PS3 Toolset v1.1.003 Update

[bguerville]

The PS3 Toolset v1.1.003 is live at
** www.** ** www.ps3xploit.net > D... (NEW URL = http://ps3toolset.com)/bgtoolset

Use at your own risk.

PS3 Toolset v1.1.003 changelog:

1. Added 4.88 CEX support
2. Added NC 3.0 Flash9 exploit update with Actionscript Communication bridge to fine tune the piloting of the Flash 9 exploit
3. FMM updated to v1.3.1, minor update like IDPS save to file & a couple of small GUI fixes
4. JS ROP Framework v4.2 update. It brings minor perf improvements to existing features but more importantly it brings the PS3 Toolset framework in line with the requirements of the file manager tool I have been working on.

To those who have been waiting, enjoy your 4.88 CFW installation...

 

[aldostools]

The PS3 Toolset v1.1.003 is live at
** www.** ** www.ps3xploit.net > D... (NEW URL = http://ps3toolset.com)/bgtoolset

Use at your own risk.

PS3 Toolset v1.1.003 changelog:

1. Added 4.88 CEX support
2. Added NC 3.0 Flash9 exploit update with Actionscript Communication bridge to fine tune the piloting of the Flash 9 exploit
3. FMM updated to v1.3.1, minor update like IDPS save to file & a couple of small GUI fixes
4. JS ROP Framework v4.2 update. It brings minor perf improvements to existing features but more importantly it brings the PS3 Toolset framework in line with the requirements of the file manager tool I have been working on.

To those who have been waiting, enjoy your 4.88 CFW installation...

Thanks! It's showing a white screen on the PC... maybe you could detect it and redirect to a warning message..

 

[bguerville]

Thanks! It's showing a white screen on the PC... maybe you could detect it and redirect to a warning message..

Try it but I think it is fixed. It works fine on my PC now, Edge, Firefox & Safari.
It was caused by a js command that is now deprecated & causes an exception in new browsers

 

[Coro]

Try it but I think it is fixed. It works fine on my PC now, Edge, Firefox & Safari.
It was caused by a js command that is now deprecated & causes an exception in new browsers

it shows now on android firefox.

 

[Thank_You_Evilnat]

Thank you

 

[Cap_Temp420]

Would I be correct in thinking it is now possible to install CFW on a 4.88 (compatible) system, or would I need to wait for Joonie to release a HFW?

 

[Coro]

Would I be correct in thinking it is now possible to install CFW on a 4.88 (compatible) system, or would I need to wait for Joonie to release a HFW?

HFW 4.88 is already released by zecoxao using instructions from joonie.

if your ps3 is CFW-compatable, you can you bgtoolset on OFW or HFW to jailbreak.

HERE is a short guide i wrote or you can watch MrMario2011's youtube video.

 

[Cap_Temp420]

From the way you worded that, you make it sound as if HFW isn't a requirement anymore for jailbreaking, but can be used if wanted. Would there be any benefits to using HFW over OFW?

 

[Coro]

From the way you worded that, you make it sound as if HFW isn't a requirement anymore for jailbreaking, but can be used if wanted. Would there be any benefits to using HFW over OFW?

you can use OFW or HFW, either one. no benefit to using one instead of the other, really.

 

[Cap_Temp420]

Thanks for the advice, successfully re-jailbroke my system, followed the MrMario2011 guide as I'm not familiar with the toolset.

