Live in Your World, HAX in Ours!
Hello World! I've been reporting on Sony PlayStation hacking news since 2000 and started PSXHAX in 2014 to cover PlayStation (PSX), PlayStation 2 (PS2), PlayStation 3 (PS3), PlayStation 4 (PS4), PlayStation Portable (PSP), PlayStation Vita (PS Vita), PlayStation TV (PS TV) and next-gen PlayStation 5 (PS5) platforms along with anything else of interest.
Click on my UserName author link above and you'll be able to view a curated list of all the articles I've contributed thus far to PSXHAX.COM!
Click on my UserName author link above and you'll be able to view a curated list of all the articles I've contributed thus far to PSXHAX.COM!
PS4 2-Step Verification to Increase PlayStation 4 Security Coming
Similar to our Two-Step Verification here at PSXHAX, according to reports Sony's rumored PS4 2-step verification will be coming soon in various regions to increase PlayStation 4 account security.
To quote from RiddicTH on the news: "Australia and New Zealand will be getting 2-step later tonight or tomorrow morning, where as other regions should be getting it next week if all goes to plan.
It will work as a SMS service where you will have to input a mobile number on your account and every new login from a PS4 or PC will send a SMS message with a verification code. This (from what we've been told) will not be largely publicised but will be an additional option under the Security section of your account on PS4 or PC.
Legacy consoles - AKA anything less than a PS4 - will use what's known as "Device Codes" which will basically be additional passwords you can have for the console. You'll be able to set a few if you're worried about forgetting them, from what we can understand.
I cant say anything for NA regions as that's outside my area of expertise and SIEE work differently from SIEA in some regards. No doubt it'll be next up to the chopping block though.
Any other questions, I'll be happy to answer the best I can. The training material we got for it wasn't... the best, but we've come to expect that from SIEE at this point.
EDIT 1: The planned launch for ANZ is tomorrow. We're not 100% if it's going to go to plan, but if it does the plan is to roll it out to other EU regions soon after.
Was just informed I probably shouldn't be talking about it till we're sure it works on ANZ. Whoops~"
Update: Sony's PlayStation 4 2-Step Verification system is now going live across regions as planned, with screenshots available below thanks to TheOuterHaven.net!
...
To quote from RiddicTH on the news: "Australia and New Zealand will be getting 2-step later tonight or tomorrow morning, where as other regions should be getting it next week if all goes to plan.
It will work as a SMS service where you will have to input a mobile number on your account and every new login from a PS4 or PC will send a SMS message with a verification code. This (from what we've been told) will not be largely publicised but will be an additional option under the Security section of your account on PS4 or PC.
Legacy consoles - AKA anything less than a PS4 - will use what's known as "Device Codes" which will basically be additional passwords you can have for the console. You'll be able to set a few if you're worried about forgetting them, from what we can understand.
I cant say anything for NA regions as that's outside my area of expertise and SIEE work differently from SIEA in some regards. No doubt it'll be next up to the chopping block though.
Any other questions, I'll be happy to answer the best I can. The training material we got for it wasn't... the best, but we've come to expect that from SIEE at this point.
EDIT 1: The planned launch for ANZ is tomorrow. We're not 100% if it's going to go to plan, but if it does the plan is to roll it out to other EU regions soon after.
Was just informed I probably shouldn't be talking about it till we're sure it works on ANZ. Whoops~"
Update: Sony's PlayStation 4 2-Step Verification system is now going live across regions as planned, with screenshots available below thanks to TheOuterHaven.net! ...
PS VitaDump, VitaToolchain & PKG Installer 2.0 Tutorial by Silica
While we're still adding new VPK files to the VPK Mirror list and VPK Showcase, today PlayStation Vita developer Silica (YouTube Channel) made available PKG Installer 2.0 alongside a video tutorial for installing Package files and activating the Debug Utility on PS Vita. 
