Post: Playstation Home - Unlimited Free Apts !!! (**JB Required**)
Options
02-26-2012, 03:51 AM
#1
VX_AG3NT
Pokemon Trainer
CFW PS3 Setup
1. JB PS3 spoofed to 4.11 to allow for data transfer to OFW PS3. --There are several ways to spoof firmware currently. I can provide here the 3 necessary files to spoof for 4.11, and instructions how to use them if you would like to go this route. See bottom of post for link to these files which are guaranteed working.
2. blackb0x ftp or the latest Multiman installed on JB PS3.
OFW PS3
1. Get PS Home installed and for the region you wish to add the apartments to, i.e. NA, JP, EU, HK, and let Home go thru the full load up process at least once.
2. Now you'll have the needed files in Home's cache that must be edited.
BOTH PS3s
1. Power off both PS3s and connect them together with an ethernet cable.
2. Power then back on, and first go System Settings --> Data Transfer on the OFW PS3.
2a. Get that part going to transfer to your CFW PS3.
3. Once you see waiting to receive data.., go on your CFW PS3 in System Settings --> Data Transfer
3a. Finish up this part here to get the transfer started.
FINDING THE FILES
1. From Filezilla or whatever ftp program you are using, navigate to dev_hdd0/game/NPIA00005/USRDIR/CACHE/GLOBALS
2. There won't be an obvious file name, but the file you're looking for is the Navigator.xml. You can check the INF files to see the names of the links within.
For NA you need to see this link here -->
EU is --> and JP is -->
3. Once you've found the one you're looking for we'll be editing the XML with same number as the INF file, ex. 978910671_INF & 978910671_DAT.XML. In my case those files are for the NA navigator file. Probably the same number for you.
4. Transfer both the XML and the INF onto your desktop, or any folder of your choosing.
EDITING THE NAVIGATOR XML
1. Open up the Navigator.xml in Notepad ++ ideally, and then scroll thru it till you see this part here:
Originally posted by another user
<ITEM> <!-- My Spaces -->
<TEXT LANG="en-US">My Spaces</TEXT>
<TEXT LANG="fr-FR">Mon Espace Perso</TEXT>
<IMAGE LANG="en-US">https://scea-home.playstation.net/a.home/mfe/content/Navigator/Sub_MySpaces_01.dds</IMAGE>
<IMAGE LANG="fr-FR">https://scea-home.playstation.net/a.home/mfe/content/Navigator/Sub_MySpaces_01.dds</IMAGE>
<ITEM>
<FUNCTION>
efaultApartmentItem</FUNCTION>
</ITEM>
<TEXT LANG="en-US">My Spaces</TEXT>
<TEXT LANG="fr-FR">Mon Espace Perso</TEXT>
<IMAGE LANG="en-US">https://scea-home.playstation.net/a.home/mfe/content/Navigator/Sub_MySpaces_01.dds</IMAGE>
<IMAGE LANG="fr-FR">https://scea-home.playstation.net/a.home/mfe/content/Navigator/Sub_MySpaces_01.dds</IMAGE>
<ITEM>
<FUNCTION>
efaultApartmentItem</FUNCTION></ITEM>
2. Now we're going to add our Apartments. To add an apartment you're going to need to find the destination link for it. This can be found while sniffing, and then downloading the space. So you will need a friend who already has the apartment. You don't even have to actually visit them. So long as they're in it you can choose to download the space, and then find the link in the request. If you're using Wireshark to quickly find the data type in 'http contains GET' in the Filter box near the top left side. This will parse out all info you don't need to worry about. After you've filtered the data look for something like this -->
Originally posted by another user
HTTP GET /c.home/prod/live/Scenes/J_SCEJ_Toro_Lounge_0_47BF_CF6D/toro_lounge01_T033.sdc HTTP/1.1
The above example is actually a public lounge, but it's the same for apartments. I've highlighted in red the part you need to be looking at. In the above example J_SCEJ_Toro_Lounge_0_47BF_CF6D is the destination link. Like I said this will be the same setup for apartments.
3. Now that you've gotten an apartment destination link I'm going to show you how to add it to the navigator.xml. This is a very simple thing to do, and like I said you can add as many as you want really. The format needs to look like this:
Originally posted by another user
<ITEM>
<ESTINATION>J_SCEJ_Toro_Personal_B176_4996</DESTINATION>
</ITEM>
<
ESTINATION>J_SCEJ_Toro_Personal_B176_4996</DESTINATION></ITEM>
Nothing more, and nothing less there. <
ESTINATION> tags enclosed in <ITEM> tags. And you place it right underneath this part here:
Originally posted by another user
<ITEM> <!-- My Spaces -->
<TEXT LANG="en-US">My Spaces</TEXT>
<TEXT LANG="fr-FR">Mon Espace Perso</TEXT>
<IMAGE LANG="en-US">https://scea-home.playstation.net/a.home/mfe/content/Navigator/Sub_MySpaces_01.dds</IMAGE>
<IMAGE LANG="fr-FR">https://scea-home.playstation.net/a.home/mfe/content/Navigator/Sub_MySpaces_01.dds</IMAGE>
<ITEM>
<FUNCTION>efaultApartmentItem</FUNCTION>
</ITEM>
<ITEM>
<ESTINATION>J_SCEJ_Toro_Personal_B176_4996</DESTINATION>
</ITEM>
<TEXT LANG="en-US">My Spaces</TEXT>
<TEXT LANG="fr-FR">Mon Espace Perso</TEXT>
<IMAGE LANG="en-US">https://scea-home.playstation.net/a.home/mfe/content/Navigator/Sub_MySpaces_01.dds</IMAGE>
<IMAGE LANG="fr-FR">https://scea-home.playstation.net/a.home/mfe/content/Navigator/Sub_MySpaces_01.dds</IMAGE>
<ITEM>
<FUNCTION>
efaultApartmentItem</FUNCTION></ITEM>
<ITEM>
<
ESTINATION>J_SCEJ_Toro_Personal_B176_4996</DESTINATION></ITEM>
For further apartments just keep pasting them in underneath that last </ITEM> tag.
