Live in Your World, HAX in Ours!
Hello World! I've been reporting on Sony PlayStation hacking news since 2000 and started PSXHAX in 2014 to cover PlayStation (PSX), PlayStation 2 (PS2), PlayStation 3 (PS3), PlayStation 4 (PS4), PlayStation Portable (PSP), PlayStation Vita (PS Vita), PlayStation TV (PS TV) and next-gen PlayStation 5 (PS5) platforms along with anything else of interest.
Click on my UserName author link above and you'll be able to view a curated list of all the articles I've contributed thus far to PSXHAX.COM!
Click on my UserName author link above and you'll be able to view a curated list of all the articles I've contributed thus far to PSXHAX.COM!
Sony Reveals PlayStation Experience 2016 Playable Game Lineup
We all saw the PSX 2016 Announcement Trailer and official Developer / Publisher List, and now Sony has revealed the PlayStation Experience 2016 panel lineup complete with over 100 playable games! 
Check out the full PlayStation game listing and event itinerary below courtesy of Sid Shuman:
PS Experience Panel Schedule
Saturday, December 3
10:00am: Horizon Zero Dawn
Join Guerrilla Games for an inside look at the world of Horizon Zero Dawn and the lore and machines that define it.
12:00pm: Kinda Funny: PS I Love You XOXO
Horizon Zero Dawn, GT Sport, and all the latest details coming out of PS Experience — 2017 is looking pretty dang good for PlayStation! Join Greg Miller and Colin Moriarty, plus special guests for a live recording of the internet’s No. 1 PlayStation podcast.
2:00pm: Accessibility: Making Games for All Gamers
Accessibility features help empower all gamers—not just those with disabilities—and we want to set an industry standard of inclusion. We’re bringing together some of the top minds from the accessibility community, PlayStation and Naughty Dog to discuss best practices for game developers and to share powerful stories about the broader impact of accessibility features in games.
PS Experience Game Lineup
Check out the full PlayStation game listing and event itinerary below courtesy of Sid Shuman:
PS Experience Panel Schedule
Saturday, December 3
- 12:00pm: Unannounced Panel
- 1:00pm: Unannounced Panel
- 2:00pm: Unannounced Panel
10:00am: Horizon Zero Dawn
Join Guerrilla Games for an inside look at the world of Horizon Zero Dawn and the lore and machines that define it.
12:00pm: Kinda Funny: PS I Love You XOXO
Horizon Zero Dawn, GT Sport, and all the latest details coming out of PS Experience — 2017 is looking pretty dang good for PlayStation! Join Greg Miller and Colin Moriarty, plus special guests for a live recording of the internet’s No. 1 PlayStation podcast.
2:00pm: Accessibility: Making Games for All Gamers
Accessibility features help empower all gamers—not just those with disabilities—and we want to set an industry standard of inclusion. We’re bringing together some of the top minds from the accessibility community, PlayStation and Naughty Dog to discuss best practices for game developers and to share powerful stories about the broader impact of accessibility features in games.
PS Experience Game Lineup
- 2064: Read Only Memories
- 3on3 Freestyle
- Aaero
- Ace Combat 7
- Batman: Arkham VR
- Bound
- Boundless
- Brawlhalla
- Chasm
- Cosmic Star Heroine
- Cryptark
- Death Tales
- Death’s Gambit
- Destiny: Rise of Iron
- Disc Jam
- Divide
- Drawn to Death
- EarthNight
- Eitr
- EVE Valkyrie
- Everything
- Fallen Legion
- Fantasy Strike
- Farpoint
- Flinthook
- For Honor
- Full Throttle Remastered
- Future Unfolding
- FutureGrind
- Gang Beasts
- Garou: Mark of the Wolves
- GNOG
- Graceful Explosion Machine
- Gravity Rush 2
- GT Sport
- Hatsune Miku: Project DIVA Future Tone
- Heart Forth, Alicia...
PS4 Developer Specter on Pegasus / Trident / Chaitin Tech Exploit
Many may recall the Pegasus Exploits on iOS PDF that was making rounds last week, well... today PlayStation 4 developer @SpecterDev shared his research findings on the Pegasus / Trident exploit in relation to the PS4 Chaitin Tech Exploit. 
You can read the entire article on Specter's Development Blog with a closing excerpt below to quote:
"For 1.76, all of these steps were achieved. For 3.55, essentially all that's been done is step one. Now if the kernel exploit in Pegasus wasn't used in the jailbreak for firmwares > 1.76, what was? We don't know.
It's currently being held private, and Chatin did not disclose the vulnerability to the public, only exclusively to Sony. If one thing is for sure though, it's that the kernel exploit was assuredly burned in 4.06. I am however, unsure if the Pegasus webkit exploit was fixed or used in the jailbreak, however it's more than likely fixed as well."
