PSVita 3.61 to 3.60 Intentionally Brick carry out

Security and underground discussions
xMacx
Junior Member
Posts: 8
Joined: Mon Sep 28, 2015 10:35 am
Location: Germany

PSVita 3.61 to 3.60 Intentionally Brick carry out

Post by xMacx » Sun Aug 21, 2016 11:12 am

Sorry for my bad English

intentionally Brick carry out

short howto

Needed:
PS Vita of 3.61
FW choice
battery pack half empty (not mandatory)
Content Manager Assistant
Charles
Hex editor

at your own risk

Search update
example : Brick

Code: Select all

<update_data_list> 
	<region id="eu"> 
		<np level0_system_version="01.600.000" level1_system_version="03.600.000" level2_system_version="03.600.000" map="03.600.000" /> 
		<np_d level0_system_version="01.600.000" level1_system_version="03.600.000" level2_system_version="03.600.000" map="03.600.000" /> 
		<version system_version="04.600.000" label="3.60"> 
			<update_data update_type="full"> 
				<image size="133676544">http://deu01.psp2.update.playstation.net/update/psp2/image/2016_0323/rel_cd80b3da55771c99557db552542dff2b/PSP2UPDAT.PUP?dest=eu</image> 
			</update_data> 
		</version> 
		<recovery spkg_type="systemdata"> 
			<image spkg_version="01.000.010" size="56768512">http://deu01.psp2.update.playstation.net/update/psp2/image/2016_0804/sd_80cefcda06707796a040648aea38da0f/PSP2UPDAT.PUP?dest=eu</image> 
		</recovery> 
		<recovery spkg_type="preinst"> 
			<image spkg_version="01.000.000" size="128788480">http://deu01.psp2.update.playstation.net/update/psp2/image/2016_0804/pre_f5e6da7d1213101482300ccaeda35c3c/PSP2UPDAT.PUP?dest=eu</image> 
		</recovery> 
	</region> 
</update_data_list>
Part 2 editor update for Security mode

Code: Select all

<recovery spkg_type="systemdata">
<image spkg_version="01.000.010" size="56768512">http://deu01.psp2.update.playstation.net/update/psp2/image/2016_0323/sd_4190a24e21086c240221cc009cde1ef2/PSP2UPDAT.PUP?dest=eu</image>
if ye do is change your PSVita Brick
it remains black except Home button
waiting battery pack empty (not mandatory)
(try several times) Security mode > used Charles > FW choice
example editor FW 3.60 > 33 2E 36 31 (omitting only important > 2016_0323/sd_4190a24e21086c240221cc009cde1ef2)
have forgotten what > please edit pre of

Code: Select all

<recovery spkg_type="preinst">
<image spkg_version="01.000.000" size="128788480">http://deu01.psp2.update.playstation.net/update/psp2/image/2016_0323/pre_c1ffba04357e27e337e599977f642230/PSP2UPDAT.PUP?dest=eu</image>
no longer works the brick, sony file down. http://darthsternie.bplaced.net download fw file
the same must also work on PS4 ?

now happy again of 3.60 ;)
shaneod
Junior Member
Posts: 4
Joined: Sun Aug 21, 2016 5:06 pm

Re: PSVita 3.61 to 3.60 Intentionally Brick carry out

Post by shaneod » Sun Aug 21, 2016 5:19 pm

Hi :wave:
I'm curious what this thread is about, but I honestly can't make any sense of these steps. Can you please explain in your native language?

From what I've gathered so far, I think you're suggesting to update the Vita via qCMA, edit one of the firmware files and partially brick it, and then use Charles and downgrade to 3.60 via safe mode.

The bit in particular that I don't understand is the hex editing part.
User avatar
Freakler
Site Admin
Posts: 171
Joined: Mon Feb 17, 2014 6:37 am
Location: Germany
Contact:

Re: PSVita 3.61 to 3.60 Intentionally Brick carry out

Post by Freakler » Sun Aug 21, 2016 6:13 pm

Can you please post a video about the process?
rhmi
Junior Member
Posts: 3
Joined: Sat May 23, 2015 7:59 am

Re: PSVita 3.61 to 3.60 Intentionally Brick carry out

Post by rhmi » Sun Aug 21, 2016 6:25 pm

yeah its so confusing o.O
senas8
Junior Member
Posts: 1
Joined: Sun Aug 21, 2016 9:24 pm

Re: PSVita 3.61 to 3.60 Intentionally Brick carry out

Post by senas8 » Sun Aug 21, 2016 9:27 pm

This could be huge ... If we can contact him and have someone explain it better.
shaneod
Junior Member
Posts: 4
Joined: Sun Aug 21, 2016 5:06 pm

Re: PSVita 3.61 to 3.60 Intentionally Brick carry out

Post by shaneod » Sun Aug 21, 2016 10:50 pm

Alright, I studied the OP's post a little more, and I think (but I'm not sure) I understand up until the point where you semi-brick.

