POC: Permanent CFW/HEN is Possible

Submitted by greg; March 07, 2011

In a recent experiment kgsws set out to find permanence for CFW installs... And the result: success! Winning like Chuck Sheen, kgsws has shared a proof-of-concept; however, I'd only attempt this on a FAT PSP-1000 handheld until further notice. How to:

install OFW 6.20
use HEN to run PSP filer
obtain original lfatfs.prx
decrypt original lfatfs.prx, also get kirk header for later fake encryption
compile fake lfatfs.prx (attached below)
append zeros to fake lfatfs.prx to make it as big as original, uncompressed lfatfs.prx
gzip fake lfatfs.prx, it has to be at least 16 bytes smaller than original lfatfs.prx gzipped
use any fake encrypter to encrypt your fake lfatfs.prx, keep original lfatfs.prx ~PSP hader and kirk header
copy fake lfatfs.prx to flash0:/kd/, overwrite original
restart your PSP and watch

Again: PSP-1000 only ... because kgsws has written IPL drivers specific to the TA-079 board, most commonly found in PSP-1000 models. It's a safe bet this'll lead to other models being hacked the same way. So unless you really know what you're doing I wouldn't test this on anything else. Notes:

you must append zeros to make it as big as original
you must gzip it
you must use original lfatfs.prx ~PSP and kirk headers
every PRX in flash contains signcheck = your PRX is bound to your PSP
this won't allow you to enter OFW anymore, you will have to use pandora to flash it again
this trick will likely work on new PSPs, but this small LCD driver not, and your PSP will become useless anyway (so wait for CFW)

kgsws' idea for custom firmware: "Use fake lfatfs.prx as CFW "SystemControl" module, and instead only patching also load original lfatfs.prx (which will be renamed)." Awwwesome! Cheers to kgsws with thanks to Boosters IPL SDK. Download: fake lfatfs.prx (source code) - source: wololo/talk

Tags: CFW, kgsws, Permanent, Proof of concept, PSP Custom Firmware, PSP Exploits

People need to read or Google things. Stop asking fucking questions like "does it work on the 3,000 model ???????". look at this --> "Again: PSP-1000 only … because kgsws has written IPL drivers specific to the TA-079 board, most commonly found in PSP-1000 models. It’s a safe bet this’ll lead to other models being hacked the same way. So unless you really know what you’re doing I wouldn’t test this on anything else." Now look at how stupid you are... look at this --> "Again: PSP-1000 only … because kgsws has written IPL drivers specific to the TA-079 board, most commonly found in PSP-1000 models. It’s a safe bet this’ll lead to other models being hacked the same way. So unless you really know what you’re doing I wouldn’t test this on anything else." and look at how stupid you are.

# T.j Edward Kannon 2011-03-08 22:05

Wrong. We need 3000 hacks. The 2000 has been hacked enough. We need people to work on 3000.

# mr_crazy 2011-03-09 03:47

search on google nutcracker

# Dustin McFadden 2011-03-09 04:29

Just need to wait for this 1000 trick to happily skip to the 2000, then discover the secrets of the 3000, and finally land on the Go (though some people below have said it works on the Go). What's really awesome is how much the Homebrew scene is going to advance once the NGP comes out and Sony's attention will be on keeping all the scary homebrew off their new device while the PSP gets transformed into the amazing beast it's meant to be, and then the Homebrew that the NGP is gonna be capable of, holy crap, man

# Ankin M Patil 2011-03-09 06:23

man i have proof kei type it on youtub and if u do it right i wont semi brick ur psp enjoy it is real

# Brian Tracy San Andres 2011-03-10 01:43

I am for PSP 1000 users that they have a permanen cfw or 6.xx but I am a PSP 2000 w/ v2 user so there is a PSP cfw 6.37 me-6... :)

# Brian Tracy San Andres 2011-03-10 01:44

there is already a cw for psp 2000...
It is the PSP 6.37 me-6

# Connor Ty Richardson 2011-03-10 18:59

to much effort lol

# Neil Alfonso 2011-03-12 04:28

how can i downgrade my psp 30046.20to 5.03help guys

# Shonn Banks 2011-03-12 13:10

Do tell how. PSP 3001

# Mateo Godlike 2011-03-14 00:02

6.35PRO-B3 is the latest. You shouldnt have been so quick to update to 6.37...

