****WARNING These headers are for use only with RED RIBBON 5. You are compiling a kernel module; the configuration files in the header package make it compatible with RED RIBBON 5 only.
copy it to and unpack it in a subdirectory of your home directory:
/home/username/headers
to unpack: open the filemanager (one of the icons in the top left of the desktop), open that folder, right click on linux-headers-2.6.38-powerpc64-otheros_2.6.38-powerpc64-otheros-10.00.Custom_powerpc.deb, a menu box pops up, choose extract here. Do not install with synaptic or with deb commands.
2. Create a link to it in the appropriate lib/modules directory
link command syntax: ln -s target linkname
(-s means it's a symbolic link/shortcut)
for mine it is:
/lib/modules/2.6.38-powerpc64-otheros
open a terminal (as root) in that folder and create the link:
ln -s /home/username/headers/usr/src/linux-headers-2.6.38-powerpc64-otheros /lib/modules/2.6.38-powerpc64-otheros/build
that command will create a symlink (shortcut) to the header files/module.symvers, the link will be called build. If you already have a build link (in /lib/modules/directory with kernel name/) then you prolly don't need those header files or to create the link.
3. Compile the exploit(not as root):
cd metldr838exploit && make
Depending on your compiler settings you may get these two warnings(it's ok): warning label 'bad5' defined but not used or warning '/*' within comment.
4. Copy the other files you will need for running the exploit to the exploit directory:
For example, someone on rebug 3.41.3 other os with ss patches:
metldr (extracted from a flash dump of the nor, use yours)
instructions here: http://www.ps3crunch.net/forum/threads/ ... exploit838
from ofw 3.41v2(using fail tools or ps3tools gui):
isoldr, spp-verifier.self, defaut.spp
(You may want to rename the metldr file that is already in the exploit directory so it won't be overwritten.)
5. run the exploit at the commandline:
sudo ./run.sh
It will ask for your password (the one for your username, not the root password). Using sudo will give you the elevated privileges necessary to run the exploit, ./ insures the script in your directory will be the command that the shell runs (if it doesn't execute, then you might need to set the permission with: chmod u+x run.sh)
A bunch of messages scroll by, then copy the output file (dump) to your home directory:
cp /proc/metldrpwn/dump /home/username/ (there is a space between /dump and /home/username/) Since you just used sudo, you shouldn't have any problem with permissions. If you do, use sudo cp.
Note: If petitboot stalls going down (to load linux), unplug your usb items. Please no controller plugged into usb port. Most keyboards are ok plugged in, some aren't. Linux doesn't need the keyboard plugged in to boot. It's okay to unplug it after making your boot selection in petitboot. I select otheros. Plug it back in after linux boots.
No you don't need to be on 3.50.
This is not a tutorial! I don't know how to do the conversion to dex, just the linux step.
********WARNINGS
When entering the command to run the exploit, some people get the error "cannot allocate memory" (appearing once in several lines of text output to the screen). The console has a limited amount of memory, close open windows (the filemanager) and try again. I never had this error when I ran the command. Someone asked about it and I was able to reproduce the error by having too many windows open.
The run.sh script included with cex2dex has been revised to include the copy dump to home directory command. If you use that version of the script, no need to copy it yourself (with cp) to the home directory.
Last edited by JLM; 07-23-2012 at 10:23 AM.
Reason: updated warnings added
I will post this tut a few places cuz there is so many threads...
I will not be going into detail on how to compile the metldrpwn or how to compile and use libeeid.
Oh and if you dont know what scp is go google it because im not gonna be getting into all that, this isnt a spoon feeding tut :P
1. dump nor (from xmb, hardware flasher, or petitboot) if from petitboot you will need a flash drive or external hdd. make sure you hold on to this backup or your FUCT if something goes wrong.
2. extract nor (f0f tools or the windows nor unpack)
3. install rebug otheros++
4. install rebug otheros++ preptools
5. boot into petitboot
Now this is where it will start to get tricky because you will need to either scp files or use a flashdrive/external hdd, I use scp because its fast and easy
6. READ eEID : dd if=/dev/ps3nflasha skip=$((0x2F000)) of=/cex_eid.bin bs=1 count=$((0x10000))
7. scp cex_eid.bin to your computer
8. cd / rm cex_eid.bin
8. scp your metldr to the PS3 from your computer
9. run the metldrpwn on your metldr and dump the eid_root_key
10. scp your eid_root_key from your PS3 to your computer
11. use libeeid or whatever that other cex>dex tool is and convert your eid to dex (using the cex_eid.bin > dex_eid.bin)
12. scp your new dex_eid.bin to the PS3
13. WRITE eEID: dd if=dex_eid.bin of=/dev/ps3nflasha bs=1 seek=$((0x2F000)) count=$((0x10000))
14. reboot
15. if you're not bricked you will still be in cex FW just install DEX fw and poof your done :P
LAST WORDS OF WARNING:
If you brick its 100% you're fault and you didn't follow the instructions the the letter, or you just did something wrong all together. Dont ask me what went wrong cuz I wont have a clue nor do I care if you brick seeing I warned you to have a hardware flasher just in case. Sorry if that sounds harsh but if you dont think you can do this then you shouldn't be trying to mess with your nor in the first place because YOU CAN PERM BRICK!.
So what do we want from our PS3's that we haven't already got?
Answer = I want all this for FREE!
Well if that is the answer, then we need to stop arguing amongst ourselves and start blaming the real culprit.
