PS3 PS3Xploit Flash Writer (4.90 HFW)

The concept i think of is so simple but i think it will cost memory/time

the idea is :
- Have the patch file to only change isoldr & spu_pkg_rvk_verifier in coreOS so to allow modified PUP installation (i didn't saw the patches change since a long time, i remember the same patch have been applied for like last 6 to 10 updates lol).

- Auto Dump Flash or (the Two files i mention before) (backup is saved either HDD or USB)
- Patch Flash the files
- Auto Dump the two files again to compare
- if the hash of file is identical to the one set in exploit var it will show green message telling you can reboot
- if hash diffrent from original & different from hash of patched file ,restore original files

If you only change isoldr & spu_pkg_rvk_verifier it will brick due to syscon hash check.

I actually don't mind implementing all of it, or at least most of it (minus Super Slim related things). Sounds like a good exercise for C/C++.

Edit:
I also found some repo of tools included in MFW Builder: https://github.com/manusan/ps3tools

That cosunpkg stuff looks super easy, maybe it could be used to unpack and inspect the CoreOS file before it is written, at least to make sure that noFSM related files are modified. And also that the files inside aren't corrupted in any obvious way.

I'm mostly referring to my other project right now, HEN Flash Patcher.

Well if it's to check the integrity of the noFSM patch data, hash calculation is the easiest way. No need to mess with each files and the file table.
 
Thanks alot for this great solution to install CFW while PS3xploit site is down. This is the thing i was looking for!!

Once reading through it, its actuelly quite simple.

First i bought a PS3 Slim CECH-2004B and replaced the old hdd with a new 1TB WD green 2.5".

Then installed the HFW 4.90 from a USB stick as provided in link
Then after reboot i set network and set system time to "internet"
Got to browser and free cookies/history/cache
I went to the url for the site to flash ps3.
After flashing reboot and installed the latest Evilnat 4.90 DEX firmware from USB stick.
Reboot again, installed Multiman and PKGi and i was done for the CFW part !
Working perfectly fine

ps: webman seems to be recommended above multiman? Im gonna try this later on as well.
 
Last edited:
So... What do I do if I followed an HFW 4.90 tutorial, and only after hitting an error at the PS3 browser steps did I realize that the reason for the error is because my PS3 is a 3001b model?
 
So... What do I do if I followed an HFW 4.90 tutorial, and only after hitting an error at the PS3 browser steps did I realize that the reason for the error is because my PS3 is a 3001b model?
Sorry you got bad advice, May i ask
YouTube? or Reddit? or a random discord?

You followed a HFW tutorial? HFW by itself is not useful as you can see its just like OFW for you
If the guide is only highlighting HFW and not PS3HEN or CFW Flash Writer then they are not telling the full story.

You will have to wait until PS3HEN is updated,
Could be a couple weeks but honestly it would be closer to days, but you never know and they do not even know a for sure ETA (never trust a dev's ETA lol )

They are adding new features to ps3hen in the official update along with 4.90 support so it will be taking a bit longer then just a normal firmware update but will be well worth it in the end
 
Sorry you got bad advice, May i ask
YouTube? or Reddit? or a random discord?

You followed a HFW tutorial? HFW by itself is not useful as you can see its just like OFW for you
If the guide is only highlighting HFW and not PS3HEN or CFW Flash Writer then they are not telling the full story.

You will have to wait until PS3HEN is updated,
Could be a couple weeks but honestly it would be closer to days, but you never know and they do not even know a for sure ETA (never trust a dev's ETA lol )

They are adding new features to ps3hen in the official update along with 4.90 support so it will be taking a bit longer then just a normal firmware update but will be well worth it in the end

The tutorial I followed was a complete one, the issue was that *I* didn't catch the disclaimer that 3000+ models aren't compatible until I already hit the roadblock while following along.
My only worry was if following the tutorial with an incompatible system model would cause any harm to my console, and if so, how to correct it.
 
The tutorial I followed was a complete one, the issue was that *I* didn't catch the disclaimer that 3000+ models aren't compatible until I already hit the roadblock while following along.
My only worry was if following the tutorial with an incompatible system model would cause any harm to my console, and if so, how to correct it.
The Flash Writer 4.90 includes various checks to prevent system harms in case of this kind of user mistake.

The tool tries to be as safe as it can, but that doesn't mean that it is free of potential issues.

The major risk is a power failure or that the system hang in middle of the flashing process.

That's why a dump of full flash memory is required before start flashing; to guarantee that the console can be recovered with a hardware flasher in case something goes wrong.
 
The Flash Writer 4.90 includes various checks to prevent system harms in case of this kind of user mistake.

The tool tries to be as safe as it can, but that doesn't mean that it is free of potential issues.

