PS4 Jailbreaking

PS4 1.76: Permanent Internet Browser Mod

Following the UI Mod Custom Home Menu for PS4 1.76 made by e✘treme, today Developer lezek20 has released a new Payload after the PS4 Debug Menu on OFW 1.76.

Lezek20 has found the code to activate the Internet-Browser without PSN or needing a proxy server. He has compiled a bin (Payload) file to execute it one time, the effect is permanent after a reboot.

Downloads:

Download (MOD Created By e✘treme)
Download (PayLoad by lezek20)

Big thanks to @B7U3 C50SS for letting me know about this news.

To quote from lezek20: Code to activate the web browser on 1.76 without the need of connecting to psn:

Code:

uint64_t (*sceRegMgrSetInt)(uint32_t reg, int val) = (void *)0xFFFFFFFF8269B310;
sceRegMgrSetInt(0x3c040000, 0);

This code must be in your kernel payload. Its also permanent.

SOURCE: e✘treme

PS4 Jailbreaking Wultra Aug 29, 2016 at 9:05 PM 12

PS4 4.00 Beta 3 WebKit Crash by NextGenModderPS4, PS4Console 1.1

Here's an update to the PlayStation 4 Beta WebKit Crash by NextGenModderPS4 bringing the PS4 WebKit crash to 4.00 Beta 3 with a demo video below and update 1.1 to the PS4 Playground 3.55 successor PS4Console by Cryptogenic from Specter!

From the video's caption via Hybrid7Theory, to quote: PS4 4.0 BETA 3 WEBKIT CRASH

Ok so Beta 3 is out. I have all of the latest xxamp files from spencerdev. The POC no longer works on the playground and it doesn't even crash anymore. But Joloma's crash still works. I guess Sony is policing the hacking community and patching the webkit. Who seen this coming a mile away....

And from GitHub: Version 1.1

+ Added file browing capabilities via ls and cd commands
+ Added file dumping capability via the dump command
+ Module dumping is optimized and much more efficient, also working through the dump command
+ Bug fixes
- Removed unnecessary files

For important notes, see the notes in README.md and props to @NextGenModzPS4 for the news.

PS4 Jailbreaking PSXHAX Aug 25, 2016 at 5:06 PM 10

PS4 4.0 Beta WebKit Crash Demo Video by NextGenModzPS4

A few months back we saw a PS4 3.50 Webkit Exploit followed by a PS4 3.50 Webkit Crash, and now PlayStation 4 developer NextGenModderPS4 shared a PS4 4.0 Beta WebKit crash demo video with details below!

From the video's caption / comments, to quote Hybrid7Theory: PS4 4.0 BETA WEBKIT CRASH

The webkit crash works on 4.0 and the poc test succeeded somehow. Enjoy. Sony might take down the video so use a a video extractor to download the video.

Same as 3.55. Used it for a full day no problems then went back to 3.55. If you plan on using the WebKit playground or linux use ps proxy by red eye so you don't have to update and still go online.

Thanks to @B7U3 C50SS for the news in the Shoutbox and to @NextGenModzPS4 for the demo video!

PS4 Jailbreaking PSXHAX Aug 21, 2016 at 11:22 PM 5

PS4Console by Cryptogenic: PS4 Playground 3.55 Successor

Before you read:

This is VultraAID, This was taken from Cryptogenic ReadMe.md and Source has been added into thread.

PS4Console

PS4Console is a project that is meant to be a successor of the PS4 Playground for 3.55. It is a python-based program that can be run on any Linux/Windows/Mac system and allows you to interface with the PlayStation 4 with the 3.55 exploit.

The program simulates a terminal-like environment that allows you to send commands to the exploit being ran on the PS4, almost as if you were in the terminal. The program automatically runs fakedns.py when it is initiated, so using the User Guide would be the quickest and easiest way to use PS4Console.

Usage

You can run PS4Console in your command-prompt or terminal via the following command (Python 2.7):

Code:

python ps4console.py

Ensure you're not running any processes on port 80 such as Apache, as PS4Console uses this port to operate. You must also setup your dns.conf file for fakedns.py and point your PS4's DNS setting to your computer's IP address (can be found via ipconfig on windows or ifconfig on linux/mac).

DOWNLOAD

https://github.com/Cryptogenic/PS4Console/archive/master.zip

Latest Version

The latest version is 0.1. More of the project will be implemented in future commits.

Notes

The exploit will not run correctly all of the time. If it doesn't work, just keep trying until it does, it shouldn't take long.

If you're on a linux system, you may need root permissions to run PS4Console on port 80, so you may need to run it via:

Code:

sudo python ps4console.py

Special Thanks To

Fire30 - The porting of the WebKit Exploit to PS4, as well as assistance
Xerpi - Functions in his POC edit that I ported over (these functions made things way easier and more efficient)
XYZ - The original exploit for PSVita 3.60
CTurt - Research done with 1.76
XorLoser - File sizes and headers for dumping modules
Maxton - Assistance in development
Red-EyeX32 - Assistance in development

SOURCE: GitHub.com

PS4 Jailbreaking Wultra Aug 19, 2016 at 9:35 PM 24

PS4LIB 3.55 Doc: PS4 3.55 Library Documentation for Developers

Following the stellar news of the PS4 3.55 FileManager comes PS4 3.55 library documentation for PlayStation 4 developers to make use of!

PS4 3.55 library documentation

JSON Format:

Code:

{
  "<library>": {
    "modules": {
      "<module>": {
        "exports": [
          {
            "id": 9819116604689812748,
            "hex_id": "884482872EAD0D0C",
            "encoded_id": "iESChy6tDQw",
            "name": "<export>"
          }
        ]
      }
    }
  }
}

name is either not present or is null when the name for the export is unknown. hex_id and encoded_id are included for human convenience and are not used.

exports was chosen to be an array rather than an object since names must be strings, which would not cleanly work for id.

Github: https://github.com/idc/ps4libdoc

PS4 Jailbreaking Wultra Aug 19, 2016 at 12:06 AM 4

PS4 Jailbreaking

PSXHAX Categories

Share This Page