Project: POC of PS3 RAM Dump and Decrypting 3.6+ Games

[PSNBRICK]

PSNBRICK WRONG! What you think the core dump option is made for ? It's to do a core dump from user space where the game elf run if a exception is recognized. So then the dev's get a core dump file and a txt file. With thoes both files they can exactly see where the code stop to work and start to debug it.

No man you are WRONG!, what you dump is the PPU Exception handler they never gonna give you any piece of ram where are the .ELFS.

[Brenza]

You can dump ram via homebrew

[PSNBRICK]

Almost you have peek, you really can

[ps3hen]

Please forgive me if i'm wrong but i don't think he has "many ways", he doesn't really know event if his app works properly.

yes, i do... if after a public release sony can patch the exploit.. yes, definitely yes. i know it's a very big work, it is dangerous and booring... there're so many games that wait to get patched!!

however i'd prefer to get new eboot & self (you don't need to edit them for 3.55) and keep a way to play new games but get locked another time... and be honest, how many people do you think have the knowledge to edit a file to make it compatible? I think not more than 4~5.

"how many people do you think have the knowledge to edit a file to make it compatible?" This is what cfwprohet's 'method' should if he intends to release it should include. At the very least you need to resign the .elf which is dumped from the ram, which ANYONE can do with a bit of reading.

[jabberosx]

sheeshh.. all i see is bickering. Exactly the reason why the so called "SCENE" is where it is today in the hands of dongles. Does it really matter if cfwprophet knows or not what he is doing ? But the fact that he is ATTEMPTING to do something and share while everyone else is just sitting on their butts whining he doesn't know anything ?? seriously ??

If you really really really WANT to show him up. Then do what he is trying to do and prove him wrong. Else just STFU. Peace out!

BTW, good job CFWprophet keep it up.

ps: no sense in flaming me. I don't care and not coming back to this thread.

[Brenza]

"how many people do you think have the knowledge to edit a file to make it compatible?" This is what cfwprohet's 'method' should if he intends to release it should include. At the very least you need to resign the .elf which is dumped from the ram, which ANYONE can do with a bit of reading.

I don't agree! you need skills to convert a decrypted 3.6x eboot for 3.55 ofw... and you need a debug to use the homebrew that dump the games so i think it's better if the exploit remains secret anyway the only one who can decide is cfwprohet

Btw if cfwprophet succeed in dumping elf from ram he is obviously free to release the files without editing them! The hardest part is dumping not editing!

[ps3hen]

Well we'll see when cfwprophet reveals his method what is required for the .elf dumping.

[cfwprophet]

PSNBRICK oO And you know that in case of.....? Dude just go on the first page of this thread and download my POC.rar there you have a elf of Blackbox in original state and dumped from RAM. We also dumped other games with this method. A CORE DUMP will spit out a file in size of 250MB and higher. Mostly filled up with 00 bytes and just a few sprx's along with the Game's ELF. It's not that hard to rebuild it. But anyway i will release in a few days and others then can do the same.

Brenza & PSNBRICK Where do we have peek&poke on higher FW's to dump new games out of RAM ? And even then you mean missing the knowledge that a game after exiting get cleared from user space. So how you both want to use a homebrew to dump the RAM with the game's elf in ?

[PSNBRICK]

I use a method like this and you have the truth about the homebrew dumper but well you should have a debug machine with Core Dump option enabled sorry but i never test it, i just read some docs about it, but about rebuilding if you have the original .self or eboot.bin you can know the size of the .ELF and some games have some sprx they are in those core dumps too?

[Brenza]

Brenza & PSNBRICK Where do we have peek&poke on higher FW's to dump new games out of RAM ? And even then you mean missing the knowledge that a game after exiting get cleared from user space. So how you both want to use a homebrew to dump the RAM with the game's elf in ?

Oh i don't know, that's your job!

You could start dumping a decrypted eboot, you may have to add peek to their cfw but i think it should not be so hard! =)