IDPS

From PS3 Developer wiki
Revision as of 06:14, 6 March 2020 by CelesteBlue (talk | contribs)
Jump to navigation Jump to search

The IDPS is a 16 bytes value that contains console specific information.

Structure

  
                              Chassis Check
                                  ⇓                     
00000000  00 00 00 01 00 89 00 0B 14 00 EF DD CA 25 52 66  .....‰....ïÝÊ%Rf
                       ⇑ ⇑   ⇑ ⇑
                 Target ID     Model type
    (Internal:Product Code)   (Internal: Product Sub Code)

5th and 6th byte represent Target ID

7th and 8th byte represent SKU Model

9th byte represents chassis check

10th byte represents an unkwnown model identifier

remaining bytes seam to be an identifier generated from some per console data

Location

The IDPS can be found in EID0 and EID5. See Flash (NAND @ 0x80870 / NOR @ 0x2F070).

Displayed under setting information on MultiMan or on registry/application_persistent file inside playstation Store folder (as DeviceID).

idpstealer (patched since FW 4.70 and deprecated since ps3exploit)

From flatz: Privet, PS3 fans! Once KaKaRoTo published his backup tool I’ve decided to bring a way of getting a console ID (IDPS) to the community. It can be used on OFW/CFW firmware and you don’t need any additional software/hardware installed on your PS3.

However there are several cons about releasing:

  1. A big company will fix it in the next firmwares.
  2. It can be used to steal other people’s IDPS if you have an access to their consoles.

And it seems that this is the only method of getting ConsoleId without using hardware solutions on the moment. So please, if you want to get an IDPS from your console then do it as fast as possible because I think this method won’t work in the nearly future.

How it works: IDPStealer works as a proxy server and intercepts all network traffic (including SSL traffic via HTTPS over HTTP tunneling) and it tries to get IDPS from it. It doesn’t contains any malicious code and can be safely used like any other proxy server.

Usage: idpstealer.exe [options] <idps file>
Options:
-p <port number> - Port to listen on (default: 1337
-h               - Show this help
Arguments:
<idps file>      - Output file for IDPS
C:\>idpstealer.exe idps.bin
Starting proxy server on 192.168.1.13:1337
IDPS have been successfully written to: idps.bin

https://dl.dropboxusercontent.com/u/35197530/zip/idpstealer.7z

https://web.archive.org/web/20160309135920/http://pastie.org/private/wlakfucps3bc21dfuosdtg

  • This method no longer works because now Sony uses OpenPSID instead of IDPS although the key/algorithm remains the same.
  • This should work also on PS4 and PSVita, but with a different key (not known/public atm)