 

[aldostools]

Try it but I think it is fixed. It works fine on my PC now, Edge, Firefox & Safari.
It was caused by a js command that is now deprecated & causes an exception in new browsers

Thank you. Now it's working on the PC. However there is an issue redirecting the URL on the PS3.
On the PS3 it shows the error 80710a06 using http://** ** www.ps3xploit.net > D... by team** (NEW URL = http://ps3toolset.com
That URL is redirected to ** www.** ** www.ps3xploit.net > D... (NEW URL = http://ps3toolset.com)/bgtoolset on the PC

 

[bguerville]

Thank you. Now it's working on the PC. However there is an issue redirecting the URL on the PS3.
On the PS3 it shows the error 80710a06 using http://** ** www.ps3xploit.net > D... by team** (NEW URL = http://ps3toolset.com
That URL is redirected to ** www.** ** www.ps3xploit.net > D... (NEW URL = http://ps3toolset.com)/bgtoolset on the PC

Thanks Aldo for telling me, I already knew about it though.
I suppose that would be because
http://** ** www.ps3xploit.net > D... by team** (NEW URL = http://ps3toolset.com is redirected to https://** ** www.ps3xploit.net > ... by team** (NEW URL = http://ps3toolset.com (which is not a valid part of the domain) instead of ** www.** ** www.ps3xploit.net > D... by team** (NEW URL = http://ps3toolset.com) which would work fine.
It's most likely easy to fix & I may have a look at it eventually when I have time to kill but it's not a priority right now.
People should use www. I have always insisted that they always use the full URL
** www.** ** www.ps3xploit.net > D... (NEW URL = http://ps3toolset.com)/bgtoolset rather than count on automatic redirections which make ** www.** ** www.ps3xploit.net > D... by team** (NEW URL = http://ps3toolset.com work just fine too but which are at the mercy of configuration changes.

 

[bguerville]

A little teasing.. ;-)
Here is a screenshot of the new xRegistry.sys editor feature I just added to the PS3 Toolset.
And a few ss of the file manager tool I have been working on for a while, I am hoping to finish it before the end of the year.

 

[aldostools]

A little teasing.. ;-)
Here is a couple of screenshots of the new xRegistry.sys editor feature I just added to the PS3 Toolset.
And a few ss of the file manager tool I have been working on for a while, I am hoping to finish it before the end of the year.

Wow!! They look awesome.

It would be a great addition if you could implement a decent text editor using HTML forms, javascript and ROP.

webMAN MOD has one, but the maximum text size is limited by the URL.
For larger text it would require to implement the parsing of the POST method.

I guess it should be easy to do with your framework, since it probably can write the value of a variable to a file in the file system.

 

[bguerville]

Wow!! They look awesome.

It would be a great addition if you could implement a decent text editor using HTML forms, javascript and ROP.

webMAN MOD has one, but the maximum text size is limited by the URL.
For larger text it would require to implement the parsing of the POST method.

I guess it should be easy to do with your framework, since it probably can write the value of a variable to a file in the file system.

It's already in the works.
Text editor for text based files & hex editor for binary files..
;-)

 

[sandungas]

It's already in the works.
Text editor for text based files & hex editor for binary files..
;-)

A syntax highlighter for XML files would be much costly ?, im asking to use it to view/edit the files from dev_flash\vsh\resource\explore\xmb
I guess it could be a popular feature because are the responsibles to display stuff in XMB and are not protected, it can be used to add stuff... or to revert the undesired changes made automatically by other tools
Actually, this XML support could be expanded to add more feature, automatize some tasks, etc... it could have its own section/tab in the toolkit menu with a name like "XMB content editor" or something like that

 

[bguerville]

A syntax highlighter for XML files would be much costly ?, im asking to use it to view/edit the files from dev_flash\vsh\resource\explore\xmb
I guess it could be a popular feature because are the responsibles to display stuff in XMB and are not protected, it can be used to add stuff... or to revert the undesired changes made automatically by other tools
Actually, this XML support could be expanded to add more feature, automatize some tasks, etc... it could have its own section/tab in the toolkit menu with a name like "XMB content editor" or something like that

At this point I only plan to add a text editor. I might use a js rich text editor library as I don't intend to reinvent the wheel. For the hex viewer, I can reuse & tweak the code of the memory editor tool.
As to xml syntax highlighting, it would be nice but iirc the s#ny xml does not validate in standard xml editing/viewing libraries which means those would most likely need to be modded to support the XMB xml before they could integrate the Toolset, yet more work & I am not sure I want to add this stuff to the to-do list, maybe at a later stage when that list gets smaller..