I will say right now that the bit I really do not understand is which form of update the OP expects to be done (QCMA or Charles system update?).
Therefore, if your console does not semi-brick when doing the update via Charles, as I describe below, instead try and figure out how to do the exact same process via QMCA, on the off-chance they operate differently.
  1. Obtain all the prerequisites the OP listed.
  2. You'll also need to host a web server temporarily. Make sure that you host these files on the web server.
    Note the web server's IP address (run ipconfig in command prompt).
  3. Run Charles Proxy and enable breakpoints for * (meaning everything) requests & responses
  4. Note your computer's IP address (run ipconfig in command prompt)
  5. Tell your Vita to connect to the internet via a proxy server, your computer's IP with port 8888
  6. Tell the Vita to check for updates.
  7. A prompt will show up in Charles, notifying you of the Vita's attempt to connect. Approve it.
  8. You will see the update request. The URL will look like http://......./psp2-updatelist.xml
    Execute the request (not the response) and when the response appears, edit it.
    Look at (but do not execute) the response to find out what region it's using. It'll say

    Code: Select all

    <region id="REGION-HERE">
    Paste the below code into the response window, replacing the original response.
    Remember to replace REGION-HERE with your region.
    Replace each instance of WEB-SERVER-IP with the IP of the computer on which the web server is running.

    Code: Select all

    <update_data_list> 
       <region id="REGION-HERE"> 
          <np level0_system_version="01.600.000" level1_system_version="03.600.000" level2_system_version="03.600.000" map="03.600.000" /> 
          <np_d level0_system_version="01.600.000" level1_system_version="03.600.000" level2_system_version="03.600.000" map="03.600.000" /> 
          <version system_version="04.600.000" label="3.60"> 
             <update_data update_type="full"> 
                <image size="133676544">http://WEB-SERVER-IP/3.60/full/PSP2UPDAT.PUP</image> 
             </update_data> 
          </version> 
          <recovery spkg_type="systemdata"> 
             <image spkg_version="01.000.010" size="56768512">http://WEB-SERVER-IP/3.61/systemdata/PSP2UPDAT.PUP</image> 
          </recovery> 
          <recovery spkg_type="preinst"> 
             <image spkg_version="01.000.000" size="128788480">http://WEB-SERVER-IP/3.61/preinst/PSP2UPDAT.PUP</image> 
          </recovery> 
       </region> 
    </update_data_list>
  9. Execute the response, letting the Vita install the "update".
At this point, assuming for some extremely weird reason this works, you've probably semi-bricked, due to the fact that "full" is version 3.60, yet "systemdata" and "preinst" are 3.61.

If it actually worked to this point, and has semi-bricked with access to safe-mode, then let me know (you madman), and we'll try to figure out the second part of the guide.
bugsystew
Junior Member
Posts: 4
Joined: Sun Aug 21, 2016 11:17 pm

Re: PSVita 3.61 to 3.60 Intentionally Brick carry out

Post by bugsystew » Sun Aug 21, 2016 11:26 pm

Don't Work, Erro C1-6562-9 after apply downgrade to 3.60
shaneod
Junior Member
Posts: 4
Joined: Sun Aug 21, 2016 5:06 pm

Re: PSVita 3.61 to 3.60 Intentionally Brick carry out

Post by shaneod » Sun Aug 21, 2016 11:36 pm

bugsystew wrote:Don't Work, Erro C1-6562-9 after apply downgrade to 3.60
Alright, if it didn't semi-brick, I've absolutely no idea. I googled and C1-6562-9 is a 'Downgrade failed' error.
As an aside, the OP mentioned that you should hex edit the 3.60 systemdata PUP, replacing 3.60 plaintext with 3.61 inside the PUP itself (not the URL), but they never mentioned to do the same for full or preinst, so it shouldn't be relevant to us.

We're probably just better off waiting for the OP to come back.
Sony would have to have been really stupid to allow this to work, though, so it's looking more like a theory than something that's actually been tested imo. Unlikely to work.

As a side note, I haven't tested this, as my Vita has not arrived yet. I was basically just trying to make sense of it. I'll try this in a few days if the OP hasn't replied by then.
oguretz
Junior Member
Posts: 1
Joined: Mon Aug 22, 2016 8:03 am

Re: PSVita 3.61 to 3.60 Intentionally Brick carry out

Post by oguretz » Mon Aug 22, 2016 8:11 am

I think i get hex editing part.

In this file:

Code: Select all

<recovery spkg_type="systemdata">
<image spkg_version="01.000.010" size="56768512">http://deu01.psp2.update.playstation.net/update/psp2/image/2016_0323/sd_4190a24e21086c240221cc009cde1ef2/PSP2UPDAT.PUP?dest=eu</image>
Look at 0x800, there is 33 2E 36 30, which is "3.60" in ANSI. Author suggests to modify it (maybe during download by modifying network package in Charles?) to 33 2E 36 31 which is "3.61" in ANSI.
xMacx
Junior Member
Posts: 8
Joined: Mon Sep 28, 2015 10:35 am
Location: Germany

Re: PSVita 3.61 to 3.60 Intentionally Brick carry out

Post by xMacx » Mon Aug 22, 2016 8:54 am

been randomly :cry: hang now been 3.61 IDU MODE , wanted to repeat the process
Post Reply