Post: ***COD4 Public hack huge potential***
06-28-2009, 12:50 PM #1
abz247uk
Do a barrel roll!
(adsbygoogle = window.adsbygoogle || []).push({}); So i was messing around with commview and I thought I should post my findings.

I loaded up cod4 and started sniffing as I entered "Multiplayer" and found some interesting stuff (I am from the UK so results may be different elsewhere). The PS3 establishes connections to the following:

1. fuk01.ps3.update.playstation.net (PS3 firmware check)

2. cod4-ps3.auth.mmp3.demonware.net (COD4 SERVER AUTHENICATION)

3. cod4mw-ps3update.charlieoscardelta.com (COD4 PATCH CHECK?)

4. cod4-ps3-live.lsg.mmp3.demonware.net (COD4 SERVER ??)


Ok. So, number 1. fuk01.ps3.update.playstation.net, this is the firmware check. I did a bit of research and found out that the PS3 connects to this DNS and locates a text file on that DNS, which is located here = fuk01.ps3.update.playstation.net/update/ps3/list/us/ps3-updatelist.txt

It then compares the information in that file with your PS3 firmware version. It is basically checking if the firmware is up to date. NOW THE INTERESTING PART. The firmware check can be bypassed, SOURCES:

1. [url]www.haxnetwork.net/showthread.php?t=9745[/url]

2. [url]www.ps3news.com/forums/ps3-online-news/ps3-firmware-version-check-bypassed-thread-55789.html[/url]

3. [url]www.ps3-hacks.com/forums/about930.html[/url]

Read those sources before you continue reading.

These people found a way to bypass the firmware so you can still play PS3 games online without updating the firmware.

So the firmware check is at fuk01.ps3.update.playstation.net and the text file it checks with the ps3 is located at fuk01.ps3.update.playstation.net/update/ps3/list/us/ps3-updatelist.txt

IMPORTANT:

The PS3 COD4 Patch check only happens once, and thats when you load up COD4 and go to multiplayer to play online.

SO we know that the game is connecting to:

cod4mw-ps3update.charlieoscardelta.com


WHAT IF WE CAN BYPASS THE GAME PATCH CHECK USING THE SAME METHOD FOR BYPASSING THE FIRMWARE CHECK?

What we need to know is the path to the text file hosted on at cod4mw-ps3update.charlieoscardelta.com. IF we can find out the location of the "Patch check file" we can easily manipulate this using DNS spoofing and we can get online with our hacks on the memory stick and play in PUBLIC GAMES.

I assume its something like this cod4mw-ps3update.charlieoscardelta.com/blahblah/somedirectory/blah/update.txt

Now if you have any information about this or you have any information/findings about packet sniffing, any ideas regarding dns spoofing or packet injection please do contact me on [email][email protected][/email]


UPDATE: I checked commview and the file that the PS3 is trying to get from cod4mw-ps3update.charlieoscardelta.com is :

/BLES00148/1.3/GAME.VER

However, I cannot view the file because when I browse to

cod4mw-ps3update.charlieoscardelta.com/BLES00148/1.3/GAME.VER

It says file not found. So im guessing only the PS3 has the rights to get that file. Somehow we need to get this file onto our hard drives or maybe we could just block the update check from happening?
psn: abz_left_360
(adsbygoogle = window.adsbygoogle || []).push({});

The following 9 users say thank you to abz247uk for this useful post:

-〤-, IIX R a W r IIX, iM_DoMCeex, mitchell865, NGU_swat097, orange12, Sniper3000, tom2197, YoyoDevo15
08-24-2009, 01:18 AM #38
i found that the download location for the 1.3 patch for the UK is You must login or register to view this content.
maybe you can make it so it can't download the patch and just lets you play online without the patch.
08-24-2009, 11:38 AM #39
abz247uk
Do a barrel roll!
The problem is, if you block the ps3 connecting to You must login or register to view this content. you wont be signed into psn, u will get booted off. If we do block it, the patch request does not come up, but like i said u wont be signed into PSN.

