[Update3]~~~~ The Ultimate Cex To Dex Guide ~~~~[Video Added]

**Uncharted** · 20th July 2012

Warning

BY FOLLOWING THE GUIDE STEP-BY-STEP OR 'NOT', YOU AGREE THAT I AM IN NO WAY RESPONSIBLE FOR ANYTHING THAT HAPPENS TO YOUR PS3 CONSOLE. I WONT BE THERE TO WIPE YOUR TEARS.

* IT IS REQUIRED AT ONE POINT TO FORMAT THE PS3 INTERNAL HARD DISK DRIVE, SO IF YOU DON'T WANT TO LOSE YOUR DATA, YOU MUST MAKE A BACKUP OF IT BEFORE CONTINUING.

Update:- Nand Users can also use this Tut Now, See Below For More details..

For Users With Nor Console.

Spoiler:

Originally Posted by Deank

You only need linux once just to obtain your key. After you have the keys you can switch to cex/dex/change the ps3 region from GameOS. Yes, it may be possible to obtain the key without installing linux (either from livecd or using some other method), but not at the moment.

TomatOsaUce's Guide

Spoiler:

Deank's Guide

Spoiler:

Small Tutorial About Running Metldrpwn Exploit On Red Ribbon ++ By Deank

Deank prepared a 217MB rar package to make things easier. It includes everything you need, except for RedRibbon which you'll have to download it yourself ->

PS3_OTHEROS_LINUX_METLDRPWN.rar (217.32MB)

Code:

http://www.sendspace.com/file/ly22vs

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~
RED RIBBON LINUX DISTRO (REQUIRED)

Code:

http://sourceforge.net/projects/redribbon/files/red_ribbon_rc5.rar/download

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~

You can download the OTHEROS PUP separately directly from glevand's repo and save it as \PS3\UPDATE\PS3UPDAT.PUP on your USB:

Code:

http://gitbrew.org/~glevand/ps3/cfw/CFW355-OTHEROS++-22GB.PUP

Download and follow the instructions. You need a USB hdd to extract this package to the root folder of the USB and also Red-Ribbon.iso extracted in the root folder of the same USB. The rar contains:

multiMAN ver 04.04.03 BASE CEX DEX (20120722).rar (33.55MB)
(included in both package above in "multiMAN folder; DEX version can be used on DEX 3.55-4.11; can load backups on 3.55DEX with peek&poke)

Code:

http://www.sendspace.com/file/eryymy

c2d tool / openssl installer (supports NAND dumps from multiMAN)
metldrpwn folder with precompiled metldrpwn.ko module for Red Ribbon
multiMAN (for CEX and DEX) (no backups on DEX 3.56+) (supports NOR/NAND read/write)
norunpack (+cygwin1.dll)
PS3\UPDATE\PS3UPDAT.PUP (otheros-22GB.PUP)
create_hdd_region.sh
4 packages needed to setup OtherOS from XMB/GameOS + flash image for NORs (dtbImage.ps3.bin)
Instructions

You can also use this smaller download if you already have OTHEROS-22GB.PUP downloaded:

PS3_OTHEROS_SETUP_METLDRPWN.rar (52.25MB)

Code:

http://www.sendspace.com/file/n238uk

You can download the OTHEROS PUP separately directly from glevand's repo and save it as \PS3\UPDATE\PS3UPDAT.PUP on your USB:

Code:

http://gitbrew.org/~glevand/ps3/cfw/CFW355-OTHEROS++-22GB.PUP

NOTE:

* These instructions are for PS3 systems with NOR and NAND flash

* Following these instructions will result in formatting your internal PS3 HDD. All data will be lost.

* Before you continue, make sure that you backup all valuable data, saves, games

* If you have a hardware flasher - make a proper backup of your NOR/NAND flash

* If you don't have a flasher - make a backup of your NOR/NAND with software tools like memdump, dump_flash, preloader_advance, linux

* "Install multiMAN" in this tutorial should be read as "Install Regular or DEX version from multiMAN folder provided in this package"

* All tools must be used ONLY with NAND/NOR dumps created by multiMAN

* All firmware updates/installs MUST be performed from XMB->System Update and NOT FROM RECOVERY MENU!

