PS3: First ‘Custom Firmware’ now working!

Posted on by

Update: I’ve now fixed the issue about the missing game data icons. PS3-Hacks.com has a nice step-by-step tutorials and they posted the PUP files.

Update 2: DO NOT try to install this from the service mode, it might brick your console, install it normally from the normal menu or the recovery menu.

Great news!

Thanks to the tools made by the fail0verflow team (and thanks to sven in particular for his work on the pkg/unpkg tools), the first “Custom Firmware” is now available for the PS3!

I see a lot of questions coming up really fast on my Twitter account, so here are the basic things you need to know :

Because of legal/copyright issues, I will not provide the custom firmware to anyone, however, I’ve made available all the tools necessary to transform an Official firmware update, into a custom one, just grab my ps3utils repository from github, compile, then run :

./create_cfw.sh PS3UPDATE.PUP CFW.PUP

This will take the official firmware, unpack it, modify it, then repack it correctly (requires you to install ps3tools).

This should work on Linux and Mac for now, but I’m sure others will do it for the masses and illegally release those files somewhere.

The advantage here is that you can do it for any firmware, if you want to keep version 3.41, then give it the 3.41 update, if you are on 3.55 already and can’t downgrade, then run the script on the official 3.55 firmware and it will create a modified 3.55 firmware.

You can put the file in a USB drive under the filename “PS3/UPDATE/PS3UPDAT.PUP” and then go to system update in the XMB, and it will allow you to install the update (even if you’re already on 3.55).

People are asking what are the features of this firmware, it’s simple, all it does is to add those “Install Package Files” options to the Game section of the XMB. It doesn’t do anything else!

This firmware will not allow you to run the currently available homebrew application. Once the homebrew developers re-package their files in a ‘retail’ .pkg format with signed executable, then it will work (this should be coming soon thanks to the work of the fail0verflow team).

Since the kernel is left unmodified, this means that this custom firmware is really meant for future homebrew installation, and it will not allow piracy. I plan on keeping it that way.

This is just the first attempt at custom firmware, and it only contains a minor modification to allow you to install pkg files directly, eventually we’ll get some more options added to it in the future. This is just starting to get interesting!

p.s: Thanks to everyone who helped make this possible!

Enjoy! 🙂
KaKaRoTo

263 thoughts on “PS3: First ‘Custom Firmware’ now working!”

  1. Pingback: Представлена первая альтернативная прошивка для Sony Playstation 3

  3. got it working sweet man thanks so because ftp is not sony retail it wont install now is there a different way to run that not interested in pircy

  6. There are some error, here’s what happened when I did it.

    root@ubuntu:~# su
    root@ubuntu:~# clear

    root@ubuntu:~# git clone https://github.com/kakaroto/ps3utils.git
    fatal: destination path ‘ps3utils’ already exists and is not an empty directory.
    root@ubuntu:~# git clone https://github.com/kakaroto/ps3utils.git
    Initialized empty Git repository in /root/ps3utils/.git/
    remote: Counting objects: 163, done.
    remote: Compressing objects: 100% (160/160), done.
    remote: Total 163 (delta 90), reused 0 (delta 0)
    Receiving objects: 100% (163/163), 37.00 KiB, done.
    Resolving deltas: 100% (90/90), done.
    root@ubuntu:~# cd ps3utils/
    root@ubuntu:~/ps3utils# make
    cc -Wall -Wextra -Wundef -Wnested-externs -Wwrite-strings -Wpointer-arith -Wbad-function-cast -Wmissing-declarations -Wmissing-prototypes -Wstrict-prototypes -Wredundant-decls -Wno-unused-parameter -Wno-missing-field-initializers pdb_gen.c -o pdb_gen
    cc -Wall -Wextra -Wundef -Wnested-externs -Wwrite-strings -Wpointer-arith -Wbad-function-cast -Wmissing-declarations -Wmissing-prototypes -Wstrict-prototypes -Wredundant-decls -Wno-unused-parameter -Wno-missing-field-initializers find_syscall.c -o find_syscall
    cc -Wall -Wextra -Wundef -Wnested-externs -Wwrite-strings -Wpointer-arith -Wbad-function-cast -Wmissing-declarations -Wmissing-prototypes -Wstrict-prototypes -Wredundant-decls -Wno-unused-parameter -Wno-missing-field-initializers -c -o pup.o pup.c
    pup.c: In function ‘read_header’:
    pup.c:187: warning: integer constant is too large for ‘long’ type
    pup.c: In function ‘create’:
    pup.c:437: warning: integer constant is too large for ‘long’ type
    cc -Wall -Wextra -Wundef -Wnested-externs -Wwrite-strings -Wpointer-arith -Wbad-function-cast -Wmissing-declarations -Wmissing-prototypes -Wstrict-prototypes -Wredundant-decls -Wno-unused-parameter -Wno-missing-field-initializers -c -o sha1.o sha1.c
    cc pup.o sha1.o -o pup
    cc -Wall -Wextra -Wundef -Wnested-externs -Wwrite-strings -Wpointer-arith -Wbad-function-cast -Wmissing-declarations -Wmissing-prototypes -Wstrict-prototypes -Wredundant-decls -Wno-unused-parameter -Wno-missing-field-initializers fix_tar.c -o fix_tar
    root@ubuntu:~/ps3utils#

