GeoHot Releases dePKG - PS3 Firmware Package Decrypter


172w ago - Despite retiring from the iPhone and PS3 scene shortly before PS JailBreak first surfaced (amid rumors from one reseller that appear to point in his direction), today GeoHot has reappeared and shared dePKG which is a PlayStation 3 Firmware Package Decrypter!

Downloads: dePKG PS3 Firmware Package Decrypter / dePKG r1 PS3 Firmware Package Decrypter by daGraveR / dePKG (Pre-Compiled x86_64 and x86) by daGraveR / dePKG (Pre-Compiled Win32) by XVortex / dePKG (Pre-Compiled Win32) and Dissect_CoreOS by cory1492 / Decrypted CORE_OS PKG UnPack Script by anomaly / CORE_OS_PACKAGE.pkg Extract by talruum / Guide: Extracting dev_flash from PS3 Firmware Updates by netkas / FwTool to Encrypt PS3 Firmware Package Files by waninkoko / PS3 Firmware 3.41 Decrypt / PS3 Firmware 3.50 Decrypt / FwTool (Pre-Compiled) by evilsperm / PS3 PUP Update File Extractor/Creator and PS3 PUP Update File Extractor v2 by KaKaRoToKS / PS3 Decrypt Tools (Windows) / PS3 Firmware Toolbox v1.0 and PS3 Firmware Toolbox v1.1 by Chossy / PS3 Decrypt SELF by GFK

In his post, GeoHot simply stated the following, to quote:

"A Little Gift for the Scene
#1419148 - Pastie

Decrypt pkg files computer side.
Mad props to fail0verflow"

Additionally, cory1492 states the following there: "CORE_OS_PACKAGE is NOT a .tar, it's a flash image - to extract it's contents you need to parse it out... a really shoddy/quickly made win32 built extractor for CORE_OS_PACKAGE is attached. Drag and drop your decrypted CORE_OS_PACKAGE onto the exe and it will extract the binaries inside (keep in mind most everything inside it is crypted, it contains the lv1/lv2 selfs and some spu modules and the like.) There shouldn't be anything in there that would prevent a very fast port to *nix (and many thanks go to graf_chokolo for partially documenting the structure on his hv reversing page at lan.st wiki.)

Also did a msys build of the depkg for windows which doesn't rely on external code, source included along with all the COPY notices that go with the aes implementation I used (also I'm running it on win7 x64 from the command line without issue, though it is a 32bit targeted build.)"

As a follow-up, Mathieulh Tweeted the following confirmation: "http://pastie.org/1419148 <== thx geohot /me whistles"

To quote from PSGroove: "The app is very useful for devs, that are planning to look into Sony's official firmware files. dePKG is a linux app, that will decrypt PKG files (not to be confused with PSN PKG files), that are within PS3UPDAT.PUP files.

This will allow devs to take a look at files such as CORE_OS_PACKAGE.pkg, from the convenience of their PC. Previously, the only way to take a look at these files, was via graf_chokolo's method, which utilized the PS3. Geohot's app is ready to be compiled and includes the necessary decryption keys."

The PS3 Firmware Package Decrypter source code is linked above, and also can be found below as follows: http://pastebin.com/qvJdMtvX

Little script to unpack the decrypted core_os pkg by anomaly:

http://pastebin.com/ujUdWEeW
http://pastebin.com/7VViLpAf

From kamikatze, a Decrypted 3.41 CORE_OS_PACKAGE Extract Shell Script: http://pastebin.com/VzGwVYte




Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene updates and homebrew releases!

Comments 88 Comments - Go to Forum Thread »

Quick Reply Quick Reply

BwE's Avatar
#78 - BwE - 172w ago
When the console displays the yellow light, its indicating a hardware problem. If there was a software issue youd have the red screen error or you would have a flashing red light.

I thought you of all people would know this. You simply had bad luck.

Edit: I'd love to try your pup

Luckluka's Avatar
#77 - Luckluka - 172w ago
Repack PUPs using gPUP (found on this forums)

And a word of warning: Do not flash any customized firmware that you create

I tried to do a 3.41/3.50 hybrid, replaces CORE_OS_PACKAGE.pkg of 3.50 with the 3.41 one, repacked it and flashed it through service mode...

Guess what...: YLOD

evilsperm's Avatar
#76 - evilsperm - 172w ago
Waninkoko's fwpkg encrypter/decrypter compiled:

Someone might want to explain on how to repack the CoreOS after extraction.

Anyway I'm going out for a bit to party have fun everyone Happy New Year!

talruum's Avatar
#75 - talruum - 172w ago
I'm playing right now with CORE_OS.

The only files that differ from debug to retail are:

  • default.spp
  • lv1.self
  • lv2_kernel.self

So, the loaders are identical (maybe the keys to decrypt everything too).

And the code from Waninkoko is still buggy I guess. When you crypt again, the filesize isn't the same. Try by yourselves to decrypt -> encrypt -> decrypt -> encrypt, and you'll see that you cannot do it. I'll look at the code to see...

Btw, revived my ps3 with 2.20hybrid + infectus from oldddd days. Let's try to bring it to 3.41 alltime debug/test

PS3 News's Avatar
#74 - PS3 News - 172w ago
Added to the first post, and +Rep talruum and zeromx!

Also, from http://netkas.org/?p=584:
Guide: extracting dev_flash from firmware update.

With recent release of geohot’s depkg its now easy for everyone to extract content of dev_flash and dev_flash3 from ps3 update pup file.

get files first - ps3 pup unpacker, depkg

extract and compile depkg.c (linux/osx/windows+cygwin):


then extract PS3UPDAT.PUP with pup unpacker, find File_7.tar in extracted folder, untar it to new folder, you will get a lot of pkgs there and dev_flash files.

enter dir with extracted files, copy compiled depkg to it and run this bash script:


after it you will get content of dev_flash and dev_flash3 of firmware you choosed.













Affiliates - Contact Us - PS3 Downloads - Privacy Statement - Site Rules - Top - © 2014 PlayStation 3 News