• PS3HEN is now supporting 4.93 Firmware

    View Official Release Post for additional information HERE

PS3HEN PS3HEN Open Beta Testing [For Advanced Users Only]

esc0rtd3w said:
Basically yeah. It has padding and a magic number for each entry, to keep everything aligned. The format is Magic Number (4 bytes), Padding (12 bytes), Content ID (36 bytes), Padding (12 bytes), RAP Value (16 bytes)
Click to expand...

yeah, I can see the padding at least in that screenshot. I remember the rap being just one line, which I can see is extended here, so it must be the magic number. the uouo, I assume is the magic number or something like that. not quite the same, but I see it repeated.
 
Evilnat said:
rap2bin, bin2rap and support for rap.bin licenses are working as expected

View attachment 45023
View attachment 45024 View attachment 45025 View attachment 45026 View attachment 45027
Click to expand...
Very cool adding import/export options to xai. I assume you also have included aldos latest changes in make_rif, that were added?
https://github.com/PS3Xploit/PS3HEN/commit/28be3aff8bc20ce6e63ef6f87441425831473d8a

The toggle was removed from HFW Tools in hen, for enable/disable and its just always on by default now.

Testing seems fine so far, from my end having it on all time.
 
esc0rtd3w said:
The magic number is FAF0FAF0, ironically hilarious :)

The padding is all 00
Click to expand...
yep, that's it. FAFOFAFO is the uouo in ascii. I didn't replicate the actual ascii format, because it's not exactly that. it just looks like that. I probably should've mentioned the hex instead. I just used what it looked like in ascii. and, I can see the dots as padding. that's what I did for the icontex.qrc, as long as it was small enough.
 
Test #7 (12/31/2024): Implemented @Evilnat optimized read rap.bin functionality

  • 3.3.1 Source
    • HEN Plugin Changes
      • Added HEN restore functionality for new package that supports HEN surviving an HDD reformat (thanks @LuanTeles)
      • Added create_default_dirs function for creating standard folders if missing on dev_hdd0 (thanks @LuanTeles)
      • Added DLOG function for output to usb000 (Developers Only)
      • Added cleaning PSN files (thanks @LuanTeles)
      • Cleaned up clear_web_cache_check function
      • Updated functions for LED presets
      • Updated set_build_type function to check USB ports 000 - 007 (For Developer Mode)
      • Updated emergency installer to check USB ports 000 - 007 (HEN_UPD.pkg from USB)
    • Payload Changes
      • Now renaming boot plugin files temporarily, instead of deleting them if WMM is found during installation
      • Updated cellFsMkdir_symbol offsets
      • Added cellFsRename_symbol
      • Added support for rap.bin. It looks for /dev_hdd0/game/PS3XPLOIT/USRDIR/rap.bin when the make_rif function runs.
      • Changes made to make_rif functionality for better performance (thanks @aldostools)
      • Implemented optimized read rap.bin functionality (thanks @Evilnat )
    • Resource Changes
      • Added new custom coldboot RAF files for release, debug, usb, and DEX (thanks @Charles_n_town)
      • Using PS3XPLOIT game directory to add HEN install status to GAMEDATA db, for surviving HDD format (Hidden from XMB) (thanks @LuanTeles)
      • Fixed seg_mcutility entry in category_game.xml (Fixes issue with PS1/PS2 virtual memory card menu item) (thanks @LuanTeles)
      • Added PS Home link installer/launcher under PSN category (thanks @DeViL303 )

    Using @Evilnat optimized read rap.bin functionality (4.91 CEX): http://ps3xploit.me/hen/openbeta/La...igned-491C--test35-evilnat-rapbin-changes.pkg
 
Last edited:
I'm not sure if that link is broken or if there's a hiccup on my end, but downloading that link at the bottom does nothing on my end. the download doesn't start at all.

speaking of games, I got my disability check today, since tomorrow is a holiday. I got more money than before, so I don't know if I'm now going to start getting this set sum or what, but I'm very happy about it obviously. anyway, I used my Christmas money to preorder tales of graces f remastered, and I noticed on the ps3 that tales of xillia 2 and tales of zestiria - both of their dlc are back. I think the remastered version of graces f has all the dlc from the ps3 version, so I'm only missing tales of xillia 1's now, I think. both xillia 1 and 2 have a pseudo-store on their title screens, so I've gotten what I could. I also bought gta liberty stories, which is installing right now. good days. :D
 
okay, @esc0rtd3w , I couldn't get the link to work on my phone either. clicking it doesn't work, but I found doing "save as" works. I think part of the name being cut off is causing the problem in that hyperlink.

edit: I think it might be the length of the package name that's the problem, so maybe condense it or create a zip file link?
 
