Difference between revisions of "PS3 modding"

From Emulation General Wiki
Jump to navigation Jump to search
(Emulation)
(BG Toolset)
 
(14 intermediate revisions by 10 users not shown)
Line 1: Line 1:
Modding your PlayStation 3 allows you to bypass some protection mechanisms like Cinavia, as well as dump games and transfer files to and from partition types other than FAT32. Here, we've detailed the traditional hardmod method, as well as a new exploit for 4.82 that allows you to get into custom firmware of the same version (currently Rebug/Ferrox).
+
In 2010, fail0verflow jailbroke the PlayStation 3's firmware as a response to Sony disabling the console's OtherOS feature. It used to be that <span class="plainlinks">[{{FULLURL:PS3 Modding|oldid=9561}} a hardmod was necessary to force a downgrade to load custom firmware]</span>. However, in 2017 a newer softmod exploit was released based around the same concept, using the web browser instead.
  
One thing to note is that PSN connectivity is still possible on custom firmware, but you can potentially run the risk of getting your PSN ID and Console ID banned. This can be reversed with a workaround involving acquiring someone else's Console ID, but it's not failsafe.
+
Modding your PlayStation 3 allows you to do many things;
  
==Softmod <small>(PS3Xploit for 4.82)</small>==
+
* Bypass protection mechanisms like Cinavia.
:<small>Note: Not all models are supported. Check the linked page for guides that explain which specific models are not supported. You could also refer to the table below.</small>
+
* Dump games from disc and hard drive.
 +
* Transfer files to and from filesystems other than FAT32.
  
See [http://darthsternie.bplaced.net/team-ps3xploit-browser-exploits.html this page on Team PS3Xploit Browser Exploits] to get started. Click on PS3 NAND Writer or PS3 NOR Writer depending on your model, and follow the linked guides.
+
You can still connect to PSN from a modded console, so make sure you disable auto sign-in, and don't use any homebrew apps while signed in as that will risk getting your PSN ID and Console ID banned.
  
==Hardmod <small>(Downgrade to 3.55)</small>==
+
==Compatibility chart==
This guide has been rendered a little outdated, but can still be used if you're interested.
+
The primary attack vector for custom firmware is a component used for signature verification that could be found in models up until January 2011 (meaning if your PlayStation 3 had a factory version at or lower than 3.55, it could be modded out of the box with a simple upgrade to 3.55). However, Sony would later fix this around 3.56 and newer. To reenable it, it used to be that the console would need to be forcefully downgraded to 3.55. However, a completely different exploit was found in the web browser for 4.82 that could reenable the component given the right conditions.
 
 
To start, you need to get your PS3 on system firmware 3.55 to mod it. If you're on a lower version, just update with [http://www.mediafire.com/?sm8kd6liqzj3jo5 this archived copy of the 3.55 <code>PS3UPDAT.PUP</code>]. If you're on a higher version, you have to use a hardware flasher. See this table for what models are downgradable and what flashers can be used on those models:
 
  
 
{| class="wikitable" style="text-align:center;"
 
{| class="wikitable" style="text-align:center;"
 
|-
 
|-
! scope="row"|PS3 Model #
+
! scope="row"|PS3 Model<ref>PS3DevWiki. [https://www.psdevwiki.com/ps3/SKU_Models#Retail_Models SKU Models].</ref>
! scope="col"|Downgradable
+
! scope="col"|CFW support
! scope="col"|[http://www.progskeet.com/ Progskeet]
+
! scope="col"|Homebrew
! scope="col"|[http://www.ps3devwiki.com/wiki/E3 E3 Flasher]
+
! scope="col"|Method
! scope="col"|[http://www.ps3devwiki.com/wiki/Teensy_2.0%2B%2B Teensy++]
 
 
|-
 
|-
 
! scope="row"|CECH-A to CECH-G
 
! scope="row"|CECH-A to CECH-G
|Yes
+
|{{✓}}
|Yes
+
|{{✓}}
|No
+
|NAND Writer
|Yes
 
 
|-
 
|-
 
! scope="row"|CECH-H to CECH-Q
 
! scope="row"|CECH-H to CECH-Q
|Yes
+
|{{✓}}
|Yes
+
|{{✓}}
|Yes
+
|NOR Writer
|Yes
 
 
|-
 
|-
 
! scope="row"|CECH-2xxx
 
! scope="row"|CECH-2xxx
|Yes
+
|{{✓}}
|Yes
+
|{{✓}}
|Yes
+
|NOR Writer
|Yes
+
|-
 +
! scope="row"|CECH-21xx
 +
|{{✓}}
 +
|{{✓}}
 +
|NOR Writer
 
|-
 
|-
 
! scope="row"|CECH-25xx
 
! scope="row"|CECH-25xx
|[https://github.com/downloads/baileyscream/Ultimate-Fool-Proof-Guide--Ps3-Hardware-Downgrading-files/MinVerChk.rar Check]
+
|{{~}}
|Yes
+
|{{✓}}
|Yes
+
|NOR Writer*
|Yes
 
