PSXHAX

Since his previous release and the update, today PlayStation 4 developer @Mistawes made available via Twitter FTPS4 with ELF decrypting and integrated PS4API a.k.a FTPS4API 4.55.

Download: FTPS4-4.55.zip / FTPS4 (Latest) / GIT / ftps4-jkpatch-payload.bin

Also below are some recent Tweets making their rounds on the Twitter circuit earlier, and from the README.md: FTPS4

FTP server for PS4 with root access, UART, full debug settings - credits: WildCard, Specter, IDC, Shadow, Xerpi.


Finally, from zecoxao comes a brief guide on How to Validate Your ELFs Decrypted Using MMAP Trick

To quote: Special Thanks to Anonymous for helping me with this, and to softstar for providing the ELFs.

You'll need:

• An FTP Payload with CUSTOM DECRYPT command (you can compile it from scene-collective github repo)
• A target file (I've chosen 5.05's SceShellCore for this) in both encrypted and decrypted state.
• Filezilla
• Hashing tool (I use WSL with sha256sum tool)

Step 1: Send FTP Payload
Step 2: Grab the encrypted SceShellCore (at /system/vsh/)
Step 3: Use custom DECRYPT command (in filezilla, this can be found in Server->Indicate personalized...

Following the PS4 CoD: AW Mod, PS3 SPRX / EBOOT Game Mods and recent PS4API update today PlayStation 4 developer SwaqqDev shared PS4PRX details on creating and loading PS4 SPRX modules including a prx_writeup.pdf and PS4Prx.exe PS4 SPRX Loader utility.

Download: prx.zip (430.05 KB) / PS4Prx.exe (23.5 KB - Fixed PS4 SPRX Loader) / PRX_505 via Backporter (Kernel_Panic___ on Twitter)

To quote from Swaqq on the details: PS4 SPRX (Creating/Loading)

Hello Everyone! Today I'll be showing you guys how PRX module loading works on PS4 and how to create them!

First things first I wanted to make some notes about this topic.

As you may know if your from the PS3 scene, the SPRX compiler is absolute garbage. This is no longer an issue anymore, as everything I've tested has worked just fine!

I also wanted to mention some of the issues Sabotage and I ran into while working on this project. When I first started this project, I just built an SPRX and loaded it into WebKit and it worked just fine. The next challenge was getting it to load in-game.

My first thought was to use 2much4u's method of loading a payload into the game, which we did and executed the SPRX through his payload. Then we realized it wasn't working because the path didn't exist. The game couldn't find the path because we were stuck in the sandbox... So we broke out of it.

Finally! We had it working! But then we realized... this is a lot of extra work, so Sabotage ported the jailbreak into ASM aswell as the rest of the code which loaded the SPRX, and we loaded it like that. The next problem we ran into was that the game kept crashing randomly.

Eventually...

I remember playing the original Tempest game back in 1981 in Chuck E. Cheese before they turned on all the lights in the game room and changed their menu to include lousy tasting pizza... anyhoo, it looks like Tempest 4000 is the latest iteration of the arcade classic and is heading to PlayStation 4 next week!

Here's a summary of what else is coming to PlayStation Network courtesy of Sony Social Media Senior Specialist Ryan Clements, as follows:

New Releases: Week of March 27, 2018

• Atari Flashback Classics Vol. 3 - PS4 — Digital (Out 3/29)
• Atelier Lydie & Suelle: The Alchemists and the Mysterious Paintings - PS4 — Digital, Retail
• bit Dungeon + - PS4, PS Vita — Digital
• Bridge Constructor Stunts - PS4 — Digital
• Code: Realize Bouquet of Rainbows - PS4 — Digital, Retail (Out 3/30)
• Code: Realize Future Blessings - PS Vita — Digital (Out 3/30)
• Far Cry 5 - PS4 — Digital, Retail
• MLB The Show 18 - PS4 — Digital
• MX vs. ATV: All Out - PS4 — Digital, Retail
• Preta: Vendetta Rising - PS VR — Digital (Out 3/29)
• Reverie - PS Vita — Digital (Out 3/29)
• RollerCoaster Tycoon: Joyride - PS4 — Digital (Out 3/28)
• Tempest 4000 - PS4 — Digital (Out 3/28)
• The Witch and the Hundred Knight 2 - PS4 — Digital, Retail

