User talk:Zecoxao: Difference between revisions

From PS3 Developer wiki
Jump to navigation Jump to search
mNo edit summary
Line 17: Line 17:
* http://i.imgur.com/O10hqAK.png
* http://i.imgur.com/O10hqAK.png
* http://pastie.org/private/grd5u9izjlglkult64rta
* http://pastie.org/private/grd5u9izjlglkult64rta
= How =
* By enabling diagnostic mode on the ps3, we can enable the use of JTAG again (it's temporarily disabled when diag mode isn't set)
* It is possible to dump the syscon firmware using this method (in unencrypted state)
* The JTAG registers/TAP-controllers need to be bruteforced / reverse engineered
* The leaked service manuals present information about the pins connected to the JigPin
* The JigPin contains an object used to diagnose the ps3 using JTAG
* Using a DIY JigPin would facilitate the task
* This would probably work on ps4 too (provided that the diag pin and the JTAG pins still exist)

Revision as of 23:14, 5 January 2015

The Last Piece of the Puzzle

How

  • By enabling diagnostic mode on the ps3, we can enable the use of JTAG again (it's temporarily disabled when diag mode isn't set)
  • It is possible to dump the syscon firmware using this method (in unencrypted state)
  • The JTAG registers/TAP-controllers need to be bruteforced / reverse engineered
  • The leaked service manuals present information about the pins connected to the JigPin
  • The JigPin contains an object used to diagnose the ps3 using JTAG
  • Using a DIY JigPin would facilitate the task
  • This would probably work on ps4 too (provided that the diag pin and the JTAG pins still exist)
Retrieved from "http://www.psdevwiki.com/ps3/index.php?title=User_talk:Zecoxao&oldid=33386"