• PS3HEN is now supporting 4.93 Firmware

    View Official Release Post for additional information HERE

PS3HEN PS3HEN Open Beta Testing [For Advanced Users Only]

esc0rtd3w

esc0rtd3w

Developer
This is just a small thread to put a link to the current, if any, TEST version of PS3HEN bin files and packages. Mainly to test small changes and get a wider audience to sample. Not all changes will be made available here, and sometimes there will be no bins/packages available here at all! Please do not post anything unrelated to the current test files.

Please DO NOT report bugs for any bins/packages found here, except in this thread!

This is only for people who want to test upcoming features and test small changes!

* All bins/packages listed here will be BETA/DEBUG versions only *
​

Test Bins/Packages: AVAILABLE
Source Version: 3.5.1


Here is a small update to mainly test kernel plugin debug output. Debug Mode must be enabled in HFW Tools, just like normally getting UDP output. You will be able to capture UDP traffic on both LAN and Wireless, depending on which you connect to on PS3.

There is a batch script included that should automatically get local IP address. If it fails to do so, here is the manual command needed. The wifi kernel plugin broadcasts on 230.1.33.7. Also works on Android, using Termux or other terminal app.

Code: 
socat -lu stdout UDP4-RECV:18194,ip-add-membership=230.1.33.7:<YOUR_IP_HERE>,reuseaddr

04-15-2026
3.5.1 Open Beta: Test #3: (4.80 - 4.93 CEX / 4.82 & 4.84 DEX)

Changes:

Payload Changes
- Added support that allows kernel plugins to access stage2 debug output

Resource Changes
- Added "Toggle Internal Plugins" options to HFW Tools - Development
- Added "WiFi UDP Debug Output" kernel plugin toggle
- Added Apollo Save Tool, Artemis PS3, Movian M7, PKGi, and PS3 ezRemote Client to Homebrew Apps menu

Plugin Changes
- Added "WiFi UDP Debug Output" kernel plugin to capture UDP traffic over multicast

4.80 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_debug-480C.pkg
4.81 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_debug-481C.pkg
4.82 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-482C.pkg
4.83 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-483C.pkg
4.84 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-484C.pkg
4.85 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-485C.pkg
4.86 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-486C.pkg
4.87 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-487C.pkg
4.88 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-488C.pkg
4.89 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-489C.pkg
4.90 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-490C.pkg
4.91 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-491C.pkg
4.92 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-492C.pkg
4.93 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_signed-493C.pkg

4.82 DEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_debug-482D.pkg
4.84 DEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.5.1_test3_debug-484D.pkg


Socat with batch files to dump UDP: http://ps3xploit.me/hen/dev/socat-ps3hen-test.zip
upload_2026-4-2_5-28-59.png


upload_2026-4-2_5-29-55.png


WiFi UDP Dump Kernel Plugin: http://ps3xploit.me/hen/plugins/kernel/wifi_debug.bin (Already included in pkg)

There is a toggle to enable and disable the wifi_debug.bin plugin (reads and writes entries in boot plugins txt files)
upload_2026-4-2_5-27-9.png


upload_2026-4-2_5-27-28.png


upload_2026-4-2_5-27-46.png



For anyone curious or confused about providing or getting a socat debug log, please see this thread post:
https://www.psx-place.com/threads/r...but-goes-back-to-xmb.44674/page-2#post-398227

Have Fun :)
 
Last edited:
Md Hesam said:
Can I install on ps3 super slim?
First I'll install this HFW_4.89.1_littlebalup.zip on my ps3
then I can install this hen on my ps3?
Click to expand...
This is for advanced users only, And is a test package. I wouldn't recommend you installing it if you just want to use hen. For normal users , please just use the release version.

You are welcome to try it and report any issues, but again, this is just for testing only, as specified in the OP.
 
@LuanTeles

As far as I can make out, a global mutex needs to be implemented for the map_path system, without it, the code is exposed to synchronisation issues in a multithreaded environment, as resources like the mapping table can be accessed concurrently from 2 or more threads, leading to undefined behaviour and crashes.
It may explain the problems you experienced and the difference in behaviour between the wMM tests and the various payload mods tests.

