Post: [Tutorial] CEX2DEX using Rebug CFW4.21
11-11-2012, 11:19 PM #1
DEREKTROTTER
You're Goddamn Right
(adsbygoogle = window.adsbygoogle || []).push({});
[Tutorial] CEX2DEX using Rebug CFW4.21


You must login or register to view this content.


Downloads:
CEX2DEX: You must login or register to view this content.
EID Root Key Dumper: You must login or register to view this content. | You must login or register to view this content. | You must login or register to view this content.


Preparation:
Dumping EID root key
First you need to dump your EID Root Key which can now be done on most CFW Version.
  • Install and run the EID PKG for your CFW, the PS3 will just show a black screen and beep several times. You can now restart the PS3 and retrieve your eid_root_key from either:
    /dev_hdd0/tmp/eid_root_key or for 4.xx in /dev_hdd0/game/FLTZ00010/USRDIR.


*You can now dump you EID Root Key directly via the Rebug Toolbox ( utilities > dump EID Root key )

Dumping NOR/NAND
You can do this on rebug CFW using the toolbox.
  • Find the option "Export Flash to File", this will dump it to USB000 (right slot).


You must login or register to view this content.


Converting your CEX dump to DEX
  • First download and extract the c2d_openssl.rar to C:/ and install openSSL, this is required for c2d to work properly. Make sure you rename the folder to "openssl".
  • Now take you eid_root_key and your NOR/NAND dump and place in the folder with c2d.

  • Rename your original CEX dump to flashCEX.bin
  • Add .bin extension to eid_root_key.


Should now have a folder like this:

You must login or register to view this content.

  • Open a CMD window in the current directory (CTRL+SHIFT + right click > Open a command window here)


Usage:
    c2d.exe eid_key_file.bin in_flash.bin out_flash.bin [target_id]

So type in CMD or copy/paste the following: c2d.exe eid_root_key.bin flashCEX.bin flashDEX.bin 82
You must login or register to view this content.

Should give you an output like this:
You must login or register to view this content.

If you are unsure you have done it correctly, you can convert back to your original target ID (mine is 87)
Then compare this one with your original and they should match.


Switching to DEX using rebug CFW
Take your two dumps (flashCEX.bin + flashDEX.bin) and rename as below:

Rename your original CEX dump to CEX-FLASH.EID0.NORBIN (16mb) or CEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Rename your converted DEX dump to DEX-FLASH.EID0.NORBIN (16mb) or DEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Then place in the directory of your USB storage drive and insert in PS3 on USB000 (right slot)

Load up Rebug Toolbox and first click the option:
You must login or register to view this content.
A couple of warning boxes pop up, click YES to both.

Now Swap LV2 kernal, reboot and you are in DEX Mode within 10 seconds Smile
You must login or register to view this content.

Switching back to CEX
Very easy, simply rewrite target ID and it will auto swap lv2 kernal to CEX.

To access PSN in DEX mode, there is a feature in Rebug Toolbox to spoof IDPS. Choose EID5 and you will be able to sign in fine.

btw, if anything in this tut doesn't make sense - let me know so i can make it even more noob friendly.

Troubleshooting
Q: Command prompt says cant find openssl.exe in c: \openssl\bin even though i checked and openssl.exe is definately there.
A: Make sure the openssl folder is at root C:/ and is named exactly "openssl"

Q: Im having a error telling me that wrong format EID 48 bytes.
A: Make sure the filesize of your key is either 48 bytes (NOR) or 256kb (NAND)
Also dont forget you need to add the file extension .bin to the key.


How to get Online 4.21 DEX
Simply go to Rebug Toolbox > Utilities > Change Active PS3ID > EID5 CEX then go Sign in.
Last edited by DEREKTROTTER ; 02-20-2015 at 09:14 PM.

