Need some info about how the ps3 3.55 firmware exploit works

D

Danyaal Majid

Member
Hello Good People,
I am a person who is passionate about hacking stuff,including iphones,android phones,computers and ps3s and am interested in getting started to hack the latest ps3 firmware in hope to find a successful exploit which enables full homebrew support for the ps3 superslim and slim25xx models which are unhackable.i am in search of some one who can teach me how the original 3.55 kernel exploit worked by code and hopefully get me into the latest exploits available.my ps3 is a superslim which is using ps3xploit and i have hacked previous models for my friends and would wish if someone can teach me the in depths of ps3 hacking and exploit making.i know that the ps3xploit team are hard at work finding a way for homebrew to run on unsupported models,but its worth a shot to develop a cfw for the unsupported models.
Thanks to anyone who shares their knowledge about ps3 hacking with me.
(p.s i posted here because i was not able to find any info about the exploits online)
 
3.55 exploit and ps3xploit 2.0-3.0 are different approaches.

For 3.55 exploit you can see CCC 2010 fail0verflow's presentation. Jump to minute 35:44 if you want to skip all the background info.

For background info about ps3xploit for 4.81-4.82 read this post:
http://www.psx-place.com/threads/of...ore-incoming-could-superslim-be-hacked.15389/

Additional articles of interest:
http://www.psdevwiki.com/ps3/Boot_Order
http://www.psdevwiki.com/ps3/Keys
http://www.psdevwiki.com/ps3/Bugs_&_Vulnerabilities
http://wololo.net/2016/08/04/henkaku-exploit-partially-reverse-engineered-explained/
https://en.wikipedia.org/wiki/Return-oriented_programming
 
In a nutshell. Sony fucked up. We are able to calculate the private key for signing firmwares 3.55 and below. We can modify any of those firmwares and install them just like any firmware. It really isn't an exploit. We just resigned modified firmware. They fixed it after 3.55 when failoverflow went public with it.


Sent from my iPhone using Tapatalk
 
sony fucked up was what I was going to put, but I wasn't sure how that language would come across. ;)
 
You must log in or register to reply here.

Similar threads

Back
Top