Help unbrick backwardscompatible PS3.. with fake BG Toolset

Dag05

Member
A couple of weeks ago I tried to jaibreak my near mint newly acquired backwardscompatible PS3 Phat Console with the dreaded russian BG Toolset.. at the time I didn't even know of the fake toolset and didnt think too much of it when it said fw 4.88 instead of 4.89
Long story short, it is bricked and I'm left with an incomplete nand backup of 239MB

after reading alot on the forums and doing research I purchased

a progskeet 1.21 Black Tar Edition (found one locally)
a 48 pin 360 universal clip

Unfortunately it seems the 48 pin 360 universal clip is not compatible with the progskeet, I should have bought the 32 pin instead.
Is it possible to wire the universal 48 pin clip up to the progskeet?
Soldering is not an issue at all (I have all the equipment for it and tinker in my free time with electronics to refurb or bring the best out of them) biggest problem is that I can't find any reliable information on how to solder the progskeet onto the ps3 to read and write to the nand chips
Can someone lead me to the right direction?
If it's important.. I'm based in austria and the ps3 is a modell cechc04
 
I learned about it here on the forums and suspected it after my ps3 got bricked. I learned of the fake bg toolset on a youtube video and left a comment stating the danger of following the instructions..
Thank you for your reply. I'll look into the software side but first I'll have to take a valid dump but for that I got to connect the progskeet 1.21 to the PS3.. after some further research I found out the progskeet is supposed to be pretty crappy and not even capable of properly taking a copy of the nand :( I read somewhere of converting the progskeet to the version 1.1 but as soon as I find any tutorial regarding the progskeet the damn site is down or its a different domain or some other shit hit the fan :(
 
I learned about it here on the forums and suspected it after my ps3 got bricked. I learned of the fake bg toolset on a youtube video and left a comment stating the danger of following the instructions..
Thank you for your reply. I'll look into the software side but first I'll have to take a valid dump but for that I got to connect the progskeet 1.21 to the PS3.. after some further research I found out the progskeet is supposed to be pretty crappy and not even capable of properly taking a copy of the nand :( I read somewhere of converting the progskeet to the version 1.1 but as soon as I find any tutorial regarding the progskeet the damn site is down or its a different domain or some other shit hit the fan :(

Learned about the risk here? not the fake..,
we have been blocking dangerous URLs and plastering warning all over

I am not surprised about YouTube its been a bad source of information, which is sad because there is a few channels who are actually really good, but so many bad ones though it makes it a bad platform to get information. You have to use it as a secondary type of thing and fact check but like i said a few do it right but so many do not.
 
I was going to say... isn't ProgSkeet ancient tech by now?

I remember that I wanted to buy a ProgSkeet back when PS3 PHATs were the only model and maybe slims were in the picture by then but yeah that was all around the time of GEOHOT 3.55 and maybe slightly after those moments in time?

Honestly, if you even look up ProgSkeet on YouTube all of those videos are 10+ years old by now with some of the youngest videos being about 6 years old (which is too old and I wouldn't trust those sources because they are probably not any of the people who developed the ProgSkeet and they are just making videos using really old methods to get some YouTube fame).

Couldn't he do this with a Teensy++? Though I've heard that NAND dumps are finicky in general...

I'm no good with NAND/NOR backups but can he maybe rebuild his NAND with another NAND dump that is identical to his incomplete?
 
Last edited:
Yes I could probably do this with teensy++.. but I have already shelled out 65€ for the 360 pin clip and the progskeet. Buying the teensy for like 35€ as Ive seen it on sites breaks the 100€ mark and shit is getting expensive at that point.. it really is a bummer
 
@RIP-Felix would this NAND brick recovery interest you given that we've talked about this a few weeks ago? Looks like a good opportunity to put the theories to test.
 
Well, I did make a pdf tutorial of the process I came up with based on our discussion. But I have not tested it! And I'm not sure what to do once you get the NAND back on the board. @vyktormvmpay25 likes to use the 3.55 FSM patched FW, but there is a process to get that updated from there. Like a 3 step process involving rogero, a spoofed FW intermediary, then you can update to latest CFW. Edit*** (step 1 Rogero999. step 2 Rogero 3.7 --> 4.25 spoof. Step 3 Rebug 486 lite. From there to whatever CFW you like).*** IDK about that part because I've not bricked a console myself and haven't had occasion to put the process to the test. I just know that @vyktormvmpay25 prefers this method because 'it fixes issues with noBD FW and previous CFW issues.' He could explain it better.