I dunno why Habib never added the mutex in the first place as he will already have known about the potential for issues when he ported Cobra to HEN, whether he had problems with its implementation or simply couldn't be bothered doing the work.
I haven't checked but I would assume the same problem exists in Cobra (and possibly in Mamba???).
 
Last edited:
LuanTeles said:
I never managed to run socat, i'm trying to use it via wi-fi, ofc my pc and ps3 are in the same network and i'm using debug hen build.

4vwRqag.png
xxrecVe.png
Click to expand...
No idea why...
socat (or socat-windows) works fine at our end so the issue is unlikely to be with the HEN build.
The only obvious difference I can see between your setup and ours is that we use Windows 7 and ethernet but there might be others.
 
Perhaps some firewall is blocking connection for this application? Built-in firewall in Windows is quite notorious for this stuff, but should prompt you about that.
 
esc0rtd3w said:
You need to use wired connection for socat
Click to expand...

I use socat with wireless with Evilnat 4.88.2 Cobra 8.3 debug. Is this a limitation of HEN?

I use this command to write to a file and to the console:
Code: 
socat -lu stdout udp-recv:18194,reuseaddr |tee stdout.txt

EDIT: To be exact, the PS3 is wired and the PC is wireless.
 
Last edited:
LuanTeles said:
I never managed to run socat, i'm trying to use it via wi-fi, ofc my pc and ps3 are in the same network and i'm using debug hen build.
Click to expand...

esc0rtd3w said:
You need to use wired connection for socat
Click to expand...
wanted to say same :)
you can find notes in gelic.h or debug.h

btw, there is a complete fix on DEX side for sys_tty_write, which was only commented by Joonie and RouletteBoi @bguerville @Evilnat

void debug_install(void){
suspend_intr();
change_function(printf_symbol, debug_printf);
change_function(printfnull_symbol, debug_printf);
//patch_syscall(SYS_TTY_WRITE, ttyWrite); Improve compatibility with TM
patch_syscall(SYS_CONSOLE_WRITE, consoleWrite);
resume_intr();
}
original code:

/* LV2_SYSCALL(int, ttyWrite, (int channel, const char* message, int length, int* written)){
debug_print(message, length);
if (written) *written = length;
return 0;} */
fixed:
//thanks to habib now fully working with targetmanager/prodg
LV2_SYSCALL(int, ttyWrite, (int channel, const char* message, int length, int* written)){
f_desc_t f;
f.addr=(void *)sys_tty_write_symbol;
f.toc=(void *)sys_toc_symbol;
int (*func)(int, const char *, int, int *)=(void *)&f;
debug_print(message, length);
return func(channel, message, length, written);
}
you have to define both symbol addresses 64Bit or else it won't work and freeze
example 4.21 DEX:
#define sys_toc_symbol 0x8000000000363E80
#define sys_tty_write_symbol 0x80000000002A4408
 
aldostools said:
I use socat with wireless with Evilnat 4.88.2 Cobra 8.3 debug. Is this a limitation of HEN?

I use this command to write to a file and to the console:
Code: 
socat -lu stdout udp-recv:18194,reuseaddr |tee stdout.txt

EDIT: To be exact, the PS3 is wired and the PC is wireless.
Click to expand...
That's how I was using it when I had PC using network bridge. For some reason it quit working for me on win7, but never worked on win 10. Ps3 was set to wired, but PC was wireless, so ps3 got internet from PC.
 
I'll try to use a wired connection when I get the chance, probably tomorrow.


Btw this is a common problem I have using map_paths when trying to launch a game, this also happens when using external plugin's actions through XMBML. (The system freezes after about 3 minutes)

Spinning Clock:

I'll try to record the issue when it happens while exiting a game/app

Edit:
NO-XMB only the background wave ( sometimes it may just show a black screen with just the particles, no waves)

 
Last edited:
I have updated the HEN themes and added a few extra colors. Some of them may need updated, mainly the Space Blue needs the color more closely matched to original, and the White may need updated for some icons.

These are currently for 4.89 only, but separate ones will be made for 4.84 - 4.88 before next release.

If anyone wants to test them, go ahead and try them out. I have tested all of them and have not seen any problems so far.