Charles_n_town said:
okay, @esc0rtd3w , I couldn't get the link to work on my phone either. clicking it doesn't work, but I found doing "save as" works. I think part of the name being cut off is causing the problem in that hyperlink.

edit: I think it might be the length of the package name that's the problem, so maybe condense it or create a zip file link?
Click to expand...
Not sure. Link works for me from PC and phone. Could be the filetype.
 
Last edited:
Test #9 (02-02-2025): Release Candidate #1 (4.80 - 4.91 CEX)

4.80 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_debug-480C--RC1.pkg
4.81 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_debug-481C--RC1.pkg
4.82 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-482C--RC1.pkg
4.83 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-483C--RC1.pkg
4.84 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-484C--RC1.pkg
4.85 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-485C--RC1.pkg
4.86 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-486C--RC1.pkg
4.87 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-487C--RC1.pkg
4.88 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-488C--RC1.pkg
4.89 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-489C--RC1.pkg
4.90 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-490C--RC1.pkg
4.91 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-491C--RC1.pkg

Please report any issues, and specify which firmware version you have.

See OP for all changes.

Huge thank you to @Joonie , @Evilnat , @aldostools , @LuanTeles , @Charles_n_town , @DeViL303 :)
 
CEX packages can be considered final if no problems are found, and should see no changes from the next official release. The DEX packages still need category_game xml and category_psn xml updated.

EDIT: RC3 CEX Packages added (small change to show some rap.bin info for debug only)

Test #11 (02-17-2025): Release Candidate #3 (4.80 - 4.91 CEX)

RC3 (Using latest @Evilnat and @aldostools optimizations):

4.80 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_debug-480C--RC3.pkg
4.81 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_debug-481C--RC3.pkg
4.82 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-482C--RC3.pkg
4.83 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-483C--RC3.pkg
4.84 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-484C--RC3.pkg
4.85 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-485C--RC3.pkg
4.86 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-486C--RC3.pkg
4.87 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-487C--RC3.pkg
4.88 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-488C--RC3.pkg
4.89 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-489C--RC3.pkg
4.90 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-490C--RC3.pkg
4.91 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-491C--RC3.pkg


Test #10 (02-11-2025): Release Candidate #2 (4.80 - 4.91 CEX / 4.82 & 4.84 DEX)

RC2 (Using latest @Evilnat and @aldostools optimizations):

4.80 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_debug-480C--RC2.pkg
4.81 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_debug-481C--RC2.pkg
4.82 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-482C--RC2.pkg
4.83 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-483C--RC2.pkg
4.84 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-484C--RC2.pkg
4.85 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-485C--RC2.pkg
4.86 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-486C--RC2.pkg
4.87 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-487C--RC2.pkg
4.88 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-488C--RC2.pkg
4.89 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-489C--RC2.pkg
4.90 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-490C--RC2.pkg
4.91 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-491C--RC2.pkg

DEX versions still need new xml updates
4.82 DEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_DEX_debug-482D--RC2.pkg
4.84 DEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_DEX_debug-484D--RC2.pkg

Please report any issues, and specify which firmware version you have.

See OP for all changes.[/S][/S]
 
Last edited:
esc0rtd3w said:
CEX packages can be considered final if no problems are found, and should see no changes from the next official release. The DEX packages still need category_game xml and category_psn xml updated.

EDIT: RC3 CEX Packages added (small change to show some rap.bin info for debug only)

Test #11 (02-17-2025): Release Candidate #3 (4.80 - 4.91 CEX)
4.80 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_debug-480C--RC3.pkg
4.81 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_debug-481C--RC3.pkg
4.82 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-482C--RC3.pkg
4.83 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-483C--RC3.pkg
4.84 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-484C--RC3.pkg
4.85 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-485C--RC3.pkg
4.86 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-486C--RC3.pkg
4.87 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-487C--RC3.pkg
4.88 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-488C--RC3.pkg
4.89 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-489C--RC3.pkg
4.90 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-490C--RC32.pkg
4.91 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-491C--RC3.pkg


Test #10 (02-11-2025): Release Candidate #2 (4.80 - 4.91 CEX / 4.82 & 4.84 DEX)

RC2 (Using latest @Evilnat and @aldostools optimizations):

4.80 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_debug-480C--RC2.pkg
4.81 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_debug-481C--RC2.pkg
4.82 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-482C--RC2.pkg
4.83 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-483C--RC2.pkg
4.84 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-484C--RC2.pkg
4.85 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-485C--RC2.pkg
4.86 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-486C--RC2.pkg
4.87 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-487C--RC2.pkg
4.88 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-488C--RC2.pkg
4.89 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-489C--RC2.pkg
4.90 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-490C--RC2.pkg
4.91 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_signed-491C--RC2.pkg

DEX versions still need new xml updates
4.82 DEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_DEX_debug-482D--RC2.pkg
4.84 DEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.3.1_DEX_debug-484D--RC2.pkg

Please report any issues, and specify which firmware version you have.

