Tutorial: [Tutorial] CEX2DEX using Rebug CFW4.21

11-11-2012, 11:19 PM #1

DEREKTROTTER

You're Goddamn Right

9,314

Posts

130,852

Reputation

21

Credits

Former Staff

Feb 2010

NextGenUpdate

(adsbygoogle = window.adsbygoogle || []).push({});

[Tutorial] CEX2DEX using Rebug CFW4.21

You must login or register to view this content.

Downloads:
CEX2DEX: You must login or register to view this content.
EID Root Key Dumper: You must login or register to view this content. | You must login or register to view this content. | You must login or register to view this content.

Preparation:
Dumping EID root key
First you need to dump your EID Root Key which can now be done on most CFW Version.

Install and run the EID PKG for your CFW, the PS3 will just show a black screen and beep several times. You can now restart the PS3 and retrieve your eid_root_key from either:
/dev_hdd0/tmp/eid_root_key or for 4.xx in /dev_hdd0/game/FLTZ00010/USRDIR.

*You can now dump you EID Root Key directly via the Rebug Toolbox ( utilities > dump EID Root key )

Dumping NOR/NAND
You can do this on rebug CFW using the toolbox.

Find the option "Export Flash to File", this will dump it to USB000 (right slot).

You must login or register to view this content.

Converting your CEX dump to DEX

First download and extract the c2d_openssl.rar to C:/ and install openSSL, this is required for c2d to work properly. Make sure you rename the folder to "openssl".
Now take you eid_root_key and your NOR/NAND dump and place in the folder with c2d.
Rename your original CEX dump to flashCEX.bin
Add .bin extension to eid_root_key.

Should now have a folder like this:

You must login or register to view this content.

Open a CMD window in the current directory (CTRL+SHIFT + right click > Open a command window here)

Usage:

    c2d.exe eid_key_file.bin in_flash.bin out_flash.bin [target_id]

So type in CMD or copy/paste the following: c2d.exe eid_root_key.bin flashCEX.bin flashDEX.bin 82
You must login or register to view this content.

Should give you an output like this:
You must login or register to view this content.

If you are unsure you have done it correctly, you can convert back to your original target ID (mine is 87)
Then compare this one with your original and they should match.

Switching to DEX using rebug CFW
Take your two dumps (flashCEX.bin + flashDEX.bin) and rename as below:

Rename your original CEX dump to CEX-FLASH.EID0.NORBIN (16mb) or CEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Rename your converted DEX dump to DEX-FLASH.EID0.NORBIN (16mb) or DEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Then place in the directory of your USB storage drive and insert in PS3 on USB000 (right slot)

Load up Rebug Toolbox and first click the option:
You must login or register to view this content.
A couple of warning boxes pop up, click YES to both.

Now Swap LV2 kernal, reboot and you are in DEX Mode within 10 seconds Smile

You must login or register to view this content.

Switching back to CEX
Very easy, simply rewrite target ID and it will auto swap lv2 kernal to CEX.

To access PSN in DEX mode, there is a feature in Rebug Toolbox to spoof IDPS. Choose EID5 and you will be able to sign in fine.

btw, if anything in this tut doesn't make sense - let me know so i can make it even more noob friendly.

Troubleshooting
Q: Command prompt says cant find openssl.exe in c: \openssl\bin even though i checked and openssl.exe is definately there.
A: Make sure the openssl folder is at root C:/ and is named exactly "openssl"

Q: Im having a error telling me that wrong format EID 48 bytes.
A: Make sure the filesize of your key is either 48 bytes (NOR) or 256kb (NAND)
Also dont forget you need to add the file extension .bin to the key.

How to get Online 4.21 DEX
Simply go to Rebug Toolbox > Utilities > Change Active PS3ID > EID5 CEX then go Sign in.