  7. Dude how can i sign a PKG file for a Call of Duty mw2 Mod? I would appreciate it if you made a excutible to sign it?

  8. i have a question for kakaroto, is the app_home/ps3_game on your MF suppose to open? because i get an error

  10. hey uhm ok so i tried using an FTP server and i just got an error. do you have on out that i can use that works? anyone? im trying to host lobbies for MW2

  12. sorry for multiple posts, but here is my last one for now.
    “Alex says: i have a question for kakaroto, is the app_home/ps3_game on your MF suppose to open? because i get an error”
    im having this same problem. so is that ok or do i need that to be able to open to host losbbies on MW2?

  14. If I were to install this on my PS3 would it then be possible to change the button layout from North American to Japanese? Example: Make the circle button confirm and the X button cancel.

  15. @MADAO what gives you the right to demand anything?
    I want you to give me 20 goldbars, but that’s not very likely to happen is it?

    This modified firmware is not for illegal purposes and at the moment changes nothing useful. It is a proof of concept for something we will need at a later time when homebrew can be signed and packaged properly.

    Be patient and stop demanding stuff. I usually don’t comment anywhere, but just couldn’t take the stupid ratio here.

  17. hi bro

    i hop it can work with copy games

    but i think You do not want to work
    Can I know why ?

    i hop have Answers

    Finally, we would like to have you in an Arabic forum for PS3

    To talk about your experience to break the PS3 system

  18. Pingback: Possível hack para PS3 é divulgado « Caminhando Livre

  20. Hi, everyone!
    I need some help, because i was a fool (and to tell u the truth, not really sober,when happened) –
    “DO NOT try to install this from the service mode, it might brick your console, install it normally from the normal menu or the recovery menu.”
    Not “might” – will.
    I did that.
    Here’s how’s happened:
    Upgrade from 2.76 to 3.41 – success.
    After that use of psfreedom put the console on service mode.Could not get it out so i thought installing a new firmware will get the ps3 out form recovery mode.I was right – but then install loop, struck at 0%,red screen.And here came the third mistake: i downloaded ps3 jig files, put them to an usb and booted. Right now the ps3 wont boot, when i turn it on it turns off a fter 15 secs approx.But when i turn on with usb (with jig files) then after 15 secs my green power led is flashing and not turning off.
    Conclusion – when using tetrahydrocanabinol combined with methamphetamine, dont try to upgrade ps3,cas’ you’ll brick it.
    Any ideas? Besides what my friend said – throw it with your right hand across your left shoulder, it MIGHT bring u luck 🙂
    Thanks!
    PS3 – Touch diamond – Samsung n110

  21. @Viktor:
    Yeah, you shouldn’t have tried in service mode! I even say so in the blog post!
    Read here to know how to fix the red screen issue : http://www.ps3hax.net/showthread.php?p=147765#axzz1AUa5Yhx9
    Use only the second lv2diag.self file, and nothing else in the usb, if that doesn’t help, then try again psfreedom to put it into service mode. and maybe try to use the downgrade to that modified 3.41 from psjailbreak.

  23. Pingback: Y por fin, primer “Custom Firmware” para PS3 | Temiga – virussx

  24. Pingback: unregistered.gr: Το πρώτο Custom Firmware με υποστήριξη “εγκατάστασης λογισμικού” από τον KaKaRoTo

  25. Pingback: iPhone hacker publishes secret Sony PlayStation 3 key | Geek Tech- Official ARB website

  26. Lame question: could I use my own early boot loader in NOR flash and send Sony’s backdors/trojans/hypervisors and other abusive/intrusive crap to the hell and only use PS3 to boot Linux. Without their damned hypervisors and without any chance that Sony would screw me up via network? Is this possible? As for me it could be a decent Linux server for my special purposes and SPEs can provide horsepower I need for certain tasks. But the question is: can I get rid of all Sony’s trojans/backdors and GameOS/hypervisor at all?