Here are some related Tweets from SpecterDev and others on Twitter as well:
Thanks to @defense, @kazookid0 and @mcmrc1 for the news in the PSXHAX Shoutbox!
You can read the entire article on Specter's Development Blog with a closing excerpt below to quote:
"For 1.76, all of these steps were achieved. For 3.55, essentially all that's been done is step one. Now if the kernel exploit in Pegasus wasn't used in the jailbreak for firmwares > 1.76, what was? We don't know.
It's currently being held private, and Chatin did not disclose the vulnerability to the public, only exclusively to Sony. If one thing is for sure though, it's that the kernel exploit was assuredly burned in 4.06. I am however, unsure if the Pegasus webkit exploit was fixed or used in the jailbreak, however it's more than likely fixed as well."
Here are some related Tweets from SpecterDev and others on Twitter as well:
Thanks to @defense, @kazookid0 and @mcmrc1 for the news in the PSXHAX Shoutbox!
PS4Link Gets Peek & Poke Added, VitaDump Supports Kernel Dumping!
Over the weekend we covered some PS4Link news, and today PlayStation developer @zecoxao announced on Twitter that Peek and Poke support is now added to the PS4Link GIT alongside PS Vita kernel dumping to St4rk's VitaDump GIT with details below! 
Download: PS4Link VirtualMemQuery Sample via droogie / PS4Link GIT / VitaDump Support Dumping Kernel Modules via d3m3vilurr / VitaDump GIT /
kDump.skprx (74.25 KB) / pcff.7z (6.93 MB) / pcbc.7z (21.85 KB) / workdir.7z (47.25 KB) / vitadump.7z (207.24 KB) / VitaDump GIT (Zecoxao)
He also shared a Precompiled VitaDump kernel plugin tested on taiHENkaku Beta 4 which should dump kernel modules to ux0:/dump and with PS4 developers the NID for sceAppInstUtilAppInstallPkg: bpLyMf0oVwQ in response to @flatz's recent update.
Those who have been in the scene since at least the early PlayStation 3 days will recall Netkas and flukes1 first added Peek and Poke support to the PS3, which was then supported in countless PS3 Custom Firmware releases.
Here are some related Tweets:
NIDs Explained
What are...
Download: PS4Link VirtualMemQuery Sample via droogie / PS4Link GIT / VitaDump Support Dumping Kernel Modules via d3m3vilurr / VitaDump GIT /
kDump.skprx (74.25 KB) / pcff.7z (6.93 MB) / pcbc.7z (21.85 KB) / workdir.7z (47.25 KB) / vitadump.7z (207.24 KB) / VitaDump GIT (Zecoxao)
He also shared a Precompiled VitaDump kernel plugin tested on taiHENkaku Beta 4 which should dump kernel modules to ux0:/dump and with PS4 developers the NID for sceAppInstUtilAppInstallPkg: bpLyMf0oVwQ in response to @flatz's recent update.
Those who have been in the scene since at least the early PlayStation 3 days will recall Netkas and flukes1 first added Peek and Poke support to the PS3, which was then supported in countless PS3 Custom Firmware releases.
Here are some related Tweets:
NIDs Explained
What are...
World's First PS4 Pro Case Mod by Fosi at eXtreme-Modding.de
Recently we saw some PS4 Slim Case Mods, and today Fosi unveiled pictures of the world's first PS4 Pro Case Mod at e✘treme-Modding.de.
Check them out in all their glory below and to quote from e✘treme / Fosi / H1o84, roughly translated:
e✘treme: The world’s first Modded PlayStation 4 Pro is finish. Exclusive for PS4 e✘treme Modding. This Case Mod was made by Fosi, he modded the console for the member H1o84.
Fosi: Have still changed in the last few days. Also a switch is installed to make all the Leds out. Carbon on the edges and a Totenkopf logo on the fan.
e✘treme: Does a temperature indicator fit in the front or is the space too small? Can the plastic on the inside of the upper housing cover behind SONY and PS4 file as with the old PS4? Looks like you have cut out PS4.
Where did you get the silver PS logo, which is in the middle. If I buy a PS4 Pro, I will again make a Case Mod and surpass yours
Fosi: 1) You can also easily surpass this conversion. Is not a customer console mine. Since I am eh not yet gone into the full, but were times from 2017.
2) There is no temp display.
3) The logo is from France.
4) The Sony I did not want to illuminate, as the LW before.
e✘treme: If I did not have another idea for a design, I would also make a similar design. I do not show bad, fits well.