There has been a few changes, such as the coldboot egg is now colored to match the theme, and a text file (/dev_hdd0/hen/theme.installed) is now included for all themes that has basic info for currently installed theme.

Example:
name=Black_theme
version=1.0.0
firmware=4.89

Stock HEN/OFW/OLD OFW
http://**ps3xploit.com >Domain no L...heme/test/Blue_Stock_HEN_theme_489_signed.pkg
http://**ps3xploit.com >Domain no L...heme/test/Blue_Stock_OFW_theme_489_signed.pkg
http://**ps3xploit.com >Domain no L...hen/theme/test/OLD_Stock_theme_489_signed.pkg

REBUG
http://**ps3xploit.com >Domain no L...ew)/hen/theme/test/REBUG_theme_489_signed.pkg
http://**ps3xploit.com >Domain no L...hen/theme/test/OLD_Rebug_theme_489_signed.pkg

COLORS
http://**ps3xploit.com >Domain no L...ew)/hen/theme/test/Black_theme_489_signed.pkg
http://**ps3xploit.com >Domain no L...ew)/hen/theme/test/Green_theme_489_signed.pkg
http://**ps3xploit.com >Domain no L...w)/hen/theme/test/Orange_theme_489_signed.pkg
http://**ps3xploit.com >Domain no L...new)/hen/theme/test/Pink_theme_489_signed.pkg
http://**ps3xploit.com >Domain no L...w)/hen/theme/test/Purple_theme_489_signed.pkg
http://**ps3xploit.com >Domain no L...=new)/hen/theme/test/Red_theme_489_signed.pkg
http://**ps3xploit.com >Domain no L...en/theme/test/Space_Blue_theme_489_signed.pkg
http://**ps3xploit.com >Domain no L...ew)/hen/theme/test/White_theme_489_signed.pkg
http://**ps3xploit.com >Domain no L...w)/hen/theme/test/Yellow_theme_489_signed.pkg

XMB HFW TOOLS MENU PACKAGES
http://**ps3xploit.com >Domain no L...st/HEN_Theme_Pack_Basic_Colors_489_signed.pkg
http://**ps3xploit.com >Domain no L...me/test/HEN_Theme_Pack_Default_489_signed.pkg
 
New beta package available for testing. Updated OP with links for package, and templates for user and kernel plugins.

Please report any problems and try testing anything you can think of.

List of changes
  • Added mutex functionality to map_path and open_path_hook (thanks @bguerville)
  • Updated, fixed, and optimized map_path and open_path_hook. Also kept support for legacy homebrew that uses map_path (thanks @bguerville)
  • Changed compatibility for modules patching. Firmware versions 4.84-4.88 share values, but 4.89 has its own values now for hashes and sprx patches
  • Package Manager hidden on boot, and shows full Package Manager on HEN launch
  • The HEN Enable egg menu item will be shown on boot and will be hidden after the XMB is refreshed. This will be updated later to refresh automatically. (thanks @LuanTeles, @DeViL303)
  • Fixed Themes for 4.89. Added new theme colors, and remade original colorset with updated icons (4.84 - 4.89)
  • Added Clear Browser Cache code, currently disabled. This will be moved into xai_plugin (thanks xfrcc)
  • Added support for custom subchannel data via LSD files (thanks @aldotools)
  • PSX BIOS patched with product code 0x85 for PAL games (thanks @aldostools)
  • Option to force PAL or NTSC including the word in the file name (thanks (@aldostools)
  • Changes to HEN plugin attempting to make it unload properly (thanks @aldostools, @TheRouLetteBoi)
  • Re-added stock RCO to main HEN install package to make sure it can get back to a default state if a theme has been installed.
  • Automatic reboot after successful initial HEN installation from Network and USB
  • Added support for .sbi files and improve the performance seeking the custom subchannels (thanks @aldostools)
  • Added button detection on launch. Currently will look for R2 held, to disable boot plugins.
To test the automatic reboot feature, you have to remove the file "/dev_rewrite/vsh/resource/explore/icon/hen_enable.png" and reboot. The Enable HEN icon will now have a swirly icon. Click HEN Enable and when the current 3.1.1 package starts downloading, you can let it finish or cancel. Now install the TEST2 package from Package Manager, which should trigger the reboot after it has finished. The HEN Plugin will wait approx 2 minutes, waiting for a trigger file to be detected, before continuing. Once the package is installed, the trigger file will force continue.
 
