PS3 Glitch Finder Released!

[garyopa]

Modrobert over at EurAsia, has released his professional PS3 Glitch Finder!

This VHDL design for the Spartan-3 FPGA creates a custom pulse which can be used to glitch various hardware, like the PS3 memory bus. The pulse LOW and HIGH multipliers have a resolution of 255 (X"FF") and can be set independently.

Features:
* Cycle exaxt pulse generator process tested with logic analyzer
* Digital Clock Manager (DCM) primitive @ 200MHz (5ns) with lock handling
* Continuous pulse or one-shot mode selectable via switch
* Debounce handling for push buttons to prevent erratic behavior
* Set the LOW and HIGH pulse length multipliers via buttons
* 7-seg LED display support showing HIGH and LOW pulse multipliers
* Open source release under GPL v2

You can find more info in the wiki over at his EurAsia site: http://www.eurasia.nu/wiki/index.php/PS3_Glitch_Finder

[Denbo44]

This Glitch Finder is little over the top, the demo board cost alone must be in the range of $1 k USD. Gezzz.
A 555 timer would do the same thing.
But the question is where does one tie the Glitch Finder too on the ps3 main (mother) board? Which device and what is the pin number?

[yoshi314]

oh well. people are just re-inventing geohot's exploit tool. and for money, too.

not much creative progress has actually happened with ps3 since then.

[modrobert]

This Glitch Finder is little over the top, the demo board cost alone must be in the range of $1 k USD. Gezzz.
A 555 timer would do the same thing.
But the question is where does one tie the Glitch Finder too on the ps3 main (mother) board? Which device and what is the pin number?

Actually that specific board on the image cost roughly USD $120, this is another good board (even cheaper):

http://www.digilentinc.com/Products/...cfm?Prod=NEXYS


Connect the board to the point as shown in xorloser's post here (you also need to connect the ground point as described in the same post):

http://xorloser.com/?p=175

BTW:

A typical 555 timer has a minimum pulse of 100ns, so it would not do the same thing, actually I doubt it would work at all as you need at 40ns or less. The Spartan-3 FPGA there gives you 5ns minimum in my design, might be able to push it down to 3ns, but didn't want to risk too much jitter.

[Denbo44]

Actually that specific board on the image cost roughly USD $120, this is another good board (even cheaper):

http://www.digilentinc.com/Products/...cfm?Prod=NEXYS


Connect the board to the point as shown in xorloser's post here (you also need to connect the ground point as described in the same post):

http://xorloser.com/?p=175

BTW:

A typical 555 timer has a minimum pulse of 100ns, so it would not do the same thing, actually I doubt it would work at all as you need at 40ns or less. The Spartan-3 FPGA there gives you 5ns minimum in my design, might be able to push it down to 3ns, but didn't want to risk too much jitter.

Thanks!