ODE: Difference between revisions
mNo edit summary |
m (→IRD / Keys) |
||
(34 intermediate revisions by 7 users not shown) | |||
Line 1: | Line 1: | ||
[[ | Acronym for: Optical Drive Emulator | ||
= SKU differences = | |||
{| class="wikitable sortable" | |||
|- | |||
! Model !! Controller !! Sniffing/Injecting !! Exploitable !! 3K3Y FAT !! Cobra !! Cobra QSV !! <abbr title="3K3Y Ultra Slim">3ks R</abbr> !! E3 ODE Pro !! Stone ODE !! Matrix ODDE | |||
|- | |||
| [[CECHAxx|CECHA]] up to [[CECHKxx|CECHK]] || on daugtherboard || via wide || {{Yes}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} | |||
|- | |||
| [[CECHLxx|CECHL]] up to [[CECHQxx|CECHQ]] || on daugtherboard || via small || {{Yes}} || {{N}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} | |||
|- | |||
| [[CECH-20xx|CECH-2000]] up to [[CECH-21xx|CECH-2100]] || on daugtherboard || via small || {{Yes}} || {{N}} || {{Y}} || {{N}} || {{Y}} || {{Y}} || {{Y}} || {{N}} | |||
|- | |||
| [[CECH-25xx|CECH-2500]] || [[CXD5132R-1|on motherboard]] || on motherboard || {{Some}} || {{N}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} | |||
|- | |||
| [[CECH-30xx|CECH-3000]] || [[CXD5132R-1|on motherboard]] || on motherboard || {{No}} || {{N}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} | |||
|- | |||
| [[CECH-40xx|CECH-4000]] || [[CXD5132R-1|on motherboard]] || on motherboard || {{No}} || {{N}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} | |||
|- | |||
| [[CECH-42xx|CECH-4200]] || on motherboard || on motherboard || {{No}} || {{N}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} | |||
|- | |||
| [[CECH-43xx|CECH-4300]] || on motherboard || on motherboard || {{No}} || {{N}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} | |||
|- | |||
|} | |||
== Notes == | |||
* [[CECHAxx|CECHA]] up to [[CECH-30xx|CECH-3000]] : on [[4.55_CEX|OFW 4.55]] and higher require the DMC module + swapdisc (below [[4.55_CEX|OFW 4.55]] there is no need for DMC module/swapdisc). | |||
* [[CECH-40xx|CECH-4000]], [[CECH-42xx|CECH-4200]], [[CECH-43xx|CECH-4300]] : work with lid-detect wire soldered + swapdisc, but do not require DMC module. | |||
http://www.team-cobra-ode.com/downloads/Anti-ODE_Security_Bypass_Manual_%28English%29_v1.2.pdf | |||
= 3K3Y = | = 3K3Y = | ||
Line 22: | Line 48: | ||
* [http://mir.cr/1R29QCAS 3k3y Keydumper v1.00] - outputs to first available device in root of USB Mass Storage device or /dev_hdd0/tmp/3Dump.bin | * [http://mir.cr/1R29QCAS 3k3y Keydumper v1.00] - outputs to first available device in root of USB Mass Storage device or /dev_hdd0/tmp/3Dump.bin | ||
* [http://www.mirrorcreator.com/files/1SCZPMSJ/ripp3r.v.1.02.rar_links 3k3y Ripper v1.02] - Windows software for ripping/decrypting/reencrypting PS3 disks, including PDF user manual. | * [http://www.mirrorcreator.com/files/1SCZPMSJ/ripp3r.v.1.02.rar_links 3k3y Ripper v1.02] - Windows software for ripping/decrypting/reencrypting PS3 disks, including PDF user manual. | ||
* [https://github.com/jhonathanc/3k3y-Ripp3r 3k3y-Ripp3r] v1.20 source code | |||
* [https://github.com/jhonathanc/3k3y-Ripp3r/blob/master/Documentation/manual.pdf 3k3y-Ripp3r Manual.pdf] | |||
* [https://github.com/jhonathanc/3k3y-Ripp3r/blob/master/Documentation/IRD%20File%20Format.pdf IRD File Format.pdf] | |||
== ODE == | == ODE == | ||
=== PATA === | |||
<div style="float:right">[[File:3k3y-mainboard-PATA.jpg|200px|thumb|left|3k3y - mainboard - PATA]]</div> | |||
<br /><br /><br /><br /><br /><br /><br /><br /> | |||
=== SATA === | |||
<div style="float:right">[[File:3KS-ODE.png|200px|thumb|left|3KS ODE - driveboard]]<br />[[File:20xx series 3k3y-S daughterboard.jpg|200px|thumb|left|3KS ODE - 20xx series daughterboard]]</div> | <div style="float:right">[[File:3KS-ODE.png|200px|thumb|left|3KS ODE - driveboard]]<br />[[File:20xx series 3k3y-S daughterboard.jpg|200px|thumb|left|3KS ODE - 20xx series daughterboard]]</div> | ||
Line 38: | Line 75: | ||
== Cobra ODE Daughter Board == | == Cobra ODE Daughter Board == | ||
<br /><br /> | <br /><br /> | ||
== Cobra Drive Motor Controller Board == | |||
<div style="float:right">[[File:Cobra - DMC module - Drive-Motor-Controller.jpg|200px|thumb|left|Cobra ODE DMC module]]</div> | |||
<br /><br /> | |||
= 3ks R = | |||
aka: 3K3Y ODDE Ultra Slim | |||
<gallery> | |||
File:3ks-R.png|3ks R | |||
</gallery> | |||
= E3 ODE Pro = | |||
<gallery> | |||
File:E3-ODE-PRO.jpg|E3 ODE Pro | |||
</gallery> | |||
E3 ODE Pro run a version of embedded Linux from Freescale company. | |||