PlayStation Music

• Lorne Balfe - Pacific Rim Uprising (Original Motion Picture Soundtrack)
• Led Zeppelin - How the West Was Won (Live) [Remastered]
• Various Artists - Isle Of Dogs (Original Soundtrack)
• Jack White - Boarding House Reach

PlayStation Video

• Proud Mary
• DCU: Suicide Squad Hell to Pay

PlayStation Vue

• Billions - Don’t miss the series premiere of Billions, Sunday, March 25, 2018 at 10pm ET/PT on SHOWTIME
• Barry & Silicon Valley - Silicon Valley, March 25 at 10p/9c and Barry March 25 10:30p/9:30c on HBO

The Pied Piper crew is back and getting reckless as they return for a new season of the hit comedy series, Silicon Valley, on Sunday, March 25 at 10p/9c on HBO. And at 10:30p/9:30c, don’t miss the all-new dark comedy series, Barry, starring Bill Hader as a low-rent hitman from the Midwest who falls in love with acting while on a job in LA.

The information above is subject to change without notice.

Following his PS4 Serial / Flash Pinouts, PlayStation 4 scene developer @xorloser announced on Twitter that he's added PS4 Wifi / Bluetooth Firmware reversing h4x v1.0 to Github with details and the related Tweets below.

Download: ps4_wifi_bt-master.zip / GIT / 19-Researching-Marvell-Avastar-Wi-Fi.pdf (1.64 MB)

To quote from the README.md: PS4 wifi/bluetooth firmware reversing h4x

v1.0 xorloser march 2018

Overview

The PS4 uses a hardware module codenamed torus for its wifi and bluetooth. Currently there are two different versions of this; the older torus1 and the newer torus2.

The torus firmwares are stored in plaintext on the PS4's flash. The PS4 loads them into the hardware module.

This is not going to lead to some magical hack of the PS4, its just fun to poke around inside it to see what it does.

Torus1

The older torus1 is based around the Marvell Avastar 88W8797 SoC. It supports up to wifi n. This SoC has a Marvell Feroceon CPU (ARMv5TE-compliant) inside it. Check this pdf for more specs: marvell_avastar_88w8797.pdf.

Torus2
The newer torus2 is based around the Marvell Avastar 88W8897 SoC. This updated SoC adds wifi ac. It is used in PS4 Pro consoles and probably PS4 slim since I see that PS4 Slim supports wifi ac. Check this pdf for more specs: marvell-wireless-88w8897-product-brief-2018-10.pdf

Apparently this SoC also inside the XboxOne

Firmware files

The torus firmware files are stored in plaintext in the PS4 flash. You can parse the flash partitions and filesystems to find it stored as the filename "C0020001". Or if you have a flashdump just search for the string "C0020001" in it. The size of the firmware is a 32bit value stored 0xC bytes before the "C0020001" filename. The firmware data will be stored 0x1D0 bytes after the "C0020001" filename.

The...

Since his previous update, today PlayStation 4 developer @MODDEDWARFARE released PS4 AIO v1.6.0 with 4.55 Firmware Support in both an Installer and Portable version on his new Twitter account!

Download: PS4-AIO-Setup 1.6.0.exe (43.1 MB) / PS4-AIO Portable 1.6.0.zip (42.7 MB)

Also below is a new video from his YouTube Channel showing multiple methods of hosting the PlayStation 4 4.55 exploit locally for those following along.

How to Host the 4.55/4.05 Exploit Locally
PS4 SPRX PoC