Humble Monthly this month gets you Civilization VI + 2DLC + over $100 of games for $12. Offer ends Feb 2nd.

Tutorial: How to use PS3Xploit to hack your PS3 and go directly to Rebug 4.81.2! (Noob friendly)


I'm a girl that's liked technology from day 1. Mostly interested in the PSVita/PSP scene but I've always modded my stuff when it's possible, that is :)Contact me via DM at @KawaiiAuroraA on Twitter if you have any questions/concerns about my articles or if you have any article requests.

161 Responses

  1. first of first


  2. Cornchip

    Can’t wait to try this out! Thanks for the post.

  3. Q13E5

    Thank you for the info!

  4. Krisu

    At 70% i have message “data is corrupted (8002f957) anybody?

    • E.N.D

      Got the same problem 3 times at 4th time i did it it works just try installing over and over till it intall lol

    • DudeGuy

      Same thing happened to me until I realized that my system was a NOR flash console and not NAND as I had previously thought, even though the web flash process still succeeded despite choosing the wrong option. After redoing the flash process having chosen NOR then everything installed smoothly.

    • anthonysanya

      i got the same error, any ideas on the remedy??

    • anthonysanya

      mine is at 80%

  5. nobdhelp

    I had a heck of a time with a nobd system last night. For those who have a broken BD drive starting step 4:
    install Overflow CfW from here
    go to install packages from system root and install the QA toggle, Run QA toggle should go black then reload XMB after a minute or so
    go to settings and scroll all the way down and press L1, L2, L3, R1, R2, R3, dpad Down all at once to verify QA has been enabled.
    next you can install any CFW you want, but I recommend FERROX Cobra 7-3 nobd which his here

  6. Icedcream

    Good write up 🙂
    Ive done a couple of installs now.
    Wish I knew about Thibobo’s PUP yesterday :/

  7. Makak1984

    It must be installed at 4.82 or 4.81?

  8. anonymity

    Thank you Aurora for this detailed tutorial, it does give me a more assuring feeling and will finally try the exploit on my 2011 ps3 slim model.

  9. Mercury

    I’ve already installed a different CFW with this hack. Would it be safe to install the modified REBUG PUP file now from CFW?

    • MadMack

      Modified REBUG is safe and don’t forget to install Rebug toolbox and modMan…

    • TehCupcakes

      The instructions CLEARLY state this exploit entry point is designed for OFW! You SHOULD NOT use this method to install Rebug on a system that already has CFW. However, there are guides out there that explain how to install rebug properly from another cfw. (E.g. FERROX, the only 4.82 firmware as far as I’m aware.)

  10. H

    I have done maybe 20 ps3s with e3 flasher the temps are never good even after applying arctic mx4. Syscon fan control idles the ps3s around 65 to 70 deg c.

    I want to try this on a not much used, unopened slim ps3 to see how the stock paste idle temps are; but i guess thats near to impossible.

  11. makak1984

    For me it refused to load exploit… more than 10 tries and nothing

    • H

      Did u try to dump the nor first? Just cos its a first try and dumping is safe as you are not writing anything to the flash. What error are you getting? Are you able to get the server running?

      • H

        Ok i tried dumping only my cech2004 model. I had to create an htdocs folder within the extracted folder and COPY all files to htdocs also. Then i ran the miniweb from the main folder. This way i was able to get the server running. Also i used lan not wifi

    • Success...Brick?

      I got “success…” on the second try (had to first enabled javascript – missing from tutorial). In the end the web browser just froze. Assuming getting a bricked console as a result so not recommending the method. I first updated to 4.82 OFW, put flsh.hex to root of usb and stuck it to the right-most usb port as instructed, then selected NOR page since having CECH-2104A.

      • Success...Brick?

        Restarted the console manually from power button after 30+ minutes waiting. It still starts, but not sure whether the method was successful and can proceed with Rebug (haven’t made NOR backup either since was not in instructions).

        • Aurora

          It seems that the exploit sometimes freezes even if it’s sucessful. Trying again has the done trick for some people as per the Reddit thread I linked.

          If it didn’t beep thrice, it shouldn’t have worked.