Sponsored Links

Sponsored Links

True Blue USB Dongle PS3 ELF Dumper and Source Code Surfaces


Sponsored Links
127w ago - Following up on the previous update, today I am releasing my True Blue USB dongle PS3 ELF dumper which works with any PlayStation 3 Firmware greater than 3.56 to dump the encrypted TB EBOOT / ELF files once they are loaded.

Download: [Register or Login to view links] / [Register or Login to view links] (Mirror) / [Register or Login to view links] (Mirror #2) / [Register or Login to view links] (Mirror #3) / [Register or Login to view links] (Mirror #4) / [Register or Login to view links] (Mirror #5) / [Register or Login to view links] (Mirror #6) / [Register or Login to view links] / [Register or Login to view links] (Mirror) / [Register or Login to view links] (DUMPEDBOOT.bin and DUMPEDBOOT1.bin) by arnes_king / [Register or Login to view links] by gibson25 / [Register or Login to view links] (np_trp_prx.rar) / [Register or Login to view links] (Mirror) / [Register or Login to view links] by mellss

Tested on:

  • Original 355 -> ok
  • True Blue CFW v2 -> ok
  • ...

There are some bugs (size of dump ...) but it works. It's ELF dumper from memory and it work with True Blue cfw v2 and any 3.55 firmware because it doesn't use lv2 peek/poke.

Warning: It will not brick your ps3. But I am not responsible for any damage.

HOWTO:

  • Enable dev_blind with multiman
  • copy libsysutil_np_trophy.sprx from /dev_blind/sys/external/external to dev_hdd0/ and rename it "orignal_libsysutil_np_trophy.sprx"
  • copy my modified "libsysutil_np_trophy.sprx" to /dev_blind/sys/external/
  • load a True blue game from multiman
  • exit multiman
  • run your game
  • wait few minutes (if you get black screen after 3 minutes reboot ps3)
  • exit game
  • go to ftp
  • in dev_hdd0/ there are your decrypted DUMPEDBOOT.bin
  • copy and rename it with another name.

Howto uninstall patch - Two ways:

  • You could uninstall this patch by replacing modified libsysutil_np_trophy.sprx by orginal libsysutil_np_trophy.sprx
  • Or update in recovery mode

Thanks to: Ps3dev

Brief Guide:

1 - Install TB ELF Dumper first as stated in its readme file.
2 - Start Multiman, it will make a dump of multiman eboots, so you must delete it first by browsing to dev_hdd0 then delete all DUMPEDEBOOT.BIN files you found there.
3 - Back to multiman game selection then select any TB game then launch it.
4 - Start the game from XMB then wait for some times until game start.
5 - Exit game now then start multiman again then browse to dev_hdd0 and now you must found a decrypted game dump.

From PlayStation 3 developer deank (via pastebin.com/avcM5iuU) comes a revision as follows:

Download: [Register or Login to view links] (np_trp_prx.rar) / [Register or Login to view links] (Mirror)

[Register or Login to view code]

Changed:

  • Doesn't stop dumping when it reaches embedded ELF
  • Dumps 35MB of RAM in one write call (so it takes ~1 second)
  • Dumps are saved in /dev_hdd0/RAMDUMP-##.BIN where ## is from 00 to 99 for 100 sequential dumps
  • Doesn't really require the original sprx, since loading never succeeds anyway
  • Tested: dumps mM, Beyond Good&Evil HD PSN...
  • Rebuilding the original 'elf' takes few minutes if you know what you're doing

Finally, from mellss: I tested shadoxi patch, in ofw 3.55 dex and 3.55 cfw it work fine (but like he said some buggy with size of dump). And also let him time to dump all memory!!! (it take for me around ~10 - 20 min !!!)

Proof Of Concept:

  • Download: [Register or Login to view links]
  • dumpedboot.bin -> decrypt EBOOT.bin fifa 953 ko (original eboot 68 ko) -> winhex offset of decrypted elf 0x0 to 0xEA60 ~61 ko
  • dumpedboot1.bin -> decrypt fifazf.elf 25 mo (original self 35 mo) -> need to increase size of dump to 35 mo

I make a fself EBOOT.bin (4.11 dex) which load reencrypted (flself) shadoxi patch and YES his patch dump my eboot and also some 4.11 dex lib sprx !!! So if someone can run shadoxi or deank patch when a game is running we can get decrypted 4.xx EBOOT.