Meanwhile PSVita developers zecoxao updated VitaDump and ooPo shared a VitaToolchain script to autobuild a homebrew PS Vita toolchain.
Download: VitaDump v1.0.0 Source code (zip) / VitaDump v1.0.0 Source code (tar.gz) / VitaDump GIT / vitatoolchain-master.zip / VitaToolchain GIT / PKG_Installer.vpk (151 KB) / PKG_Installer.vpk (Mirror) / PKGInstaller_2.0_Setup.exe (9 MB) / PKGInstaller_2.0_Setup.exe (Mirror) / PS Vita PKG Files / PS Vita PKGs (Archive) / Apps / Demo PKG's (Archive) / Beta games + vpk.7z / DebugUtillity.zip (3.1 MB) / PKG Installer Mod.7z (316.79 KB) / PKGInstallerLauncher.vpk...
Meanwhile PSVita developers zecoxao updated VitaDump and ooPo shared a VitaToolchain script to autobuild a homebrew PS Vita toolchain.
Download: VitaDump v1.0.0 Source code (zip) / VitaDump v1.0.0 Source code (tar.gz) / VitaDump GIT / vitatoolchain-master.zip / VitaToolchain GIT / PKG_Installer.vpk (151 KB) / PKG_Installer.vpk (Mirror) / PKGInstaller_2.0_Setup.exe (9 MB) / PKGInstaller_2.0_Setup.exe (Mirror) / PS Vita PKG Files / PS Vita PKGs (Archive) / Apps / Demo PKG's (Archive) / Beta games + vpk.7z / DebugUtillity.zip (3.1 MB) / PKG Installer Mod.7z (316.79 KB) / PKGInstallerLauncher.vpk...
HENkaku PS4 Exploit Update for 3.15 / 3.50 PlayStation 4 Firmware
Just over a week back we reported on the 3.55 PS4 HENkaku Exploit, and since then PlayStation 4 developer Fire30 has been updating Github with FireKaku PS4 ports for both 3.15 and 3.50 Firmware as well.
Download: PS4-3.55-Code-Execution-PoC-master.zip / GIT / WhiteOverfl0w GIT
From the ReadMe file: PS4 3.55 Code Execution:
This repo contains a PoC for getting code execution on ps4's with firmware version 3.55 (Now with support for 3.15 and 3.50).
It uses the same webkit vulnerability as the henkaku project. So far there is basic ROP working and returning to normal execution is included.
I have also included some helper methods to make researching a tad easier. Currently the documentation is pretty poor but I will be updating it over time.
Usage:
You need to edit the dns.conf to point to the ip address of your machine, and modify your consoles dns settings to point to it as well. Then run:
then
Debug output will come from this process.
Navigate to the User's Guide page on the PS4 and information about the exploit and all loaded modules should be printed out. This is an example of what running it will look like: https://gist.github.com/Fire30/2e0ea2d73d3a1f6f95d80aea77b75df8
If you want to try the socket test to work. Change the IP address at the bottom of ps4sploit.html to your computers and run a command such as netcat -l 0.0.0.0 8989 -v. You should see something like:
There are a few notes:
Download: PS4-3.55-Code-Execution-PoC-master.zip / GIT / WhiteOverfl0w GIT
From the ReadMe file: PS4 3.55 Code Execution:
This repo contains a PoC for getting code execution on ps4's with firmware version 3.55 (Now with support for 3.15 and 3.50).
It uses the same webkit vulnerability as the henkaku project. So far there is basic ROP working and returning to normal execution is included.
I have also included some helper methods to make researching a tad easier. Currently the documentation is pretty poor but I will be updating it over time.
