PS4 Jailbreaking

Following the PS2 Backups on PS4HEN progress this past weekend, Fake PKG Generator for PS4 and his recent Make_FSELF_GUI v1.2 update, today PlayStation 4 developer @cfwprophet shared on Twitter a Free PS2 Pub Gen (Fake PKG Tools) that are used as a PS2 Fake PKG Generator for PS4 while PS3120 made available the required orbis-pub-cmd-ps2.exe file and orbis-pub-gen.exe.

Download: free-ps2-pub-gen.rar / Fake PKG Tools_v1.1.1.rar (5.5 MB) / Fake PKG Tools_v1.1.1.rar (Mirror) / Fake PKG Tools_v1.1.2.rar (4.7 MB) / Fake_PKG_Tools_v1.2.rar (588.62 MB - Full) / Fake PKG Tools_v1.1.3.rar (5.5 MB) / fake-pkg-tools_v1.1.3.rar (Mirror) / Fake_PKG_GeneratorPS2.zip (2.97 MB - Mirror) / GIT / orbis-pub-cmd-ps2.exe (2.61 MB) / Klonoa2passcode.pkg (2.76 GB - Passcode: oJhgpRpSASYXdjbh90Sikqu_oLM6Esri via DarkElement who states: "To create another PS2 iso from, extract it, change disc01.iso with your own, and repackage using files from that dump I will provide a more detailed tutorial together with video tut together.) / Fake_PKG_Tools_v1.3.rar /...

Similar to GeekPwn, the CCC Conference, Zer0Con and Tencent Security Conference hacker Volodymyr Pikhur who previously shared a demo of his PS4 IPL AES + HMAC Key Recovery Project will be giving a PS4 presentation at Recon Brussels 2018 on February 3rd at 16:00.

Here are the details from their conference page, to quote:

By: Volodymyr Pikhur
Scheduled on: February 3 at 16:00

This presentation will talk about how custom Southbridge silicon, responsible for background downloads while main SoC is off, didn’t help to secure PlayStation 4.

It will explain how a chain of exploits combined with hardware attacks will allow code to run in the context of the secure bootloader, extract private keys, and sign a custom kernel.

From the Github page, to quote: REcon 2018

This presentation will talk about how custom Southbridge silicon, responsibe for background downloads while main SoC is off, didn’t help to secure Playstation 4. It will explain how a chain of exploits combined with hardware attacks will allow code to run in the context of the secure bootloader, extract private keys, and sign a custom kernel.

https://recon.cx/2018/brussels/talks/die_mode.html

• Mess with the best die like the rest mode by Volodymyr Pikhur - REcon Brussels 2018.pdf

PlayStation 4 Rest Mode DEMO REcon Brussels 2018
...

If you have a PlayStation 4 on 4.05 Firmware and haven't jumped on the PS4 exploit bandwagon yet, this may be a good time as the PS4 Homebrew ENabler (PS4HEN) payload was forked from IDC's GIT and added to PS4-HEN-VTX (Exploit Ps4.rar) by @XVortex (who brought us FTPS4 and PKG Kitchen), which can now be sent via Webpage (no PC needed) thanks to Detective Liliruca with the PS4HEN_405exploit.tar (thanks faisalk87 for the link) also included in PS4 Exploit Host v0.3.14 by @Al Azif for local hosting and accessible HERE.

In the PSXHAX Shoutbox earlier tonight @LightningMods reminded us how simple it is now to go from (for example) a PS4 v4.00 OFW console to 4.05 running PKG game backups, as follows:

• Follow THIS guide to update your PS4's Firmware to v4.05 OFW, which is available from either HERE or HERE.

• Once on 4.05 and you've blocked Sony's URLs to...

Following his PS2 emulation research and recent write-up, PlayStation 4 developer @flatz unveiled screenshots on Twitter of some PS2 game backups running via PS4 HEN on an exploited PS4 4.05 console while sharing an updated make_fself.py to fix issues users have experienced recently.

He notes the PS4's PS2 emulation seems better than PS3's, citing that @zecoxao tested a non-working game (Klonoa 2- details HERE) on PS3 and it worked on the PlayStation 4.

In related PS4 hacking news today, following his Fake PKG Generator and Make FSELF GUI PlayStation 4 developer @cfwprophet (Twitter) updated his tool to include bug fixes and the addition of a PS2 Emulator authentication information database now supporting PS4 PS2 PKGs.

Download: Make_FSELF_GUI / GIT

To quote from Flat_z's PS2 on PS4 Guide:

orbis-pub-cmd.exe patch to allow gdo project creation (it's better to rename file by adding ps2 suffix, for example):
you should take some dump of ps2-ps4 game and use it as template, i've used max payne (EP1004-CUSA04488_00-SLES503260000001), it have 1 disc only

just...

Following the PS4 HEN Homebrew ENabler release, here is the first PlayStation 4 game dump in .PKG format- Playable Teaser (CUSA01127) aka P.T. for PS4HEN after an attempt with Trials Fusion that installed but didn't run. Test and report plz.

Download: PS4 HEN PACK - AlFaMoDz.rar (1.26 GB - Password: AlFaMoDz) via @AlFaMoDz

There is a guide HERE by @DomyGX outlining how to build a working P.T. PKG for 4.05 OFW.

Also ps3120 recommends using DumpFile405 for decrypting PS4 games and editing 0x20 EBOOT with hex.

I have added the full pack (PT + TestApp + PS4HEN.bin) to download
P.T (Silents Hills demo) playable on PS4 4.05 with PS4HEN.bin
PS4 4 05 HELLO WORLD + CUSTOM THEME
JAILBREAK PS4 4.05 PKG INSTALL PART 2 by seanp2500
JAILBREAK PS4 4.05 PKG INSTALL PART 3
JAILBREAK PS4 4.05 PKG INSTALL PART 4
Here's another brief Minecraft 4.05 Guide by Irefuse and thanks to...