PS4 Jailbreaking

Proceeding the pOOBs4 9.00 PS4 Jailbreak Exploit, PS4PiZero / PS4RaspberryPi Project, pOOBs4 Buildroot PS4 9.00 Exploit Web Server / USB Emulation and PS5 Server Pico Project for Raspberry Pi Pico W comes PS4JBEmu which is a PS4 Jailbreak Local Host and USB Emulator for clean Raspberry Pi OS.

Download: PS4JbEmu-2GB.7z (430 MB) / GIT

Here's more details from the README.md: PS4JbEmu

Local PS4 Jailbreak Host with USB emulation

This project is aimed at setting up a local web host, with USB emulation, on select Raspberry Pi boards that can be used to exploit and jailbreak PS4 consoles running firmware version 9.00. Raspberry Pi Zero W / Pi Zero 2 W / Pi4 B are eligible boards as they support a USB on-the-go (OTG) gadget mode and eliminate the need to manually insert and remove the USB stick required in the exploit process.

This project is implemented on a clean Raspberry Pi OS (Debian) install which makes it easier to repurpose the Pi to run additional applications and services on it.

Developed and Tested on Raspberry Pi 4 B but should work on Pi Zero W / Pi Zero 2 W / Pi4 B

Benefits

• Clean Raspberry Pi OS install - easy to setup the Pi for other purposes as you desire
• Easily update exploit, GoldHen and payload files from the web interface
• One device for local web server and USB emulation
• One USB cable is sufficient to power the Pi and emulate USB
• You can leave the Pi permanently connected to the PS4. No need not to remove and plug in a USB stick to run exploit

Setup - Easy Method

1. Write the image provided in the releases to an SD card (using program like Pi Imager or Rufus)...

Following theflow0's Blu-ray Disc Java Sandbox Escape (PS4 BD-JB / PS5 BD-JB) presentation at the HardWear 2022 Conference, developer @sleirsgoevy announced on Twitter that he updated his Github repository with a partial reimplementation of TheFloW's BD-JB (no kernel yet) alongside a bd-jb.iso image among the files below.

Download: bd-jb-master.zip / GIT / bd-jb.iso (8.0 MB) / bd-jb.iso (4.0 MB) / Blaster Bunny BD-J.zip (7.1 MB) / Minimal BD-J (Java) Devkit for PS3.zip (5.9 MB) / PS3 Pong Ready to Go Pack.rar (80 KB) / PS3 Pong Source.rar (54 KB) / snake1_1_fixed2.rar (362 KB) / MEGA Folder

For those new in the PlayStation 4 Scene, this comes following Sleirsgoevy's Blu-Play DOOM I Port, JamVM (Java Virtual Machine) Port...

While confirmed working by hacker theflow0 on PlayStation 4 consoles below 9.50 PS4 Firmware in addition to today's PS5 Hacking 4.51 (and Under), since the pOOBs4 PS4 Jailbreak 9.00 Exploit is already released much of the focus will be on PS4 Firmware 9.03 and PS4 Firmware 9.04 consoles for this latest BD-JB Blu-ray Disc Java Sandbox Escape unveiled at the HardWear.io Conference 2022 (Official Site) that does NOT allow PS4 Game Backups burned on Blu-ray Disc to be ran without a kernel exploit due to JIT capabilities being present... later clarifying, "because we don't have enough RAM in the BD-J process and there are some other constraints. It was only a theoretical impact."

Download: 2022-hardwear-io-bd-jb.pdf (444 KB)

The current system software is 9.60 PS4 Firmware, and according to the Tweets below Andy Nguyen's talk video will be uploaded in a few weeks... until then those in the PS4Scene can check out the latest PlayStation Hacktivity disclosure from...

Following the PS4 IPL AES + HMAC Key Recovery Project, PS4 Aux Hax 1-3, PS4 Aux Hax 4, the PS4 Renesas RL78 Debug Protocol Implementation, PlayStation 5 Root Keys, PS4 CCP Bug on SAMU Key Slots for Save Keys, Adding Custom Songs to Audica PSVR Guide and SteamVR PSVR Tracking with PS4 Camera on PC today Fail0verflow released via Twitter PS4 Aux Hax 5 alongside PlayStation VR (PSVR) Secure Boot Hacking with Extraction of All Key Material!

Below are the full details from Fail0verflow's Blog at Fail0verflow.com, to quote: PS4 Aux Hax 5: Flawed Instructions Get Optimized

Aaaand we’re back, after an extended delay, to … continue talking about hacking PS4 peripherals.

This time, the DUT is the PS4 Virtual Reality peripheral: PSVR. We managed to find some major flaws - breaking secure boot and extracting all key material; let’s go!

Yet another PS4 peripheral?

Digging into the PSVR was initially done in anticipation of the PS5 release after it was announced that PS5 would maintain compatibility with PSVR, thinking it could be a possible initial entrypoint for PS5. While it didn’t wind up being used as such, it was still pretty fun to hack (sound familiar?). And who knows, maybe the attack surface is useful in some way.

PSVR Overview

A PSVR setup includes...

Proceeding his PS4 Server 9.00 / PS4 Server 9.00u for ESP8266 D1 Mini & Pro, PS4Scene developer @stooged shared on the forum an ESP32 Server 9.00u for the PS4 9.00 pOOBs4 Exploit with ESP32 S2 Boards noting the best would be an S2 Mini as they're small and around $5 only.

Download: ESP32-Server-900u-main.zip / GIT

Here's further details from the README.md: ESP32 Server 9.00u

This is a project designed for the ESP32-S2 and ESP32 boards to provide a wifi http server, dns server and *USB storage emulation. It is for the PS4 9.00 OOB Exploit.

If your board is an ESP32 the USB emulation will not be available so you will need to wire a USB drive up to it like this project PS4-Server-900u or you can manually plug and unplug a USB drive for exfathax. This is a wiring diagram for the ESP32 boards.

If your board is an ESP32-S2 you do not need a USB drive with this project as it emulates a USB mass storage device to the console and triggers a filesystem bug to leverage the exploit (exfathax).

These ESP32-S2 boards can be used for a plug and play setup (no wiring):

4MB boards

• ...