# Zepheral 2011-03-14 17:12

you upgraded on your own free will! This time your decision kick you in the ass in the end.

# Decius 2011-03-14 21:05

You can only downgrade in 6.35, no 6.37 Downgrader Sorry.

# Naruret Limsathapornpong 2011-03-15 02:32

shit

# Mani Batra 2011-03-15 10:57

i"m stuck too.......:( any idea when will d downgrade or the cfw be ready.....

# Haroonabu Nazir 2011-03-17 05:18

6.20 is good or not ?

# Haroonabu Nazir 2011-03-17 05:19

i am using psp 3004 5.03 prometheus.i have to update to 6.20

# seongfeel 2011-03-17 23:55

Please help me!!
I have a pspgo 6.37 firmware
I wish that my psp execute isofile

# seongfeel 2011-03-18 00:05

I'm a korean
So, I don't speaking English very well.
I want to help something.
I have pspgo of 6.37
I wish that mypspgo execute any isofile
Since today , Is't it developed firmware?

# Ishan Srivastava 2011-03-21 12:52

MAN is there even a single CFW for version 6.35 that is permanent is pro-B3 permanent?

# Marcos Herkenhoff 2011-03-24 21:48

I guess there isn't any hacks for your firmware version, but there´s a program that you can use to play iso's on your psp.It' s name is ISO2Eboot. Search on the internet and you'll find it!

# Eman007 2011-03-28 04:14

Am I missing something here? I thought CFW was permanent...? meaning I power off and power on, and the CFW is still on my psp?

# LOL907 2011-04-02 10:53

i have a 6.35 n trying to downgrade it n hack it "without a pandora battry"

# Camron Mclean 2011-04-02 20:44

AGREED!!! needed by many ppl please come through!

# Nick Melinich 2011-04-05 12:12

i think somebody should do a youtube video on how to do this

# geronimo espinoza 2011-04-08 17:24

it is possible to downgrede a 6.37 with a pandora and a mms

# Justin Fuller Drobey 2011-04-18 12:14

Yeah, but that's not what is meant here. The way I gather it, a main PRX has been patched to act as custom firmware (ie no signing homebrews, ISO loading, etc). What makes this Permanent is that this PRX is never re-patched: it is needed by the PSP to work (tells the firmware how to access flash memory, physical location of ms, etc).

Hacking this PRX will allow you to use the Official PSP Updater to get the latest OFW from Sony, while keeping the PRX allowing homebrew. Therefore, this is permanent, because it allows all CFW features in OFW (without chickHEN).

(saying this is a hypothesis, I haven't read the source code or anything, just what should logically happen)

# Ojasvi Bhargava 2011-04-24 03:27

Dude if u have psp 1000 or 3000 no need to worry. becauz 6.37 me is there.
But is you have a go or 3000.Then just wait for the hack.

# Christian 2E0HST 2011-04-26 18:12

Sounds complicated but easy for some people. But still a permenant patch would be good for those who want to keep it as a perm.....

# Shubham Pawar 2011-06-15 06:16

is there any pcfw (permanent custom firmware) for psp 09g module???

# Shubham Pawar 2011-06-30 08:02

hey it worked on my psp 3000 with 09g module
6.39

Refresh comments list

Add comment

JComments


	CREATE ACCOUNT NOW TO POST COMMENTS! Why create an account on the Dashhacks network? Because being logged in has its privileges! • COMMENTS! Only logged in users comments go live without waiting for moderator approval! • No video! The video ad in the upper right doesn't interrupt you on all pages! • Customize your profile! Flaunt your xBox Live & PSN gamertags! • It's FREE and it's EASY! And one login works for all of the Dashhacks review sites! So what are you waiting for? Go to the TOP RIGHT of the page and LOGIN or click REGISTER!


	Would you like to get all the new buzz from Dashhacks in your email each day? Subscribe to our Daily Digest! Want to learn more about the team bringing the news to Dash Hacks? Click here to read about them

POC: Permanent CFW/HEN is Possible

Related Stories:

Comments

Add comment