 

[sandungas]

Hmm, right, the XMBML files doesnt passes a standard xml validation, but as far i remember the only culprit is the "&" character, is used in the queries to indicate & this & that & the others, etc...
Im not sure if there are more offenders, but probably not much

What i was doing time ago in notepad++ was to use the "search and replace" to find them and replace them automatically by a control string, e.g: replacemelater
After that i was using the xml plugin of notepad++ to validate them (and to rebuild them automatically adjusting spaces, tabs, etc...)
And finally restoring the replacemelater ---> by ---> &

But i was not thinking in doing a standard highlighting using available libraries or standard code... i was thinking mostly in a "fake" highlighting
You know, the amount of tags and atribute names in the XMBML files is very limited, im not suggesting to identify all them but identifying 4 or 5 with different colors could be good enought (or changing the font size or style: bold/italic etc... the kind of things a syntax highlighter doesnt uses to do)

 

[bguerville]

But i was not thinking in doing a standard highlighting using available libraries or standard code... i was thinking mostly in a "fake" highlighting
You know, the amount of tags and atribute names in the XMBML files is very limited, im not suggesting to identify all them but identifying 4 or 5 with different colors could be good enought (or changing the font size or style: bold/italic etc... the kind of things a syntax highlighter doesnt uses to do)

Highlighting a few tags is of course possible with next to no effort given the html rendering but formatting the XML text on display would be a lot better, thing is, I cannot be arsed writing code to do that when there are available xml parsers, syntax checkers & xml formatters js libraries out there.
The problem also being that XMB xml files are essential system files & I feel any editing deserves to go through proper validation before being saved to avoid issues.
I am not even sure that a text or hex editor is the right choice by default, it will probably be viewers in strict mode on & editors in strict mode off, the same approach I intend to use for the xRegistry to impress upon users the potential dangers of modifying them.

 

[bguerville]

@sandungas @M4j0r @aldostools

I have had to reverse engineer the x3 vsh exports to read/write xregistry.sys contents for my ps3 toolset. I got most of the answers I was seeking & so far I have been able to list & edit every Xregistry entry I tested without corrupting the registry but I still have a doubt over something.
The xRegistryGetValue export takes 6 arguments, r3 the handle of the Xregistry instance, r4 the pointer to the setting string xRegistry entry, r5 a pointer to get the returned entry value & r6/r7/r8 3 other pointers to get returned values which I determined to be r6 entry length & r7 entry type & if I am not mistaken for the third, r8, a reference to the resources allocated for data extraction so they can be freed once you obtained the data using the xRegistryDestroy x3 vsh export..

The xRegistrySetValue export takes 5 arguments, r3 the handle of the Xregistry instance, r4 the pointer to the setting string entry, r5 the value to set for the entry ie a 32bit integer or a pointer to a string & r6/r7 pointers for entry length & entry type.

From testing results, here is what I established.

When the entry type is == 1, the entry is a string, the entry value must be a pointer & the entry length is the value string length.

When the entry type is == 0, the entry value is an integer & the entry length is set to 0.

However, in my reversing I encountered code in vsh that uses xRegistrySetValue & where the entry length is set to 4, the entry type is 0 I think the entry value is an integer (not a pointer) although I can't be sure from the reversing & I haven't checked in the debugger yet as I don't really know when/how that specific sub is executed.
Anyway that combo of values does not fit with the rules I have so far (ie an integer value given a length value > 0) so I must be missing something, can anyone explain it?
Is there more than 2 types of entries (32bit integer or string) by any chance?

And in that vein, is it possible to have binary entries in the registry? xRegistryGetValue internally processes the registry as nodes in a cxml tree & it matches node attributes to determine type/length.. In the possible type attributes I noticed that there is a "bin" type suggesting "binary"?
Do you guys know anything about that?

We should maybe update the wiki ps3 vsh export x3 section with the info gathered about export arguments, I also gathered arguments for other x3 exports like getList, destroyList..