I had figured out that the lazy E3 team forgot to disable debug interface "Serial" from ODE board, so you can fully control what ODE do from this. | |||
I had dumped the full boot log from E3 ODE and its clones "Matrix ODE, Stone ODE, Modbo ODE", you can see it here [http://pastie.org/10054287 E3 ODE Bootlog] - 'Abkarino' | |||
= Stone ODE = | |||
http://www.stone-ode.com/ -> http://web20522.w106.vhost001.cn/index.html | |||
<gallery> | |||
File:Stone ODE.jpg|Stone ODE board | |||
File:Stone ODE board.jpg|Stone ODE set | |||
File:Stone ODE wireset.jpg|Stone ODE wireset | |||
File:Stone ODE diagonal.jpg|Stone ODE diagonal | |||
</gallery> | |||
= Matrix ODDE = | |||
http://www.matrixode.com/products.html | |||
<gallery> | |||
File:Matrix ODDE.jpg|Matrix ODE set | |||
File:MTX Connection cables.JPG|Matrix ODE - MTX Connection cables | |||
File:MTX ODE Mainboard..JPG|Matrix ODE - MTX ODE Mainboard | |||
File:MTX SOLDER BOARD.JPG|Matrix ODE - MTX Solder Board | |||
File:MTX USB STICK.JPG|Matrix ODE - MTX USB Stick | |||
</gallery> | |||
= IRD / Keys = | |||
* http://mir.cr/6VTJKVIH IRD | |||
* http://mir.cr/1U2SL5AE KEYS | |||
* [https://github.com/Zarh/ird_tools/releases IRD Tools] | |||
{{Reverse engineering}} | |||
{{Hardware Modification}}<noinclude>[[Category:Main]]</noinclude> |
Latest revision as of 13:25, 2 November 2021
Acronym for: Optical Drive Emulator
SKU differences[edit | edit source]
Model | Controller | Sniffing/Injecting | Exploitable | 3K3Y FAT | Cobra | Cobra QSV | 3ks R | E3 ODE Pro | Stone ODE | Matrix ODDE |
---|---|---|---|---|---|---|---|---|---|---|
CECHA up to CECHK | on daugtherboard | via wide | Yes | Y | Y | N | N | N | N | N |
CECHL up to CECHQ | on daugtherboard | via small | Yes | N | Y | N | N | N | N | N |
CECH-2000 up to CECH-2100 | on daugtherboard | via small | Yes | N | Y | N | Y | Y | Y | N |
CECH-2500 | on motherboard | on motherboard | Some | N | Y | Y | Y | Y | Y | Y |
CECH-3000 | on motherboard | on motherboard | No | N | Y | Y | Y | Y | Y | Y |
CECH-4000 | on motherboard | on motherboard | No | N | Y | Y | Y | Y | Y | Y |
CECH-4200 | on motherboard | on motherboard | No | N | Y | Y | Y | Y | Y | Y |
CECH-4300 | on motherboard | on motherboard | No | N | Y | Y | Y | Y | Y | Y |
Notes[edit | edit source]
- CECHA up to CECH-3000 : on OFW 4.55 and higher require the DMC module + swapdisc (below OFW 4.55 there is no need for DMC module/swapdisc).
- CECH-4000, CECH-4200, CECH-4300 : work with lid-detect wire soldered + swapdisc, but do not require DMC module.
http://www.team-cobra-ode.com/downloads/Anti-ODE_Security_Bypass_Manual_%28English%29_v1.2.pdf
3K3Y[edit | edit source]
Ripper[edit | edit source]
Hardware[edit | edit source]
mounted between SATA/PATA connector and Bluray Drive thus emulating drive, using drivekeys obtained on exploitable consoles
3K3Y ripper - Components[edit | edit source]
U1 : JM20337 (Hi-Speed USB to SATA & PATA Combo Bridge) 64-pin LQFP[edit | edit source]
Product page: http://www.jmicron.com/JM20337.html
note: pin34 4.7K (472) resistor present (R6) - might need removing (to solve corruption errors, when applicable)
X1 : 12.000 (12MHz crystal)[edit | edit source]
VR1: AX1117 (low drop regulator)[edit | edit source]
Software[edit | edit source]
- 3k3y Keydumper v1.00 - outputs to first available device in root of USB Mass Storage device or /dev_hdd0/tmp/3Dump.bin
- 3k3y Ripper v1.02 - Windows software for ripping/decrypting/reencrypting PS3 disks, including PDF user manual.
- 3k3y-Ripp3r v1.20 source code
- 3k3y-Ripp3r Manual.pdf
- IRD File Format.pdf
ODE[edit | edit source]
PATA[edit | edit source]
SATA[edit | edit source]
Cobra[edit | edit source]
Cobra ODE Main Board[edit | edit source]
Cobra ODE Daughter Board[edit | edit source]
Cobra Drive Motor Controller Board[edit | edit source]
3ks R[edit | edit source]
aka: 3K3Y ODDE Ultra Slim
E3 ODE Pro[edit | edit source]
E3 ODE Pro run a version of embedded Linux from Freescale company. I had figured out that the lazy E3 team forgot to disable debug interface "Serial" from ODE board, so you can fully control what ODE do from this. I had dumped the full boot log from E3 ODE and its clones "Matrix ODE, Stone ODE, Modbo ODE", you can see it here E3 ODE Bootlog - 'Abkarino'
Stone ODE[edit | edit source]
http://www.stone-ode.com/ -> http://web20522.w106.vhost001.cn/index.html
Matrix ODDE[edit | edit source]
http://www.matrixode.com/products.html
IRD / Keys[edit | edit source]
|