ODE: Difference between revisions
Jump to navigation
Jump to search
StarMelter (talk | contribs) |
m (→IRD / Keys) |
||
| (8 intermediate revisions by 4 users not shown) | |||
| Line 1: | Line 1: | ||
Acronym for: Optical Drive Emulator | |||
= SKU differences = | = SKU differences = | ||
| Line 17: | Line 17: | ||
|- | |- | ||
| [[CECH-40xx|CECH-4000]] || [[CXD5132R-1|on motherboard]] || on motherboard || {{No}} || {{N}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} | | [[CECH-40xx|CECH-4000]] || [[CXD5132R-1|on motherboard]] || on motherboard || {{No}} || {{N}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} | ||
|- | |||
| [[CECH-42xx|CECH-4200]] || on motherboard || on motherboard || {{No}} || {{N}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} | |||
|- | |||
| [[CECH-43xx|CECH-4300]] || on motherboard || on motherboard || {{No}} || {{N}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} | |||
|- | |- | ||
|} | |} | ||
== Notes == | |||
* [[CECHAxx|CECHA]] up to [[CECH-30xx|CECH-3000]] on [[4. | * [[CECHAxx|CECHA]] up to [[CECH-30xx|CECH-3000]] : on [[4.55_CEX|OFW 4.55]] and higher require the DMC module + swapdisc (below [[4.55_CEX|OFW 4.55]] there is no need for DMC module/swapdisc). | ||
* [[CECH-40xx|CECH-4000]] | * [[CECH-40xx|CECH-4000]], [[CECH-42xx|CECH-4200]], [[CECH-43xx|CECH-4300]] : work with lid-detect wire soldered + swapdisc, but do not require DMC module. | ||
http://www.team-cobra-ode.com/downloads/Anti-ODE_Security_Bypass_Manual_%28English%29_v1.2.pdf | |||
= 3K3Y = | = 3K3Y = | ||
| Line 43: | Line 48: | ||
* [http://mir.cr/1R29QCAS 3k3y Keydumper v1.00] - outputs to first available device in root of USB Mass Storage device or /dev_hdd0/tmp/3Dump.bin | * [http://mir.cr/1R29QCAS 3k3y Keydumper v1.00] - outputs to first available device in root of USB Mass Storage device or /dev_hdd0/tmp/3Dump.bin | ||
* [http://www.mirrorcreator.com/files/1SCZPMSJ/ripp3r.v.1.02.rar_links 3k3y Ripper v1.02] - Windows software for ripping/decrypting/reencrypting PS3 disks, including PDF user manual. | * [http://www.mirrorcreator.com/files/1SCZPMSJ/ripp3r.v.1.02.rar_links 3k3y Ripper v1.02] - Windows software for ripping/decrypting/reencrypting PS3 disks, including PDF user manual. | ||
* [https://github.com/jhonathanc/3k3y-Ripp3r 3k3y-Ripp3r] v1.20 source code | |||
* [https://github.com/jhonathanc/3k3y-Ripp3r/blob/master/Documentation/manual.pdf 3k3y-Ripp3r Manual.pdf] | |||
* [https://github.com/jhonathanc/3k3y-Ripp3r/blob/master/Documentation/IRD%20File%20Format.pdf IRD File Format.pdf] | |||
== ODE == | == ODE == | ||
| Line 66: | Line 74: | ||
== Cobra ODE Daughter Board == | == Cobra ODE Daughter Board == | ||
<br /><br /> | |||
== Cobra Drive Motor Controller Board == | |||
<div style="float:right">[[File:Cobra - DMC module - Drive-Motor-Controller.jpg|200px|thumb|left|Cobra ODE DMC module]]</div> | |||
<br /><br /> | <br /><br /> | ||
| Line 74: | Line 86: | ||
</gallery> | </gallery> | ||
= | = E3 ODE Pro = | ||
<gallery> | <gallery> | ||
File:E3-ODE-PRO.jpg|E3 ODE Pro | File:E3-ODE-PRO.jpg|E3 ODE Pro | ||
</gallery> | </gallery> | ||
E3 ODE Pro run a version of embedded Linux from Freescale company. | |||
I had figured out that the lazy E3 team forgot to disable debug interface "Serial" from ODE board, so you can fully control what ODE do from this. | |||
I had dumped the full boot log from E3 ODE and its clones "Matrix ODE, Stone ODE, Modbo ODE", you can see it here [http://pastie.org/10054287 E3 ODE Bootlog] - 'Abkarino' | |||
= Stone ODE = | = Stone ODE = | ||
| Line 103: | Line 119: | ||
* http://mir.cr/6VTJKVIH IRD | * http://mir.cr/6VTJKVIH IRD | ||
* http://mir.cr/1U2SL5AE KEYS | * http://mir.cr/1U2SL5AE KEYS | ||