The following 239 users say thank you to DEREKTROTTER for this useful post:

_L0st_my_Gh0st_, ResistTheMoon, -SuperMan, {OM}1337{OM}, ⓙω мσ∂z, Nana, ★RAMPAGE★, Eddie Mac, 1reyalp, A Friend, A1narchy.com, AcnxMods, alexis strider, AlexNGU, Asian, bandphan, BASEBALL4EVER12, bhoot-iq, TheDeadLift, BKG98, BkxRich, BoatyMcBoatFace, Britis-, BroIDontMod, byVexHD, canadiancaper, CantStopMark, celahudini, Cesei, CEXREXDEX, Chnorzy, CITYCOMET, cl_21, clossky, codmadz332, Creepz, cuartaesfera, Dan Dactyl, Dan94, DannyBoiSmith, Daweeyz, Demmonnixx, dolby1, Dr. Mayham, Durnethe3, emcrew2, EquakeCSharp, FarSideX, Father Luckeyy, FLIX_Hosting, flynhigh09, FOX-727, Frank Ryan, FwiskyFIFA, gaming_nation, popcornmods, GangDePlot, gatecrasher, geeklogik, Geo, Ali D Killer, Ghozt007, Gommy, GuMMyOreOs, Harry, Hate, HaTeRM4NR33T, Heaney, JLM, hibye3, HighModzz, Hori_By_Nature, I-HATE-NGU, ibombo, Callumeleyy, iDunkPingazBrah, iifire, ilasthope, iLLy-i, Im Po, ImAzazel, ImGsus, ImIrIsH, ImPiffHD, iRoyal // MoDz, Island Time, It's Kevin, JakeP0500, JamesSwagger, Jasdeep, Jimmy, JohanMoya, joni_djESP, JPClyde, juham, kazeFATALITY, Kearns- and 139 other users.
08-20-2013, 08:47 AM #461
Hi,
I am a noob at hacking. i been wanting to rtm for black ops 2. im following your tutorial but its sooo confusing can you tell me it step by step please? I wanna jailbreak my ps3 too please reply.. Thanks
-Beatz
08-21-2013, 05:15 AM #462
Originally posted by BeatzYo View Post
Hi,
I am a noob at hacking. i been wanting to rtm for black ops 2. im following your tutorial but its sooo confusing can you tell me it step by step please? I wanna jailbreak my ps3 too please reply.. Thanks
-Beatz

There really is no easier way of doing this (unless you send it to someone who does CEX2DEX Services) you either have to man up & risk bricking your PS3 or stay on any firmware that you are on, but IF you somehow win at converting... you will get a Pseudo-Debugging Station which does the same as a real one.

I Hope you get to experience a Debug PS3's features they are really cool and mess with PSN & its Environments.
08-21-2013, 06:21 PM #463
1.MostWanted
K i l l e r b e r g
all i get when i try convert the files is: wrong format of EID key file : 48 bytes or 256KB expected, but -1 Found!
08-21-2013, 11:05 PM #464
FaKeSh0T
Do a barrel roll!
Thanks Derek you did it again Smile
08-22-2013, 12:36 AM #465
Kenneth-RTE
Pokemon Trainer
When i rename the files to DEX-FLASH.EID0.NORBIN and CEX-FLASH.EID0.NORBIN The File type Dont Changes to .NORBIN But Stays on .BIN?? when i go on the ps3 it cant find it :O
08-23-2013, 04:43 AM #466
Awesome Guide I'm on DEX now cause of you and a little help from some friends....

thanks again
08-23-2013, 05:37 PM #467
xKing04zZ
Gym leader
Hey i'm on 4.46 Rebug Rex, have done your tutorial now i'm on dex and then toolbox -> change active psid changed to cex and then i'm quit toolbox, wanna sign me on psn then there comes error 8002A224 Why?-.-
08-23-2013, 08:29 PM #468
Can anyone make this step for me , the reason is c2d.exe dose not work with my pc version ...
If anyone want to help me please PM me to give him my skype name to help ...
Originally posted by another user
Usage:
Code:
c2d.exe eid_key_file.bin in_flash.bin out_flash.bin [target_id]


Should give you an output like this:

Read more at You must login or register to view this content.

Thanks
08-24-2013, 01:14 AM #469
when i go to command window and copy and paste the code it says cannot find openssl

Copyright © 2024, NextGenUpdate.
All Rights Reserved.

Gray NextGenUpdate Logo