REQUIREMENTS / PREPARATIONS:

* USB HDD/flash FAT32 formatted with 1GB free space

* Contents of this package extracted to the root folder of your USB drive

IMPORTANT:

* If your PS3 has NAND flash, remove "dtbImage.ps3.bin" from your USB and rename "NAND-dtbImage.ps3.bin" to "dtbImage.ps3.bin"

* Red Ribbon Linux (steps 13, 14) extracted to the root folder of your USB drive

* Create a dump of your NOR/NAND (use multiMAN to create a .NORBIN/.NANDBIN file - USB connected as /dev_usb000 required)

-

To dump flash: mmOS->Select any file->Open in HEX viewer->[SELECT]->[START]->DUMP LV2(NO)->DUMP LV1(NO)->DUMP FLASH(YES)

* Plug the USB to your PC and unpack the dump with norunpack.exe or cex2dex to a folder and grab "metldr" from the "asecure_loader" folder

* Put "metldr" into the "metldrpwn" folder on your USB

TIP:

* If you already obtained your keys you may skip to step 27

1.

Go to "System Update" and Install OTHEROS-22GB.PUP from USB (provided as \PS3\UPDATE\PS3UPDAT.PUP in this package)

* If you tried other tutorials or tools and if you find yourself in Petitboot - select "Boot OtherOS". Going into Recovery Mode will be tricky later.

2.

When installation is finished, reboot in "Recovery Mode" and choose "Restore PS3 System" (not the Backup/Restore in XMB)

* To go to "Recovery Menu" turn-off the PS3, press and hold the power button, you will hear ONE beep, then 2 beeps - release the button.

3.

Now 22GB are reserved for OtherOS

4.

Install and run setup_flash_for_otheros.pkg

5.

Reboot (It's important to shut down and turn on your PS3)

6.

Install and run install_otheros.pkg (Try different USB ports if you don't get any beeps.)

7.

Install and run boot_otheros.pkg

8.

Install and run reboot.pkg (use the package, do NOT reboot manually)

9.

You should be in Petitboot now.

10.

Quit to Shell and execute create_hdd_region.sh from your USB:

Code:

 /tmp/petitboot/mnt/sda1/create_hdd_region.sh

or

Code:

/tmp/petitboot/mnt/sdb1/create_hdd_region.sh

or

Code:

/var/tmp/petitboot/mnt/sda1/create_hdd_region.sh

or

Code:

/var/tmp/petitboot/mnt/sdb1/create_hdd_region.sh

or

mount and look for your USB hdd device in the list and then execute the script (create_hdd_region.sh) from the proper path

11.

Reboot your PS3

12.

From GameOS run "Reboot" to get into Petitboot again (if not already in Petitboot)

13.

Download Red Ribbon:

Code:

http://sourceforge.net/projects/redribbon/files/red_ribbon_rc5.rar/download

14.

Extract the rar and extract the ISO in the root of your USB stick/or burn the image to a DVD

15.

Plug in your USB/Insert the disc in your PS3 and you should see 2 different boot options in Petitboot

16.

Boot the one that says "live-otheros" (not asbestos or failsafe)

17.

From the desktop icon "Install Red Ribbon" - double-click to install it on the HDD

Code:

Use default username/password during installation: ps3/ps3

PROTIP:

* During partitioning you can resize the default /dev/ps3dd1 partition from 21GB to just 4GB (4096MB)
* It will speed up installation/formatting (all will take less than 5 mins)

18.

Restart the PS3 after installation is complete (use "Reboot" package from GameOS if reboot doesn't bring you to Petitboot)

19.

Select "Red-Ribbon" from petitboot (not the live/asbestos/failsafe)

20.

Login with ps3/ps3

21.

Use FileManager to copy your "metldrpwn" folder from the USB to your linux home folder (/home/ps3)

22.

Start TERMINAL

23.

Type:

Code:

cd metldrpwn
       sudo chmod +x ./run.sh
       sudo sh ./run.sh

24.

You may have to repeat the last command (sudo sh ./run.sh) if exploit fails

25.

You will find your EID dump (256KB) if everything went well in your home folder (/home/ps3/dump_eid0.bin)

26.

Transfer it to your USB drive

27.

On your PC use "c2d.exe" to convert your CEX NOR dump to DEX (use command prompt) (you may have to install openssl from c2d folder):

Code:

c2d.exe dump_eid0.bin my-original-cex.NORBIN my-DEX-flash.EID0.NORBIN 82

or

Code:

c2d.exe dump_eid0.bin my-original-cex.NANDBIN my-DEX-flash.EID0.NANDBIN 82

* If the dump-eid0.bin doesn't have the proper keys at the begining (0x00-0x2f) you will have to search for the keys.
Mark the first 16 bytes (0x00-0x0f) and search for them in the dump. You'll find them at another location.
Save the 48 bytes following from the location you found the keys to a new file (eid_root_keys.bin) and use the file with "c2d"

28.