(adsbygoogle = window.adsbygoogle || []).push({});

The following 239 users say thank you to DEREKTROTTER for this useful post:

_L0st_my_Gh0st_, ResistTheMoon, -SuperMan, {OM}1337{OM}, ⓙω мσ∂z, Nana, ★RAMPAGE★, Eddie Mac, 1reyalp, A Friend, A1narchy.com, AcnxMods, alexis strider, AlexNGU, Asian, bandphan, BASEBALL4EVER12, bhoot-iq, TheDeadLift, BKG98, BkxRich, BoatyMcBoatFace, Britis-, BroIDontMod, byVexHD, canadiancaper, CantStopMark, celahudini, Cesei, CEXREXDEX, Chnorzy, CITYCOMET, cl_21, clossky, codmadz332, Creepz, cuartaesfera, Dan Dactyl, Dan94, DannyBoiSmith, Daweeyz, Demmonnixx, dolby1, Dr. Mayham, Durnethe3, emcrew2, EquakeCSharp, FarSideX,

Luckeyy, FLIX_Hosting, flynhigh09, FOX-727, Frank Ryan, FwiskyFIFA, gaming_nation, popcornmods, GangDePlot, gatecrasher, geeklogik, Geo, Ali D Killer, Ghozt007, Gommy, GuMMyOreOs, Harry, Hate, HaTeRM4NR33T, Heaney, JLM, hibye3, HighModzz, Hori_By_Nature, I-HATE-NGU, ibombo, Callumeleyy, iDunkPingazBrah, iifire, ilasthope, iLLy-i, Im Po, ImAzazel, ImGsus, ImIrIsH, ImPiffHD, iRoyal // MoDz, Island Time, It's Kevin, JakeP0500, JamesSwagger, Jasdeep, Jimmy, JohanMoya, joni_djESP, JPClyde, juham, kazeFATALITY, Kearns- and 139 other users.

10-11-2013, 12:33 AM #515

iTruceFret

[move]From now on, call me DRAGON.[/move]

3,607

Posts

19,799

Reputation

912

Credits

Premium

Jan 2011

NextGenUpdate

Originally posted by flynhigh09

I'm was wondering the same I've got key from 3.55 but can u dump flash on 4.46 any one tried

Yeah it works. Do everything the same.

The following user thanked iTruceFret for this useful post:

flynhigh09

10-11-2013, 03:38 PM #516

-JM-

Space Ninja

804

Posts

8,164

Reputation

529

Credits

Member

Mar 2012

NextGenUpdate

Originally posted by DEREKTROTTER

[Tutorial] CEX2DEX using Rebug CFW4.21

NOTE: Guide is almost the same for Rebug 4.30 users, simply dump your NOR/NAND on 4.30 - though this should be obvious anyway :dumb:

You must login or register to view this content.

Downloads:
You must login or register to view this content.
You must login or register to view this content.

Preparation:
Dumping EID root key
First you need to dump your EID Root Key which must be done on 3.55 cfw(downgrade using the 999 pup if needed).

Install and run the eEID_RKDumper.pkg, the PS3 will just show a black screen and beep several times. You can now restart the PS3 and retrieve your eid_root_key from /dev_hdd0/tmp/.

That is all you need from 3.55, you can go back to rebug 4.21.

Dumping NOR/NAND
You can do this on rebug 4.21 using the toolbox.

Find the option "Export Flash to File", this will dump it to USB001 (right slot).

You must login or register to view this content.

Converting your CEX dump to DEX

First download and extract the c2d_openssl.rar to C:/ and install openSSL, this is required for c2d to work properly. Make sure you rename the folder to "openssl".
Now take you eid_root_key and your NOR/NAND dump and place in the folder with c2d.
Rename your original CEX dump to flashCEX.bin
Add .bin extension to eid_root_key.

Should now have a folder like this:

You must login or register to view this content.

Open a CMD window in the current directory (CTRL+SHIFT + right click > Open a command window here)

Usage:

    c2d.exe eid_key_file.bin in_flash.bin out_flash.bin [target_id]

You must login or register to view this content.

Should give you an output like this:
You must login or register to view this content.

If you are unsure you have done it correctly, you can convert back to your original target ID (mine is 87)
Then compare this one with your original and they should match.

Video

You must login or register to view this content.

Switching to DEX using rebug 4.21
Take your two dumps (flashCEX.bin + flashDEX.bin) and rename as below:

Rename your original CEX dump to CEX-FLASH.EID0.NORBIN (16mb) or CEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Rename your converted DEX dump to DEX-FLASH.EID0.NORBIN (16mb) or DEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Then place on USB001 (right slot)

Load up Rebug Toolbox and first click the option:
You must login or register to view this content.
A couple of warning boxes pop up, click YES to both.

