Dumping Bootldr

From PS3 Developer wiki
Revision as of 17:52, 8 November 2012 by Zecoxao (talk | contribs) (→‎How to)
Jump to navigation Jump to search
This article is marked for rewrite/restructuring in proper wiki format.
You can help PS3 Developer wiki by editing it.

Requirements

  • OtherOS++ with SS Patches
  • Linux Kernel with glevand's/graf's patches (red ribbon rc6 will do the trick, since it has the embedded kernel)
  • https://dl.dropbox.com/u/35197530/bootldrexploit.7z the exploit and the lv1 peek poke from Juan (already corrected in this case)
  • NOR console with a NOR dump (the exploit isn't adapted to NAND consoles yet)

How to

  1. Start a normal session from red ribbon (or any other distro you might have)
  2. Extract the contents of bootldrexploit to your home folder
  3. Open your terminal and type as root:
    4. Type This
    cd bootldrexploit/ps3peekpoke
  4. Compile the lv1 peek poke kernel module:
    5. Type This
    make
  5. Insert the lv1 peek poke kernel module:
    6. Type This
    insmod ps3peekpoke.ko
  6. Change directory to the exploit dir
    7. Type This
    cd ../btldr8
  7. Compile the exploit
    8. Type This
    make
  8. Make a nor dump by typing
    9. Type This
    dd if=/dev/ps3nflasha of=nor.bin bs=1024
  9. Execute the exploit
    10. Type This
    ./lv0Decrypt 0 nor.bin buffer.bin
  10. It should show the status as status A0082. This means you've succeeded. check your dump for the keys.
    11. Type This
    hexdump -C dump.bin > test
    Type This
    nano test
Retrieved from "http://www.psdevwiki.com/ps3/index.php?title=Dumping_Bootldr&oldid=15692"