* [https://github.com/Zarh/ird_tools/releases IRD Tools] | |||
{{Reverse engineering}} | {{Reverse engineering}} | ||
{{Hardware Modification}}<noinclude>[[Category:Main]]</noinclude> | {{Hardware Modification}}<noinclude>[[Category:Main]]</noinclude> | ||
Latest revision as of 14:25, 2 November 2021
Acronym for: Optical Drive Emulator
SKU differences[edit | edit source]
| Model | Controller | Sniffing/Injecting | Exploitable | 3K3Y FAT | Cobra | Cobra QSV | 3ks R | E3 ODE Pro | Stone ODE | Matrix ODDE |
|---|---|---|---|---|---|---|---|---|---|---|
| CECHA up to CECHK | on daugtherboard | via wide | Yes | Y | Y | N | N | N | N | N |
| CECHL up to CECHQ | on daugtherboard | via small | Yes | N | Y | N | N | N | N | N |
| CECH-2000 up to CECH-2100 | on daugtherboard | via small | Yes | N | Y | N | Y | Y | Y | N |
| CECH-2500 | on motherboard | on motherboard | Some | N | Y | Y | Y | Y | Y | Y |
| CECH-3000 | on motherboard | on motherboard | No | N | Y | Y | Y | Y | Y | Y |
| CECH-4000 | on motherboard | on motherboard | No | N | Y | Y | Y | Y | Y | Y |
| CECH-4200 | on motherboard | on motherboard | No | N | Y | Y | Y | Y | Y | Y |
| CECH-4300 | on motherboard | on motherboard | No | N | Y | Y | Y | Y | Y | Y |
Notes[edit | edit source]
- CECHA up to CECH-3000 : on OFW 4.55 and higher require the DMC module + swapdisc (below OFW 4.55 there is no need for DMC module/swapdisc).
- CECH-4000, CECH-4200, CECH-4300 : work with lid-detect wire soldered + swapdisc, but do not require DMC module.
http://www.team-cobra-ode.com/downloads/Anti-ODE_Security_Bypass_Manual_%28English%29_v1.2.pdf
3K3Y[edit | edit source]
Ripper[edit | edit source]
Hardware[edit | edit source]
mounted between SATA/PATA connector and Bluray Drive thus emulating drive, using drivekeys obtained on exploitable consoles
3K3Y ripper - Components[edit | edit source]
U1 : JM20337 (Hi-Speed USB to SATA & PATA Combo Bridge) 64-pin LQFP[edit | edit source]
Product page: http://www.jmicron.com/JM20337.html
note: pin34 4.7K (472) resistor present (R6) - might need removing (to solve corruption errors, when applicable)
X1 : 12.000 (12MHz crystal)[edit | edit source]
VR1: AX1117 (low drop regulator)[edit | edit source]
Software[edit | edit source]
- 3k3y Keydumper v1.00 - outputs to first available device in root of USB Mass Storage device or /dev_hdd0/tmp/3Dump.bin
- 3k3y Ripper v1.02 - Windows software for ripping/decrypting/reencrypting PS3 disks, including PDF user manual.
- 3k3y-Ripp3r v1.20 source code
- 3k3y-Ripp3r Manual.pdf
- IRD File Format.pdf
ODE[edit | edit source]
PATA[edit | edit source]
SATA[edit | edit source]
Cobra[edit | edit source]
Cobra ODE Main Board[edit | edit source]
Cobra ODE Daughter Board[edit | edit source]
Cobra Drive Motor Controller Board[edit | edit source]
3ks R[edit | edit source]
aka: 3K3Y ODDE Ultra Slim
3ks R
E3 ODE Pro[edit | edit source]
E3 ODE Pro
E3 ODE Pro run a version of embedded Linux from Freescale company. I had figured out that the lazy E3 team forgot to disable debug interface "Serial" from ODE board, so you can fully control what ODE do from this. I had dumped the full boot log from E3 ODE and its clones "Matrix ODE, Stone ODE, Modbo ODE", you can see it here E3 ODE Bootlog - 'Abkarino'
Stone ODE[edit | edit source]
http://www.stone-ode.com/ -> http://web20522.w106.vhost001.cn/index.html
Stone ODE board
Stone ODE set
Stone ODE wireset
Stone ODE diagonal
Matrix ODDE[edit | edit source]
http://www.matrixode.com/products.html
Matrix ODE set
Matrix ODE - MTX Connection cables
Matrix ODE - MTX ODE Mainboard
Matrix ODE - MTX Solder Board
Matrix ODE - MTX USB Stick
IRD / Keys[edit | edit source]
| ||||||||||||||||||||||