Who is the culprit?
The culprit is the person who invented.................................... MONEY!
How many goats or horses do you think the Ps3 would be worth? How many pigs? In fact, if money is anything of value that is used to buy products and services and to pay debts, this would mean that even other products and services couldn't be used for that would "invent money".
You couldn't say "Hey, what could I give to convince you to give me that PS3?" You would either have to be gifted it, or take it by force. Sure, maybe in a utopia, everybody would be perfectly willing to give up their Ipods and ps3s to anybody who asks, but not in the real world. Money's lack of existence would leave many people without even basic necessities, things that they could otherwise "pay for" with either products or services, but that wouldn't be possible, because then they would have to invent money. And many people rarely show even appreciation, there would be less incentive to give up what you have to somebody that expected you to give it on command. You would also have to defend it with your life, because if you choose not to gift it, somebody may want it enough to take it by force. There are even those that think a thanks should be enough to get a product or service, so even thanks would be money. All it means is that people would take what they want without any thought of who they are taking from, mostly because they could not get it by asking, nor would they be able to barter for it because that would create money.
In the end, money is not the cause, greed is. Greed is the excessive desire to acquire or possess more than what one needs or deserves. Bartering (money, products, and services all have one thing in common, value. Therefore, trading with money is still bartering.) was invented to counteract that, to work around our selfishness. Take away money's existence, and we regress to tyrants, ever greedy, but with no means to work around it. Even in ancient societies, where gifts were given, it was not for selfless reasons. In return for gifts, one gained status, i.e. power. The only thing people love more than wealth is power. You act like money inhibits your ability to acquire wealth (free things) when in actuality, money allows you to gain things peacefully. Whereas without a bartering system, you would either be dependent on the charity of others (something you can still be) or be dependant on theft (also something you can still be). It also allows us to coexist peacefully, and enjoy commodities without violating one another's natural rights.
Originally Posted by tonybologna
Posted by eBoots:
Yes, not a free solution for the scene though! Hacking has always & should come down to eventually a FREE solution for any scene. c4eva on the 360 has provided software updates with FW(iXtreme,LT) for playing backups for FREE for a long time now! The same goes for the Wii. There's the softmod for the Wii for FREE! This piracy stuff talk really gets on my nerves. Not saying your information is saying anything about piracy but that's what this hacking basically all comes down to. I say just get the hacking out period & the heck with whether piracy is involved.
TB is making a ton of mula & there is/are some devs holding back information to allow what TB can do. Maybe this leak will take away that for TB but right now we don't know for sure. It certainly seems like the best news for the scene since the original jailbreak news. Now, we just need to have the right person/dev/hacker to get this into an easier solution for the PS3 scene. This should be done for FREE! This is hacking you know! Just my 2 cents worth!
But why is that worth free will? What gives us the right to force somebody to give us something? I have heard about the "hacker's creed", but I do not agree with forcing people to comply with it. Hacking and the Internet has always been about freedom, freedom from laws, and freedom from the power hungry. By thrusting such a creed on somebody, we are essentially going against our very supposed ideals. We would be no different than any dictator or mob rule. If we keep this up, then I would say the ideals we say we're for, are not freedom, but free things, to which point you could put us in the same category as dictators and thieves. We force you to give us what we want, and if you don't we take what we want by force. We make greed a virtue while rallying against greed i.e. we become hypocrites. And worse than any greed by far is the disregard for another's rights in our conquest for free things.
But why is that worth free will? What gives us the right to force somebody to give us something? I have heard about the "hacker's creed", but I do not agree with forcing people to comply with it. Hacking and the Internet has always been about freedom, freedom from laws, and freedom from the power hungry. By thrusting such a creed on somebody, we are essentially going against our very supposed ideals. We would be no different than any dictator or mob rule. If we keep this up, then I would say the ideals we say we're for, are not freedom, but free things, to which point you could put us in the same category as dictators and thieves. We force you to give us what we want, and if you don't we take what we want by force. We make greed a virtue while rallying against greed i.e. we become hypocrites. And worse than any greed by far is the disregard for another's rights in our conquest for free things.
Couldn't agree more. Look at what happened with a lot of people. True blue came up and then the Open Source Tyrants appeared. Anything dongle related became demonized. While the open source path seems the right choice, I won't go medieval on people just because they disagree with me.
All it takes is charging 60 bucks for a dongle and the scene turn into a lynching mob, first victim, Deank.
Anyway, I'm sorry if I derailed this topic a bit more.
I agree it is very easy to brick. I only posted the instructions for that reason, having seen some incomplete or inaccurate instructions. Don't assume my tips up there are a complete guide. Read the original ariticles on the exploit from when it was released and the linux documentation.
Added some warnings to my post above and instructions for unpacking the headers. Don't use synaptic to install them. Please be very careful or wait for something easier.
Using kboot is installing linux twice and using the second install to do the exploit. Just use your first install to do the exploit. Kboot is cool software but absolutely not necessary for anyone who only needs to do the exploit. You will see some linux guides that put files for compiling in the /usr/src directory for compiling kernels or kernel modules. This is not necessary; they should be placed in the home folder and built as a regular user not root. Even if you want to compile the kernel just do it in your home directory.
Sorry guys. I haven't understood, yet.
If I install 4.xx debug firmware on a converted CEX what can I do, exactly?
Can I install Multiman for DEX?
Can I still play 3.55 backups?
Can I play 4.xx retail games?
Reply With Quote
Originally Posted by Eboots