H1o84: I am very pleased with my new pro. Now the jewelry has only to arrive at my home
I'm very anxious to hold them in their hands and connect.
The talks with Fosi by e-mail were always uncomplicated and he has entered into my additional ideas / wishes. Therefore here also a big thank you to Fosi for the work done and the uncomplicated and pleasant communication.
Finally, cheers to our roving reporter @B7U3 C50SS for the news tip in the PSXHAX Shoutbox!
...
Check them out in all their glory below and to quote from e✘treme / Fosi / H1o84, roughly translated:
e✘treme: The world’s first Modded PlayStation 4 Pro is finish. Exclusive for PS4 e✘treme Modding. This Case Mod was made by Fosi, he modded the console for the member H1o84.
Fosi: Have still changed in the last few days. Also a switch is installed to make all the Leds out. Carbon on the edges and a Totenkopf logo on the fan.
e✘treme: Does a temperature indicator fit in the front or is the space too small? Can the plastic on the inside of the upper housing cover behind SONY and PS4 file as with the old PS4? Looks like you have cut out PS4.
Where did you get the silver PS logo, which is in the middle. If I buy a PS4 Pro, I will again make a Case Mod and surpass yours
Fosi: 1) You can also easily surpass this conversion. Is not a customer console mine. Since I am eh not yet gone into the full, but were times from 2017.
2) There is no temp display.
3) The logo is from France.
4) The Sony I did not want to illuminate, as the LW before.
e✘treme: If I did not have another idea for a design, I would also make a similar design. I do not show bad, fits well.
H1o84: I am very pleased with my new pro. Now the jewelry has only to arrive at my home
I'm very anxious to hold them in their hands and connect.
The talks with Fosi by e-mail were always uncomplicated and he has entered into my additional ideas / wishes. Therefore here also a big thank you to Fosi for the work done and the uncomplicated and pleasant communication.
Finally, cheers to our roving reporter @B7U3 C50SS for the news tip in the PSXHAX Shoutbox!
...
PS4 GTA V Hax Demo: Anything on PS3 Now Possible on PlayStation 4
Last week we saw a PS4 API Demo from them, and today PlayStation 4 developers @kurt2467 and @BadChoicesZ are back with some more PS4 GTA V hax with full natives working... meaning any hacks that were possible on PS3 are now possible on Sony's PlayStation 4 console!
Here's the latest Grand Theft Auto V PS4 video demo from kurt2467's YouTube channel with the caption below, to quote: [PS4] Some More GTA V Hax
I finally got all of the natives to work! This means that anything that was possible on PS3, is possible on PS4
PlayStation 4 GTAV Modding C# Code by Kurt2467 (Remote Procedure Calls)
From Pastebin.com: [PS4] GTA V RPC
Here's the latest Grand Theft Auto V PS4 video demo from kurt2467's YouTube channel with the caption below, to quote: [PS4] Some More GTA V Hax
I finally got all of the natives to work! This means that anything that was possible on PS3, is possible on PS4
PlayStation 4 GTAV Modding C# Code by Kurt2467 (Remote Procedure Calls)
From Pastebin.com: [PS4] GTA V RPC
Code:
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using System.Windows.Forms;
namespace PS4_GTA
{
public class RPC
{
private uint nativeArgBase = 0;
private uint hookAddress = 0;
private uint rpcCodeAddress = 0;
private List<uint> nativeFuncList = new List<uint>();
private List<UInt64> nativeHashList = new List<UInt64>();
public RPC()
{
nativeArgBase = 0x2DCD820;
hookAddress = 0xD8F480;
rpcCodeAddress = 0x5046D0;
}
public void InitRPC()
{
WriteU64(nativeArgBase, 0);
byte[] hook = new byte[] {
0x55, //push rbp
0xE8, 0x4A, 0x52, 0x77, 0xFF, //call 0x5046D0
0x5D, //pop rbp
0xC3, //retn
};
byte[] asmx86 = new byte[] {
0x55, //push rbp
0x41, 0x52, //push r10
0x53, //push rbx
0x49, 0xC7, 0xC2, 0x20, 0xD8, 0xDC, 0x02, //mov r10, 0x2DCD820
0x49, 0x8B, 0x1A, //mov rbx, [r10]
0x48, 0x85, 0xDB, //test rbx, rbx
0x74, 0x1A, //jz 0x5046FB
0x48, 0xC7, 0xC7, 0x30, 0xD8, 0xDC, 0x02, //mov rdi, 0x2DCD830
0xFF, 0xD3, //call rbx
0x49, 0xC7, 0xC2, 0x20, 0xD8, 0xDC, 0x02, //mov r10, 0x2DCD820...