See OP for all changes.[/S][/S]
Click to expand...

I have a few questions:
1- The RC3 doesn't say "(Using latest Evilnat and aldostools optimizations)". Did these changes cause issues?
2- Only the PKG for 4.81 RC3 is identical to RC1. Was this intentional? All other versions changed from RC1 to RC3.
3- Only the PKGs for 4.80 and 4.81 say "debug" in the file name. Was this intentional?

 
There is only 1 change in rc3. I uncommented 3 DPRINTF for showing rap.bin debug output.

No other changes were made, so all the release versions are the same as rc2, and only debug versions have the extra debug output.

The reason for the debug versions in pkgs below 4.82 is because there were issues with signed ones for some reason that I can't remember now lol

The reason for 4.81 pkg not changing, I'll have to double check that actually. I have a batch script that runs and copies/compiles all the pkgs.

I still need to test all on my consoles. I'll probably do that this weekend.

I also need to finish updating XML for DEX pkgs, although probably 3 people use it lol.

Edit: that text I added back, I copied and pasted it originally from rc2, but only from 4.80 down.
 
Last edited:
esc0rtd3w said:
There is only 1 change in rc3. I uncommented 3 DPRINTF for showing rap.bin debug output.

No other changes were made, so all the release versions are the same as rc2, and only debug versions have the extra debug output.

The reason for the debug versions in pkgs below 4.82 is because there were issues with signed ones for some reason that I can't remember now lol

The reason for 4.81 pkg not changing, I'll have to double check that actually. I have a batch script that runs and copies/compiles all the pkgs.

I still need to test all on my consoles. I'll probably do that this weekend.

I also need to finish updating XML for DEX pkgs, although probably 3 people use it lol.
Click to expand...

I've heard that HEN on DEX has some issues, like black screens in games.
Has it been fixed yet?
 
Not yet fixed. There is another problem though (actually same problem). The DEX stackframe is still v2 and wasn't updated when CEX was updated.

I have started the mapping a while ago, thats in docs folder in PS3HEN github. Once the v3 mapping is done, we can try updating DEX stackframe. Since Habib wrote that by hand with no documentation, other than some saved chat logs, it has to be updated as best as we can to work the same as v3 stackframe.

I have a few scripts to assist, but haven't fully broken down the full map of gadgets, offsets, and values needed.

Edit: Technically, we could just drop support for DEX, but if we change our mind in the future, then it will be more work to bring it back...again lol.
 
Last edited:
3.4.1 Open Beta Test #11 (04-01-2025): (4.80 - 4.92 CEX / 4.82 & 4.84 DEX)

- Added minimal support for BadHTAB LV1 Exploit
- Enabled LV1 Peek(11)/Poke(9) in PS3HEN payload (will change in the future to be toggled)
- Added options to HFW Tools (xai) menu for easier testing LV1 exploit glitch.

Huge thanks to @aomsin2526 for his excellent work with getting this working on newer firmware :triumphant:

Please see this thread for info on using the exploit: https://www.psx-place.com/threads/p...-software-based-hypervisor-lv1-exploit.47282/

upload_2025-4-1_22-40-7.png


4.80 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test11_debug-480C.pkg
4.81 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test11_debug-481C.pkg
4.82 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test11_signed-482C.pkg
4.83 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test11_signed-483C.pkg
4.84 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test11_signed-484C.pkg
4.85 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test11_signed-485C.pkg
4.86 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test11_signed-486C.pkg
4.87 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test11_signed-487C.pkg
4.88 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test11_signed-488C.pkg
4.89 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test11_signed-489C.pkg
4.90 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test11_signed-490C.pkg
4.91 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test11_signed-491C.pkg
4.92 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test11_signed-492C.pkg

4.82 DEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test11_DEX_debug-482D.pkg
4.84 DEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test11_DEX_debug-484D.pkg

Please report any issues, and specify which firmware version you have.

See OP for all changes.
 
