Sponsored Links

Sponsored Links

PS3 SCETool, Friday Isolated SPU POC and EIDTool WIP Updates


Sponsored Links
148w ago - This weekend Sony PlayStation 3 hacker naehrwert has released a PS3 SCETool based on the fail0verflow tools, an Isolated SPU binary POC dubbed Friday and some EIDTool work in progress updates for PlayStation 3 developers interested in remarrying Blu-ray drives, motherboard keys, QA tokens, etc via [Register or Login to view links].

Download: [Register or Login to view links] / [Register or Login to view links] / PS3 SCETool v0.0.3 and VSH.Self Output / [Register or Login to view links]

Below are the details from the ReadMe files and Tweets, as follows:

SCETool (C) 2011 by naehrwert - This tool will see more features in the future.

Notice: THIS CAN DO NOTHING NEW, IT'S CURRENTLY JUST A REWRITE OF f0f TOOLS.

Keyfile format:

[Register or Login to view code]

A sample keyfile is included.

Shout-outs: I think they know who I mean

Friday (C) 2011 by naehrwert - This is a POC for a isolated spu binary. Generate a self encrypted+signed with the metldr keys out of friday.elf. Then use friday.h to write a PPU application that loads the self by utilizing metldr and DMAs your console's EID2 to the shared SPU LS. It will generate the P and S block from it, that is used to pair the BD drive to the specific console. Yon can then DMA the blocks out from the LS and send them to the drive to remarry it to the console.

Communication with the SPU is done over in_mbox and out_mbox. MSG_OUT_* is send from the SPU code to out_mbox. MSG_IN_* should be written from the PPU to in_mbox. When MSG_OUT_READY arrives the PPU should DMA the EID2 to EID2_START and send MSG_IN_READY. When MSG_OUT_GEN_DONE arrives the PPU should DMA the blocks out from BLOCKS_START and send MSG_IN_DIE.

Note: this is UNTESTED but should just work

POC [Register or Login to view links]

note: self part is only for spu yet!

scetool [Register or Login to view links]

veeeery nice [Register or Login to view links]

[Register or Login to view code]

[Register or Login to view links]

[Register or Login to view code]


[Register or Login to view code]

which I can generate and yes my eid4 passes the hash check

but one would need to get the aes_omac1 key to be able to check it

hmm eid4 digest is stored unencrypted

seems like there are some hardcoded eid4 fallback bytes - [Register or Login to view links]

[Register or Login to view code]

scetool/eidtool progress is great




Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene updates and homebrew releases!

Comments 234 Comments - Go to Forum Thread »

• Please Register at PS3News.com or Login to make comments on Site News articles. Thanks!

PS3 News's Avatar
#209 - PS3 News - 73w ago
Following up on his previous updates, today PlayStation 3 developer JjKkYu has released TrueAncestor EDAT Rebuilder v1.2 followed by v1.25 with details below.

Download: [Register or Login to view links] / [Register or Login to view links] / PS3 SDAT/EDAT v3 and v4 Keys

Changelogs:

v1.25:

1. Add subfolder traversal in edat/sdat folder.
2. Fix 2G+ file handling issue (probably).
3. Fix syntax issue while handling certian edat files.
4. Re-adjust the mainmenu.

v1.2:

1. Add SDAT file supporting.

v1.1:

1. Fix Java OutOfMemory for encrypting big files.
2. Add JVM Memory config in toolcore.cfg.

v1.0 Features:

1. Decrypt and encrypt edat files on pc.
2. Fast rebuild mode.
3. Batch mode.
4. Dev Klic should be input manually at now.

It seems Windows 8 cannot pass the java check.. maybe fix it in next version.

Finally, from oakhead69: Hi jjkkyu, If you have based your code on my C# code which in turn is based on the port by KDSBest. There is a significant bug in the reverseByteWithSizeFIX code.

It will fail the hash check on some data blocks, hench KDSBest removed the test. More importantly when generating the hash for the data blocks during encryption, the hash will be incorrect. Hench the resulting SDAT/EDAT will be bad. I have attached some updated code below.

