PSXHAX.COM website and domain for sale. Contact Us with your offer!
PS4 ROP 8CC: Return-Oriented Programming Port by Sleirsgoevy for 6.51 WebKit Exploit
We've seen PS3 Browser ROP Exploitation, a PS4 ROP Tool, a PS4 ROP / SPRX / ELF File Archive, PS4 ROP Gadgets, a PS4 ROP Kernel Dumper and following his Blu-Play DOOM I Port PlayStation 4 scene developer sleirsgoevy made available a PS4 ROP 8CC Return-Oriented Programming Port for use with Fire30's PS4 6.XX Webkit Exploit on PS4 OFW 6.51 including OpenOrbis PS4 Toolchain support! 
Download: ps4-rop-8cc-master.zip / GIT
From the README.md, to quote: PS4-ROP-8cc
This is a port of shinh's ELVM branch of 8cc to the PS4 return-oriented programming. It runs C code on OFW 6.51 via Fire30's WebKit exploit.
Building
Simply run make and follow the instructions to setup the toolchain.
Running
A reference script, scripts/run.py, is provided.
Look at its source code if you want more precise control over what's happening.
ABI
ELVM/x64 register mapping:
Download: ps4-rop-8cc-master.zip / GIT
From the README.md, to quote: PS4-ROP-8cc
This is a port of shinh's ELVM branch of 8cc to the PS4 return-oriented programming. It runs C code on OFW 6.51 via Fire30's WebKit exploit.
Building
Simply run make and follow the instructions to setup the toolchain.
Running
A reference script, scripts/run.py, is provided.
Code:
python3 scripts/run.py file1.c [file2.c]...ABI
ELVM/x64 register mapping:
Code:
ELVM x64 notes
A rax
B rcx
C r10
D -- the compiler never uses the D register
SP rdi rsp is used for the...
OpenOrbis PS4 Toolchain Now Available via the Open Orbis Team
Yesterday we saw the release of Mira Project for PS4, and today following his 6.20 WebKit PS4 Exploit developer @SpecterDev released via Twitter the OpenOrbis PS4 Toolchain from the OpenOrbis Team allowing scene devs to build ELF (Executable Linkable Format) files for PS4 without using Sony's official software development kit with guides on his YouTube Channel to encourage more involvement and reignite the PS4 scene!
Download: OpenOrbis PS4 Toolchain v0.5.3 / OpenOrbis-PS4-Toolchain-master.zip / GIT
Shortly following came v0.2 proceeded by v0.3, v0.4, v0.5, v0.5.1 and those who don't have access to a PS4 jailbroken console can try to Find a 5.05 / 5.07 Jailbreakable PS4 Console or wait for a Future...
Download: OpenOrbis PS4 Toolchain v0.5.3 / OpenOrbis-PS4-Toolchain-master.zip / GIT
Shortly following came v0.2 proceeded by v0.3, v0.4, v0.5, v0.5.1 and those who don't have access to a PS4 jailbroken console can try to Find a 5.05 / 5.07 Jailbreakable PS4 Console or wait for a Future...
Mira Project: PlayStation 4 Homebrew Tools by the OpenOrbis Team
Proceeding the Orbis Lib Generator today the OpenOrbis Team released a PS4 homebrew platform known as Mira Project featuring a collection of PlayStation 4 homebrew tools for use with a Jailbroken PS4 Console.
This comes following OpenOrbis Team's Mira Project initial announcement and the Project Mira v1.0 MiraFW developers release.
Download: MiraLoader_Orbis_MIRA_PLATFORM_ORBIS_BSD_672.bin (Latest Compiled Build) / Mira_Orbis_MIRA_PLATFORM_ORBIS_BSD_672.elf (Latest Compiled Build) / MiraLoader_Orbis_MIRA_PLATFORM_ORBIS_BSD_505.bin (Latest Compiled Build) / Mira_Orbis_MIRA_PLATFORM_ORBIS_BSD_505.elf (Latest Compiled Build) / mira-project-master.zip / GIT / Report Issues / Cryptogenic Fork / Mira-5.0X-1590179148.7z (128.02 KB) via _AlAzif / Mira-474.7z (110.99 KB) via _AlAzif / MIRA_5.05-20200718.7z (86.27 KB)
This comes following OpenOrbis Team's Mira Project initial announcement and the Project Mira v1.0 MiraFW developers release.