Rename your DEX flash to my-DEX-flash.EID0.NORBIN (or my-DEX-flash.EID0.NANDBIN if your PS3 has NAND flash) and copy it to USB

29.

Install multiMAN on your PS3 and from mmOS double-click the file from step 28) from your USB, follow the instructions.

30.

Quit multiMAN and from XMB press+hold {PS} button -> Turn-off the system, then start it again

31.

Install DEX 3.55 firmware or higher from XMB->System Update->Storage Media.

32. To get back to CEX/CFW from DEX:

Install 3.55DEX_downgrader firmware:

Code:

http://www.ps3devwiki.com/files/firmware/OFW-DEX/3.55downgrader/PS3UPDAT.PUP

* * * * *

You can also use Rogero's 3.55DEX_DOWNGRADER_PEEK_POKE firmware:

Code:

http://www.mediafire.com/?99pl32srjl1342o

2.

Install multiMAN regular (for CEX/CFW) (otherwise you will get "Error accessing device! Install proper firmware!" error

3.

Use your original NOR dump (my-original-cex.NORBIN) and rename it to (my-original-cex.EID0.NORBIN)

* * * * * *or

in case of NAND: Use your original NAND dump (my-original-cex.NANDBIN) and rename it to (my-original-cex.EID0.NANDBIN)

4.

Double click on your CEX flash file in mmOS

(i.e. /dev_usb000/my-original-cex.EID0.NORBIN or /dev_usb000/my-original-cex.EID0.NANDBIN)

5.

Quit multiMAN and from XMB press+hold {PS} button -> Turn-off the system, then start it again

6.

Install OFW/CFW 3.55 from XMB

NOTE:

While Deank was converting my PS3 from CEX to DEX and then back from DEX to CEX He NEVER used the POWER BUTTON to turn-off/restart the PS3. The only time He had to do that is at the beginning when you have to enter the Recovery Menu after OTHEROS PUP is installed. All other firmware updates are performed from XMB (not from recovery menu) and all restarts/turn-offs are performed with {PS}->Turn Off in GameOS, or shutdown/restart/boot-to-game-os while in petitboot or linux.

For Users With Nand Console.

Spoiler:

Some Tip's By My Bro Lightyear !!

Originally Posted by Lightyear

]

- update multiman BEFORE you do anything else. in your guide it says to update multiman after installing the 22gb partition pup. that pup kills internet for me...I don't know about others, but that was a major issue for me. I thought I had the most recent mm because I got it from the news thread...that one is NOT the newest and it doesn't allow flash dumping. updating multiman before you do anything else would solve this

- use the cex2dex app, not c2d...they are different!! The cex2dex app doesn't rely on the user finding the root key manually. it sniffs it out from the eEID0.bin dump for you....more automated steps are much more noob friendly!!

I only remember those two steps causing me trouble. and I know there were a few other people who had confusion when trying to get the root key from the eEID0.bin file, since no one really knows what to look for, and it may not be in the first 3 lines.

Video Guide

Where's MY +Rep ????????????

**ron36** · 20th July 2012

nice!

**Uncharted** · 20th July 2012

Originally Posted by ron36

nice!

and I will Try to make It better and better !!

+rep !!

**semmie22** · 20th July 2012

i really appreciate this ill rep u for that but pls one final thing0. a utube vid or pictures

**Uncharted** · 20th July 2012

Originally Posted by semmie22

i really appreciate this ill rep u for that but pls one final thing0. a utube vid or pictures

I will Try To add pictures.

**godreborn** · 20th July 2012

thanks! +Rep! so, it's now confirmed u can switch back to cex if need be? that's been the only thing holding me back.

**superboy1281** · 20th July 2012

Wow this is a lot ofwork, ill stick to OFW for now lol +rep D:

**Still at it** · 20th July 2012

Can you put link in for all required stuff. Like I think memdump links are not here. maybe im mistaken
thanks bro

**Lightyear** · 20th July 2012

hmmmmmmmmm.....this is getting easier and easier. ive done several mods more difficult than this. at least half of it is just installing red ribbon

**dzee206** · 20th July 2012

Originally Posted by Lightyear

hmmmmmmmmm.....this is getting easier and easier. ive done several mods more difficult than this. at least half of it is just installing red ribbon

oh man im surprised you havnt jump all over this yet. now if i can do this blazed out my mind im sure you can as well. the process seems a bit intimidating but its actually pretty easy once you get through it. oh and uncharted nice tut btw+rep

Thread: [Update3] The Ultimate Cex To Dex Guide [Video Added]

LinkBack

Thread Tools

Display