.55 firmware as the spkg_hdr will be mismatched.
One final thing to note about OtherOS on 4.21.1 is that it function is slightly reduced at the moment due to the fact that we are not able to map memory like in 3.55 and below. The affected modules are ps3ram and ps3sbmmio.
Hopefully this problem can be addressed without having to release another firmware.
REBUG 4.21.1 REX EDITION
From XMB install REBUG 4.21.1 REX EDITION over any 3.55 OFW/CFW/MFW or the same or lower firmware version CFW with spkg sig check patched or any firmware version CFW with spkg sig check patched and QA enabled.
From XMB REBUG 4.21.1 REX EDITION can be uninstalled with the same or higher firmware version OFW/CFW/MFW or with REBUG 3.55.3 REX EDITION on a QA enabled PS3 or with the ’999′ DOWNGRADER if QA was NOT enabled.
REBUG 3.55.3 REX EDITION
From XMB install REBUG 3.55.3 REX EDITION over the same or lower firmware version OFW/CFW/MFW or any firmware version CFW/MFW with spkg sig check patched and QA enabled.
From XMB REBUG 3.55.3 REX EDITION can be uninstalled with the same or higher firmware version OFW/CFW/MFW.
REBUG ’999′ DOWNGRADER THIS WILL SET YOUR SYSCON COREOS VERSION TO 9.99 ON PURPOSE: DO NOT PANIC
REQUIRES SYSCON DEHASHING AFTER DOWNGRADE
From XMB install ’999′ DOWNGRADER over any firmware version CFW/MFW with spkg sig check patched on a PS3 with or without QA enabled.
UNINSTALL/DEHASH: REQUIRES PS3 TO BE QA ENABLED
From XMB ’999′ DOWNGRADER can be uninstalled/dehashed with the REBUG 3.55.3 REX EDITION or from Recovery Mode with any other 3.55 OFW/CFW/MFW.
~Codename: REBUG Team.
Codename: REBUG would like to thank: graf_chokolo (as always) and The Three Musketeers for the work they have done in the past and (hopefully) future.
Big thanks to:
naehrwert - For scetool (its elf compression played a big part in 4.21.1)
deank - Helping us get the Rebug Toolbox up and running.
Our BIGGEST thanks: flatz - Helping with the OtherOS testing and well... You know what you did..
Rebug Scorpion Artwork: by blastleaf - blastleaf AT gmail.com
Rebug Customised Font: by GDcooya
Finally, below are some related guides from Itskamel, as follows:
Itskamel's n00b REBUG REX Guide (via tortuga-cove.com/forums/viewtopic.php?f=128&p=13562#p13556)
This guide is for CEX users this is not a DEX MFW! If you want to use this firmware and your on DEX I suggest you find another tutorial to get you back to CEX.
Step 1. Make sure your on CFW 3.55, eject any game disk you have in the drive, (blu ray comes before usb media and we wouldn't want that)
Step 2. Even if your console has never been downgraded I suggest you do this step anyway.
Install REBUG toggle QA pkg, run the pkg, now you should of heard some beeps. Next go to network settings and do the button combo to ensure that the system was properly dehashed.
L1 R1 L2 R2 L3 and DOWN on the d pad (all at the same time) debug settings should appear. If it did not try all the steps again.
Step 3. If your on 3.55 and you wish to stay at 3.55 then use the 3.55.3 REX pup. If your on 3.55 and you want to go to 4.21 then use the 4.21 REX pup.
Now once you have downloaded the firmware that you wish you will need to rename it like this. For 3.55 REBUG_3.55.3_REX_PS3UPDAT.PUP to PS3UPDAT.PUP and for 4.21 REBUG_4.21.1_REX_PS3UPDAT.PUP to PS3UPDAT.PUP.
Now you will need a usb stick formated to fat 32, then you will need to create a folder on the root of the usb stick called "PS3" then inside that folder you will create another folder named "UPDATE". So it will look like this.
PS3UPDAT.PUP being the firmware that you are choosing to install.