Download: MiraLoader_Orbis_MIRA_PLATFORM_ORBIS_BSD_672.bin (Latest Compiled Build) / Mira_Orbis_MIRA_PLATFORM_ORBIS_BSD_672.elf (Latest Compiled Build) / MiraLoader_Orbis_MIRA_PLATFORM_ORBIS_BSD_505.bin (Latest Compiled Build) / Mira_Orbis_MIRA_PLATFORM_ORBIS_BSD_505.elf (Latest Compiled Build) / mira-project-master.zip / GIT / Report Issues / Cryptogenic Fork / Mira-5.0X-1590179148.7z (128.02 KB) via _AlAzif / Mira-474.7z (110.99 KB) via _AlAzif / MIRA_5.05-20200718.7z (86.27 KB)
PS4 Backup And Restore (BAR) Keys & Envelope Files Documented
While many are patiently awaiting further details on the PS4 6.20 Kxploit in development, today PlayStation 4 scene developers @RedEyeX32 via @zecoxao shared Cipher and Hasher PS4 Backup And Restore (BAR) Kernel Keys while 3226:2143 (aka IDC) documented containers referred to as Envelope Files used in encrypting and signing messages.
Based on the current findings, they were likely introduced around PS4 Firmware FW 3.00 (>2.56 <=3.50), noting that the messages are encrypted using AES128 in CBC mode and signed using a public key.
Download: BAR-master.zip / GIT / PS4 Env Decryptor
Those interested in learning more about the encryption and public keys can check out the related documentation via PSDevWiki.com.
Backup And Restore Keys (BAR)
*Cipher:
*Hasher:
And from the README.md: BAR
backup and restore decrypt (and encrypt?) utility
Credits
compile it and simply place it near the archives and run it. it'll produce some blobs. support for bigger blobs is in process...
decrypt the backups made with the backup utility
very similar to what Kakaroto has done on ps3 with his tool
...
Based on the current findings, they were likely introduced around PS4 Firmware FW 3.00 (>2.56 <=3.50), noting that the messages are encrypted using AES128 in CBC mode and signed using a public key.
Download: BAR-master.zip / GIT / PS4 Env Decryptor
Those interested in learning more about the encryption and public keys can check out the related documentation via PSDevWiki.com.
Backup And Restore Keys (BAR)
*Cipher:
Code:
79 c8 cc c8 89 a1 54 0d 4f 2e 27 bb 61 4f d6 53
Code:
cd a1 33 a1 0e c8 f5 25 98 22 23 f5 86 1f 02 00backup and restore decrypt (and encrypt?) utility
Credits
- RedEye32 (for the structs)
- Zer0xFF (for some improvement in code)
- PixelButts (for testing)
- idc (for the hasher key correct size)
- and to anonymous (for everything you did and have done in the past)
compile it and simply place it near the archives and run it. it'll produce some blobs. support for bigger blobs is in process...
decrypt the backups made with the backup utility
very similar to what Kakaroto has done on ps3 with his tool
...
PS4HEN v2.1.3 and PS4REN v2.0 PS4 Remote Play Enabler by SiSTR0
Today PlayStation 4 developer SiSTR0 updated both PS4HEN (forked from @XVortex's PS4 Homebrew ENabler Github repo) and PS4REN (Guide) to PS4HEN v2.1.3 and the PS4 Remote Play Enabler to PS4REN v2.0 proceeding the previous updates for those with a jailbroken PS4 5.05 console as we await further PS4 6.20 Kxploit details from theflow0. 
The latest PS4 HEN v2.1.3 includes a PlayStation 4 Remote Play Enabler and PS4 UART Enabler patch (Guide), while the new PS4REN 2.0 is reportedly safer, doesn't use fake PS4 IDU Mode and persists even after resuming from PS4 Rest Mode with the PS button enabled.
Download: ps4-hen-vtx_5.05_v2.1.3_SiSTRo.7z / PS4 HEN VTX GIT (Fork) / ps4ren_5.05_v2.0_SiSTRo.7z / PS4REN GIT / Live Demo via @EdiTzZ /...
The latest PS4 HEN v2.1.3 includes a PlayStation 4 Remote Play Enabler and PS4 UART Enabler patch (Guide), while the new PS4REN 2.0 is reportedly safer, doesn't use fake PS4 IDU Mode and persists even after resuming from PS4 Rest Mode with the PS button enabled.
Download: ps4-hen-vtx_5.05_v2.1.3_SiSTRo.7z / PS4 HEN VTX GIT (Fork) / ps4ren_5.05_v2.0_SiSTRo.7z / PS4REN GIT / Live Demo via @EdiTzZ /...