PSXHAX.COM website and domain for sale. Contact Us with your offer!
PS4 GTA V Hax Demo: Anything on PS3 Now Possible on PlayStation 4
Last week we saw a PS4 API Demo from them, and today PlayStation 4 developers @kurt2467 and @BadChoicesZ are back with some more PS4 GTA V hax with full natives working... meaning any hacks that were possible on PS3 are now possible on Sony's PlayStation 4 console! 
Here's the latest Grand Theft Auto V PS4 video demo from kurt2467's YouTube channel with the caption below, to quote: [PS4] Some More GTA V Hax
I finally got all of the natives to work! This means that anything that was possible on PS3, is possible on PS4
PlayStation 4 GTAV Modding C# Code by Kurt2467 (Remote Procedure Calls)
From Pastebin.com: [PS4] GTA V RPC
Here's the latest Grand Theft Auto V PS4 video demo from kurt2467's YouTube channel with the caption below, to quote: [PS4] Some More GTA V Hax
I finally got all of the natives to work! This means that anything that was possible on PS3, is possible on PS4
PlayStation 4 GTAV Modding C# Code by Kurt2467 (Remote Procedure Calls)
From Pastebin.com: [PS4] GTA V RPC
Code:
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using System.Windows.Forms;
namespace PS4_GTA
{
public class RPC
{
private uint nativeArgBase = 0;
private uint hookAddress = 0;
private uint rpcCodeAddress = 0;
private List<uint> nativeFuncList = new List<uint>();
private List<UInt64> nativeHashList = new List<UInt64>();
public RPC()
{
nativeArgBase = 0x2DCD820;
hookAddress = 0xD8F480;
rpcCodeAddress = 0x5046D0;
}
public void InitRPC()
{
WriteU64(nativeArgBase, 0);
byte[] hook = new byte[] {
0x55, //push rbp
0xE8, 0x4A, 0x52, 0x77, 0xFF, //call 0x5046D0
0x5D, //pop rbp
0xC3, //retn
};
byte[] asmx86 = new byte[] {
0x55, //push rbp
0x41, 0x52, //push r10
0x53, //push rbx
0x49, 0xC7, 0xC2, 0x20, 0xD8, 0xDC, 0x02, //mov r10, 0x2DCD820
0x49, 0x8B, 0x1A, //mov rbx, [r10]
0x48, 0x85, 0xDB, //test rbx, rbx
0x74, 0x1A, //jz 0x5046FB
0x48, 0xC7, 0xC7, 0x30, 0xD8, 0xDC, 0x02, //mov rdi, 0x2DCD830
0xFF, 0xD3, //call rbx
0x49, 0xC7, 0xC2, 0x20, 0xD8, 0xDC, 0x02, //mov r10, 0x2DCD820...
PS4 Out of Memory Error Browser Crash Demo Video by SilicaAndPina
A few weeks back we caught wind of a PSNS Protocol Crash which was further detailed HERE, and today following the HENkaku4.tk Webpage Demo PlayStation developer @SilicaAndPina shared the code alongside a demo video of crashing the PS4 browser with a 'There is not enough free system memory' out of memory PlayStation 4 error message. 
This reminds me of an article I read where Google's Pixel, Apple's Safari and Adobe's Flash all crumbled in seconds to a team of Chinese hackers at PwnFest recently.
If you'd like to give it a whirl on your own PS4, you can do so at Silica's Test Site Henkaku4.tk using the Crash The Browser (PS4) (Throws an error) link, or using the code from her Pastebin.com below.
Crashing the PS4 Browser -- MEMORY ERROR!!!
Below are some related Tweets on it, @LightningMods started a collection of PS4 HTML Scripts for those interested and thanks to @raedoob for sharing the news in the PSXHAX Shoutbox.
This reminds me of an article I read where Google's Pixel, Apple's Safari and Adobe's Flash all crumbled in seconds to a team of Chinese hackers at PwnFest recently.
If you'd like to give it a whirl on your own PS4, you can do so at Silica's Test Site Henkaku4.tk using the Crash The Browser (PS4) (Throws an error) link, or using the code from her Pastebin.com below.
Code:
<script>
var total = "";
for( var i = 0; i < 100000; i++ ) {
total = total + i.toString();
history.pushState(0,0, total );
}
</script>Below are some related Tweets on it, @LightningMods started a collection of PS4 HTML Scripts for those interested and thanks to @raedoob for sharing the news in the PSXHAX Shoutbox.
