PS3 Hacks – Hack your PlayStation 3

Today Chinese Ps 3 developer Hotz8611 has up-to-date the PSN exdata license reactivation tool ReActPSN to version 5. for PS3 CFW customers having a patched VSH.Self file and backup samples incorporated alongside helpful information on running full Ps Network games below.

Download: ReActPSN 2.0 Update for PS3 / Patched VSH.Self for ReActPSN 2.0 / 146 Backup and 20+ Link Samples / ExData (Updated) / ReActPSN 1.11 Update for PS3 / ReActPSN 1.10 Update for PS3 / ReActPSN 1.00 for PS3

To cite: ReActPSN v2. – First OFFLINE PSN license generator.

Backup license with no personal data.

Energy on PS3, Running of PSN contents just like official activation.

ReActPSNv 2. must needs an 8byte patch for vsh.self.

Suitable for reActPSN v1.11.

Focusing on Ps 3 CFW 3.41 & CFW 3.55, 256MB NAND ROM model no examined!

Not focus on:

256M NAND FlashRom consoles(no examined),

OtherOS (this CFW appears doesn’t support PSN game activation)

Virgin PSN console with cfw3.55K (Never login PSN before, error 80010601. please upgrade it to Rebug3.55)

It only reactivates reActPSN1.10 or later version backup’s exdata.

Backup location: dev_usb000/reActPSN/BK00xx, act.dat act.key xx.rif, private data backup. Don’t share it.

Backup location: dev_usb000(1)/reActPSN/pubPSN/exdata, only xx.edat and xx.rap(16B), with no personal data.

It has 8 functions.

1. Create new user aa, copy exdata folder (xx.edat xx.rap or any subfolders with v1.10 v2. backup) to dev_usb000 or dev_usb001 root. Run it, it’ll regenerate license from usb exdata to /dev_hdd0/home/0000000x(aa user)/, And relabel aa user title to “reActPSN 2. xx.rif xx.edat”,when finished then auto reboot.
2. Run it and pressed BUTTON_CIRCLE about 6s, it will create a forced full backup to dev_usb000/reActPSN/BKxxxx. xx.edat xx.rap also backup to dev_usb000(1)/reActPSN/pubPSN/exdata folder.
3. Run it and pressed BUTTON_L1 about 6s, it will create a forced license generation from dev_usb000(1)/exdata to user “reActPSN 2. xx”
4. Run it and pressed BUTTON_L2 about 6s, xx.edat xx.rap also backup to dev_usb000(1)/reActPSN/pubPSN/exdata folder.
5. Run it and pressed BUTTON_R1 about 6s, it will create a forced full backup to dev_usb000/reActPSN/BKxxxx. xx.edat xx.rap also backup to dev_usb000(1)/reActPSN/pubPSN/exdata folder. Just like function 2.
6. Run it and pressed BUTTON_R2 about 6s, it will create a lv2 dump to /dev_usb000/dump.bin
7. Run it once time whenever you sign in yourself or replayGamesN_Cyyyy user account, it’ll reboot yourself or all same yyyy customers license. avoid using this function again. It reinstates act.dat from act1.dat.
8. Run it, you cannot login PSN again. Important information send to PSN is random! (Photoshopped ID)

Note: Your PS3 USB drive should be in the right slot (not left) and then any USB should be unplugged, only USB drive in the right.

Extract vsh.elf and employ the main one designated for the CFW or patch your personal vsh.elf for the CFW. Once More I suggest using Rebug with this so make use of the 3 files in 3.55.2.

Note: For those who have every other CFW apart from the main one provided, or perhaps your OWN CFW than you need to patch your CFW.

Now, for that Rebug customers, you need to put your console into NORMAL mode first. Now, go download the most recent Rebug Selector should you haven’t already. Open your console, visit Rebug Selector, improve your console to MODE: NORMAL – XMB: DEBUG. After, restart your console.

Now connect your usb drive around the far right slot either usb_000 or usb_001.

Next open exdata.rar -> exdata, extract that certain exdata folder into whatever USB Stick or Hard disk drive you utilize in your console. (therefore it appears like exdata/files and never exdata/psn146/exdata)

Now extract ReActPSN2..pkg and install on your ps3.

Use MULTIMAN to create vsh.elf to dev_blind via file manager. You will have to enable write acces to /dev_expensive at the end in configurations.

Once enabled visit /dev_blind/vsh/module and copy within the 3 vsh.elf files

After done copy go back to configurations and disable write use of dev_expensive. (overwrite)

Restart the console.

Run ReActPSN and hold R1 throughout the restart process should just take about 5 seconds. (Holding R1 can make a ReActPSN folder on the bottom of your usb drive with 2 folders inside it “BK0001″ and “pubPSN”)

The BK0001 folder consists of a backup of all of the customers around the system. The pubPSN folder consists of all the .rif and act.dat around the system changed into .rap/.edat format. The pubPSN folder may be the one we’re wanting.

Copy the exdata folder in pubPSN to the bottom of your USB drive. Therefore it should appears like this inside a File browser/manager “usb drive”/exdata/”.rap files”

Create a new user, title it ”aa” (without quotes)

Run ReActPSN again *don’t push anything this time around (it’ll relabel user “aa” to reActPSN v2. xrif xedat )

When it is done (will not take lengthy) it’ll restart your console.