Now Swap LV2 kernal, reboot and you are in DEX Mode within 10 seconds Smile

You must login or register to view this content.

Switching back to CEX
Very easy, simply rewrite target ID and it will auto swap lv2 kernal to CEX.

To access PSN in DEX mode, there is a feature in Rebug Toolbox to spoof IDPS. Choose EID5 and you will be able to sign in fine.

btw, if anything in this tut doesn't make sense - let me know so i can make it even more noob friendly.

Troubleshooting
Q: Command prompt says cant find openssl.exe in c:\oppenssl\bin even though i checked and openssl.exe is definately there.
A: Make sure the openssl folder is at root C:/ and is named exactly "openssl"

Q: Im having a error telling me that wrong format EID 48 bytes.
A: Make sure the filesize of your key is either 48 bytes (NOR) or 256kb (NAND)
Also dont forget you need to add the file extension .bin to the key.

How to get Online 4.21 DEX
Simply go to Rebug Toolbox > Utilities > Change Active PS3ID > EID5 CEX then go Sign in.

Enjoy your debug [img]https://www.**************/images/smilies/sFi_hitman.gif[/img]

can this be done on 4.46.1 rebug lite
(I got eEid root key from 3.55)

10-14-2013, 03:55 PM #517

Ali_dark

Grunt

57

Posts

150

Reputation

8

Credits

Member

Jan 2013

NextGenUpdate

is there way to get eid_root_key from 4.xx?

10-17-2013, 10:07 PM #518

martijndk1983

Grunt

54

Posts

50

Reputation

0

Credits

Member

Dec 2009

NextGenUpdate

hello guys

i have followed the tutorial and i was almost there

when i choose rewrite target id in flash ill get an error

please provide the following file and try again. /dev_usb000/DEX-Flash.EID0.NORBIN

i am 100% its on my usb drive dev_usb000

what did i wrong

10-19-2013, 04:12 AM #519

HE11_PIGLET

NextGenUpdate Elite

64

Posts

52

Reputation

0

Credits

NextGenUpdate Elite

Jan 2011

NextGenUpdate

make sure you are able to see the file extensions otherwise it'll never work...

10-24-2013, 01:40 AM #520

divinith

Grunt

50

Posts

195

Reputation

0

Credits

Member

Jun 2010

NextGenUpdate

done everything from the TUT and the youtube video many times but my problem is this:

C:\c2d>c2d.exe eid_root_key.bin flashCEX.bin flashDEX.bin 82

EID key : 48 bytes (eid_root_key.bin)
Flash size : 16 MB NOR (flashCEX.bin)
Target ID : $89

EID ROOT KEY: 0000000000000000000000000000000000000000000000000000000000000000
EID ROOT IV : 00000000000000000000000000000000

WARNING: can't open config file: C:\OpenSSL-Win32\bin\openssl.cfg
EID0 KEY : C4647C9BDD84FC53F80DE80D4F220434B752A2454E59B445FF491F5A2FA5B108
EID0 IV : 9016447A31BE77D3D0AEACADB3F6C1D6

WARNING: can't open config file: C:\OpenSSL-Win32\bin\openssl.cfg
EID0 SEC KEY: D1118272B7B29A557BAC090FE186AB08

WARNING: can't open config file: C:\OpenSSL-Win32\bin\openssl.cfg
ERROR: Cannot decrypt EID0 SECTION!

Not sure why.. Was at 4.46 REBUG LITE.. Downgraded with Rogero's Downgrader to 3.55 and went to KMEOW's 3.55 and then used the Dumper. Obviously something wrong with my root key dump.

10-30-2013, 11:36 AM #521

Vital

Brute

203

Posts

1,937

Reputation

2

Credits

Member

Oct 2013

NextGenUpdate

Originally posted by DEREKTROTTER

[Tutorial] CEX2DEX using Rebug CFW4.21

NOTE: Guide is almost the same for Rebug 4.30 users, simply dump your NOR/NAND on 4.30 - though this should be obvious anyway :dumb:

You must login or register to view this content.

Downloads:
You must login or register to view this content.
You must login or register to view this content.

Preparation:
Dumping EID root key
First you need to dump your EID Root Key which must be done on 3.55 cfw(downgrade using the 999 pup if needed).

Install and run the eEID_RKDumper.pkg, the PS3 will just show a black screen and beep several times. You can now restart the PS3 and retrieve your eid_root_key from /dev_hdd0/tmp/.

That is all you need from 3.55, you can go back to rebug 4.21.

Dumping NOR/NAND
You can do this on rebug 4.21 using the toolbox.

Find the option "Export Flash to File", this will dump it to USB001 (right slot).

You must login or register to view this content.

Converting your CEX dump to DEX

First download and extract the c2d_openssl.rar to C:/ and install openSSL, this is required for c2d to work properly. Make sure you rename the folder to "openssl".
Now take you eid_root_key and your NOR/NAND dump and place in the folder with c2d.
Rename your original CEX dump to flashCEX.bin
Add .bin extension to eid_root_key.

Should now have a folder like this:

You must login or register to view this content.

Open a CMD window in the current directory (CTRL+SHIFT + right click > Open a command window here)

Usage:

    c2d.exe eid_key_file.bin in_flash.bin out_flash.bin [target_id]

You must login or register to view this content.

Should give you an output like this:
You must login or register to view this content.

If you are unsure you have done it correctly, you can convert back to your original target ID (mine is 87)
Then compare this one with your original and they should match.

Video

You must login or register to view this content.

Switching to DEX using rebug 4.21
Take your two dumps (flashCEX.bin + flashDEX.bin) and rename as below:

Rename your original CEX dump to CEX-FLASH.EID0.NORBIN (16mb) or CEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Rename your converted DEX dump to DEX-FLASH.EID0.NORBIN (16mb) or DEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Then place on USB001 (right slot)

Load up Rebug Toolbox and first click the option:
You must login or register to view this content.
A couple of warning boxes pop up, click YES to both.

Now Swap LV2 kernal, reboot and you are in DEX Mode within 10 seconds Smile

You must login or register to view this content.

Switching back to CEX
Very easy, simply rewrite target ID and it will auto swap lv2 kernal to CEX.

To access PSN in DEX mode, there is a feature in Rebug Toolbox to spoof IDPS. Choose EID5 and you will be able to sign in fine.

btw, if anything in this tut doesn't make sense - let me know so i can make it even more noob friendly.

Troubleshooting
Q: Command prompt says cant find openssl.exe in c:\oppenssl\bin even though i checked and openssl.exe is definately there.
A: Make sure the openssl folder is at root C:/ and is named exactly "openssl"

Q: Im having a error telling me that wrong format EID 48 bytes.
A: Make sure the filesize of your key is either 48 bytes (NOR) or 256kb (NAND)
Also dont forget you need to add the file extension .bin to the key.

How to get Online 4.21 DEX
Simply go to Rebug Toolbox > Utilities > Change Active PS3ID > EID5 CEX then go Sign in.

Enjoy your debug [img]https://www.**************/images/smilies/sFi_hitman.gif[/img]

Is there any chance you could reupload the video? It would help a lot!

10-30-2013, 09:32 PM #522

Demmonnixx

Vault dweller

574

Posts

585

Reputation

19

Credits

Member

Oct 2010

NextGenUpdate

Originally posted by divinith

done everything from the TUT and the youtube video many times but my problem is this:

C:\c2d>c2d.exe eid_root_key.bin flashCEX.bin flashDEX.bin 82

EID key : 48 bytes (eid_root_key.bin)
Flash size : 16 MB NOR (flashCEX.bin)
Target ID : $89

EID ROOT KEY: 0000000000000000000000000000000000000000000000000000000000000000
EID ROOT IV : 00000000000000000000000000000000

WARNING: can't open config file: C:\OpenSSL-Win32\bin\openssl.cfg
EID0 KEY : C4647C9BDD84FC53F80DE80D4F220434B752A2454E59B445FF491F5A2FA5B108
EID0 IV : 9016447A31BE77D3D0AEACADB3F6C1D6

WARNING: can't open config file: C:\OpenSSL-Win32\bin\openssl.cfg
EID0 SEC KEY: D1118272B7B29A557BAC090FE186AB08

WARNING: can't open config file: C:\OpenSSL-Win32\bin\openssl.cfg
ERROR: Cannot decrypt EID0 SECTION!

