PSXHAX

Since the PS3Xploit Tools v3.0 updates, PlayStation 3 developer Derrik (aka @GhzGangster on Twitter) recently made available Zerosense which is an exploit toolkit for the PS3 Browser via ROP exploitation in development with details below.

Download: zerosense-master.zip / GIT

To quote from the README.md: zerosense

Zerosense is an exploit toolkit for the PlayStation 3 Browser, based on work by the PS3Xploit team, and the proof-of-concepts which came before. It also takes inspiration other projects, such as PegaSwitch and PS4 Playground.

This project is primarily designed to manipulate files for the SaveMGO MGO2 Revival project, to aid users on official firmware. Additional functionality may be added in the future.

Node.js is used both to bundle the application, and to act as a web server. The JavaScript target is ES3, so additional functionality is added as needed.

Warning

Project is still under heavy development. Things may completely change in the future.

Approach

We create an array a certain size, number of elements, and first element for verification. After searching, we should find the address of the array in memory. Once we have this, we can get the addresses of elements within the array.

Once we have the array, we can create our ROP chains, figure out their addresses, and then trigger the Use-After-Free exploit.

This approach allows us to conduct only one initial, cheap search, as opposed to searching for each chain in memory.

Goals

• Have a clean and easy-to-understand codebase
• Be easily extendable
• Be able to execute quickly and reliably
• Be able to easily add support for different firmware

Setup

Node.js and NPM should be installed beforehand. See https://docs.npmjs.com/getting-started/installing-node
This project has been...

Following the Manjaro Linux PS4 v2 revision and recent updates, this weekend PlayStation 4 developer masterzorag announced Steam on PS4Linux running Fedora 28 using Mesa 18.0.1 on Radeon Liverpool hardware 1116A at 4.55 Firmware alongside a demonstration video of Kodi on PS4 Linux.

As great progress has also been made with Linux on Nintendo Switch, below are some recent Tweets from masterzorag for those interested on the PS4 Linux progress, as follows:

Spoiler: Tweets

PS4 5.01 Linux Loader (WIP): https://github.com/Vultra/PS4Linux_5.01

From the README.md: PS4 5.01 Linux Loader

A simple payload that let you run Linux on your 5.01 PS4

WORKS! With XVortex *** (When Compatible for 5.01). Made by Vultra

How to...

Steampunk airship combat fans can take to the skies next week as Guns of Icarus Alliance: PS4 Edition launches on PlayStation 4 featuring player-vs-player and player-vs-environment action complete with an ongoing war between six elite factions vying for control of a world ravaged by machines.

Here is what else is coming to PlayStation next week courtesy of Sony Social Media Senior Specialist Ryan Clements:

New PlayStation Games for 5/1/2018

• City of Brass - PS4 — Digital (Out 5/4)
• Deiland - PS4 — Digital (Out 5/3)
• Guns of Icarus Alliance: PS4 Edition - PS4 — Digital
• Hex Tunnel Touch - PS4 — Digital
• Hive: Altenum Wars - PS4 — Digital
• Killing Floor: Incursion - PS VR — Digital
• Pirate Flight - PS VR — Digital
• Super Mega Baseball 2 - PS4 — Digital

PlayStation Music

• Godsmack - When Legends Rise
• Twin Shadow - Caer
• Janelle Monae - Dirty Computer
• Alan Silvestri - Avengers: Infinity War Original Motion Picture Soundtrack

PlayStation Video

• Game Night
• Samson

PlayStation Vue

• The NBA Playoffs are here April 14 - May 28 on ESPN
• Archer - Wednesdays at 10 PM on FXX

The information above is subject to change without notice.

Today PlayStation 4 developer iCyb3r (aka @Cyb3rr) shared a new implementation of the popular PS4 memory tool JKPatch RPC with NetCheat for those working on PS4 game cheats and more!

Download: PS4NC.zip / GIT

From the README.md file, to quote: NetCheat-PS4RPC

Implementation of jkPatch RPC with NetCheat

Installing

Download the latest release file, extract it and drop the dll into your APIs folder

How to Use

• Fire up your game
• After starting the game load the exploit Original through your browser and leave the browser open
• Open NetCheat 64bit and change the API to PS4 RPC (check the notes below if you get an error)
• Click Connect, a pop-up will appear choose your FW version & change IP to your PS4 IP address then click Inject Payload
• If the payload get injected successfully click Connect
• Click attach and and choose a memory region to work with

Notes & Hints

• If you have PS4API-NC.dll in your APIs folder you have to move it somewhere else it has a conflict for unknown reason
• After selecting a memory region the range addresses will be inserted in Start/Stop fields without any interaction on your end (the ranges are not real it's just an alias because netcheat is clunky when working with 64bit addresses so I had to make them shorter)
• When you select a memory region the start address will always be the same 0x0, this is useful if you want to modify the ELF region without worrying about ASLR (the ELF region is usually the first one named executable)
• If you want to choose another region just click on the play button (Continue button) This also applies to changing games, you don't have to disconnect and connect again just click the same button after starting your game

From the author:

1. Download...

Today MeTheKing let us know that PlayStation 4 developer @cfwprophet made available via Twitter a Ubuntu 16.04 LTS Installer for @Al Azif's PS4 Exploit Host complete with options.elf and source code below.

Download: PS4-Exploit-Host-Installer.zip / GIT / Ubuntu-Installer-master.zip / GIT / options.elf.zip (386 KB) / ubuntups4.tar.gz (1.74 GB)

To quote from the README.md file: PS4 Exploit Host Ubuntu Installer

Whats that ?

This is a Ubuntu 16.04 Installer for the ps4-exploit-host Application from Al Azif.

• It will ask you for your SU Password and store it so we can start the app without the need to re-enter the pass every time you have closed the app.
• Additional i added a function to store the path to the payloads folder which enables us to install fresh compiled payloads directly to that folder.
• Simple add those lines to your make file:
• .PHONY: install
• install: mv -f $(CURDIR)/$(TARGET) $(PS4HOST)/$(TARGET)

If you want to uninstall or need to change the su pass you can use the options by using right click onto the desktop shortcut within the Launcher.

Hint

• If the Installer doesn't start by clicking, Right Click on it and select Properties >> Permission >> Execute: >> Set mark 'Allow executing file as program'

Patches

• v1.1
• Corrected the options.elf.
• Cleaned up the project, removed unused files.

...