Step 4. Plug the usb stick into the far right port on the ps3 (closest to the blu ray drive) and navigate to the system update, and select via storage media. Let the firmware install. DO NOT TURN OF OR TOUCH THE PS3.
Step 5. Congrats now your on REBUG.
Step 6. Go to the game catagory and then to "package manager". Next to "install package files". Last to "PS3 hard disk". Then you will see "REBUG TOOLBOX", install it.
Step 7. REBUG TOOLBOX should now be in your xmb run the app.
Step 8. This is not needed unless you want the settings I use. Either way here they are.
System Mode = REBUG
XMB Operation = DEBUG
Now your spoofed and should be able to access PSN/SEN with your account information. WARNING: CHANGE OTHER SETTINGS AT YOUR OWN RISK!
Itskamel's Dummy_BDEMU tutorial for REBUG REX (via tortuga-cove.com/forums/viewtopic.php?f=128&t=3857#p13683)
This is for people who have a broken blu ray drive but their logic board is still working and are having issues playing some backups. This is only available for use on REBUG REX firmwares 3.55.3 and 4.21.
1. Pc and a PS3
2. USB stick (512MB minimum)
3. Disc Image Generator Software (ps3gen)
4. Playstation3.iso Dummy BDEMU image
5. REBUG (REX) CFW 4.21 or REBUG (REX) 3.55.3 operating in DEX mode with DEX lv2_kernel (FULL DEX MODE)
Step 2. Connect a USB HDD to your PC to be used for BDEMU
Step 3. On your PC run ps3gen, then click the "show" button in the top right hand corner. Next click "Select File", then locate the "PLAYSTATION3.iso" that you extracted to your desktop earlier. Next click "Save / Emu" button". Then select "Write image to BD EMULATOR HDD". After that you will select your BDEMU HDD, lastly you will pick a slot from the list and click "Write Image".
Step 4. Now moving on to the REBUG firmware, you will need to install the "REBUG TOOLBOX" (this was also in the rar file that you extracted to your desktop.. install it by putting it on the root of a usb stick and via install pkg files "standard location".
Step 5. Setting up REBUG TOOLBOX to use with Dummy_BDEMU
Open "REBUG TOOLBOX" and choose the following settings.
REBUG MODE / DEBUG XMB / DEBUG MENU
"DEX / CEX"
Flash your DEX EID0 NOR/NAND file (DEX-FLASH.EID0.NORBIN or DEX-FLASH.EID0.NANDBIN file on /dev_usb000 stick) Now hold down circle to quit the toolbox and restart the PS3
Step 6. Go to debug settings in the xmb and choose the following.
Blu-ray Disc Access to BD Emulator (USB)
Next turn off the PS3.
Step 7. Connect the BDEMU HDD drive/ stick to the far right port on the ps3 (the one closest to the blu ray player), and then turn on your PS3.
Now you should see "PLAYSTATION3" Game Disc mounted in the XMB game column.
Step 8. Install multiman 4.10.00 via pkg manager (this again was one of the files you extracted earlier).
Step 9. Start up multiman 4.10.00 from the xmb and then load a game from your internal or external HDD (connected to another port) DO NOT UNPLUG THE BDEMU USB DRIVE!
Step 10. Start your game from the Disc Icon in the XMB
Update: From Cyberskunk: Hey peoples.. Thanks for the help with the dumps.. Incoming very soon once we get our site back up (After more than 2years they finally managed to get our site taken down).
Bug fixed 3.55.4 and 4.21.2 REX
Rebug Toolbox 02.01.00
New 4.30.1 (CEX Lv2 Kernel only).
A bit later than i would have liked but here you go guys..
REBUG 4.30.1 STANDARD
REBUG 4.21.2 REX EDITION
REBUG 3.55.4 REX EDITION
All PUP include the updated REBUG TOOLBOX 02.01.00 and have the PS2 loading issue fixed and we are happy to say we have patched 'undocumented function 114' to allow mapping of protected memory.
Also 4.30.1 is the first true 4.30 CFW/MFW that does NOT use any files from 4.2x firmware inside lv0 (lv1ldr to be specific). The original post has been updated.. Enjoy