4. Once you've added the apartments you want it's time to save the file, but there's one more thing we need to do.
5. Since the XML file is now going to be larger than it was initially we must make a critical edit to the INF file, or else the modified XML will be rejected.
6. Right click the modified XML to get the size of it. Once you've got that open up your windows calculator from Accessories. Then from the menu bar on the calculator select View, and then Programmer. Now that's switched make sure that Dec is selected where it says Hex, Dec, Oct, Bin. While on Dec key in the file size, and after you've done that switch from Dec to Hex. Leave that open for now with the value on there to look at for the next part.
7. Open up the INF file using a Hex Editor. I prefer HxD, but any one will be suitable here. At the very beginning of the file you will see some hex values before any text starts. These hex values represent the original file size. Since we've now changed that we need to update the INF to reflect the new size. For example if the old file was say 158,575 bytes, and the modified one is 160,790 bytes. In the default INF we will see the values of 26 B6 F (158,575.) We need to change those values to 27 41 6 as 160,790 = 27 41 6.
You must login or register to view this content.
8. After typing in the new values save the INF file. We're almost done now.
FINAL STEPS
1. Copy both the XML and INF back into the Globals directory in Cache, overwriting the old ones.
2. Delete both State and Reserved which you can find at the bottom in the Globals Directory. (**NOTE: This may or may not be necessary**)
3. Transfer all contents from your CFW PS3 back to the OFW PS3.
4. Now when you start Home all the apartment destination links you added will show up in your nav in the Apartments section.
5. That's it! Free, Unlimited apartments are now yours.
IMPORTANT NOTES
1. Apartments work regardless of region. This means all JP, EU, and HK apartments will work in NA, and all other combinations of that also work. Apartments are region-free with this process.
2. This change is not permanent, and at some point your modified XML will get overwritten. This usually happens after about 3 days, but all you need to do is transfer from your CFW to OFW PS3 again.
3. After each weekly update you'll need to repeat this process anyhow as the XML will be different, i.e. new spaces, etc.
4. If you find your transfer times are too long, delete all unnecessary saves, games, etc. that you don't need anymore. After doing a full format on the HDD and only having Home installed on my PS3 I get transfer times of 4-5min !!!
You must login or register to view this content.
SHA256: a5e277cfe7ef25335ed44353cfefabde3a4084b2bb86767765 935cbaf8659da6
SHA1: 36a73c3d4f5f543b5031b05cc71844abd290da38
MD5: e4187b17918d29a99fda1d8c2d9166d2
File size: 3.0 MB ( 3144126 bytes )
File name: 4.11SpoofWorking.rar
File type: unknown
Detection ratio: 0 / 43
Analysis date: 2012-02-23 14:40:28 UTC ( 0 minutes ago )
You must login or register to view this content.
Any questions on how to do this ask here and I'll be happy to help. And please +rep if you like this. If I get a good response from this exploit I got several more like it I can post here.
The following 9 users say thank you to VX_AG3NT for this useful post:
02-26-2012, 05:24 AM
#4
VX_AG3NT
Pokemon Trainer
Originally posted by another user
and you personally made this all yourself?
Yes, I made this exploit all by myself. Things like editing the INF file I knew from previous COD hacks.
---------- Post added at 01:24 AM ---------- Previous post was at 01:04 AM ----------
Originally posted by GGT
It would great if we got people to post the links for the apartments here.
Here's some anyways:
Virtua_Tennis_4_Apt_9D88_A2D0
Millionaires_Yacht_CC55_902E
Audi_Sled_MP_695B_CC81
UnderwaterApt_237_E5BF
Lagoon_Lounge_Apt_4B3B_35AC
J_SCEJ_Toro_Personal_B176_4996
Lagoon_Kaseki_PS_9F80_B2EA
Sodium_Neon_Apt_296_66CE
Gothic_Apartment_34EA_F371
Mount_Olympus_Apt_1D87_7D4D
02-26-2012, 05:27 AM
#5
BeastyGunner96
Little One
The following 2 users say thank you to BeastyGunner96 for this useful post:
The following user thanked VX_AG3NT for this useful post:
Copyright © 2026, NextGenUpdate.
All Rights Reserved.