I think TB team load the decrypted eboot to another offset in memory, that's why some of people get ps3 crash when TB was plugged. But, We can get this new offset by editing shadoxi exploit and print the address of a variable (stack address) to get the new one.






Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter, Facebook and drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene and PlayStation 4 scene updates and fresh homebrew PS3 Downloads. Enjoy!

Comments 860 Comments - Go to Forum Thread »

• Please Register at PS3News.com or Login to make comments on Site News articles.
 
#800 - fantopoulos - 133w ago
fantopoulos's Avatar
very crazy stuff, i think you will probably need kind of update, or adapter, or something for the true blue to work, the pieces just do not add up to me.

#799 - Erz - 133w ago
Erz's Avatar
Ouch! Please don't make another dongle

If they did make another dongle for high rocket price then, I guess I have to say goodbye to PS3 and welcome 360

#798 - leon315 - 133w ago
leon315's Avatar
man, you don't have to pirate, nor get their dongle...

#797 - elser1 - 133w ago
elser1's Avatar
I'm sure they've made enough ten times over considering its not their games they are allowing us to pirate. what about free verios, or karmas a bit hope you all go to jail tb there to modify it.

#796 - hey69 - 133w ago
hey69's Avatar
If it wasn't 60 bloody EURO maybe , and so would lots of other people i think

#795 - saito1234 - 133w ago
saito1234's Avatar
I'm afraid that if True Blue really releases a new dongle soon, they won't release any more eboot for the dongle, as it already has a lot of clones, and they probably want to sell more from their new dongle...

#794 - Xyth - 135w ago
Xyth's Avatar
TrueBlue (JB2) will stop production and another dongle will be released according to LighTake's site:

True Blue JB2 was stop producing and a newest replace product will be released in July, please pay close attention to TB official site news update in recently days. Any questions just contact sales for help.

A newer replace DRM dongle with build-in ndw function will be released July 20th.

Q: Does the old TB dongle compatible with the new one?
A: Yes! our supplier said the old TB will still get support on updating so that it can play new games as the new dongle. If there is a change, I will advance notice.

Q: What's the name and function of the new dongle?
A: It's still a mystery currently, I will update immediately if I heard something from our supplier.

We have confirmed that the new dongle is still called True Blue (aka JB2 / TB), but it was changed new packaging and add more function in it. What's the new technical support? I am sorry we don't know currently except compatible with the old TB eboots.

#793 - technodon - 137w ago
technodon's Avatar
i never tested my dongle updater before release, anyone else tried it? cause puss in boots seems to be the only one game that works it just happened to be the one that i tried? maybe i should start playing the lottery? lol. maybe it has some significance in reverse engineering the dongle though?

#792 - elser1 - 137w ago
elser1's Avatar
i'm a little confused (nothing new there) so does this mean with the pkg i can use a tb dongle once then instal pkg and no longer need dongle?

that would be great if so and if someone would lend/hire me a dongle for a day.. LOL

#791 - Xyth - 137w ago
Xyth's Avatar
Wololo's thoughts are ridiculously nonsense. Who cares if TB team will change encryption scheme. They still want us to believe if someone hacks TB, there will be no more new games. This is the same logic if we share PS3 exploits they can patch it. Who cares if Sony of TB patch their exploits. Of caurse they'll patch it, it is their job to protect their property. But if you call yourself a scene developer you can always comeup wit a new solution. This is what makes a scene The Scene.

These "It will lead to piracy" and "They can patch it" execuses are just a cover for their fear of Sony.

 

Sponsored Links

Sponsored Links







Advertising - Affiliates - Contact Us - PS3 Downloads - PS3 Forums - Privacy Statement - Site Rules - Top - © 2015 PlayStation 3 News

Sponsored Links