 
|-
 
|-
 
! scope="row"|CECH-3xxx
 
! scope="row"|CECH-3xxx
|No
+
|{{✗}}
|No
+
|{{✓}}
|No
+
|PS3HEN
|No
 
 
|-
 
|-
 
! scope="row"|CECH-4xxx
 
! scope="row"|CECH-4xxx
|No
+
|{{✗}}
|No
+
|{{✓}}
|No
+
|PS3HEN
|No
 
 
|}
 
|}
 +
<small>*Only if the firmware [https://github.com/downloads/baileyscream/Ultimate-Fool-Proof-Guide--Ps3-Hardware-Downgrading-files/MinVerChk.rar MinVerChk] reports is lower than 3.55.</small>
  
All fat models are downgradable. If you have a [http://www.ps3devwiki.com/index.php?title=Flash_%28Hardware%29#NAND NAND] model (CECH-A to CECH-G) use Teensy++. If you have a [http://www.ps3devwiki.com/index.php?title=Flash_%28Hardware%29#NOR NOR] model (CECH-H to CECH-Q or any downgradable slim PS3) use E3 Flasher. For downgrading you should follow a tutorial: [http://www.ps3hax.net/showthread.php?t=39766 Using Teensy++/Progskeet] or [http://www.ps3hax.net/showthread.php?t=33989 Using E3 Flasher]
+
==Procedure==
 +
<div style="color:#000;background:#eef2ff;border:1px solid #b7c5d9;border-radius:8px;padding-left:1em;display:inline-block;padding-right:1em;">
 +
'''Important Note:''' As with any modding procedure, failure to perform a single step in the process could potentially brick your console.
 +
</div>
 +
===PS3HEN===
 +
If your PS3 cannot run custom firmware, you will need to use the '''PS3 Homebrew ENabler''' ('''PS3HEN'''). It currently takes the form of a hybrid firmware you install on top of the original firmware to get various homebrew running.
  
Once you are on FW 3.55 you'll have to enter Factory Service Mode, to do that either [http://www.ps3hax.net/showthread.php?t=33989 follow this] (see Chapter 2, Part 1), or use one of [http://www.ps3devwiki.com/wiki/Talk:Downgrading_with_PSgrade_Dongle these devices].
+
A complete guide on PS3HEN can be found [https://www.psx-place.com/threads/tutorial-ps3hen-the-great-ps3-hen-all-in-one-guide.24369/ here].
  
[http://www.ps3hax.net/showthread.php?t=26677 See this guide] for going from OFW 3.55 to CFW 3.55.
+
===BG Toolset===
 +
If your PS3 can run custom firmware, it needs to be able to access the webpage necessary to jailbreak the console. Currently this takes the form of the BG Toolset, which you can access by going to <code><nowiki>https://www.ps3toolset.com/bgtoolset/</nowiki></code> in the PS3's web browser.
  
[http://www.ps3hax.net/2013/02/tutorial-how-to-install-4-30-ps3-cfw-from-3-55-cfw/ See this guide] for upgrading from CFW 3.55 to CFW 4.30.
+
In order to use it, you need to ensure:
 +
* The console is between one of these firmware versions: 4.75 <==> 4.91
 +
* The browser has all of these enabled:
 +
:* The Flash Player 9 plugin
 +
:* JavaScript
 +
:* Cookies
 +
* The firmware mode must be either CEX or DEX
 +
* The system time is accurately set
 +
 
 +
[http://ps3xploit.com/help/bgtoolset.html This page] explains how to use it, including instructions on how to back up the flash memory in case something goes wrong.
 +
 
 +
Once the flash memory has been patched, you can install a custom firmware that matches the same version as the console's original firmware. Only once you're on the custom firmware can you downgrade.
  
 
==Emulation==
 
==Emulation==
 
===RetroArch===
 
===RetroArch===
 +
{{main|Emulators on PS3#RetroArch}}
 
[[RetroArch]] has a PS3 port with lots of working cores that should cover most of the usual targets.
 
[[RetroArch]] has a PS3 port with lots of working cores that should cover most of the usual targets.
  