Last edited:
esc0rtd3w said:
New beta package available for testing. Updated OP with links for package, and templates for user and kernel plugins.

Please report any problems and try testing anything you can think of.

List of changes
  • Added mutex functionality to map_path and open_path_hook (thanks @bguerville)
  • Updated, fixed, and optimized map_path and open_path_hook. Also kept support for legacy homebrew that uses map_path (thanks @bguerville)
  • Changed compatibility for modules patching. Firmware versions 4.84-4.88 share values, but 4.89 has its own values now for hashes and sprx patches
  • Package Manager hidden on boot, and shows full Package Manager on HEN launch
  • The HEN Enable egg menu item will be shown on boot and will be hidden after the XMB is refreshed. This will be updated later to refresh automatically. (thanks @LuanTeles, @DeViL303)
  • Fixed Themes for 4.89. Added new theme colors, and remade original colorset with updated icons (4.84 - 4.89)
  • Added Clear Browser Cache code, currently disabled. This will be moved into xai_plugin (thanks xfrcc)
  • Added support for custom subchannel data via LSD files (thanks @aldotools)
  • PSX BIOS patched with product code 0x85 for PAL games (thanks @aldostools)
  • Option to force PAL or NTSC including the word in the file name (thanks (@aldostools)
  • Changes to HEN plugin attempting to make it unload properly (thanks @aldostools, @TheRouLetteBoi)
  • Re-added stock RCO to main HEN install package to make sure it can get back to a default state if a theme has been installed.
  • Automatic reboot after successful initial HEN installation from Network and USB
  • Added support for .sbi files and improve the performance seeking the custom subchannels (thanks @aldostools)
  • Added button detection on launch. Currently will look for R2 held, to disable boot plugins.
To test the automatic reboot feature, you have to remove the file "/dev_rewrite/vsh/resource/explore/icon/hen_enable.png" and reboot. The Enable HEN icon will now have a swirly icon. Click HEN Enable and when the current 3.1.1 package starts downloading, you can let it finish or cancel. Now install the TEST2 package from Package Manager, which should trigger the reboot after it has finished. The HEN Plugin will wait approx 2 minutes, waiting for a trigger file to be detected, before continuing. Once the package is installed, the trigger file will force continue.
Click to expand...


Thanks for this new beta, looks amazing

Can you provide me the source code? i want to see if my map_paths are working now without issues.

I really loved holding R2 to disable boot plugins, i was thinking about something similar.
 
LuanTeles said:
Thanks for this new beta, looks amazing

Can you provide me the source code? i want to see if my map_paths are working now without issues.

I really loved holding R2 to disable boot plugins, i was thinking about something similar.
Click to expand...
FYI

To avoid the multiplication of payloads, a kernel plugin feature was implemented.
I strongly recommend that any add-ons to HEN or Cobra should be released through kernel plugins unless they are core features.
Kernel plugins are not HEN plugins though, they are meant to interact with the kernel, not with HEN and without stubs or hardcoded HEN symbols (to be avoided at all cost imho), the HEN functions are not directly accessible to a kplugin.
However Jason and I have been discussing this yesterday, if you care to wait for it, we will try to make a kplugin template project that can use map_path.
 
bguerville said:
FYI

To avoid the multiplication of payloads, a kernel plugin feature was implemented.
I strongly recommend that any add-ons to HEN or Cobra should be released through kernel plugins unless they are core features.
Kernel plugins are not HEN plugins though, they are meant to interact with the kernel, not with HEN and without stubs or hardcoded HEN symbols (to be avoided at all cost imho), the HEN functions are not directly accessible to a kplugin.
However Jason and I have been discussing this yesterday, if you care to wait for it, we will try to make a kplugin template project that can use map_path.
Click to expand...

I agree.

i'll wait for a kplugin template with map_path then.
 
You must log in or register to reply here.

Similar threads

Back
Top