[Register or Login to view code]

More PlayStation 3 News...

ps33ps's Avatar
#208 - ps33ps - 75w ago
for me at the moment, a waste of time. 28 hours waiting and key not been found. UnEDAT show devklic very fast but klic is invalid. probably only flatz tools show good devklic

ps33ps's Avatar
#207 - ps33ps - 76w ago
how to get devklic? i try to decrypt dlc gran tuismo 5 BCES00569 and i use Bruteforce Edat 1.0.4 but not working properly foundkey:

Decrypt: vou30.edat
Content ID: EP9001-BCES00569_00-0000000000000000
Done!
Key found: 00000000000000000000000000000000

Decrypt: vou30.edat
Content ID: EP9001-BCES00569_00-0000000000000000
Done!
Key found: 72F990788F9CFF745725F08E4C128387

Decrypt: vou30.edat
Content ID: EP9001-BCES00569_00-0000000000000000
Done!
Key found: 44F8C99E9272AEAAEFA946680E1DC590

Decrypt: vou30.edat
Content ID: EP9001-BCES00569_00-0000000000000000
Done!
Key found: 8D5B3D9ACE0BAC2794A1434D92E689F7

Decrypt: vou30.edat
Content ID: EP9001-BCES00569_00-0000000000000000
Done!
Key found: 00875F084DF2B8D68AA06D55335E1276

and many more, but any key doesn't work

regards

BerserkLeon's Avatar
#206 - BerserkLeon - 76w ago
So.. it only works if we find the klic for the edat we want to decrypt? If there's a way to automate cracking it (I've suggested this before but.. CUDA/OpenCL anyone?) that would make this even better, but This is great nonetheless. Does it work on all types of edat? Like DLC, paid themes, iso.bin.edat, docinfo.edat, etc.?

PS3 News's Avatar
#205 - PS3 News - 76w ago
Following up on his previous updates, today PlayStation 3 developer JjKkYu has released TrueAncestor EDAT Rebuilder v1.0 followed by v1.1 with details below.

Download: [Register or Login to view links] / [Register or Login to view links] by RikuKH3 (Here's unedat tool, it decrypts any EDATs and you don't have to enter devklic key. Java and bcprov-jdk16-1.46 required.) / [Register or Login to view links]

To quote: Finally, everyone can use this tool to decrypt and encrypt edat files on pc.

Thanks for KDSBest, JuanNadie, flatz, aldostool, BUC and other people I did not mentioned. Without their previous hard work I would not have made this tool.

TrueAncestor EDAT Rebuilder v1.0 Features

1. Decrypt and encrypt edat files on pc.
2. Fast rebuild mode.
3. Batch mode.
4. Dev Klic should be input manually at now.

If someone can make a command line bruteforce dec_klic tool for me, it would be fantastic.

Below is a video from Mustgaming andeverything showing you how to decrypt all PS3 dlc games (no need for any react psn anymore) with free dlc edat. This gui can decrypt and encrypt all kinds of edat and we can make our own fixes




EDAT Files List

[Register or Login to view code]

v1.1 Changelog:

1. Fix JavaMemoryOut for encrypting big files.
2. Add JVM Memory config in tool\core.cfg.

ReActPSN does everything for you if you only want to play games or dlcs. Since edat can be decrypt now, we can get raw game data. It is more easy for people to edit the gamedata or create an unlock edat that has not been released officially. If you encrypt the file with improper dev klic, the edat file will not work. Some public dev klic you can use now:

2A6AFBCF43D1579F7D738741A13BD42E for Minis
52C0B5CA76D6134BB45FC66CA637F2C1 for PSX
72F990788F9CFF745725F08E4C128387 for Theme/C00 unlock edat
0DB85732366CD734FC879E743343BB4F for PSP Remaster

From capostef: Some klics I have found

Sonic Adventure NPUB30249 78451236947833568742332154875567
Sonic Adventure 2 NPUB30579 780589151DC3468A5818CE6626166518
GTA IV NPUB30702 12345678123456781234567812345678
Worms Armageddon 2 NPUB30230 C4063B2BDD0C4A72813B740BA55324C2
PlayStation Move Heroes NPEA00303 4361726C2D48656E72696B52756C6573

Finally, in related PS3 homebrew news today [Register or Login to view links] is now released by Stephen88 (via ps3mod.altervista.org/T-PS3MOD-BETA-PS3GAME-INFO-V1-BETA?pid=74711#pid74711) who stated the following, roughly translated:

PS3Game Info is a simple PC program with which you can get a first impression of the characteristics of a certain game PS3, only to pull over the file PARAM.SFO! Here below the list of features that you can see about a game:

  • Internal disk (yes / no)
  • External disc (yes / no)
  • BD Mirror (yes / no)
  • Eboot Fix (yes / no)
  • Which Firmware required
  • External cache (yes / no)
  • Without disc (yes / no)
  • Updates (yes / no)
  • DLC (yes / no)
  • Size
  • True Blue (yes / no)

How does it work?

Information of each game are contained in a private database of PS3Mod, so you should expect excellent results. Since as you may have read in the title, this program is a beta, so please report me any deficiency / failure to improve the program and update the database! For Use: Drag the PARAM.SFO the game you want in the address box!



More PlayStation 3 News...

Sponsored Links

Sponsored Links
Sponsored Links

Sponsored Links







Advertising - Affiliates - Contact Us - PS3 Downloads - Privacy Statement - Site Rules - Top - © 2014 PlayStation 3 News