PS4 Jailbreaking

My PlayStation 4 5.05 playground, a kinda fork/variant of KiiWii's (BIG thanks him!) with some considerable changes.

The ESP version is @stooged firmware, with some, tweaks, changes here and there. This is the ADMIN version type firmware which allows to EASILY connect to your ESP with just about ANY device with a browser and you can upload your self host files to it, delete, download, change log in credentials, server ip, even update the firmware... all right from the device's browser! + more.

Technically you may never have to connect your ESP to a pc again, everything can be done even right from your phone.

Any updates will happen on my Github first:

• https://github.com/KMZoilus

Downloads:

• Self Hosting version

For ESP8266 boards:

Download "COMPLETE" bin which contains new firmware + my playground:

• PS4_KMZ_ESP8266_v2.2_Complete.bin

or

Download "Firmware Only" bin which contains just the new firmware (add your own self host files):

• PS4_KMZ_ESP8266_v2.2_firmware_only.bin

Self hosting version:
View attachment 4113
ESP8266 Arduino mini board version:
View attachment 4114
View attachment 4115
View attachment 4116
Noobs guide for self hosting files on PC or Phone. The phone is Android but you can use ANY web/http server app you want, i show an example of the one i use.

This is an update to my Android app to host the PS4 5.0X exploit and payloads.

This initial release just contains the 3 main payloads.

To use it you have to setup a wifi hotspot with your phone/tablet and connect the PS4 to that hotspot or connect the phone/tablet to the same network the PS4 is on.

Then install the app and open it and at the top will be the address you need to connect to with the PS4.

Your device might ask you about installing an application from "unknown sources" this is ok to allow, it just means its not coming from Google Play.

You just select the payload you want to run in the app and then use the PS4 to goto the address that you see in the app.

To change the payload just select it in the app and then use the ps4 to revisit/refresh the address again.

you can add more payloads to the app you just plug your phone into your computer and copy any payload BIN file you like into the PS4_50X_Payloads directory.

you will get one "There is not enough free system memory" because that's how this exploit works, just click ok and the page should reload and load the selected payload.

Download:

ps4_serve3_v2_3.zip / GIT

Spoiler: Depreciated

Following his 5.05 PS4 Jailbreak announcement and the release of Project Mira v1.0, PlayStation 4 developer @SpecterDev made available on Twitter a roadmap for the PS4 Homebrew Toolchain alongside a js_shellcode.py Python script to convert payloads to shellcode and of course the 5.05 kernel exploit stack release itself, which as he states "includes the kexploit that autolaunches homebrew patches and Mira. On subsequent page loads it listens for payloads."

Download: PS4-5.05-Kernel-Exploit-master.zip / GIT / Live Demo / Live Demo (Mirror) / 505-KernelDumper-master.zip / GIT / PS4 Kernel Dumper (AIO) / PS4-Kernel-Dumper.bin / GIT by eversion

PlayStation 4 developer qwertyoruiop also shared a Live Demo (linked above) of the PS4 5.05 kernel exploit BPF setf double free implementation including Mira + XVortexHEN and VVildCard777 made available a PS4 5.05 Kernel Dumper which can also be found linked above.

Several members have reported that the PS4 5.05 Kernel Exploit also works on 5.07 OFW including edrix2004 and...

Following the PS4 ESP8266 Tutorial I'm sharing my custom ESPHost PS4Xploit payloads for PS4 ESP8266 devices on Github as announced on Twitter.

Download: ROSE-PS4XPLOIT_v1.bin / CUPS-PS4XPLOIT_v2.bin / BLACKHAT-50x_CUPS.bin / BLACKHAT-50x_CUPS-V31.bin / BLACKHAT-50x_CUPS-V32.bin / BLACKHAT-50x_CUPS-V33.bin / BLACKHAT-50x_CUPS-V33-1.bin / BLACKHAT-50x_CUPS-V33-1.bin / BLACKHAT-50x_CUPS-V40.bin / BLACKHAT-50x_CUPS-V41.bin / esp8266flashdumper.rar / Latest Release / GIT

Changelog:

ESPHOST PAYLOAD .BIN
++++ MAKE INDONESIAN GREAT AGAIN ++++

UPDATE ROSEGOLD VERSION V.1.2

• ADD MIRA CFW
• LAYOUT UPDATE
• REMOVE WIFI PASSWORD

RELEASE CUPS-PS4XPLOIT VERSION 2.0

• ALL PAYLOAD on cupecups.github.io/hen ADDED!!
• ADD MIRA CFW
• REMOVE WIFI PASSWORD

UPDATE BLACKHAT-50x_CUPS V.3.0

• ADD MIRA CFW HEN FOR 5.0x
• FTP
• DUMPER

UPDATE BLACKHAT-50x_CUPS V.3.1 FOR 5.0x ONLY

• FIXED PAYLOAD CANNOT LAUNCH
• STABLE IMPROVEMENT
• ADD MIRA CFW HEN FOR 5.0x
• FTP
• DUMPER

UPDATE BLACKHAT-50x_CUPS V.3.2 FOR...

Following the GTA V Mods Demo on Jailbroken PS4 5.05 OFW from his 0x41con presentation, PlayStation 4 developer qwertyoruiop has now made available a PDF slideshow outlining his speech titled Hacking the PS4: From Zero to Ring Zero in Two Easy Steps for other PS4 scene devs to examine and learn from!

Download: 02r0.pdf (620 KB)

Below are some related Tweets, and thanks to Scofield0 for the heads-up on this earlier today!