===Official Sony Emulators===
+
===Official Sony emulators===
Main article: [[Official Sony Emulators#Emulators on PlayStation 3|Official Sony Emulators → Emulators on PlayStation 3]]
+
{{Main|Official emulators#Emulators on PS3|Official Sony Emulators → Emulators on PlayStation 3}}
  
 
====PS2====
 
====PS2====
Line 79: Line 95:
  
 
====PSP====
 
====PSP====
PSP games also work on PS3 through an emulator created for playing "PS3 Minis" from PSN, but compatibility is very limited (less than that of PPSSPP). Refer to PSHomebrew's [http://www.pshomebrew.net/wiki/PSP_On_PS3_Compatibility_List PSP on PS3 compatibility list] for per-game info.
+
PSP games also work on PS3 through an emulator created for playing "PS3 Minis" from PSN, but compatibility is very limited (less than that of PPSSPP). Refer to PSDevWiki's [https://www.psdevwiki.com/ps3/PSP_Emulator_Compatibility_List PSP on PS3 compatibility list] for per-game info.
 +
 
 +
==References==
 +
{{reflist}}
  
 
[[Category:Console Modding]]
 
[[Category:Console Modding]]

Latest revision as of 00:09, 23 March 2024

In 2010, fail0verflow jailbroke the PlayStation 3's firmware as a response to Sony disabling the console's OtherOS feature. It used to be that a hardmod was necessary to force a downgrade to load custom firmware. However, in 2017 a newer softmod exploit was released based around the same concept, using the web browser instead.

Modding your PlayStation 3 allows you to do many things;

  • Bypass protection mechanisms like Cinavia.
  • Dump games from disc and hard drive.
  • Transfer files to and from filesystems other than FAT32.

You can still connect to PSN from a modded console, so make sure you disable auto sign-in, and don't use any homebrew apps while signed in as that will risk getting your PSN ID and Console ID banned.

Compatibility chart[edit]

The primary attack vector for custom firmware is a component used for signature verification that could be found in models up until January 2011 (meaning if your PlayStation 3 had a factory version at or lower than 3.55, it could be modded out of the box with a simple upgrade to 3.55). However, Sony would later fix this around 3.56 and newer. To reenable it, it used to be that the console would need to be forcefully downgraded to 3.55. However, a completely different exploit was found in the web browser for 4.82 that could reenable the component given the right conditions.

PS3 Model[1] CFW support Homebrew Method
CECH-A to CECH-G NAND Writer
CECH-H to CECH-Q NOR Writer
CECH-2xxx NOR Writer
CECH-21xx NOR Writer
CECH-25xx ~ NOR Writer*
CECH-3xxx PS3HEN
CECH-4xxx PS3HEN

*Only if the firmware MinVerChk reports is lower than 3.55.

Procedure[edit]

Important Note: As with any modding procedure, failure to perform a single step in the process could potentially brick your console.

PS3HEN[edit]

If your PS3 cannot run custom firmware, you will need to use the PS3 Homebrew ENabler (PS3HEN). It currently takes the form of a hybrid firmware you install on top of the original firmware to get various homebrew running.

A complete guide on PS3HEN can be found here.

BG Toolset[edit]

If your PS3 can run custom firmware, it needs to be able to access the webpage necessary to jailbreak the console. Currently this takes the form of the BG Toolset, which you can access by going to https://www.ps3toolset.com/bgtoolset/ in the PS3's web browser.

In order to use it, you need to ensure:

  • The console is between one of these firmware versions: 4.75 <==> 4.91
  • The browser has all of these enabled:
  • The Flash Player 9 plugin
  • JavaScript
  • Cookies
  • The firmware mode must be either CEX or DEX
  • The system time is accurately set

This page explains how to use it, including instructions on how to back up the flash memory in case something goes wrong.

Once the flash memory has been patched, you can install a custom firmware that matches the same version as the console's original firmware. Only once you're on the custom firmware can you downgrade.

Emulation[edit]

RetroArch[edit]

Main article: Emulators on PS3#RetroArch

RetroArch has a PS3 port with lots of working cores that should cover most of the usual targets.

Official Sony emulators[edit]

Main article: Official emulators#Emulators on PS3

PS2[edit]

You can emulate PS2 games on any model of the PS3 using ps2_netemu (Sony's own software-based PS2 emulator, also known as the "PS2 Classics Emulator"), which was developed for playing the PS2 games sold on PSN. It was never meant to be used as a general-purpose emulator, which means you really shouldn't be expecting perfect compatibility with games it hasn't been specifically optimized for, but many titles are playable. Refer to the PSHomebrew's PS2 Classics compatibility list for per-game info.

Note that if you own an old backwards-compatible PS3 unit, and it for whatever reason hasn't broken yet, you'll rather want to be using ps2_emu - the emulator that's launched when you put a PS2 game disc into the console. Unlike ps2_netemu, this one utilizes the extra PS2 hardware integrated in your console and has much better compatibility. ps2_emu is only usable on COBRA firmwares, meaning custom firmwares that integrate the functionality that was previously only available for those who bought the DRM'd Cobra dongle. Refer to Wikipedia's PS3 backward compatibility list for per-game info.

PSP[edit]

PSP games also work on PS3 through an emulator created for playing "PS3 Minis" from PSN, but compatibility is very limited (less than that of PPSSPP). Refer to PSDevWiki's PSP on PS3 compatibility list for per-game info.

References[edit]

  1. PS3DevWiki. SKU Models.