The major risk is a power failure or that the system hang in middle of the flashing process.

That's why a dump of full flash memory is required before start flashing; to guarantee that the console can be recovered with a hardware flasher in case something goes wrong.
Does it mean that technically you could write the CFW to the flash of a super slim (which would obviously brick it)?
 
Does it mean that technically you could write the CFW to the flash of a super slim (which would obviously brick it)?
yes. some people bricked superslims with bgtoolset by turning off the safety checks.
 
i think the some links are messed up right now. at work now, i will fix later. if anybody has problems using it from github, use this full address to go directly to the tool.

https://ps3addict.github.io/writer/writer.html

Hi, I used that link as I had trouble hosting my own server, however when I go on the PS3 browser and click on NOR (USB is slotted in right hand port), literally nothing happens. I have cleared cache cookies the lot, set it as my home page and nothings working. HFW 4.90 has been installed twice and the PS3 reads my USB so im really not sure what to do? Some help would be really appreciated.
 
Does it mean that technically you could write the CFW to the flash of a super slim (which would obviously brick it)?

Technically it is possible, but the Flash Writer performs some previous checks to prevent that it occurs.

These are some of the checks performed by Flash Writer 4.90:
- Check for variable offsets in memory.
- Check for HFW 4.90.1 installation
- Check for minimum firmware version must be equal or lower to 3.56 (super slims don't qualify in this check)
- Check for CFW installation already applied
- Check path file hash is the expected
- Check that patch operation complete successfully
 
Hi, I used that link as I had trouble hosting my own server, however when I go on the PS3 browser and click on NOR (USB is slotted in right hand port), literally nothing happens. I have cleared cache cookies the lot, set it as my home page and nothings working. HFW 4.90 has been installed twice and the PS3 reads my USB so im really not sure what to do? Some help would be really appreciated.
use the left usb slot and try USB001 and USB006.
 
Hi, I used that link as I had trouble hosting my own server, however when I go on the PS3 browser and click on NOR (USB is slotted in right hand port), literally nothing happens. I have cleared cache cookies the lot, set it as my home page and nothings working. HFW 4.90 has been installed twice and the PS3 reads my USB so im really not sure what to do? Some help would be really appreciated.
If you mean that no text appears after clicking either NOR/NAND, you need to enable Javascript in the browser or alternatively create a new user account on the PS3 and run the flash writer tool from that user.
 
Technically it is possible, but the Flash Writer performs some previous checks to prevent that it occurs.

These are some of the checks performed by Flash Writer 4.90:
- Check for variable offsets in memory.
- Check for HFW 4.90.1 installation
- Check for minimum firmware version must be equal or lower to 3.56 (super slims don't qualify in this check)
- Check for CFW installation already applied
- Check path file hash is the expected
- Check that patch operation complete successfully

Instead of minimum fw version it would be better to check for metldr vs metldr.2 string. Minimum version could return wrong values if the IDPS has previously been changed.
https://www.psx-place.com/threads/w...ven-by-minverchk-pup.19393/page-3#post-134263
 
Trying to unlock my OG fat PS3 for the first time. I followed the directions, and I am at the part to dump the flash with Flash writer 4.90, but when I select NAND the webpage locks up and the consoles is frozen... I have to hard power it off to get it back online.

I followed Mr mario's instructions via youtube. Website with XAMPP is all good.

I cleared all the settings on the browser.
I tried different USB ports on the PS3 (I have 4) still locks up hard.
I setup a new user and tried that (as a post above mine suggests)
Java script is enabled.

Not sure what else to try...
 
Last edited:
Trying to unlock my OG fat PS3 for the first time. I followed the directions, and I am at the part to dump the flash with Flash writer 4.90, but when I select NAND the webpage locks up and the consoles is frozen... I have to hard power it off to get it back online.

I followed DR mario's instructions via youtube. Website with XAMPP is all good.

I cleared all the settings on the browser.
I tried different USB ports on the PS3 (I have 4) still locks up hard.
I setup a new user and tried that (as a post above mine suggests)
Java script is enabled.

Not sure what else to try...
try my online host to see if it is your webserver etc. https://ps3addict.github.io/writer/writer.html
 
Locks up fully once I select NAND.
The only time I've seen this is when NAND is selected on a NOR console. It could also be due to your PS3 drive or the USB you're using. Make sure you have at least 250MB free space on the hard drive and ensure your console's model really is a NAND.

The only other thing I can think of is you didn't install HFW but that should be written on the page in that case.
 
SN ends with CECHE01. I tried various USB flashes as well from 4 GB (formatted clean) to 32 Gig.
I installed a 720 GB hard drive awhile back, shows 411 Free space...

Oh well guess it wasn't meant to be.
 
Back
Top