PSXHAX.COM website and domain for sale. Contact Us with your offer!
PSXHAX - PSXHACKS: PSX HAX - PSX HACKS - PLAYSTATION HAX - PLAYSTATION HACKS
Simple Payload Loader for Exploited PS4 4.05 OFW by OhcHIT
Hello World!
Simple Payload Loader for Exploited PS4 4.05.
This is simple way to send payloads to the PS4 on port: 9020, simply put any payload in the folder and rename it to simplepayload, set the PS4 IP in the IP text and execute.
Download: Simple Payload Loader.rar (17 KB)
=== Simple Payload Loader By ohcHIT ===
Setup:
1) Open ps4ip.txt and paste your PS4 IP in there.
2) Rename payload to simplepayload and put inside the simple payload folder
3) Run Simple Payloader and execute
4) Simple Payload file currently inside the folder is debug settings for 4.05
All done. Type S to send Simplepayload.bin
== Credits ==
@zecoxao
@CTurt
@0x199
enjoy!
Simple Payload Loader for Exploited PS4 4.05.
This is simple way to send payloads to the PS4 on port: 9020, simply put any payload in the folder and rename it to simplepayload, set the PS4 IP in the IP text and execute.
Download: Simple Payload Loader.rar (17 KB)
=== Simple Payload Loader By ohcHIT ===
Setup:
1) Open ps4ip.txt and paste your PS4 IP in there.
2) Rename payload to simplepayload and put inside the simple payload folder
3) Run Simple Payloader and execute
4) Simple Payload file currently inside the folder is debug settings for 4.05
All done. Type S to send Simplepayload.bin
== Credits ==
@zecoxao
@CTurt
@0x199
enjoy!
Fail0verflow on PS4 Crashdumps & Dumping a Kernel in Only 6 Days
Back in October Fail0verflow released their Adieu PS4 Kernel Exploit for 4.05 OFW, and since SpecterDev's Follow-up they've now shared documentation on PlayStation 4 crashdumps and dumping a PS4 kernel in "only" 6 days for other scene developers to learn from. 
Previously we also saw PS4 Developer Flat_z Bid PS4 Crash Dumps Good Bye using conventional means thanks to Sony patching the existing holes.
To quote from their latest Blog Entry: Crashdumps on PS4
The crash handling infrastructure of the ps4 kernel is interesting for 2 main reasons:
On ps4, the replacement for doadump is mdbg_run_dump, which can be called from panic or directly from trap_fatal. The amount of information stored into the dump is gigantic by comparison - kernel state for all process, thread, and vm objects are included, along with some metadata about loaded libraries. Other obvious changes from the vanilla FreeBSD method are that the mdbg_run_dump encodes data recorded into the dump on a field-by-field basis and additionally encrypts the resulting buffer before finally storing it to disk.
Dumping Anything
Let’s zoom in to a special part of mdbg_run_dump - where it iterates over all process’ threads and tries to dump some pthread state:
Previously we also saw PS4 Developer Flat_z Bid PS4 Crash Dumps Good Bye using conventional means thanks to Sony patching the existing holes.
To quote from their latest Blog Entry: Crashdumps on PS4
The crash handling infrastructure of the ps4 kernel is interesting for 2 main reasons:
- It is ps4-specific code (likely to be buggy)
- If the crashdump can be decoded, we will gain very useful info for finding bugs and creating reliable exploits
On ps4, the replacement for doadump is mdbg_run_dump, which can be called from panic or directly from trap_fatal. The amount of information stored into the dump is gigantic by comparison - kernel state for all process, thread, and vm objects are included, along with some metadata about loaded libraries. Other obvious changes from the vanilla FreeBSD method are that the mdbg_run_dump encodes data recorded into the dump on a field-by-field basis and additionally encrypts the resulting buffer before finally storing it to disk.
Dumping Anything
Let’s zoom in to a special part of mdbg_run_dump - where it iterates over all process’ threads and tries to dump some pthread state:
Code:
void mdbg_run_dump(struct trapframe *frame) {
// ...
for ( p = allproc; p != NULL; p = cur_proc->p_list.le_next ) {
// ...
for (td = p->p_threads.tqh_first; td != NULL; td = td->td_plist.tqe_next) {
// ...
mdbg_pthread_fill_thrinfo2(&dumpstate, td->td_proc,
(void...
