Dumping Bootldr: Difference between revisions
Jump to navigation
Jump to search
(Attempt to create a good tutorial in how to make a bootldr dump) |
(→How to) |
||
| Line 10: | Line 10: | ||
==How to== | ==How to== | ||
<ol> | |||
<li>Start a normal session from red ribbon (or any other distro you might have)</li> | |||
<li>Extract the contents of bootldrexploit to your home folder</li> | |||
<li>Open your terminal and type as root:</li> | |||
{{keyboard|content=cd bootldrexploit/ps3peekpoke}} | {{keyboard|content=cd bootldrexploit/ps3peekpoke}} | ||
<li>Compile the lv1 peek poke kernel module:</li> | |||
{{keyboard|content=make}} | {{keyboard|content=make}} | ||
<li>Insert the lv1 peek poke kernel module:</li> | |||
{{keyboard|content=insmod ps3peekpoke.ko}} | {{keyboard|content=insmod ps3peekpoke.ko}} | ||
<li>Change directory to the exploit dir</li> | |||
{{keyboard|content=cd ../btldr8}} | {{keyboard|content=cd ../btldr8}} | ||
<li>Compile the exploit</li> | |||
{{keyboard|content=make}} | {{keyboard|content=make}} | ||
<li>Make a nor dump by typing</li> | |||
{{keyboard|content=dd if=/dev/ps3nflasha of=nor.bin bs=1024}} | {{keyboard|content=dd if=/dev/ps3nflasha of=nor.bin bs=1024}} | ||
<li>Execute the exploit</li> | |||
{{keyboard|content=./lv0Decrypt 0 nor.bin buffer.bin}} | {{keyboard|content=./lv0Decrypt 0 nor.bin buffer.bin}} | ||
<li>It should show the status as status A0082. This means you've succeeded. check your dump for the keys.</li> | |||
{{keyboard|content=hexdump -C dump.bin > test}} | {{keyboard|content=hexdump -C dump.bin > test}} | ||
{{keyboard|content=nano test}} | {{keyboard|content=nano test}} | ||
</ol> | |||
Revision as of 17:52, 8 November 2012
| This article is marked for rewrite/restructuring in proper wiki format. You can help PS3 Developer wiki by editing it. |
Requirements
- OtherOS++ with SS Patches
- Linux Kernel with glevand's/graf's patches (red ribbon rc6 will do the trick, since it has the embedded kernel)
- https://dl.dropbox.com/u/35197530/bootldrexploit.7z the exploit and the lv1 peek poke from Juan (already corrected in this case)
- NOR console with a NOR dump (the exploit isn't adapted to NAND consoles yet)
How to
- Start a normal session from red ribbon (or any other distro you might have)
- Extract the contents of bootldrexploit to your home folder
- Open your terminal and type as root:
- Compile the lv1 peek poke kernel module:
- Insert the lv1 peek poke kernel module:
- Change directory to the exploit dir
- Compile the exploit
- Make a nor dump by typing
- Execute the exploit
- It should show the status as status A0082. This means you've succeeded. check your dump for the keys.
cd bootldrexploit/ps3peekpoke
make
insmod ps3peekpoke.ko
cd ../btldr8
make
dd if=/dev/ps3nflasha of=nor.bin bs=1024
./lv0Decrypt 0 nor.bin buffer.bin
hexdump -C dump.bin > test
nano test