Anyone tried decrypting the core_os from TB-cfw?

**devorader** · 11-22-2011,04:05 PM

I took 3.55 ofw and was able to diisect coreos however went through the same thing for the TB coreos and and cant get it decrypted? am currently still working on but any input is appreciated. Surely the TB team couldnt encrypt it with "custom" keys could they?

Found what i was looking for on the devwiki

**Pereb27** · 11-22-2011,04:09 PM

The TB team can't encrypt the firmware with custom keys, it would lead to a brick.
However, the interesting stuff is in the dongle. The CFW looks for the dongle at boot, and gets payload from it if it finds it.
Your best bet is to have an app that dumps lv1 and/or lv2 from ram with dongle inserted.

**devorader** · 11-22-2011,04:29 PM

depkg writes a 0 byte file fo the tb core but decrypts stock one fine and then discore dumps it. i cant seem to decrypt the TB coreos

**Pereb27** · 11-23-2011,01:04 PM

I'm pretty sure some devs reverse engineered the CFW without problems. My guess is that you're doing something wrong.
But as I said, the interesting stuff is in the dongle. Not much use reversing the CFW, unless you dump lv1-lv2 from the PS3 with TB.

**NuclearAqua** · 11-23-2011,05:57 PM

Originally Posted by Pereb27

I'm pretty sure some devs reverse engineered the CFW without problems. My guess is that you're doing something wrong.
But as I said, the interesting stuff is in the dongle. Not much use reversing the CFW, unless you dump lv1-lv2 from the PS3 with TB.

I think multiMAN has an option that dumps both lv1 and lv2 to a flash drive. Maybe it could be used to study TB further.

User Tag List

Thread: Anyone tried decrypting the core_os from TB-cfw?

Tweet

LinkBack

Thread Tools

Display


	Would you like to get all the new info from PSX-Scene in your email each day? Subscribe to our Daily Digest! Want to learn more about the team keeping you up to date with the latest scene news? Read about them now! Check out our Developer bios, too!