Ps3 hen 20.2.0 ???

aleks1992

aleks1992

Member
Good evening

After hdd change, I reinstalled hen on my super slim through Coro links last night ...... Everything is ok until a few minutes ago...

At the moment, Every time i click on hen symbol, system try to update the 20.2.0 Version (failing the installation)...

What the hell is This update?????

You can see a little video i've just recorded, and a photo...



Thanks for what all you've done for ps3 mod scene...
 

Attachments

  • IMG_20230213_235418.jpg
    IMG_20230213_235418.jpg
    199.2 KB · Views: 93
that is not official hen. after you installed hen, you must have installed some pkg that replaced the main hen file. it is easy to make a pkg that installs some homebrew or game and also sneak in a hen replacement. install HFW and HEN again to be sure all unwanted files are gone.
 
I am also having this issue. Does the reinstallation of Hen also require installing OFW and formatting the ps3 beforehand?
Thank you.
 
Coro said:
that is not official hen. after you installed hen, you must have installed some pkg that replaced the main hen file. it is easy to make a pkg that installs some homebrew or game and also sneak in a hen replacement. install HFW and HEN again to be sure all unwanted files are gone.
Click to expand...
I am also having this issue. Does the reinstallation of Hen also require installing OFW and formatting the ps3 beforehand?
Thank you.
 
Actually, this should be happening to everyone who has auto update enabled with HEN, maybe someone else is using the **ps3xploit.com >Domain no Longer owned by team** (ps3xploit.me =new) domain?

I've disabled auto update for now.. for anyone else:
Disable internet
Enable HEN
Network > Hybrid Firmware Tools > Maintenance > Toggle Automatic Update

I seriously wouldn't trust anything that comes from there, at least the pkg doesn't install, but how long will that last? could be someone trying to mass brick consoles or steal HWID's.. but tbh if these sites (**ps3xploit.com >Domain no Longer owned by team** (ps3xploit.me =new)/.me, bgtoolset) weren't broken for half a year and counting, we wouldn't be in this position
 
Had the same idea but I haven't been able to find the maintenance tab or the "Toggle Automatic Update" overall since this started happening.
 
^ cant edit post again, but use the Alternate HEN Installer, and follow instructions, this gave me the toolbox back
 
Thanks Guys for answers,
I reinstalled hfw & hen (Coro Alternate github method) & disabled autoupdate at the moment.

Message for the Hen users: if you have the same issue, report in This thread!

Message for hen developers: please let us know what happens...
 
Last edited:
This is happening because the HEN auto update is looking for an update on the old domain "**ps3xploit.com >Domain no Longer owned by team** (ps3xploit.me =new)", it happens that this domain was auctioned in the last few days, I could see the bets. Now a hosting site bought it, or someone, and for some reason it's downloading the site's page files as the new HEN. I used HxD to check what was in the package, it's just html and website page files.
 
Mello_1993 said:
This is happening because the HEN auto update is looking for an update on the old domain "**ps3xploit.com >Domain no Longer owned by team** (ps3xploit.me =new)", it happens that this domain was auctioned in the last few days, I could see the bets. Now a hosting site bought it, or someone, and for some reason it's downloading the site's page files as the new HEN. I used HxD to check what was in the package, it's just html and website page files.
Click to expand...
Better remove that auto-update feature then before someone abuses the domain and uploads a malicious payload.
Might want to consider digital signatures for auto-updates in the future.
 
bucanero said:
to disable the HEN auto-update, you can do it manually , just create an empty file here:

/dev_hdd0/hen_updater.off

that's all
Click to expand...
What I meant is that new installations of HEN should either come with it already disabled or, preferably, have the auto-updater check for a valid digital signature. Not everyone who uses HEN is going to read this thread, in fact, probably most won't, and whoever purchases that domain can exploit it to install malware on users' consoles.
 
the new page at the old address is returning a simple web page even if the file requested is not there. so i think that the update check thinks that it is saying an update available. then the ps3 asks for pkg and gets another webpage so it thinks that is the pkg but install fails because it is just an html page.

I ASSUME :)

BTW anybody that used AutoHEN may not have HFW tools. just make the empty file like @bucanero said.
 
You must log in or register to reply here.

Similar threads

Back
Top