PS4 CFW and Hacks

Following his PS4 Act.dat and RIF File Research alongside the PS4 Entrypoint 4.05 fork and recent PS4 4.05 Playground Port, today PlayStation 4 developer IDC updated his Github with some PS4 Experiments for 4.05 Firmware users to test out at their own risk he states.

Download: ps4-experiments-405-master.zip / GIT

According to @DarkElementPL, while there is some interesting code included to activate RIF keys it's commented out possibly for later use as you currently can't build... yet.

To quote from the README.md: PS4 Experiments 405

Code for random experiments. May or may not work. Run at your own risk.

In other PlayStation hacking news today, @Mistawes shared on Twitter some pictures of successfully dumping the PS4 kernel using a hardware modification following Fail0verflow's Documentation and the recent PS4 4.05 Kernel Dumper fix updates.

Thanks to @prreis for the news tip in the PSXHAX Shoutbox this afternoon!

On this New Year's Day 2018 if you're looking for an application to send payloads to either a PS4 1.76 or 4.05 OFW console PlayStation 4 developer @AlFaMoDz of Comunidad-Gamer.com has it covered with his new PS4 PayLoad Sender!

Download: PS4 PayLoad Sender 1.76 4.05.rar (21.3 MB) / Scan Result (Note: Detections are by encryption).

To quote from his release thread on NextGenUpdate.com: PS4 PayLoad Sender

Application developed in C # .NET 4.6.1 to send PayLoads to our PS4 in an easier way and with an interface to facilitate its use.

Pre-Requisites:

1. A Windows computer and .NET Framework 4.6.1.
2. A PS4 in version 1.76 or 4.05.
3. Internet connection (A wired connection is preferred).

Functions:

• Translated to several languages by natives.
• Ability to add in the folders "1.76" and "4.05" PayLoads that you frequently use.
• Custom PayLoads.
• Save the IP to which you connect.
• Selection of PS4 firmware version to change the port automatically and filter compatible PayLoads.

Future improvements in following updates.

• Automatic saving of the selected language.
• ELF Loader Host.

Credits:

• ZeraTron: French translation, help and ideas.
• Tustin: Help.
• BOLIBICK: Help.
• DarkElement: Polish translation.
• Blade187: German translation.

Following the PS4 Kernel Dumper 4.05 release and word that KanadeEngel is working on exploiting a recently discovered PS4 4.73 vulnerability, today after his 4.05 ASLR Patch Correction PlayStation 4 developer @2much4u shared on Twitter a payload for full Debug Settings on 4.05 thanks to @sealab and VVildCard777's research.

Download: fullDebugSettings405.bin (7 KB)

This release comes with a warning from the developer NOT to go into IDU Mode or the PlayStation 4 console can brick (PS4 black screen and no longer works or remains stuck on bootup), so be cautious or skip using this payload if you're inexperienced with such things.

Update: Here is a payload to exit PS4 IDU Mode if anyone needs it:

• i-PUsh-bUTtons-I-SHoUldT.bin (7.9 KB)

Exits IDU Mode
Should "turn off" when it's done, just hold the power button after the screen turns off. When you turn it back on you should be out of IDU mode
...

Happy New Year everyone! Since the PS4 Kernel Exploit 4.05 and recent PS4 4.05 Kernel Dump today PlayStation 4 developer VVildCard777 released a PS4 4.05 Kernel Dumper which includes full debug settings / TID patches + UART that can be used in other payloads.

Download: 405-KernelDumper-master.zip / 405-KernelDumper-master.bin (5 KB - Compiled by @ohcHIT) / GIT / 4.55 Kernel Dumper

From the README.md, to quote: 4.05 kernel dumper POC with debug settings/TID patch/Jailbreak/Uart enabler etc

Compile with your PC's IP listening on port 9023

On PC you can do to listen:
and to send:
you can then trim out the socket prints or you can adapt it with 2 sockets, one for dumping, another for logging.

PS4 4.05 ACTIVATE DEBUG_SETTINGS TUTORIAL
Cheers to @boob4me, @DoxyMarket and @raedoob for the news tips in the PSXHAX Shoutbox this New Year's Eve!

Last month we saw the release of a Windows PC application called OrbisTitleMetadataDatabase by PlayStation 4 developer @RedEyeX32, and today he announced on Twitter he's added the PS4 Orbis Title Metadata Database source code to Github for developers.

Like Santa flying off into the night bidding everyone farewell, Red-EyeX32 also let sceners know, to quote: "This is probably going to be my last release ever."

Download: Github Source Code

Also today PlayStation 4 developer @zecoxao shared some PS4 4.05 filesystem usermodules patch offsets (below) on Twitter, while IDC offered some corrections as well.

To quote from the README.md file: OrbisTitleMetadataDatabase

Copyright (c) 2017 Red-EyeX32

This software is provided 'as-is', without any express or implied warranty. In no event will the authors be held liable for any damages arising from the use of this software.

Permission is granted to anyone to use this software for any purpose, including commercial applications*, and to alter it and redistribute it freely, subject to the following restrictions:

1. The origin of this software must not be misrepresented; you must not claim that you wrote the original software. If you use this software in a product, an acknowledge in the product documentation is required.
   
2. Altered source versions must be plainly marked as such, and must not be misrepresented as being the original software.
   
3. This notice may not be removed or altered from any source distribution.

Contact must be made to discuss permission and terms.

4.05 offsets to decrypt SOME usermodules, patch the following entries: