1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127

Pawnmetldr Using Red Ribbon by TechnoDon
----------------------------------------

Download Red Ribbon RC5 and burn it to a CD-R http://www.ps3devwiki.com/files/devtools/dump-metldr/Red_Ribbon_RC5.iso
 1. Install OtherOS++ with SS Patches CFW http://www.ps3devwiki.com/wiki/OtherOS%2B%2B
 2. When installation is finished, go to recovery menu and choose "Restore PS3 System" (WARNING! this will delete all data on gameOS)
 3. Put boot_otheros.pkg, dump_flash.pkg, dtbImage.ps3.bin, install_otheros.pkg, reboot.pkg and setup_flash_for_otheros.pkg on a usb stick.
    press triangle on install packages and install all packages is this folder http://www.technosounds.co.uk/pkgs_for_otheros.rar
    (NAND owners should use dtbImage.ps3.bin-nand.only, rename it to dtbImage.ps3.bin).
 4. Run dump_flash.pkg dont remove your memory stick the console will sit on a black screen and will beep when ready. once finnished you will have flash.bin on usb 
 5. Run setup_flash_for_otheros.pkg (for all PS3 models)
 6. Reboot
 7. Run boot_otheros.pkg
 8. Run reboot.pkg
 9. You should be in petitboot now.
10. wget http://gitbrew.org/~glevand/ps3/scripts/create_hdd_region.sh
11. chmod a+x create_hdd_region.sh
12. ./create_hdd_region.sh
13. reboot    
14. while at the ps3 xmb screen pop the red ribbon CD-R into your ps3 drive and wait for the data disc icon to show under video category
15. Run reboot.pkg you should be in petitboot again. (if not run boot_otheros.pkg then Run reboot.pkg)
16. you should see some new choices select live-otheros: (not the failsafe one)
17. once in red ribbon double click the install icon on the desktop 
18. choose your language
19. select Yes continue
20. Hard disk space reserverd by OtherOs++ do you want to use this to isntall? select Yes
21. select Automatic Partition
22. installer /dev/ps3dd Yes
23. Use Current Partitions Yes
24. select mount point specification finished.
25. contune (Yes to All)
26. choose username and password default is ps3/ps3 no need to change it 
27. Reboot and remove the CD-R

==========The followng commands can be copy and pasted using Telnet==========

28. umount /dev/ps3dd1
29. mount /dev/ps3dd1 /tmp/petitboot/mnt/ps3dd1
30. cd /tmp/petitboot/mnt/ps3dd1/boot
31. wget http://www.technosounds.co.uk/vmlinux-2.6.39-gd49d156-dirty.tar
32. tar -xvf vmlinux-2.6.39-gd49d156-dirty.tar
33. cd /tmp/petitboot/mnt/ps3dd1/etc
34. nano kboot.conf
35. add the following lines to the end of kboot.conf

debian=/boot/vmlinux-2.6.39-gd49d156 root=/dev/ps3dd1
debian_Hugepages=/boot/vmlinux-2.6.39-gd49d156 root=/dev/ps3dd1 hugepages=1

36. press CTRL+X keys to quit and Y to save changes as kboot.conf
37. Boot Red Ribbon Linux-2.6.38-powerpc64-otheros

=====Red Ribbon disables logging on as root by default; this re-enables that ability=====

Use the Command-line to activate root account
Open a terminal window (on desktop click on terminal icon in upper left)
 
at the prompt type: sudo passwd root
 it responds: [sudo] password for ps3:
 enter your password
 it responds: Enter new Unix password:
 enter the password you want to use for the root account
 it responds: Retype new Unix password:
 enter the same password again to confirm
 it responds: passwd: password updated successfully
 ps3@ps3:~$

Close the terminal window.
 
On the desktop click on the shutdown icon (upper right corner)
The shutdown dialogue window opens:
 
click on switch user then push F10 on the keyboard and Click on Configure Login Manager
then Enter the root password that you created and The configure Login Manager Window opens
Click on the Security tab to display the security page and check the Allow local system administrator login box
then Click the close button at the bottom

log back in and click the file manager icon in the top left of the screen
you will see a window change /home/ps3 to / and press enter

now click into lib and modules folders

once there click tools and open current folder as Root
now type in your password

download this rar and extract it to a usb: http://www.technosounds.co.uk/lib-2.6.39-gd49d156.rar

copy the folder from the usb to the /lib/modules folder

so you should now have three directories in there. 2.6.38-powerpc64-asbestos, 2.6.38-powerpc64-otheros and 2.6.39-gd49d156

open terminal again and write:

cd /usr/src
sudo wget http://www.ps3devwiki.com/files/devtools/dump-metldr/linux-2.6.zip
sudo unzip linux-2.6.zip
sudo ln -s /usr/src/linux-2.6 /lib/modules/2.6.39-gd49d156/build
cd /usr/src/linux-2.6
sudo cp ps3_linux_config .config

now reboot the ps3 and select the debian vmlinux-2.6.39

wget http://www.ps3devwiki.com/files/devtools/dump-metldr/metldrpwn.zip
sudo unzip metldrpwn.zip

Download Flowrebuilder 4.2.2.0
http://www.ps3devwiki.com/files/flash/Tools/Flowrebuilder/FlowRebuilder%20v.4.2.2.0.exe

select Byte reverse a dump. option and browse for the flash.bin file created by dump_flash.pkg

click execute operation and a file called flash.swap.bin will be created

now select Byte reverse and EXTRACT a NOR dump file. and choose the new flash.swap.bin file

a folder called flash.swap.swap.ext will be created inside that you have asecure_loader then metldr.

copy metldr to the root of your usb stick you need to copy this file to metldrpwn folder on the ps3.
(you need root permissions for the above tasks so click tools and open current folder as Root then enter your password)


cd metldrpwn
sudo sh run.sh

congratulations on obtaining your consoles root key. 
goto the file manager icon and change /home/ps3 to / then press enter
now click into proc then metldrpwn and copy the dump file to a usb.

you will need a hex editor, i recommend hxd. open your dump and the first 3 lines are the keys you require!