  27. can i use any install packages that have been made because i cannot use the geohot cfw so i wondered if i can just use their patch

  29. now that this is practically the same firmware does this leave the potential for safely playing backups online on the psn? Will take my answer on twitter also @mattpitz thank you

  30. Pingback: PS3: surge o primeiro “firmware personalizado” para o console da Sony « Pablo Arbão

  31. Pingback: Cai na rede o primeiro firmware modificado do PlayStation 3 « Training Tecnologia

  32. Pingback: KaKaRoTo rilascia il primo CFW per PS3 - Funziona su 3.55 | La verità su..

  34. Pingback: iPhone hacker publishes secret Sony PlayStation 3 key | Information and Network Security Blog

  35. thanks Man for this Masterpeice
    الف شكر على المجهود الرائع مع انى زعلان جدا من تحول الاهتمام فجاه للفريموير الخاص بجيو هوت رغم ان انت ليك السبق ده
    I just have a Quis
    why there is no signed PKG for your CFW in the time the geohot CFW have a lot of then even you start this first.

    thank you man
    LOVE FROM EGYPT

  36. Does your firmware enable the “OtherOS” feature again?

    I have legally bought GT5, but it requires a firmware update. I’m on 3.14, which has “OtherOS” and I am able to boot into Yellowdog Linux, SONY’s officially blessed Linux. I cannot afford to lose all my development work on my Linux server (which has nothing whatsoever to do with cracking, PS3 or hacking anything), but I’d also like to play GT5 without paying SONY for another PS3 console.

    If your firmware doesn’t support “OtherOS”, will it support it in the future? All I want to do is to be able to dual boot my PS3 without worry or fear of SONY disabling my Linux installation.

  37. if I will install this custom firmware i will be able to play games that runs under 3.55? like Need for speed hot pursuit, and what about (PSN) playstation network will it work? did someone tried this? please respond, thanks.

  38. Hi i got ur CFW Working & While tring to install any PKG Signed i get ERROR.. can u post the key which u used to create the CFW so we can sign the PKG With it to Make it Work
    TKS
    Manmeet

  39. @Anonymous: No it doesn’t, eventually it might, but right now, the fail0verflow team is the one that is trying to create a custom linux firmware. I’m not.

    @Emberstrife: yes, you will be able to get into psn and run psn games, etc.. the firmware is exactly like the original firmware, it only adds the “install package files” option.
    However, you won’t be able to install homebrew, so I suggest you use geohot’s jailbreak instead.

    @Manmeet: the issue is that noone signed .pkg files correctly because noone could find the key, so those are pseudo-retail pkg files without a signature. geohot’s jailbreak actually works because it patches the system to let it install unsigned pkg files.
    Install the original 3.55 and then use geohot’s jailbreak, it should make it work the way you want it.

  40. Pingback: Hackers Undress The Playstation 3′s Security Measures | lalawag

  41. well this guide maybe out of date
    many sites shows up
    and post the better cfw
    that enable back up manager and homebrew
    well it’s ugly when the hacker going to court just for sony

    but you’re cfw is still good but only for homebrew 🙁 sadly
    thx kakaroto, i love to read you blog 🙂 about ps3 information

  42. ps3 is moving ahead :), well we can read the latest news
    how sony plans to keep their console secure but as we know
    no hacker and homebrew developer going to stop,

    it’s their fun, life , and work

  43. good work on all

    im getting an 8002f994 error when trying to update CFW any ideas???

    cotty

  44. i also keep getting these error messages. i have downloaded jailbreak but cannot open test.pkg comgenie download manager or any .pkg’s that i try. Please help with a useful answer

  45. @Klutz_2: i gave the answer already in a few places: This firmware only allows for signed packages to install. Since noone could find the key to sign .pkg files, it means only official psn demos will install. If you want a firmware that works for pseudo-retail pkg files, install the official 3.55, then run geohot’s jailbreak on top of it … or wait until I release a new, better, MFW.

  46. Hi, i’m looking at the ps3tools on your github and i have a question.

    Would be possible to create a CFW 3.56 based on OFW 3.55 changing only the version number? shall this affect other things on the firmware?

  47. Hello Kakaroto,

    Thanks for your great work!

    I want to unbrick my PS3. Firmware update didnt finish successfully!
    I was already able to create a small platform with a fpga similiar to those of marcans nor flasher.
    My problem is i have no idea of how to create the bin image for the nor device. I already looked at some tools from fail0verflow but couldnt figure out how to create a firmware image .
    Do you have a plan of how to create such a firmware bin file? My intention is just the unbricking of my console!

    Would be great !!!

    Many Thanks

  49. Hi Kakaroto..
    Sorry,I left the wrong name..

    I want to ask u something..I have version 3.15,do I must change it to 3.41 to play backup games,or no?I want to buy jailbreak,but first I don’t know do I must update this version?

    Thank you

Comments are closed.