Usage:
You need to edit the dns.conf to point to the ip address of your machine, and modify your consoles dns settings to point to it as well. Then run:
Code:
python fakedns.py -c dns.conf
Code:
python server.pyNavigate to the User's Guide page on the PS4 and information about the exploit and all loaded modules should be printed out. This is an example of what running it will look like: https://gist.github.com/Fire30/2e0ea2d73d3a1f6f95d80aea77b75df8
If you want to try the socket test to work. Change the IP address at the bottom of ps4sploit.html to your computers and run a command such as netcat -l 0.0.0.0 8989 -v. You should see something like:
Code:
Listening on [0.0.0.0] (family 0, port 8989)
Connection from [192.168.1.72] port 8989 [tcp/sunwebadmins] accepted (family 2, sport 59389)
Hello From a PS4!- The exploit is not 100% reliable currently. It is more like 80% which is good...
XenForo 2.0 First Screenshots Unveiled by Devs, ETA Autumn 2016
This past week XenForo developer Mike unveiled the first XenForo 2.0 screenshots and announced there will be a XenForo v2.0 demo installation available in Autumn 2016. 
While this may not interest most end-users here, aside from the stock colors it's the direction we'll likely be moving towards here at PSXHAX when XenForo 2.0 becomes available... so if you have any feedback, suggestions, ideas etc let us know in the comments below.
To quote: "What's next?
At this point, the absolute vast majority of the functionality has been added. There are still some smaller pages and functions here or there that we need to support, but the core functionality is basically all there. That said, our todo list is far from empty. As any developer will tell you, you check off one thing and add two more. We're still working hard, but we're making very good progress.
When we feel it has reached that point, the first step will be to create a separate demo installation so that everyone can start playing with XenForo 2.0 as an end user. We'll be gathering feedback, making changes, fixing bugs, and working on things in the background that you won't see.
The next step would be what could be considered an alpha or a developer preview. This will be the first time that customers will be able to try out XenForo 2.0 on their own server and work with the code/templates. We do not intend on limiting this to selected developers.
However, you will not be able to upgrade into this version and you are unlikely to be able to upgrade out of it. You will likely also have to do installation using the command line and taking some manual steps. This preview is specifically designed to start getting initial feedback from developers (and stylers) and keen enthusiasts.
Following that, XenForo 2.0 will go through the usual beta process, like any other 1.x release. However, this process may be longer due to the scope of the changes made and to allow us further time complete additional tasks, such as updates to our official add-ons.
When's this going to happen?
Each step of the process is dependent on how the previous one goes. Therefore, it would be very hard for us to suggest when a stable version--or even the beta--version will be released. However, our goal is to begin gathering feedback via the demo installation in autumn...
While this may not interest most end-users here, aside from the stock colors it's the direction we'll likely be moving towards here at PSXHAX when XenForo 2.0 becomes available... so if you have any feedback, suggestions, ideas etc let us know in the comments below.
To quote: "What's next?
At this point, the absolute vast majority of the functionality has been added. There are still some smaller pages and functions here or there that we need to support, but the core functionality is basically all there. That said, our todo list is far from empty. As any developer will tell you, you check off one thing and add two more. We're still working hard, but we're making very good progress.
When we feel it has reached that point, the first step will be to create a separate demo installation so that everyone can start playing with XenForo 2.0 as an end user. We'll be gathering feedback, making changes, fixing bugs, and working on things in the background that you won't see.
The next step would be what could be considered an alpha or a developer preview. This will be the first time that customers will be able to try out XenForo 2.0 on their own server and work with the code/templates. We do not intend on limiting this to selected developers.
However, you will not be able to upgrade into this version and you are unlikely to be able to upgrade out of it. You will likely also have to do installation using the command line and taking some manual steps. This preview is specifically designed to start getting initial feedback from developers (and stylers) and keen enthusiasts.
Following that, XenForo 2.0 will go through the usual beta process, like any other 1.x release. However, this process may be longer due to the scope of the changes made and to allow us further time complete additional tasks, such as updates to our official add-ons.
When's this going to happen?
Each step of the process is dependent on how the previous one goes. Therefore, it would be very hard for us to suggest when a stable version--or even the beta--version will be released. However, our goal is to begin gathering feedback via the demo installation in autumn...