PDF May Reveal Details on Chaitin Tech PS4 4.01 Jailbreak Exploit
A few weeks back we reported on the addition of PS4 Kexec Kaslr support for 3.55, 4.00 and 4.01 Firmware followed by hints on PS4 SAMU Encryption, and now neochampion2 (aka spars21) shared with PlayStation 4 developers an iOS9_Pegasus_iOS_Kernel_Exploit.pdf file discovered by @vettegast that may reveal details how Chaitin Tech made their PS4 4.01 kernel exploit demonstrated at GeekPwn 2016.
The document from zhengmin1989 contains a technical analysis of the Pegasus exploits on iOS, of which similar attack methods are believed to have been used on the PS4 4.01 Jailbreak kernel exploit.
Download: iOS9_Pegasus_iOS_Kernel_Exploit.pdf / GIT
A few other interesting tweets making their rounds on the Twitter circuit come from mntadr56 (aka mntadrr) as follows:
Related GIT appears to be empty though:
:arrow...
The document from zhengmin1989 contains a technical analysis of the Pegasus exploits on iOS, of which similar attack methods are believed to have been used on the PS4 4.01 Jailbreak kernel exploit.
Download: iOS9_Pegasus_iOS_Kernel_Exploit.pdf / GIT
A few other interesting tweets making their rounds on the Twitter circuit come from mntadr56 (aka mntadrr) as follows:
Related GIT appears to be empty though:
:arrow...
PSProxy v4.1.0.0 PS4 Update Bypass by Red-EyeX32, Update Button
Last month Sony changed the PSN Passphrase as PlayStation 4 developer @RedEyeX32 announced he was working on a new PSProxy until Sony disabled 3.61 support, but today Red-EyeX32 released PSProxy v4.1.0.0 which includes an integrated Update button making it easy peasy to check for future updates like v4.1.5.0!
Download: PSProxySetup.rar (284 KB - download and update to PSProxy v4.1.5.0)
From Red-EyeX32 on NGU, to quote: Changes in v4.1.0.0 update:
Download: PSProxySetup.rar (284 KB - download and update to PSProxy v4.1.5.0)
From Red-EyeX32 on NGU, to quote: Changes in v4.1.0.0 update:
- Added Brazil support.
- Minimize to system tray.
- Check for updates button.
- New 'Options' dialog and few minor UI changes. (Options can be found by right clicking icon in system tray)
PS4 SAMU Encryption Info Spotted in CoreBoot GIT by ZiL0G80, Fimo
Following his last update, PlayStation 4 developer ZiL0G80 tweeted today alerting other developers that SAMU which handles PS4 encryption is documented a little bit in GnbSmuInitLibV7.c of the coreboot GIT.
Recently in the PSXHAX Shoutbox @Fimo noted as well that SAMU is called in the early boot process, and can be seen in GfxSamuInitKB.c on the coreboot GIT.
@Fimo further speculates that if PlayStation 4 exploiters including Chaitin Tech have not hacked SAMU this may explain why despite PS4 1.76 OFW being exploited over 6 months ago there is no iSOLoader to mount a disk for 1.76 and only unsigned code can be ran on jailbroken PS4 consoles.
If any rogue PlayStation 4 developers or hackers out there are able to share a bit more on SAMU encryption or reverse-engineering feel free to reply in the comments below, drop us an email or send us a DM on Twitter and thanks!
serials for AMD tools:
Recently in the PSXHAX Shoutbox @Fimo noted as well that SAMU is called in the early boot process, and can be seen in GfxSamuInitKB.c on the coreboot GIT.
@Fimo further speculates that if PlayStation 4 exploiters including Chaitin Tech have not hacked SAMU this may explain why despite PS4 1.76 OFW being exploited over 6 months ago there is no iSOLoader to mount a disk for 1.76 and only unsigned code can be ran on jailbroken PS4 consoles.
If any rogue PlayStation 4 developers or hackers out there are able to share a bit more on SAMU encryption or reverse-engineering feel free to reply in the comments below, drop us an email or send us a DM on Twitter and thanks!
serials for AMD tools:
Code:
20FBC6A1-4F25-476F-9C52-97A9220DAC27 BIOS SUITE...