Theory to exploit the PS3 & install PKG's via the PS3 download Manager

**phantom76** · 14th January 2012

Ok this probably isn't the best place to ask, But here goes.

Is there anyone out there that understands the MD5 algorithm?
I know the MD5 algorithm can be exploited, But at the moment i don't know how to do it myself, So i need someone who can.
If we can exploit the MD5 algorithm, We would the be able to install signed pkg's on OFW.

Basic's of my theory.
1) Exploit MD5 algorithm so we can create non-identical files with matching MD5 hashes.
2) Pack a PSN game, Or repack a disc game as a PSN style/type/pkg game into a pkg and sign it.
3) Use a PC program to redirect a Playstation store download from the PS3 to the PC, Capture links too (I know a program that can do this, But can't remember whats it's called at the moment).
4) Change the hash of the packed PSN game, Or repacked PSN style/type/pkg disc game to match the hash of whatever was downloaded from the Playstation store.
5) Use the PC program again, Download from the store using the PS3, But instead of downloading from the store, Use the program to swap the files and download the file from the PC to the PS3 (This has been tried and tested and confirmed working).
6) Install the pkg using the official Sony install method (Same way you install any legit/purchased game downloaded from the store).

I have managed to achieve this on OFW 3.55, But it was a long time ago, Back in the days of the JB dongles! LOL
It did have major issue's though, Was very limited to what could be installed, basically you could only install pkg's of the same size, Oh and that didn't always work either.
So if we could change the hash on any pkg we created we wouldn't have the size issue i mentioned, And the created pkg would pass the hash check done by the PS3.

If this can be perfected, It could evolve and someone could even setup a site for direct downloads to the PS3.