PS3 PS3UART Script By Mina Ralwasser: Control your ps3 SYSCON via UART

After the findings made on CXR SYSCON, ps3 developer @M4j0r , known on twitter handle as Mina Ralwasser released a script that lets you authenticate over ANY PS3 syscon (FAT /,SLIM /,SUPERSLIM) and use the privileged commands to do fun stuff on the system. View the psdevwiki links included to see some of the commands that are now possible with this new script release ​

​

About

• 
  You can find some of these commands on the ps3devwiki page:
  
  • https://www.psdevwiki.com/ps3/System_Controller_Firmware#Internal_commands
  • https://www.psdevwiki.com/ps3/System_Controller_Firmware#External_commands_.28COK-001.29
  • https://www.psdevwiki.com/ps3/System_Controller_Firmware#SW-301_Command_List
  • https://www.psdevwiki.com/ps3/System_Controller_Firmware#SW2-301_Command_List
  • https://www.psdevwiki.com/ps3/System_Controller_Firmware#SW3-304_Commandlist
  
  
  The usage is: python Syscon.py <COMN> <CXR,CXRF,SW> where COMN is COM number and second arg is the chip you are communicating with
  To authenticate you just type "auth" or "AUTH" (sometimes this will fail, you need to keep trying until it succeeds)
  To know list of commands, after successfull auth type "help"
  To exit the command line you type "exit"
  

See Release & Discussion(s) for additional details

• https://twitter.com/MinaRalwasser/status/1346569260055855105
• https://www.psx-place.com/threads/s...o-what-does-it-mean.26148/page-17#post-273608

 

So what i am exactly saying is the trace is not available its all like now so onlyoption is pin on service connectorView attachment 35187

No, you can't use the service connector. The service connector diag (pogo) pad has first to be connected to the diag pin pad near syscon. Then you can use the actual ffc connector pad. Your diag pad is missing.
You can just use the via near the sc_diag pad. Use something sharp to scratch the paint off it and then you can solder to it.

 

It has no diag pin. Only models with a Mullion (CXR) Syscon do have that

So that suggest that tx,rx and ground are needed only to fetch error logs. But has this theory been actually test on pqx-001 or any other superslim model.

 

No, you can't use the service connector. The service connector diag (pogo) pad has first to be connected to the diag pin pad near syscon. Then you can use the actual ffc connector pad. Your diag pad is missing.
You can just use the via near the sc_diag pad. Use something sharp to scratch the paint off it and then you can solder to it.

how is that possible when the pad got lifted it was round and only connected with a very narrow trace to the small point nothing else

 

High temperature of soldering iron? Use same temperature as liquid form of alloy. 230 ~250 Celsius set of iron. Not more than 5 seconds to that point or any. Try to understand these are sensitive. Didn't done many courses about 15 years ago, I just remember basics.

 

High temperature of soldering iron? Use same temperature as liquid form of alloy. 230 ~250 Celsius set of iron. Not more than 5 seconds to that point or any. Try to understand these are sensitive. Didn't done many courses about 15 years ago, I just remember basics.

I dint had a temperature controlled iron and also no ipa.The whole trace is covered in burnt flux thinking cleaning it with 99.9% methyltated spirit.

 

No, you can't use the service connector. The service connector diag (pogo) pad has first to be connected to the diag pin pad near syscon. Then you can use the actual ffc connector pad. Your diag pad is missing.
You can just use the via near the sc_diag pad. Use something sharp to scratch the paint off it and then you can solder to it.

give a example of what you are suggesting edit the photo of my post so I can understand better or are you just saying the the service connector has no connections at all and need a jumper from its solder point to diag and other points to actually let the data flow also is there another point for soldering diag wire a pin on syscon itself or something and also does it really need to be connected for error log to be fetched.

 

give a example of what you are suggesting edit the photo of my post so I can understand better or are you just saying the the service connector has no connections at all and need a jumper from its solder point to diag and other points to actually let the data flow

 

View attachment 35188

I tried that but is not letting solder stick on it connection breaks with a bit of wobble should I clean it with 99.9% surgical spirit no ipa available also what you are suggesting is this scheme right without a jumper the service connector is non-functional and both uart and this connector are different unrelated areas with jumper.

Again do I need it for error codes and does a fake ft232rl works in this case.Answers are important to these questions.