PSXHAX.COM website and domain for sale. Contact Us with your offer!
PS4 Toolchain Homebrew Payload Loader by SpecterDev Demo & More!
Following his PS4 6.20 Userland Exploit PoC and the recent OpenOrbis DevKit PS4 Library Ports PlayStation 4 scene developer @SpecterDev announced today via Twitter that the homebrew PS4 Toolchain currently supports audio / video output, freetype and full libc without using any $ony materials complete with a demonstration video below! :fire:

Also below, since sharing his PS4 Kernel Bug Findings scene developer theflow0 (who has a PayPal and Patreon page set up) is currently seeking a 6.20FW PS4 if someone is willing to donate one towards his continued PlayStation 4 research and development. :lovewins:

:alert: He notes the following, to quote: "Also don't update past FW 6.20 if you want a kxploit."

Next up, proceeding his Lapy Games Collection PS4 PKG homebrew game developer @Lapy shared a work-in-progress image on Twitter of his latest River Raid PKG project. (y)

Finally, BGR.com reports that despite the Coronavirus (COVID-19) outbreak PlayStation 5 won't be delayed according to AMD Executive Vice President of Computing and Graphics Rick Bergman at AMD's Financial Analyst Day presentation.

As seen in the slide below, the next-generation PS5 (and XBox Series X) are still on track for a...
PS4 Renesas RL78 Debug Protocol Implementation by Fail0verflow
Following the PS4 SysCon Renesas Chip Image and updates by droogie, PS4 Glitch Pinout research via @juansbeck (Twitter) and their PS4 Aux Hax Parts 1-4 today fail0verflow shared with PlayStation 4 scene developers their implementation of Renesas debug protocols for RL78 (and perhaps other architectures) as requested in their blog comments and committed by ps4_enthusiast on the Github repository. 🤓

Download: rl78.py / GIT / rl78.zip / GIT (Renesas RL78 Processor Module / PS4 Syscon Firmware Loader for Ghidra)
Code:
from pyftdi.gpio import GpioController
import serial
import time, struct, binascii, code, os

def delay(amount):
    now = start = time.perf_counter()
    while True:
        now = time.perf_counter()
        if now - start >= amount:
            return

# for C232HM-DDHSL-0 cable
WIRE_ORANGE = 1 << 0
WIRE_YELLOW = 1 << 1
WIRE_GREEN = 1 << 2
WIRE_BROWN = 1 << 3
WIRE_GRAY = 1 << 4
WIRE_PURPLE = 1 << 5
WIRE_WHITE = 1 << 6
WIRE_BLUE = 1 << 7

class Reset:
    def __init__(s, url):
        # init gpio mode with gray (conncted to RESET) and green (TOOL0) as outputs
        s.gpio = GpioController()
        s.gpio.open_from_url(url, direction = WIRE_GRAY | WIRE_GREEN)

    def enter_rom(s):
        s.gpio.set_direction(WIRE_GRAY | WIRE_GREEN)
        # RESET=0, TOOL0=0
        s.gpio.write_port(0)
        delay(.04)
        # RESET=1, TOOL0=0
        s.gpio.write_port(WIRE_GRAY)
        delay(.001)
        # RESET=1, TOOL0=1...
PS4HEN v2.1.2 & JKPatch 5.03 Ports for Updating to 5.05 PS4 Firmware
Proceeding the PS4 NoBD 4.74 to 5.05 Method, PS4HEN v2.1.2 and PS-Phwoar! Host Menu v1.2 updates enabling Backported Games to work without spoofing the Target ID to Devkit PlayStation 4 scene developer @Al Azif announced on Twitter that following the recent PS4 5.03 Offsets he updated his Github repository with PS4 OFW 5.03 Port forks of JKPatch and PS4HEN v2.1.2 which will allow those stuck on PS4 System Software 5.03 to update to a Jailbroken PS4 5.05 console once the upgrader work is done. 🥰

Download: ps4-hen-vtx-master.zip / PS4 HEN VTX GIT / jkpatch-master.zip / JKPatch GIT

From the JKPatch README.md: Jailbreak Kernel Patches

Features

  • Jailbreak
  • Sandbox escape
  • Enable UART
  • RPC server
  • RPC client in C#
I use the standard fake pkg keys, created by flatz.

General Notes

:alert: Only for 5.03 Jailbroken PlayStation 4 consoles!

The main jkpatch payload utilizes a port of CTurt's payload ***. Change the Makefile to have LIBPS4...
PS4 Webkit Bad_Hoist Exploit for PlayStation 4 Firmware 6.XX by Fire30
Proceeding his PS4 6.20 Build Strings, PS4 7.00 Kernel String and Oct0xor's PS4 Blu-ray Drive Vulnerabilities that were patched in 7.02 on this New Year's Eve 2020 scene dev Fire30 (aka Fire30_ on Twitter) released a PS4 Webkit exploit for 6.XX consoles that gains addrof/fakeobj with arbitrary read/write primitives... according to the developer it was fixed in 7.00 leaving a potential window of opportunity between 5.50 and 6.72 OFW to work from. 🍾 🥳

Other PlayStation 4 scene contributions from him include a PS4 Webkit Exploit PoC for Firmware 2.XX, PS4 HENkaku Exploit: 3.55 Code Execution, HENkaku PS4 Exploit Update for 3.15 / 3.50 Firmware and this bad_hoist exploit comes following the previously released PS4 5.50 WebKit (Userland) Exploit Rewrite, PS4 6.XX JSC_ConcatMemcpy WebKit Exploit POC and PS4 6.20 WebKit Code Execution Exploit PoC for those following along. 👯‍♂️🎉👯‍♀️

Download...
Back
Top