I was going to solicit help from the community on the the tutorial up to this point. It's attached, but please understand this is just me trying my best to figure it out based on the information I've been able to put together with limited help from the people who know how, but haven't made a comprehensive tutorial.

I would appreciate any feedback to make it better!

EDIT:
THIS TUTORIAL IS VERY BETA! Especially what happens at the end. I suspect I may need to add a section on making a FSM jig and installing certain FW's to update blind. So keep that in mind.

Also, I'm thinking perhaps we should copy the eFlash region table (0F000C0) also, in case the table references changed. I said to copy from /dev_flash (FAT16) GameOS devflash (0F40000) onward. But perhaps it would be better to copy the full section including the region table. So that's a question I guess.
 

Attachments

Last edited:
Thank you very much for the detailed tutorial! I shall test it out and give you feedback on it once I'm ready. First, I'll have to tackle the issue of soldering my progskeet 1.21 to my 48 pin 360 clip.. It came with the clip which is attached to a green pcb that goes through a ribbon cable to another green pcb which has 48 points ( up to 52 I think even) to which you can solder to
 
From that thread:

once you have your 256MB hardware dump, open it along with the 239MB dump.hex in an hex editor. Then copy/paste (write) the whole 239MB data of the dump.hex file to the 256MB hardware dump file at address 0x40000. Then save. That's all.
You'll obtain a clean full 256MB dump file ready to patch.

This may be easier. I'll look into it. I think it's a copy replace function. So it would just replace all the data from the bad dump with the backup and be easier than my method. Like he said there are many ways you can go about doing it.
 
Uh, yeah that's easier. Lol!

Just open dump.hex and copy everything (CTRL + A, then CTRL + C)
Open your "unified_bricked_flash.Bin" that you dumped from the actual NAND. Then go to (CTRL + G) address 40000. And paste write (CTRL +B). That'll replace everything in the bricked flash with everything from the backup. And all in the right places. Then just split those and write back to the flash. It'll be like it was before you jailbroke.
 
A couple of weeks ago I tried to jaibreak my near mint newly acquired backwardscompatible PS3 Phat Console with the dreaded russian BG Toolset.. at the time I didn't even know of the fake toolset and didnt think too much of it when it said fw 4.88 instead of 4.89
Long story short, it is bricked and I'm left with an incomplete nand backup of 239MB

after reading alot on the forums and doing research I purchased

a progskeet 1.21 Black Tar Edition (found one locally)
a 48 pin 360 universal clip

Unfortunately it seems the 48 pin 360 universal clip is not compatible with the progskeet, I should have bought the 32 pin instead.
Is it possible to wire the universal 48 pin clip up to the progskeet?
Soldering is not an issue at all (I have all the equipment for it and tinker in my free time with electronics to refurb or bring the best out of them) biggest problem is that I can't find any reliable information on how to solder the progskeet onto the ps3 to read and write to the nand chips
Can someone lead me to the right direction?
If it's important.. I'm based in austria and the ps3 is a modell cechc04
Can you add 360 clip model? Photo, also there are 2 models of 48 pins ziff socket, the one with 50 pins cable and the one with 32 pins. Yes pk kit will work on Intel based pc only, w7 64 bits, and you will struggle to get read on motherboard nands. Out pk kit will work well as teensy. Did those tests to many times.
As for pk kit I forgot completely what dat file work well with nor and what work best for nands.
https://s.go.ro/4zvdwdah
Trusted source I've got them working in 2017
 
Last edited:
imgres

this is the 360 clip with 48 pins
 
Is hard to trace and solder wires from green pcb to the pk kit pcb? I have that and it will work fine with right configuration.
I believe not at all, I have the skillset and the tools needed.. I just need the manuals or scematics where to solder to
Unfortunately whenever I find a link to a tutorial for the progskeet the link is dead
 
PS3_DualNand_Retail_ProgSkeet.png


Can I use this diagram and connect the blue and red points directly to my uniclip with the scematics you provided?
That way the uniclip can comunicate with the progskeet 1.21 (the ribbon cable is apparently not compatible with the progskeet)
This way I avoid soldering directly to the nand and can use the clip I bought.. is this the way to go about it?
 
Back
Top