PS4 Jailbreaking

PS4FileNinja v1.0.0 PS4 File Browser by M0rph3us1987 is Released

Following the PS4 File Browser from CTurt, today PlayStation 4 developer m0rph3us1987 (Twitter) released another simple file browser called PS4FileNinja v1.0.0 followed by version 2 with details below!

Download: PS4FileNinja_v1_0_0.exe (397 KB) / PS4FileNinja_v2_0_0.exe (618 KB) / PS4FileNinja_v2_0_0.exe (617 KB) / PS4FileNinja_v2_0_0.exe (Mirror) / PS4FileNinja_v2_0_0.exe (Mirror #2) / PS4Ninja Source Code / ps4ninja_672.7z (18 KB)

To quote: Hi,

I am glad to share with you my first PS4 related public release. It is called PS4FileNinja and it is basically a file browser. It currently works on FW version 1.70 and 1.76. The usage is simple:

1) Start code execution in playground.
2) In PS4FileNinja select FW, insert PS4 IP and click on "Send payload".

If the payload was sent successfully, click on "Connect to PS4".

Have fun with it...

PS4 Jailbreaking PSXHAX Jul 9, 2016 at 10:17 PM 33

PS4 Update Bypasser PSProxy by Red-EyeX32 to Bypass PSN Updates

Following his PlayStation 4 Trophy (PS4 .TRP File) Extractor and PS3 LV1.ELF Embedded Files Extractor, PlayStation 4 developer Red-EyeX32 (Twitter) released a PS4 Update Bypasser application called PSProxy to bypass PSN Firmware Updates for PlayStation 4 owners... with a PS3 version coming next!

Download: PSProxy.rar (US) (38 KB) / PSProxy.rar (US) (Mirror) / PSProxy.rar (EU) (38 KB) / PSProxy.rar (EU) UPDATE (38 KB) by @CnCore / ps4-updatelist.xml / PS4.rar (EU/UK/US Bypass)

To quote: Hello NextGenUpdate, As I promised, I have made a Playstation 4 update bypasser. This little utility will allow you to bypass the 3.55 update making your system stay on a lower firmware.

Currently this has only been tested on a US console on a 3.50 firmware. To make this work for EU users all you have to do is edit the ps4-updatelist.xml included inside the .rar file from "us" to "eu". Also don't mind the PSP/PS3 Mode as those haven't been tested yet.

Instructions:

Press start on the utility.
Add IP and Port to the PS4.
Sign-In to PSN
Profit?

Please let me know any bugs you encounter, I would gladly fix the problem for you.

Changes in v2.0.0.0 update:

Added "Copy" to Log List by right clicking the list.
You can now export the log by right clicking.
Few bug fixes. (Adding PS3 support next update)

Any donations would be appreciated!

Credits:

Dacoco (Testing and video)

Similar to SKFU's Pr0xy³ below is a video demonstrating the PS4 Update Bypasser application courtesy of Dacoco, and a special shout-out to @GrimDoe in the...

PS4 Jailbreaking PSXHAX Jul 4, 2016 at 12:36 AM 161

FreeBSD Compatibility Layers Weakness Analysis by PS4 Dev CTurt

Earlier this month we reported on his analysis of FreeBSD Kernel Exploits, and today PlayStation 4 developer CTurt returns with his analysis of stack disclosure vulnerabilities in FreeBSD Linux compatibility layers.

Check out his full analysis on GitHub with the related FreeBSD Project FreeBSD-SA-16:20.linux and FreeBSD-SA-16:21.43bsd Security Advisories now posted as well.

Thanks to @GrimDoe for the news tip in the PSXHAX Shoutbox today!

PS4 Jailbreaking PSXHAX May 31, 2016 at 6:01 PM 8

PS4 Linux on 3.50 via Blu-ray Drive with BDLive Bug by 00001234

Recently we reported on the PS4 3.50 Webkit Crash avenue to exploit the PlayStation 4 browser, and thanks to @toni1988, @Chaos Kid and @mcmrc1 in the Shoutbox comes news of PS4 Linux also running on 3.50 OFW using the PlayStation 4 Blu-ray drive as the loader through a BDLive bug from 00001234.

To quote, roughly translated: So great is the vulnerability hardly, it is unencrypted and the code is freely available. Funny that's, this is on the 3.50. Thus one can save anything on the PS4 and also run! So you can even boot Linux.

What do you need:

1. Windows or Linux system
2. Charles web debugging proxy or burpsuite
3. A film with BDLive (in my test it was by Universal Pictures) others will surely go well. Can you really test yourself.
4. Connect to best PS4 with Lan.

It is described for Charles... Insert and start now to film, short wait at Charles appears Universal Pictures after about 1 minute a bootloader file.

Looks like this:

XML source

Code:

<?xml version="1.0" encoding="utf-8"?>
<update version="1" targetTitle="89">
  <statusCodes>
    <statusCode id="100" type="Information">Successful</statusCode>
  </statusCodes>
  <resources>
    <resourceFile uri="http://cdn.www.universalhidefclub.com/u/ContentServer/Universal/xxxxxxx/Package/xxxx-xxxx-xxxx-xxxx-xxxx/boot.bin" fileSizeInBytes="1234" localStorage="common/boot.bin">
    </Resource file>
    <resourceFile uri="http://cdn.www.universalhidefclub.com/u/ContentServer/Universal/xxxxxxx/Package/xxxx-xxxx-xxxx-xxxx-xxxx/boot.xml" fileSizeInBytes="1234" localStorage="common/boot.xml">
    </Resource file>
    <resourceFile uri="http://cdn.www.universalhidefclub.com/u/ContentServer/Universal/xxxxxxx/Package/xxxx-xxxx-xxxx-xxxx-xxxx/v3.zip" fileSizeInBytes="1234" localStorage="v1.zip">
    </Resource file>
  </Resources>
  <bumf>
    <bumfFile...

PS4 Jailbreaking PSXHAX May 29, 2016 at 11:55 PM 29

PS4 3.50 Webkit Crash Exploit Demo Video via JNSXM0nster

Proceeding the PS4 3.50 Webkit Exploit, this past weekend we saw the release of a PS4 Heap Use-After-Free at WebCore 3.50 PoC and today the awesome @GrimDoe tipped us off in the Shoutbox thanks to @toni1988 that JNSXM0nster of JNSX Modz shared a demo video of a PS4 3.50 Webkit Crash Exploit he was testing out.

Check out the PlayStation 4 3.50 crash exploit footage below, and from the video's caption:

Disclaimer: This crash was not found by me, i was simply just testing it out however more info on these sites.

https://www.psxhax.com/
http://wololo.net/
http://playstationhax.it/

Also below is a cleaned up version of the PS4 3.50 Webkit Exploit with some screen grabs by BANFREEDJ and links to the most recent version of the PS4 Webkit Playground from eXtreme:

PS4 Jailbreaking PSXHAX May 25, 2016 at 6:24 PM 16

PS4 Jailbreaking

PSXHAX Categories

Share This Page