You will find aa continues to be re-named to something longer.

There you have it. You’re DONE

If you wish to increase the content towards the account at another time just add the .rap files towards the exdata folder you replicated earlier relabel the consumer to “aa” and run reActPSN again. Then just install this content you’re attempting to add.

Note: You’ll need your act.dat associated with the .rif to produce valid .rap.

TUT based on how to operate full PSN games:

1. Install reActPSN v2.00
2. Run it and pressed BUTTON_R1 about 6s, create a forced full backup to dev_usb000/reActPSN/BKxxxx. Backup xx.edat xx.rap to dev_usb000/reActPSN/pubPSN/exdata folder.
3. Download vsh.self patched package, patch your CFW.
3. Import license from exdata folder. Copy exdata folder to USB media root, placed it to dev_usb000 or dev_usb001 port. Produce a new ps3 account aa. Run reActPSN, auto reboot.
4. Remove all replayGamesN_Cyyyy(v1.1x generation) user account.
5. Enjoy official PSN games now, Run PSN games.

Patched vsh.self for reActPSN 2. package, all examined working perfectly. Patch to permit verify unsigned act.dat and *.rif files for reActPSN. Files should be changed in /dev_blind/vsh/module/ using either FTP or file manager.

Copy this package to USB media.

Run dev_blind

Choice patched vsh.self for the cfw (cfw Rebug has 3 files)

Copy vsh.self to /dev_blind/vsh/module/vsh.self (overwrite!)

Reboot

Note: Rebug has 3 vsh.self files: vsh.self vsh.self.cexsp vsh.self.swp your must run rebug_selector or reflash rebug cfw, make certain vsh.self are their original title.

More details for brand new PSN function patching..

=================patch 8byte in vsh.self for reActPSN==========================================

version       addr       old data          new data                   function
3.55retail   0x30b230  4b cf 5b 45  ->   38 60 00 00     // fixed  allow unsigned act.dat *.rif
3.55retail   0x30ac90  48 31 b4 65  ->   38 60 00 00     // fixed  act.dat missing after reboot

3.55debug    0x312308  4b ce ea 6d  ->   38 60 00 00     // fixed  allow unsigned act.dat *.rif
3.55debug    0x311d68  48 31 b7 d5  ->   38 60 00 00     // fixed  act.dat missing after reboot

3.41retail   0x305dc4  4b cf af b1  ->   38 60 00 00     // fixed  allow unsigned act.dat *.rif
3.41retail   0x305824  48 31 43 ad  ->   38 60 00 00     // fixed  act.dat missing after reboot

3.41debug    0x30cedc  4b cf 3e 99  ->   38 60 00 00     // fixed  allow unsigned act.dat *.rif
3.41debug    0x30c93c  48 31 47 1d  ->   38 60 00 00     // fixed  act.dat missing after reboot

==============patch vsh.self by youself for new CFW=====

run dev_blind
copy /dev_blind/vsh/module/vsh.self to d:/vsh/vsh.self.0
cd d:/vsh
unself vsh.self.0 vsh.self.elf

hexedit vsh.self.elf
  if *(addr)==old data    then *(addr)=new data
  only 2 addr, 8byte data fixed in one vsh.self.elf

self_rebuilder vsh.self.elf vsh.self vsh.self.0
copy vsh.self to /dev_blind/vsh/module/vsh.self

#!/usr/bin/tclsh
#
# ps3mfw -- PS3 MFW creator
#
# Copyright (C) Anonymous Developers (Code Monkeys)
#
# This software is distributed under the terms of the GNU General Public
# License ("GPL") version 3, as published by the Free Software Foundation.
#

# Created By RazorX

# Priority: 700
# Description: Patch PSN Activator

# Option --allow-activating-psn: Patch to allow activating psn content offline

# Type --allow-activating-psn: boolean

namespace eval :patch_vsh_psn {

array set :patch_vsh_psn::options {
--allow-activating-psn true
}

proc main { } {
set self [file join dev_flash vsh module vsh.self]

::modify_devflash_file $self :patch_vsh_psn:patch_self
}

proc patch_self {self} {
if {!$:patch_vsh_psn::options(--allow-activating-psn)} {
log "WARNING: Enabled task has no enabled option" 1
} else {
::modify_self_file $self :patch_vsh_psn:patch_elf
}
}

proc patch_elf {elf} {
if {$:patch_vsh_psn::options(--allow-activating-psn)} {
log "Patching [file tail $elf] to allow activating psn content offline"

set offset "0x30b230"
set search "\x4b\xcf\x5b\x45"
set replace "\x38\x60\x00\x00"

catch_die {:patch_elf $elf $search 0 $replace} "Unable to patch self [file tail $elf]"

set offset "0x30ac90"
set search "\x48\x31\xb4\x65"
set replace "\x38\x60\x00\x00"

catch_die {:patch_elf $elf $search 20 $replace} "Unable to patch self [file tail $elf]"

log "WARNING: activating psn content offline requires reActPSN application" 1
}
}
}