PS4 Jailbreaking

Process Memory View is a cool little memory tool! Do not press backspace in the Hex View, it will delete a byte so when you poke it messes it all up.. idrc to fix it. If anyone wants it, I can make a much much better tool later.

Edit the ip file and change it to your PlayStation's ip address, make sure you have jkpatch loaded first. If your console goes into rest mode, then doing anything with RPC may crash it.

Download: memview-r4.zip (45.57 KB)

Look at the release page for payload.bin and kpayload.bin!

Use the send.sh bash script to easily send it to the console!

To be honest, this is not about the Memory View tool... This is about jkpatch! A little project I have been working on. I want the community to help me develop this, so please send some pull requests or open an issue!

The RPC networking is light speed! On LAN there is basically no latency.

Please help commit to my project!

https://github.com/xemio/jkpatch

And from the README.md: Jailbreak Kernel Patches

Spoiler

Following the PS4 Rest Mode REcon Demo and Slideshow PDF of Volodymyr Pikhur's presentation comes some PS4 EAP Kernels from 1.01, 1.76 and 4.05 OFW via notzecoxao for developers alongside a Standalone RPi installer for PS4 Exploit Host (no router, no switch) by @Al Azif who's currently working on improving it further with wifi and by eliminating the PS4 to change settings.

Download: eap_kernel_101.bin / eap_kernel_176.bin / EAP Kernels.zip (8.31 MB - Mirror) / EAP Kernels.zip (Mirror #2) / RPi Installer for 4.55 / PiXploitHost GIT / PS4-EAP-KEY-DUMPER-672.bin (6.6 KB)

Below are some related Tweets including a PS2Reality MediaPlayer (PS2 Emulation) PS4 demo video from BigBoss, and to quote from the README.md: Standalone RPi installer for ps4-exploit-host (No router, no switch)

1. Have a fresh install of Raspiban Lite on your RPi
2. Connect you RPi to a network with internet access
3. Run this command on you RPi:
   
   Code:

   `curl -L...

Following today's Nintendo Switch Master Key leak and some previous updates of his, PlayStation 4 developer Qwertyoruiopz dropped some hints on Twitter that should aid hackers in exploiting the bug once code is written for newer PS4 Firmware consoles.

@DarkElementPL on Twitter summarized the barrage of Tweets by stating, to quote "the bug he published is a bug that is exploitable up to 4.55 using webkit, and up to 5.0x using non-webkit entrypoint."

There's also a new PS4 scene group hitting topsites by the name of MarvTM recently, with some 4.05 releases including Assetto.Corsa.PS4.EUR.CFW.405-MarvTM, Battlefield.1.PS4.EUR.CFW.405-MarvTM, The.Order.1886.CFW.405-MarvTM, The.Order.1886.EUR.PS4.CFW.405.nfo.fix-MarvTM and Metro.Redux.Complete.CFW.405-MarvTM.

Those who recall the sample PS4 Shooting Game TestKit demo video that follow @cfwprophet on Twitter have seen it's now able to be successfully ran on 4.05 OFW with the package available below.

Download: SIMPLESHOOTINGAM.rar (78.23 MB)

Finally, a quick reminder that Recon 2018 is tomorrow, and while the talk itself will be innocent enough there are rumors that some 'from Russia with love' payloads may surface sometime afterwards.

...

Since @XVortex created a java payload version of PS4HEN that doesn't require you to push it using a PC, thanks to his web/java version, I have searched for a way to get this working without a web server needed.

It comes to my mind that PS4 supports BD-J (for Java) for it's Blu-ray Live (BD-Live) and that it has persistent storage and ability to do virtual storage as well.

The process is simple:

• create a menu for Blu-ray to call ps4-hen-vtx that will load payload.js and the rop.js
• burn the Blu-ray disc (create an iso)
• play back in PS4 and click on the menu to load the payload

I will be playing with this more this weekend, but meanwhile, if @XVortex or someone else wants to give a try, go ahead. That will be a perfect so the PS4 is independent of a web server.

More info here ; http://www.oracle.com/technetwork/articles/javame/bluray-142687.html

Following his previous update, today PlayStation 4 developer @MODDEDWARFARE made available PS4 AIO v1.4.0 with a new demo video on his YouTube Channel which includes exploited 4.05 Firmware support alongside BO3 mods followed by v1.5.0!

Download: PS4-AIO-Setup 1.4.0.exe (42.6 MB) / PS4 AIO Portable 1.4.0.zip (42.1 MB) / PS4 AIO v1.5.0

To quote from the video's caption: PS4-AIO Release with 4.05 Support & BO3 Mods! (PS4 Jailbreak)

Here's an updated version of my PS4-AIO tool which now supports 4.05.

Please download and install the latest version rather than trying to update any older versions.

Playing Ghosts For Free & Cool Mods On 4.05 (PS4 Jailbreak & Homebrew)
[PS4/BO3] Real Time Editing using my own tool (God Mode, Ammo, Points, etc..)
[PS4/RELEASE] Open Source Black Ops III Zombie RTM Tool [5.05/4.55/4.05]
Download: PS4 RTM Tool MrNiato v1.0.zip / PS4 RTM Tool MrNiato v1.0.zip (Mirror) / PS4 RTM Tool MrNiato v1.0.zip (1.26.zip) via MrNiato, to quote: HOW TO:

1) With your PS4 go to this link: http://crack.bargains/505k/

2) If you have message "Youre all set!" close the browser and reopen it again then you will have a message "Awaiting Payload...".

3) Open NETCAT GUI, change your IP Adress with the one of your PS4, change "9023" by "9020", select the payload in the folder then inject...