kizabg

Proceeding the PS4 PKG Info on PlayStation 4 Packages and Keys by the legendary maxton (R.I.P.), today PS4Scene developer @flatz announced on Twitter the release of an ongoing PKG_PFS_Tool project spanning several years that unpacks PS4 PKGs / PFS / Save Games and can generate GP4 files for building PKGs including all keys provided you have the correct key sets!

Download: pkg_pfs_tool-main.zip / GIT / pkg_pfs_tool (0.61 MB - Precompiled) / Mirror via _nyannoying / ppt182.7z (195.69 KB - Windows Binary - pkg_pfs_tool.exe) via @dankmoor / pkg_pfs_tool_win64.rar (0.36 MB - Win64, includes pkg_pfs_tool.exe and zlib1.dll) / pkg_pfs_tool.rar (227 KB - Windows Binary - pkg_pfs_tool.exe) via @jocover on Twitter / pkg_pfs_tool_msys2.rar (1.29 MB - Compiled for Windows, includes pkg_pfs_tool.exe, msys-z.dll, msys-2.0.dll and msys-gcc_s-seh-1.dll) / pkg_pfs_tool_macos_x86_64.zip (0.17 MB - Compiled for MacOS, includes pkg_pfs_tool and config.ini)

Below is a brief recap of some related articles for those new to the PlayStation 4...

Just over a month ago Sony released a PS4 OFW 6.71 Update followed by a few 6.80 Beta Updates for those in their PlayStation Preview Program, and today another PS4 System Software / Firmware 6.72 update went live with the changelog stating only "This system software update improves system performance."

As always DON'T UPDATE if you wish to use PS4 game backups and homebrew apps when a new jailbreak exploit arrives, and we'll add any related Tweets below as PlayStation 4 scene developers have a chance to examine it.

Download: PS4 Firmware 6.72 Update (US) / PS4 Firmware 6.72 Update (EU) / PS4 Firmware 6.72 Update (UK) / PS4 Firmware 6.72 Update (AU/NZ) / PS4 Firmware 6.72 Update (JP) / 672.zip (203 MB - 6.72 system modules. md0 system, system_ex and ShellCore) / kernel_dump_fw_672.rar (13.99 MB)

About PlayStation 4 system software version 6.72

Main features in version 6.72 update

• This system software update improves system performance.

Here are some guides for those new on How to Block PS4 Firmware Updates...

Following Parts 1 through 3 of their PS4 Aux Hax covering hacking Aeolia, Syscon and DS4 today PlayStation 4 hackers fail0verflow shared documentation on PS4 Aux Hax 4 which uses HDMI (High-Definition Multimedia Interface) CEC (Consumer Electronics Control) to get code exec on all PS4 Belize southbridge versions (including PS4 Pro, etc) without requiring other parts of the system to be pwned!

According to Wikipedia, CEC is a feature of HDMI designed to allow users to command and control devices connected through HDMI by using only one remote control... and the bug is in the HDMI CEC code with the path reachable when HDMI-CEC is enabled and active.

Be sure to check out the full PS4 Aux Hax 4: Belize via CEC documentation on their latest Blog Entry alongside the PS4 Southbridge Reverse-Engineered Code Examination, and to quote in part:

"So, the overall process is like:

1. Tap onto CEC-related i2c and irq lines and HDMI encoder power switch
2. Power up PS4 and enter Rest Mode
3. Wait for “EAP running” message from custom EAP kernel
4. Induce the CEC RX interrupt
5. Feed data to EMC such that it causes a stack buffer overflow
6. Wait for EMC to copy SRAM to DDR3
7. Dump copied SRAM out of UART

Of course, this is really EMC code exec, so the dumping is just something to do after the fact

This post outlines a way to dump EMC firmware and gain EMC code exec on any hardware revision. While the real root keys (in fuses and ROM) of EMC versions besides the first are still unknown, they could yet be recovered with side channel attacks, if someone really wanted them. Since this method is comparatively much more simple and more generic, it stands on its own as an interesting exploit.

As was...

Proceeding his recent PS4 Debug Trophies ShellCore Patch, PlayStation 4 developer @flatz (Twitter) made available both an (f)SELF loader via server fPKG application and a PS4 Stub Library Maker (using OrbisLibGen generate stub files) on Github alongside a Windows compiled PKG version below by @zecoxao on Twitter to try fSELFs without installing the full Package file saving scene devs time testing changes.

Download: payload_ldr_with_POWER.pkg (7.88 MB - Compiled by notzecoxao) / payload_ldr_with_POWER_v2.pkg (7.88 MB - V2) / payload_ldr_v3.pkg (Payload LDR V3) / 505dev.tar.gz (587.59 KB) / 505dev.tar.gz (586.52 KB - Updated) / ps4-hen-vtx-master.tar.gz (80.78 KB - Adds Usermode Printf to Klog in HEN) / ps4_stub_lib_maker-master.zip / GIT / ps4_payload_ldr-master.zip / GIT

Also below is a brief demo video by Lil Xo of the PS4 Payload Loader launching before receiving a CE-34224-5 'Cannot start the application' error followed by a fixed version, and a screenshot of the ZLibTest.pkg being loaded ready to use.

From the...