38w ago - Following up on his
previous release, today Sony PlayStation 3 hacker
Naehrwert has updated SCETool to version 0.2.9 which now includes an NP application types fix and more as detailed in the changes below.
Download:
PS3 SCETool v0.2.9 /
ZLib1.dll File (Required) /
ZLib1.dll File (Mirror) /
SCETool.exe v0.2.9 (no zlib1.dll or data folder required) by
ben.ss7
Version 0.2.9
- Plaintext sections will now take less space in metadata header keys array.
- Added option to specifiy a template SELF to take configuration values from.
- Added option to override the keyset used for en-/decryption.
- Fixed NP application types.
- [Firmware Version] will now be written to control info only.
- [Application Version] will now be written to application info only.
Finally, from
ben.ss7: Here is a scetool v0.2.9 which has zlib1.dll and the data folder embedded within the exe, which means it doesn't require you to have zlib1.dll and the data folder for keys.
The original scetool source code hasn't been touched and it shouldn't have any issues. The keys which have been embedded in to this exe are:
- NP_tid
- NP_ci
- NP_klic_free
- NP_klic_key
- NP_sig
- metldr
- bootldr(lv0)
If any user wants me to embed all the keys up to 4.31 PM me. Enjoy
any fix for fuse 3.55?interested to see what the games like.thanks!...
Download: https://github.com/spacemanspiff/oscetool/archive/master.zip / https://github.com/spacemanspiff/oscetool / https://github.com/naehrwert/scetool/archive/master.zip / https://github.com/naehrwert/scetool
To quote: OpenSCETool is a clone of scetool under an open source license. SCETool was reverse engineered and analized to produce this program, and copied his behaivour.
OpenSCETool (OSCETool) Changelogs:
Version 0.9.2
• Fixed rap/rif/idps/act.dat management. Now it works fine.
Version 0.9.1
• Fixed a segfault decrypt some SELFs.
• Added option -p to patch the sys_process_param when signing an ELF. This is the same as applying FixELF.exe before signing.
• Added support to klics.txt. If the klicensee is not specified, it is looked up in the data/klics.txt automatically (only for decrypt).
Version 0.9.0
• First commited version, compatible with SCETool 0.2.9.
Now GNU/Linux users can have a native tool too. If you want an SCETool replacement, remember to add this keys (this were in the code, you can find them in previous revisions of the code, or in flatz's rif/raf tools:
[NP_rap_initial]
type=OTHER
key=...
[NP_rap_pbox]
type=OTHER
key=...
[NP_rap_e1]
type=OTHER
key=...
[NP_rap_e2]
type=OTHER
key=....
[NP_rap_initial]
type=OTHER
key=869F7745C13FD890CCF29188E3CC3EDF
[NP_rap_pbox]
type=OTHER
key=0C030604010B0F08020700050A0E0D09
[NP_rap_e1]
type=OTHER
key=A93E1FD67C55A329B75FDDA62A95C7A5
[NP_rap_e2]
type=OTHER
key=67D45DA3296D006A4E7C537BF5538C74
Version 0.2.9
• Plaintext sections will now take less space in metadata header keys array.
• Added option to specifiy a template SELF to take configuration values from.
• Added option to override the keyset used for en-/decryption.
• Fixed NP application types.
• [Firmware Version] will now be written to control info only.
• [Application Version] will now be written to application info only.
Version 0.2.8 (intermediate release):
• Fixed minor bugs where scetool would crash.
• Added SPP parsing.
• Decrypting RVK/SPP will now write header+data to file.
Version 0.2.7:
• Added local NP license handling.
• Added option to override klicensee.
• Added option to disable section skipping (in SELF generation).
Version 0.2.5:
• Added option to use provided metadata info for decryption.
• "PS3" path environment variable will now be searched for keys/ldr_curves/vsh_curves too.
Version 0.2.4:
• Added option to display raw values.
• Moved factory Auth-IDs to (as they are on ps3devwiki now).
Version 0.2.2:
• Added options to override control/capability flags (32 bytes each).
• Fixed where a false keyset would crash scetool when decrypting a file.
• Some source level changes and optimizations.
Version 0.2.1:
• zlib is required to use scetool.
• 'sdk_type' was changed to 'revision' in data/keys.
Greetings to: you know who you are!
More PlayStation 3 News...
Download: http://www.mediafire.com/?xi61k6jc9vj8g6s / http://www.mediafire.com/?hy22xvcu6l9y6x8
Changelogs:
v1.25:
1. Add subfolder traversal in edat/sdat folder.
2. Fix 2G+ file handling issue (probably).
3. Fix syntax issue while handling certian edat files.
4. Re-adjust the mainmenu.
v1.2:
1. Add SDAT file supporting.
v1.1:
1. Fix Java OutOfMemory for encrypting big files.
2. Add JVM Memory config in toolcore.cfg.
v1.0 Features:
1. Decrypt and encrypt edat files on pc.
2. Fast rebuild mode.
3. Batch mode.
4. Dev Klic should be input manually at now.
Finally, from oakhead69: Hi jjkkyu, If you have based your code on my C# code which in turn is based on the port by KDSBest. There is a significant bug in the reverseByteWithSizeFIX code.
It will fail the hash check on some data blocks, hench KDSBest removed the test. More importantly when generating the hash for the data blocks during encryption, the hash will be incorrect. Hench the resulting SDAT/EDAT will be bad. I have attached some updated code below.
public static byte[] reverseByteWithSizeFIX(byte[] b)
{
int i;
byte[] b2;
if (b.Length < 0x10 && (b[b.Length - 1] & 0x80) != 0)
{
b2 = new byte[0x10];
for (i = 0; i < b.Length; i++)
{
b2[b2.Length - 1 - i] = b[i];
}
for (i = b.Length; i < 0x10; i++)
{
b2[0x10 -1 - i] = 0xff;
}
}
else
{
b2 = new byte[b.Length];
for (i = 0; i < b2.Length; i++)
{
b2[b2.Length - 1 - i] = b[i];
}
}
return b2;
}
More PlayStation 3 News...
Decrypt: vou30.edat
Content ID: EP9001-BCES00569_00-0000000000000000
Done!
Key found: 00000000000000000000000000000000
Decrypt: vou30.edat
Content ID: EP9001-BCES00569_00-0000000000000000
Done!
Key found: 72F990788F9CFF745725F08E4C128387
Decrypt: vou30.edat
Content ID: EP9001-BCES00569_00-0000000000000000
Done!
Key found: 44F8C99E9272AEAAEFA946680E1DC590
Decrypt: vou30.edat
Content ID: EP9001-BCES00569_00-0000000000000000
Done!
Key found: 8D5B3D9ACE0BAC2794A1434D92E689F7
Decrypt: vou30.edat
Content ID: EP9001-BCES00569_00-0000000000000000
Done!
Key found: 00875F084DF2B8D68AA06D55335E1276
and many more, but any key doesn't work
regards