PS4 CFW and Hacks

Following his recent PS4API Server project, today PlayStation 4 developer @BISOON made available a NetCheat API for PS4 4.05 Firmware similar to the popular NetCheat PS3 tool for game cheats.

Download: netCheatAPI-for-PS4-master.zip / GIT

To quote from BISOON on NGU: Hello again guys

Might most of you have used netCheat for PS3* to search for offsets or anything else, this tool is extremely useful most of the time doing game cheats.

Fortunately, Dnawrkshp made it with the possibility for API extension which loads API/Plugin during runtime this feature will be handy when we want to use the tool with various platforms, so I used this PS4Lib.dll to make netcheat API for PS4, probably will be useful

Installation:

Drop all dlls from here bin/release to [your netCheat folder]/APIs/

I tested on netCheat 4.53, the app open source you can find it on Dnawrkshp's GitHub page, comment below if you encounter any problem...

Credits:

• Dnawrkshp

And from the README.md: netCheatAPI-for-PS4

Installation

Drop all dlls from here bin/release to [your netCheat folder]/APIs/ You need PS4API server payload to use this, you can download it from here PS4API.bin

Note

Netcheat will read 65000 bytes in one request, so in the API.cs I just devided the number of requested bytes by 16384 to make sure the browser will not crash.

Cheers to @HydrogenNGU for the heads-up on this news via Twitter earlier today!

Today PlayStation 4 developer @MagicSeb made available PS4 PKG Integrity Checker 1.00 for PlayStation 4 packages via Twitter alongside some revisions with details below.

Download: PS4PIC.exe (346.50 KB) / PS4PIC.exe (348.50 KB - checks existence of trophy, npbind and nptitle) / PS4PIC.exe (350 KB - adds colors, check integrity even if trophy or other files are missing) / Test_version.zip (6.16 MB - includes required orbis files)

To quote from his Tweets (below) on the PS4 PKG Integrity Checker: This is a GUI made in vb to check multiple pkg in one folder

Copy the file in you Fake pkg folder near orbis-pub-cmd.exe

It checks integrity of the pkg, it will not check missing trophy or other things, may be later.
This one check existence of trophy, npbind and nptitle. If all file are present it wil check integrity. If one file is missing, the app don't check integrity.
Play with colors, added ability to check integrity even if trophy or other files are missing.

RED is BAD.
GREEN is GOOD.

Following the 1.76 PS4 API, PSN API, PS4API Open Sourced and recent PS4API 4.05 Port work today PlayStation 4 developer @BISOON made available a PS4API Server for PS4 4.05 Firmware to handle client R/W game memory requests aiding devs in making RTE/RTM tools.

Download: PS4API.bin / PS4 API Server GIT / PS4Lib-master.zip / PS4Lib GIT (Dynamic link library to create RTMs for PS4)

To quote from his post on NGU: Hello everybody after a while being away for a long time

Recently I got my PS4 (4.05) and thanks for everyone who spent his effort to make this happen on 4.5 and also we will not forget who is working on useful things for this community.

I spent the past two days looking for PS4API to control over the app memory using desktop tools/rtms, and unfortunately I got some but seems not worked with me or not stable enough (I am not underestimating their work, I really respect what they are done) also no new commits or updates on their projects for a long time.

So today I just pushed my PS4API server project into github for contribution, or for testing purposes. The client side not finished yet due the lack of time, so I will create the client lib based on the PS3Lib By iMCSx components (if he doesn't mind) to make it easy for people who already has created PS3 rtm tools and to make it simple for updating PS3 tools to PS4 (only changing the addresses will be enough) and the RPC as well if needed.

As I promised you guys I've finished the client side library in c# to make it easy for people who interested in making RTM tools. also demo app included for demonstration.

A Brief...

PlayStation 4 developer oct0xor (aka @Octopus) made available a PS4 Registry Editor and Viewer for other devs to examine the system.nvs, system.dat, system.idx, system.eap and system.rec.

Download: ps4_registry_editor-master.zip / GIT

This comes following the PS4 EAP Kernel Dumps, and to quote from his Blog page on it: PS4 Registry Editor

Recently I reverse-engineered PS4 registry format and made a simple tool to view and edit it.

Sony likes to encrypt and obfuscate everything. Every time it is very fun to figure it out.

PS4 registry is represented by a few different files and file formats:

• /system_data/settings/system.nvs
• /system_data/settings/system.dat
• /system_data/settings/system.idx
• /user/settings/system.eap
• /system_data/settings/system.rec

The most important are system.dat and system.idx. The file format is simple: system.idx contains info about every entry with offset and system.dat contains entries data.


Entries inside system.eap and system.rec are stored in obfuscated format.


First of all, its XOR’ed with 8 bytes, there are a lot of Null bytes, so it’s easy to figure out them without reversing. But thats not all. RegID’s are encrypted, entries and data are hashed. Besides that, RegID’s for system.eap and system.rec are encrypted with different keys.


Why to obfuscate? Dunno.

Folders with those files should be not easily accessible.

My suggestions:

• To prevent fuzzing of file format
• Implement new crypto and hash algorithms is the most fun thing to do at work
• This data is very sensitive

It becomes even more fun when you find a backdoor that grants access to registry for non-system processes. For it to work RegID’s should be encrypted in another fashion.

[ATTACH type="full" alt="PS4...

Following the PS4 Notifications Mod and his GTA V Native Caller, today PlayStation 4 developer @2much4u detailed some PS4 System Notification Types for 4.05 Firmware via Twitter for devs as outlined below.

Download: PS4_405_System_Notification_Types.txt / PS4 GTA V Native Caller

To quote from the Github page: Message types for sceSysUtilSendSystemNotification functions on PS4 version 4.05

0: -Blank-
1: Unknown USB device connected.
2: Too many USB hubs connected.
3: Connect this device using a USB cable, or connect it again.
4: %s battery level low.
5: %s disconnected.
6: Too many USB devices connected.
7: Cannot connect another Bluetooth device.
8: -Blank-
9: Cannot connect another controller.
10: Cannot connect another mouse or keyboard.
11: Cannot use controller feature of keyboard.
12: Device not supported.
13: Cannot use wireless controllers for PS3.
14: %s connected their companion app.
15: %s disconnected their companion app.
16: %s connected using Remote Play.
17: %s disconnected from Remote Play.
18: %s cannot see the screen due to Remote Play blocked scene.
19: %s can see the screen again because Remote Play blocked scene ended.
20: -Blank-
21: -Blank-
22: Less than %s free in system storage.
23: LAN cable not connected.
24: Wi-Fi network connection lost.
25: Cannot connect to network.
26: %s logged in to PS4.
27: -Blank-
28: Your account is banned from PlayStation Network.
29: PlayStation Network access from this PS4 banned or temporarily suspended.
30: Update the system software.
31: PlayStation Network is currently busy.
32: PlayStation Network is currently undergoing maintenance.
33: PlayStation Network is no longer available.
34: -Blank-
35: Sign in to PSN to use network features.
36: Signed out of PSN.
37: Update application to use network features.
38: Update system software to use network features.
39...