PSXHAX.COM website and domain for sale. Contact Us with your offer!
PlayStation 4 Glitch Pinout, PS4 Slim / Pro Downgrading Update
Following the PS4 Linux 33c3 Demo and the start of a community-driven PS4Webkit Project, today I (@juansbeck on Twitter aka HybridComputers) am continuing from my UniversalFlash App work-in-progress bringing an update on the PlayStation 4 glitch pinout used by Marcan and the possibility to downgrade a PlayStation 4 Slim / PS4 Pro with details below. 
Rough translation: Failoverflow's Marcan made a 'glitch' attack TOOL0 combined other ports like RX and TX (rs232) to PS4 Southbridge (sysconf-hypervisor) to give read and write permissions to its devboard lattice ECP3 to intercept the signals and return them in a Payload as we showed CTurt in its extensive article, but how?
Anyone can give us the datasheet? Or if at PSDevWiki oops... the blessed datasheet is a farce. It's a troll from a dodgy blog... one has to be very stupid to believe that the r32c is the hypervisor to attack Marcan... not even the VSS nor the VCC agree
Never fool us, not all the other developers that have their functional CFW that the downgrade key or the way we can get to exploit versions 3.55, 4.01, 4.05 or whatever is in this simple sysconf
RL78G14 there are 100 pin and 64 and even less as it is ps4 pro the chip is from the company renesas company and although it cost us more 8 months without sleeping here I attach the datasheet, I can say that there is a pin the TOOOL0 credits (JaiCraB) which is the evolution of RX and TX.
For now the datasheet of sysconf and a small drawing for the devs who want to investigate meanwhile we do ours to keep this team that continues adding more than 8,000 euros a month I tell you why not everything is lost,
here we keep moving forward and something has to come out of this.
This can be used to find a way to downgrade to the minimum version of any PS4 (including PS4 Pro)
1. Correct hypervisor...
Rough translation: Failoverflow's Marcan made a 'glitch' attack TOOL0 combined other ports like RX and TX (rs232) to PS4 Southbridge (sysconf-hypervisor) to give read and write permissions to its devboard lattice ECP3 to intercept the signals and return them in a Payload as we showed CTurt in its extensive article, but how?
Anyone can give us the datasheet? Or if at PSDevWiki oops... the blessed datasheet is a farce. It's a troll from a dodgy blog... one has to be very stupid to believe that the r32c is the hypervisor to attack Marcan... not even the VSS nor the VCC agree
Never fool us, not all the other developers that have their functional CFW that the downgrade key or the way we can get to exploit versions 3.55, 4.01, 4.05 or whatever is in this simple sysconf
RL78G14 there are 100 pin and 64 and even less as it is ps4 pro the chip is from the company renesas company and although it cost us more 8 months without sleeping here I attach the datasheet, I can say that there is a pin the TOOOL0 credits (JaiCraB) which is the evolution of RX and TX.For now the datasheet of sysconf and a small drawing for the devs who want to investigate meanwhile we do ours to keep this team that continues adding more than 8,000 euros a month I tell you why not everything is lost,
here we keep moving forward and something has to come out of this.This can be used to find a way to downgrade to the minimum version of any PS4 (including PS4 Pro)
1. Correct hypervisor...
The PS4Webkit Project: An Attempt to Fabricate a 4.xx PS4 Web Exploit
After lots of news articles about PS4 Linux and the fact it is not going to see a release because of drama; I got to the idea to make an exploit together with the community.
Presenting the PS4webkit project!
Presenting the PS4webkit project!
- So what is this "project" all about?
My plan is to develop a webkit/userland exploit with the help of the whole community, it pretty unlikely to succeed but hey! we can always try.
- But how can I contribute?
Simple, if you have any research, write-up's, CVE's, code or anything that could be usefull to other contributors, commit it on the github or paste it into the comments on this thread
- Are there any rules you need to follow?
Just to keep all code clean and as stable as possible there are some thing's you must not do to the code:
- Add credit's to your code (Full ASCII banner are not allowed, but a single line comment mentioning you is allowed if you have written a big piece of code)
- Don't commit code if you don't know what it does, seriously, leave it to the real devs (if any will ever join
) - Post research and code in their respective branch
- So where is the github?