Not sure why.. Was at 4.46 REBUG LITE.. Downgraded with Rogero's Downgrader to 3.55 and went to KMEOW's 3.55 and then used the Dumper. Obviously something wrong with my root key dump.

In case no one has answered you yet or you haven't found it, this may be your issue:
"WARNING: can't open config file: COpenSSL-Win32\bin\openssl.cfg"

The folder itself should be renamed to OpenSSL instead of OpenSSL-Win32. Hope that helped some

11-02-2013, 03:20 AM #523

Shots.

Do a barrel roll!

102

Posts

196

Reputation

0

Credits

Member

Aug 2012

NextGenUpdate

Originally posted by DEREKTROTTER

[Tutorial] CEX2DEX using Rebug CFW4.21

NOTE: Guide is almost the same for Rebug 4.30 users, simply dump your NOR/NAND on 4.30 - though this should be obvious anyway :dumb:

You must login or register to view this content.

Downloads:
You must login or register to view this content.
You must login or register to view this content.

Preparation:
Dumping EID root key
First you need to dump your EID Root Key which must be done on 3.55 cfw(downgrade using the 999 pup if needed).

Install and run the eEID_RKDumper.pkg, the PS3 will just show a black screen and beep several times. You can now restart the PS3 and retrieve your eid_root_key from /dev_hdd0/tmp/.

That is all you need from 3.55, you can go back to rebug 4.21.

Dumping NOR/NAND
You can do this on rebug 4.21 using the toolbox.

Find the option "Export Flash to File", this will dump it to USB001 (right slot).

You must login or register to view this content.

Converting your CEX dump to DEX

First download and extract the c2d_openssl.rar to C:/ and install openSSL, this is required for c2d to work properly. Make sure you rename the folder to "openssl".
Now take you eid_root_key and your NOR/NAND dump and place in the folder with c2d.
Rename your original CEX dump to flashCEX.bin
Add .bin extension to eid_root_key.

Should now have a folder like this:

You must login or register to view this content.

Open a CMD window in the current directory (CTRL+SHIFT + right click > Open a command window here)

Usage:

    c2d.exe eid_key_file.bin in_flash.bin out_flash.bin [target_id]

You must login or register to view this content.

Should give you an output like this:
You must login or register to view this content.

If you are unsure you have done it correctly, you can convert back to your original target ID (mine is 87)
Then compare this one with your original and they should match.

Video

You must login or register to view this content.

Switching to DEX using rebug 4.21
Take your two dumps (flashCEX.bin + flashDEX.bin) and rename as below:

Rename your original CEX dump to CEX-FLASH.EID0.NORBIN (16mb) or CEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Rename your converted DEX dump to DEX-FLASH.EID0.NORBIN (16mb) or DEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Then place on USB001 (right slot)

Load up Rebug Toolbox and first click the option:
You must login or register to view this content.
A couple of warning boxes pop up, click YES to both.

Now Swap LV2 kernal, reboot and you are in DEX Mode within 10 seconds Smile

You must login or register to view this content.

Switching back to CEX
Very easy, simply rewrite target ID and it will auto swap lv2 kernal to CEX.

To access PSN in DEX mode, there is a feature in Rebug Toolbox to spoof IDPS. Choose EID5 and you will be able to sign in fine.

btw, if anything in this tut doesn't make sense - let me know so i can make it even more noob friendly.

Troubleshooting
Q: Command prompt says cant find openssl.exe in c:\oppenssl\bin even though i checked and openssl.exe is definately there.
A: Make sure the openssl folder is at root C:/ and is named exactly "openssl"

Q: Im having a error telling me that wrong format EID 48 bytes.
A: Make sure the filesize of your key is either 48 bytes (NOR) or 256kb (NAND)
Also dont forget you need to add the file extension .bin to the key.

How to get Online 4.21 DEX
Simply go to Rebug Toolbox > Utilities > Change Active PS3ID > EID5 CEX then go Sign in.

Enjoy your debug [img]https://www.**************/images/smilies/sFi_hitman.gif[/img]

on my ps3 it says me eid key is 48 bytes then on my pc its 1kb. what do i do/

EDIT: nvm i got it to work great tut