I think it is possible to block the patch request but still be signed into PSN,

cod4mw-ps3update.charlieoscardelta.com may be responsible for the patch check
08-24-2009, 02:12 PM #40
I think i can get you that file you wanted, you said that when you browse to the file it prompts that the file doesn't exist. If we can find out the User Agent for the playstation 3 i can spoof the url into believing my browser is a ps3 and i can get the file. What happens after that i don't know but i think i can get you it, what you do with it after that is unknown to me. What is the potential outcome of gaining access to this "/BLES00148/1.3/GAME.VE" file Smile ?

---------- Post added at 03:12 PM ---------- Previous post was at 03:02 PM ----------

Ok so i tried with Mozilla/5.0 (PLAYSTATION 3; 2.00)

as my user agent and the site still prints the file does not exist :(

i have another idea, i will get back to you guys soon and if it works i will post it up here.

The following user thanked GrantDouglas for this useful post:

shaun92
08-24-2009, 02:46 PM #41
shaun92
Bounty hunter
Originally posted by GrantDouglas View Post
I think i can get you that file you wanted, you said that when you browse to the file it prompts that the file doesn't exist. If we can find out the User Agent for the playstation 3 i can spoof the url into believing my browser is a ps3 and i can get the file. What happens after that i don't know but i think i can get you it, what you do with it after that is unknown to me. What is the potential outcome of gaining access to this "/BLES00148/1.3/GAME.VE" file Smile ?

---------- Post added at 03:12 PM ---------- Previous post was at 03:02 PM ----------

Ok so i tried with Mozilla/5.0 (PLAYSTATION 3; 2.00)

as my user agent and the site still prints the file does not exist :(

i have another idea, i will get back to you guys soon and if it works i will post it up here.


Good work man, nice to see people trying stuff Smile
Do let us know how you get on, some real progress could be made here.
I'm sure we can find some use for bypassing the patch check :p
08-24-2009, 02:55 PM #42
I also tried connecting my ps3 up through my pc with the ps3 proxy gui tool. and i went to C:\System32\drivers\etc and editted my hosts. file and added the line
Originally posted by another user


127.0.0.1 cod4mw-ps3update.charlieoscardelta.com



unfortunately im running windows in virtual machine as my main OS is linux.

So if someone would try what i just tried then it might work.

By adding that line to the hosts file it blocks your pc's connection going to that url.

Therefore ... blocking the patch.

It could work ? if someone needs help on trying it then just ask me.
08-24-2009, 03:06 PM #43
abz247uk
Do a barrel roll!
Editing the hosts file will only effect the computer/laptop dns entries. The ps3 is not using the computer/laptop as a dns server, its using your wireless router DNS settings.

Its GAME.VER btw
08-24-2009, 06:58 PM #44
si-15
Haxor!
when i connect to the ps3 server the is only one link logged and it is the ps3 update and thats it so i cannot find anyway of finding these links you have found to the cod4 update check :/
08-24-2009, 07:12 PM #45
how bout using a packet injector to send the the packet over and over agean telling iw that we have the patch just an idea
08-24-2009, 07:13 PM #46
si-15
Haxor!
Originally posted by GrantDouglas View Post
I also tried connecting my ps3 up through my pc with the ps3 proxy gui tool. and i went to C:\System32\drivers\etc and editted my hosts. file and added the line


unfortunately im running windows in virtual machine as my main OS is linux.

So if someone would try what i just tried then it might work.

By adding that line to the hosts file it blocks your pc's connection going to that url.

Therefore ... blocking the patch.

It could work ? if someone needs help on trying it then just ask me.


seems like it could work because i kind of have an idea on how to work it but im using ps3 proxy server gui like you but i dont know where to put what address's so any help then il try it and report back im doing this right now

Copyright © 2026, NextGenUpdate.
All Rights Reserved.

Gray NextGenUpdate Logo