PS3, Pulse generation software V2

[original version]

Pulse generator V2.

The pulse generation software was poorly debugged and theoretically bad planned. It was wroking for me, but it is true that is was not always working at the first try. Because of this I've developed a second version, more debugged and controlled by the CPU cycles. Why by CPU cycles? Each computer is different, CPU, BUS, etc etc. And because of this each computer has its own cycle so now you can find it starting from the smallest one until you find it ;). In my case it is 3, running over MSDOS in a VMWARE virtual machine.

Usage:

1.- Keep disconnected the LPT! port from the PC. (At system startup it is usually activated).
2.- Now you can generate a pulse giving it from 1 to 9 cycles.
3.- Start always with 1 cycle at least with 25 tries. If you see that it does not influecne the PS3 the ncontinue with the number 2 wit hanother 25 tries, and so on.
4.- Once the exploit works, you can leave the program pushing any key, remember the number os cycles for the next test.



Downloads:

Source code and binaries: http://www.megaupload.com/?d=QKKNKZJJ

Pass: jaicrab.jaicrab

Some photos:

PS3, Second Dump

[original version]



Good night/early morning.

First of all, I want to point out that you have to be aware if you are going to use the previously described circuit.
The program received some criticism, well, you've seen the source code, you can modify it at your own will! It works for me and I've shared it as is. The same happened with the memory dumps, I haven't checked them out. At the same time I've obtained them, I copied them to a pendrive, I compressed them and I uploaded them with checking its contents.
Also I have to point out that in any of the dumps to date, including this second test, the communitacions board (bluetooh, wifi) was not connected to the main board.

Let's go to the point. I've generated a second dump to compare it with the first one. Just in case we find any data corruption because of the generated pulse or simply because of the HV variables.
The Boot dump is exactly the same and there is nothing comprehensible :S. It is probably cyphered or it does not contain any string.
The HV dump is different, but quite similar to the first one made.

Extract your own conclusions.

HV: http://www.megaupload.com/?d=ZO4K6OYT
BootLoader: It is not needed, its exactly the same.
Pass: jaicrab.jaicrab

I wait for your feedback. Good luck.

PS3, Dump... Complete

[original version]

Wellcome.
I've been able to generate the Hyper and BL dumps. :D
Finally I've build the pulse generator using the PC parallel port.

Dumps:
HV: http://megaupload.com/?d=SJ0NX5SQ (descomprimido: 16.777.216 Bytes)

BL: http://www.megaupload.com/?d=X9KX2WSA (descomprimido: 262.144 Bytes)

ZIP password: jaicrab.jaicrab

LPT1 circuit diagram:



Software:

(DO IT AT YOUR OWN RISK, I WON'T BE RESPONSIBLE of any damage made to the device, its a very simple program, and it is not polished. There is very little danger, but you also need to take into account that the LPT1 port is very fragile. Good luck!)

Source code and binary: http://megaupload.com/?d=7EJW43VG

It is recommended to run it under the Windows command line. Download the Windows 98 sartup disk, copy the binary and run it. Do not connect the anything to the LPT1 port until specified by the program. The source code has been developed using Turbo c++.

Pass: jaicrab.jaicrab

The most important thing is to share and to do not save anything for yourself, mainly if it is for the common improvement. Please don't misuse my MAC and my PS3 data ;)

Any question or suggestion is wellcome in the comments. In the next "chapter" I'll disenbowel the dump. See you soon!