PSGRADE Free PS3 Downgrade Hex Released - Master Key Found!

[DJXFMA]

Since the release of PS3 Firmware v3.55 there is no sense in keeping the master key a secret any more - it has been released, along with unencrypted payloads, and a promise to release the source-code by PS3YES for a free PSGrade PS3 downgrader.

Download: PSGrade / PSGrade PS3 Hex Codes

Of note, the downgrade hex will only work on PS3's with a firmware of 3.50 or below.

The same team which brought the PSN spoof for online support of jailbreaks now has also brought us a Free Downgrade HEX for the PS3! PS3YES has released un-encrypted HEX files for downloading.

They promise open-source code to be release soon, but find below pre-compiled HEX files:

PSGRADE AT90USB646-16Mhz Teensy++ 1.0
PSGRADE AT90USB1286-16Mhz Teensy++ 2.0
PSGRADE AT90USB1287-8Mhz
PSGRADE PS3YES
PSGRADE PS3YES AT90USB162-8mhz
PSGRADE PS3YES AT90USB162-16mhz

This is the last line from psgrade_ps3yes.hex

:10164E00FFFFFFFFFFFFFFFF3278572D9090D5ACC5
:0C165E00AEF903CA1AB65EF1B7694CDEA3
:00000001FF

Of note, The master key has been stated to be:

04 4E 61 1B A6 A6 E3 9A 98 CF 35 81 2C 80 68 C7 FC 5F 7A E8

Furthermore: A PS3YES flash update and PS3 Downgrade guide have been posted here and PS3Key flashes have been posted here.

PS3YES has stated, to quote:

"Our downgrade firmware is based on the PSGrade project, we will open the source soon.

Support for the following:

PS3YES AT90USB162 8mhz
PS3YES AT90USB162 16mhz
AT90USBKEY at90usb1287 8mhz
Teensy++ 1.0 at90usb646 16mhz
Teensy++ 2.0 at90usb1286 16mhz

Remember PS3YES were the first to release that PSN Hack that lasted a week on their Chinese forums!

Also sadly v3.55 is out so you can only use this great release to Downgrade v3.50 or LOWER firmwares!

NOTE: Importing the HEX to other devices using current payload converters will NOT work!"

graf_chokolo says: The key from KaKaRoTo for 0xAAAA dongle id is fine Just tested it by communicating directly with USB Dongle Authenticator from GameOS through DM VUART. Congratulations KaKaRoTo Good work!



More PlayStation 3 News...

[elser1]

thanks.. i'm sure a lot of people can and will use this..

[Tidusnake666]

TUTORIAL:

Part 1 : How to update PS3YES-Pro's firmware

Step 1. Connect PS3YES-Pro to your PC's USB port
Step 2. About 6 seconds later , PS3YES-Pro's 8MB USB storage will be install on you PC.
Step 3. Right-click on the USB driver's root path, and create a new text file and renamed it to 'enterduf'.
Step 4. Eject the USB driver to PS3YES-Pro, remove it from PC and re-plug it to your PC's USB port.
(The following steps also used on PS3YES! and PS3YES-Pro too)
Step 5. About 30 seconds later , the LED on PS3YES-Pro will switch off, you should install the ATMEL DFU driver to run the FLIP tool. You can jump to Step 8 if it was istealled aleady.
Step 6. Install drivers to "AT90USB162" device, you should download and install FLIP tool from ATMEL.
Step 7. You can found drivers to "AT90USB162" in the path of FLIP was installed, for example : "C:\Program Files\Atmel\Flip 3.4.2\usb".
Step 8. Download the correct firmware's hex file. Make sure it was storage in a full English path and without space. for example "c:\".
Step 9. Run the FLIP tool. Make sure at the first use the "Load Hex File..." menu under "File" menu to load the new firmware hex file.
Step 10. Click the USB icon on FLIP and select "USB" , or press CTRL-U , and click "open" button in the following dialoag.
Step 11. Click "Run" button start update PS3YES-Pro's firmware. it will display like this : if done.
(The fimware was updated now, the following step just fit to PS3YES-Pro, for stop enter DFU mode next time.)
Step 12. Remove PS3YES-Pro from PC and plugin it again.
Step 13. Delete the file "enterdfu" from the USB drivers's root path in 30 seconds.

Part 2 : How to use PS3YES-Pro downgrade the console's firmware from 3.50

Prepare: Download the downgrade files, an USB driver large to storage the upgrade files.
Step 1: Please update your PS3YES-Pro with downgrade firware as Part 1.
Step 2: Plug the "downgrade" PS3YES-Pro to the right port (close the Blue-Ray Driver), Power down the connsole and cut of the power. Re-connect power to the console, Press power on button , press the "EJECT" button in 200ms atfter power on button was pressed. Untill finished your downgrade , you don't need cut off the power angin.
Step 3: The screen to the console will flash servral time and auto-turn-off, you can remove the PS3YES-Pro now (You console now ready to enter "Factory Mode" now)
Step 4: Prepare an USB driver and formate it as FAT32 file system, copy two files to the USB driver: Lv2diag.self and PS3UPDAT.PUP, and place them under the root path. the the named "Lv2diag.self" should copy from the "Lv2diag.self FILE 1" folder.
Step 5: Plug the USB driver to the right USB port to the console, and remove any other USB driver from your console, press power on button to boot.
Step 6: Wait untill the console turn off again. Remove the USB driver from your console , and delete all the files, copy the "Lv2diag.self" from "Lv2diag.self FILE 2" folder to the USB driver's root path.
Step 7: Plug the USB driver to the right USB port to the console, and press power on button , It will leave "Factory Mode" now.
Last Step: After finished downgrade the console , you can update PS3YES-Pro back.

[Mantagtj]

Confirm working with minimus!

THANKS!

[Dotz]

any ideas on how i can get it to work with x3max? dunno what board it uses

[djdavedoc]

Waiting for a rock box port for this so I can downgrade my mates 3.50 ps3

[EiKii]

PS3Key Downgrader firmware online: ps3key.com/en/news/

tho i cannot find the files yet, maybe they didnt upload it just yet hopefully incoming

EDIT: added download for ps3key SILABS and ATMEL.

[moja]

This is great news! I actually have a couple teensy 2.0++ on their way right now! So, this is the open source we've been waiting for? Wonder who decided to 'leak' it from the commercial players?

[Tidusnake666]

Apparantly, mathilueth (or how is he spelled) "leaked" the master key via twitter:

0x32, 0x78, 0x57, 0x2D, 0x90, 0x90, 0xD5, 0xAC, 0xAE, 0xF9, 0x03, 0xCA, 0x1A, 0xB6, 0x5E, 0xF1, 0xB7, 0x69, 0x4C, 0xDE

but stated later, that ps3yes team had managged to find it without his help.

[oVERSoLDiER]

Just to set it right, doesn't work with my P3Go.