Last edited by a moderator:
3.4.1 Open Beta Test #12 (04-12-2025): (4.80 - 4.92 CEX / 4.82 & 4.84 DEX)

New Changes:
- Fixed lv1_peek and lv1_peek32 notify values
- Added 32-bit and 64-bit lv1 peek and poke options to xai

Older Changes:
- Added minimal support for BadHTAB LV1 Exploit
- Enabled LV1 Peek(11)/Poke(9) in PS3HEN payload (will change in the future to be toggled)
- Added options to HFW Tools (xai) menu for easier testing LV1 exploit glitch

Huge thanks to @aomsin2526 for his excellent work with getting this working on newer firmware :triumphant:

Please see this thread for info on using the exploit: https://www.psx-place.com/threads/p...-software-based-hypervisor-lv1-exploit.47282/

upload_2025-4-12_1-18-29.png


upload_2025-4-12_1-18-50.png


4.80 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test12v_debug-480C.pkg
4.81 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test12v_debug-481C.pkg
4.82 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test12v_signed-482C.pkg
4.83 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test12v_signed-483C.pkg
4.84 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test12v_signed-484C.pkg
4.85 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test12v_signed-485C.pkg
4.86 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test12v_signed-486C.pkg
4.87 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test12v_signed-487C.pkg
4.88 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test12v_signed-488C.pkg
4.89 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test12v_signed-489C.pkg
4.90 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test12v_signed-490C.pkg
4.91 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test12v_signed-491C.pkg
4.92 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test12v_signed-492C.pkg

4.82 DEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test12v_DEX_debug-482D.pkg
4.84 DEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test12v_DEX_debug-484D.pkg
 
3.4.1 Open Beta Test #13 (04-19-2025): (4.80 - 4.92 CEX / 4.82 & 4.84 DEX)

The overclock and underclock settings are split into matched, core, and memory. They are here for testing purposes only currently. You can set matched speeds (100/100, 500/500, 750/750, etc), core speeds, and memory speeds from 100MHz to 1000Mhz. These are mostly untested, but i have tried some. The 1000/1000 crashed my superslim, but more testing is needed and tweaks to the speed options will be refined in the next beta.

The HV Dump options are taken from the talk page about hypervisor reverse engineering and some of them will crash the ps3. The accuracy may not be 100% for offsets in xai code. Needs more testing and is just for experimental purposes currently.

New Changes:

- Added support for over/underclocking RSX core and memory clock in HFW Settings (xai) (thanks to @aomsin2526 for his work discovering this)
- Added HV Dump menu in HFW Settings (xai) to dump mapped areas documented at psdevwiki

Older Changes:

- Added minimal support for BadHTAB LV1 Exploit
- Enabled LV1 Peek(11)/Poke(9) in PS3HEN payload (will change in the future to be toggled)
- Added options to HFW Tools (xai) menu for easier testing LV1 exploit glitch
- Fixed lv1_peek and lv1_peek32 notify values
- Added 32-bit and 64-bit lv1 peek and poke options to xai

Huge thanks to @aomsin2526 for his excellent work with getting this glitch working on newer firmware :triumphant:

Please see this thread for info on using the exploit: https://www.psx-place.com/threads/p...-software-based-hypervisor-lv1-exploit.47282/

upload_2025-4-19_11-34-5.png


upload_2025-4-19_11-34-58.png


upload_2025-4-19_11-36-53.png



4.80 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test13n_debug-480C.pkg
4.81 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test13n_debug-481C.pkg
4.82 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test13n_signed-482C.pkg
4.83 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test13n_signed-483C.pkg
4.84 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test13n_signed-484C.pkg
4.85 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test13n_signed-485C.pkg
4.86 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test13n_signed-486C.pkg
4.87 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test13n_signed-487C.pkg
4.88 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test13n_signed-488C.pkg
4.89 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test13n_signed-489C.pkg
4.90 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test13n_signed-490C.pkg
4.91 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test13n_signed-491C.pkg
4.92 CEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test13n_signed-492C.pkg

4.82 DEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test13n_DEX_debug-482D.pkg
4.84 DEX: http://ps3xploit.me/hen/openbeta/Latest_HEN_Installer_3.4.1_test13n_DEX_debug-484D.pkg
 

Attachments

  • upload_2025-4-19_11-45-9.png
    upload_2025-4-19_11-45-9.png
    434.2 KB · Views: 70
  • upload_2025-4-19_11-45-28.png
    upload_2025-4-19_11-45-28.png
    40 KB · Views: 72
@esc0rtd3w Thank you for the update.
Now that you have added LV1 support to PS3HEN, I wanted to let you know that sycall 8 needs to be updated to support partial LV1 peek like Cobra, for proper compatibility with Cobra.

The following lines in main.c of Cobra need to be implemented in PS3HEN
https://github.com/aldostools/Cobra-PS3/blob/master/8.5/4.92/EVILNAT/PEX/SRC/stage2/main.c#L465-L466
https://github.com/aldostools/Cobra-PS3/blob/master/8.5/4.92/EVILNAT/PEX/SRC/stage2/main.c#L508-L510
https://github.com/aldostools/Cobra-PS3/blob/master/8.5/4.92/EVILNAT/PEX/SRC/stage2/main.c#L545-L552
https://github.com/aldostools/Cobra....92/EVILNAT/PEX/SRC/stage2/main.c#L1088-L1089
 
You must log in or register to reply here.

Similar threads

Back
Top