The project github is located at https://github.com/kazookid0/PS4webkit
Let's try to make something out of it. (btw plz no hate i tried lol)
Let's try to make something out of it. (btw plz no hate i tried lol)
Fail0verflow Chaos Computer Club (CCC) 2016 4.05 PS4 Linux, Steam
As planned, today PlayStation 4 hacker Marcan of Fail0verflow covered how they reverse-engineered Sony's PS4 console via FreeBSD / Sandbox to install PS4 Linux on it at Chaos Computer Club (CCC) 2016 alongside a Portal 2 Steam (older Demo / Guide) PS4 demonstration video below on Firmware 4.05! 
According to @Joonie of Team Rebug, PlayStation 4 developer @flatz got PS4 Linux running on Firmware 4.05 day 1 too!
Here are some of the related Tweets and files / links / videos:
Download: bonaire.rai.txt
Fail0verflow Links:
Fail0verflow CCC 2016 Slide Links:
https://github.com/fail0verflow/ps4-kexec
...
According to @Joonie of Team Rebug, PlayStation 4 developer @flatz got PS4 Linux running on Firmware 4.05 day 1 too!
Here are some of the related Tweets and files / links / videos:
Download: bonaire.rai.txt
Fail0verflow Links:
Fail0verflow CCC 2016 Slide Links:
https://github.com/fail0verflow/ps4-kexec
- kexec and hardware reconfiguration / "bootloader" code
- Kernel tree
- Userspace library patches
- f32dis and RAI tools
...
Decrypted PS4 Package (PKG) Files, PSProxy SRC Soon by Red-EyeX32
Today PlayStation 4 developer @RedEyeX32 announced on Twitter that he plans to release some decrypted PS4 Package (PKG) contents soon alongside PSProxy source code for developers to examine!
With 2016 wrapping up soon, here are some more PlayStation 4 decryption articles from this past year to catch everyone up to speed thus far:
With 2016 wrapping up soon, here are some more PlayStation 4 decryption articles from this past year to catch everyone up to speed thus far:
- DriveClub Alpha Decrypted RIF Key
- Decrypted Audio Packet in PS4 Firmware
- Fifa 14 Fully Decrypted PS4 Retail Game
- TRSI Seeking PS4 Decryption Method Testers
- Decrypting and Dumping PlayStation 4 UserModules
- Minecraft PlayStation 4 Edition Decrypted
- PS4 ROP SPRX ELF File Archive for Developers
- Decrypting PS4 Game EBOOT & SPRX Files
- PS4 P.T. (Playable Teaser) Decrypted
- Extracting P.T. (Playable Teaser) PS4 Model Data & Textures
- PlayStation VR PS4 Game The Playroom Decrypted
PS4 1.76 Version String Spoof, Fail0verflow PS4 Kexec GIT Updates
Following news of his PS4 1.76 Version Spoof, today PlayStation 4 developer Zecoxao shared details on how to spoof the 1.76 PS4 Version String by changing offset 0xFFFFFFFF8323A4E0 (uint64_t) inside a kernel payload while Marcan is continuing to update the Fail0verflow PS4 Kexec GIT in preparation for their CCC 2016 talk on December 27th!
For those with a 1.76 OFW PS4 console @zecoxao reminds us that this spoof will only stop the PlayStation 4 console from nagging to update, it won't allow you to change the Minimum Required Firmware for PS4 Games as the PKG keys are different... and for PSN access you'll also need to spoof index.dat and X-Passphrase.
Download: ce-32875-3(shellcore-patch-everyboot).elf (72.94 KB) from VVildCard777 for use with Hitodama's ELFLoader / ps4-playground+hito-elfldr.7z (8.17 MB)
Below are some related Tweets:
...
For those with a 1.76 OFW PS4 console @zecoxao reminds us that this spoof will only stop the PlayStation 4 console from nagging to update, it won't allow you to change the Minimum Required Firmware for PS4 Games as the PKG keys are different... and for PSN access you'll also need to spoof index.dat and X-Passphrase.
Download: ce-32875-3(shellcore-patch-everyboot).elf (72.94 KB) from VVildCard777 for use with Hitodama's ELFLoader / ps4-playground+hito-elfldr.7z (8.17 MB)
Below are some related Tweets:
...