PS4 CFW and Hacks

Following his previous homebrew releases, PlayStation 4 developer @DEFAULTDNB made available X-Project PS4 5.05 Exploit Self Host 2.0 via Twitter which he states aims to be an AIO (All-In-One) customizable tool box for PS4 payloads.

Download: X-PROJECT_V1.4.1.zip (160.68 MB - MD5: EB822136AC48F51CD4FC588A3BCD480A and Changelog) / Live Demo via @CYB3R18 / Live Demo (Mirror) via @gnmmarechal / Live Demo (Mirror) via 3498BoyZ / offlinexmb.cache fix via @Leeful / xmbwave.rename.to.style.css (15.27 MB - XMB WAVE CSS by w!ck3dcl0wn)

Spoiler: Depreciated

Earlier this month we saw a PS4Updates Python script, and recently PlayStation 4 developer @OctopusRift aka GarnetSunset (Twitter) made available a PlayStation Store DLC Index script tool called psDLCIndex which can be used to scrape / download PS4 PKG downloadable content.

Download: psDLCIndex-master.zip / GIT / How to Change CUSA of DLC to Match CUSA of Game Guide / 0-byte PSN DLC Downloader by Etheldreda-MU / psDLC.zip / psDLC (c# version) by stooged / fake_dlc_pkg.rar (0.3 MB) / Playstation Store DLC Indexer.rar (3.69 MB) by pearlxcore / cindexTutorial.rar (1.23 MB) by ohcHIT / psDLCIndex EZ_Lib_Orbis_MOD GIT Fork via @DeniZz

From Al Azif, to quote: "THESE TOOLS WILL NOT WORK WITH MOST DLC. The DLC must be an unlockable type with no extra data required and may require a specific game update version. There is...

Many may remember PlayStation 4 developer maxton releasing GameArchives ArchiveExplorer (latest version HERE) with PS4 PFS support followed by MakePFS to build PS4 PlayStation File System images, well today he's committed a new project to Github called LibOrbisPkg which aims to be a library for PS4 PKGs!

Download: LibOrbisPkg-master.zip / GIT / AppVeyor (Latest Builds)

According to the changelog, the latest revision includes a fix for GP4 reading/writing that no longer uses field layouts for PKG structs... and from the README.md to quote: LibOrbisPkg

I am developing an open source library for reading and writing PS4 PKG files. This project's goal is to eliminate the need to use proprietary *** tools. Without a proper open PKG tool, the PS4 homebrew scene cannot flourish.

All code in this repository is licensed under the GNU LGPL version 3, which can be found in LICENSE.txt.

Usage


PkgEditor

PkgEditor is a GUI tool with which you can edit GP4 projects, and build PKG and PFS archives. Click File -> Open GP4..., then click Build PKG to create a PKG.

PkgTool
Verbs:
TODO

• Reverse encryption and signatures
• Implement PFS encryption and PKG signing

Thanks

Everyone who helped, either directly or indirectly, but especially the following:

• flatz

If any PS4 developers wish to lend a hand feel free to assist in the...

Posting this at ps4miner's request: This is a patched version of official PS4 Media Player 3.50 (VR supported) so it can play music and video on non PSN-activated console.

Will work only on 5.05/5.07 FW because it includes a kexec part with hardcoded offsets (sorry <5.05 guys, my bad).

Running on other than supported FW will make console to reboot.

Also do not forget to turn On MPEG-2 switch at "Debug Setting -> License Activation". Player is checking for it.

It's not the best variant of fixing this app, but it works for now (as a temporary solution).

Basically patch does two things:

1. It escalates privileges for the mplayer's process, so it can freely access the stuff it wants.
   • *sonyCred = 0xffffffffffffffff; // sceSblACMgrIsSystemUcred
   • *sceProcType = 0x3801000000000013; // sceSblACMgrGetDeviceAccessType
   • I'm not sure if both patches are necessary. Probably second one is enough, too lazy to check.
2. It patches SceMusicCoreServer process in memory.
   • Function at SceMusicCoreServer+0x3640 will now always <return 0>.

5.07 FW is unchecked but it almost certainly working (at least video should).

Credits: jkpatch and ps4-hen-vtx

It looks like official packages somehow got more privileges than fpkgs so some applications are failing to work properly.
Probably a whitelist (which is coming from PSN on activation) or fpkgs lack of some sort of marker. More research is needed.

I wanted only this particular application to work, now my work is done. I hope you enjoy it

Filename: IP9100-CUSA02012_00-PS4MEDIAPLAYER00-A0100-V0350.pkg
MD5: D46A7932ACCD603C416D034440A3A8E8
SHA1: 7B437FEEB2414269A571CD1D28ECC9A6EE85BFC6

Link:

Spoiler

By ps4miner, who previously reported on the application cache used in PS4 Exploit Host for 5.05 HEN Payloads Offline without ESP8266 devices.

PS4 5.05/ MEDIA Player V0350/ (Music, Videos...

Following his GTA 5 Mod Menu Base and EROOTIIK's AP II Intense v2 GTA V PS4 Mod Menu recent update, PlayStation 4 developer @CMTFrosty (aka CMTFrostyy and Azora_Raise on Twitter) made available an LTS (LastTeamStanding) Menu Base and GTA V 1.27 PS4 Native Caller design payload for jailbroken 5.05 consoles alongside a video demo from his YouTube Channel below.

Download: LTS-MenuBase-PS4-master.zip / gtaPayload.bin / GIT / GTA127_PS4505-Native_Caller-master.zip / gtaPayload.bin / LTS-Base-GTA_127-PS4_505.bin / GIT / LTS_PS4_1.00_By-CMTFrosty.bin (1.01 MB)

Previously we saw a GTA V 4.05 Native Caller and a GTA V Native Caller / Menu Base 4.55 Update by @2much4u, and from the README.md: PS4 GTA V Native Caller

A simple example of calling natives on PS4 GTA V using Vortex's adaptation of CTurt's PS4 ***.

Credits:

2Much4u and EROOTIK...