PS4 NamedObj 4.05 Kernel Exploit Writeup Published by SpecterDev
Following his Christmas Eve Confirmation and PS4 4.05 Kernel Exploit release, today PlayStation 4 developer @SpecterDev announced on Twitter that he published his "NamedObj" 4.05 Kernel Exploit Writeup as promised! 
PS4 developers can check it out in it's entirety on Github, and below is a brief summary of the 1.76 changes and his conclusion to quote: "NamedObj" 4.05 Kernel Exploit Writeup
Changes Since 1.76
Some notable things have changed since 1.76 firmware, most notably the change where Sony fixed the bug where we could allocate RWX memory from an unprivileged process.
The process we hijack via the WebKit exploit no longer has RWX memory mapping permissions, as JiT is now properly handled by a seperate process. Calling sys_mmap() with the execute flag will succeed; however any attempt to actually execute this memory as code will result in an access violation. This means that our kernel exploit must be implemented entirely in ROP chains, no C payloads this time.
Another notable change is kernel ASLR (kASLR) is now enabled past 1.76.
Some newer system calls have also been implemented since 1.76. On 1.76, there were 85 custom system calls. On 4.05, we can see there are 120 custom system calls.
Sony has also removed system call 0, so we can no longer call any system call we like by specifying the call number in the rax register. We will have to use wrappers from the libkernel.sprx module provided to us to access system calls.
Conclusion
This exploit is quite an interesting exploit, though it did require a lot of guessing and would have been a lot more fun to work with should I have had a proper kernel debugger. To get a working object can be a long a grueling process depending on the leak you're using.
Overall this exploit is incredibly stable, in fact I ran it over 30 times and WebKit nor the Kernel crashed once. I learned a lot from implementing it, and I hope I helped others like myself who are interested in exploitation and hopefully others will learn some things from this...
PS4 developers can check it out in it's entirety on Github, and below is a brief summary of the 1.76 changes and his conclusion to quote: "NamedObj" 4.05 Kernel Exploit Writeup
Changes Since 1.76
Some notable things have changed since 1.76 firmware, most notably the change where Sony fixed the bug where we could allocate RWX memory from an unprivileged process.
The process we hijack via the WebKit exploit no longer has RWX memory mapping permissions, as JiT is now properly handled by a seperate process. Calling sys_mmap() with the execute flag will succeed; however any attempt to actually execute this memory as code will result in an access violation. This means that our kernel exploit must be implemented entirely in ROP chains, no C payloads this time.
Another notable change is kernel ASLR (kASLR) is now enabled past 1.76.
Some newer system calls have also been implemented since 1.76. On 1.76, there were 85 custom system calls. On 4.05, we can see there are 120 custom system calls.
Sony has also removed system call 0, so we can no longer call any system call we like by specifying the call number in the rax register. We will have to use wrappers from the libkernel.sprx module provided to us to access system calls.
Conclusion
This exploit is quite an interesting exploit, though it did require a lot of guessing and would have been a lot more fun to work with should I have had a proper kernel debugger. To get a working object can be a long a grueling process depending on the leak you're using.
Overall this exploit is incredibly stable, in fact I ran it over 30 times and WebKit nor the Kernel crashed once. I learned a lot from implementing it, and I hope I helped others like myself who are interested in exploitation and hopefully others will learn some things from this...
How to Disable / Remove Ads From Appearing on PS4 Homepage Screen
If you've recently noticed ads appearing on the PlayStation 4 homepage screen (PS4 User Interface) you're not alone, as it seems Sony has now enabled them as can be seen in the advertisement for Destiny 2 pictured below.
Luckily Kotaku.com discovered how to disable / remove these Sony video game ads in fairly short order!
This is what you have to do to get rid of them, to quote: Here’s an easy way to stop that from happening:
1) On your home screen, select “Settings”
2) Select “System”
3) Select “Automatic Downloads”
4) Uncheck “Featured Content”
That’s it!
Luckily Kotaku.com discovered how to disable / remove these Sony video game ads in fairly short order!
This is what you have to do to get rid of them, to quote: Here’s an easy way to stop that from happening:
1) On your home screen, select “Settings”
2) Select “System”
3) Select “Automatic Downloads”
4) Uncheck “Featured Content”
That’s it!
Sony Unveils PlayStation Plus Free Games for January, 2018
If you're a PlayStation Plus subscriber listen up, today Sony officially unveiled the PlayStation Plus free games for January 2018 featuring Deus Ex: Mankind Divided and Batman: The Talltale Series alongside a special bonus game for PS VR owners called Starblood Arena. 
Check out the details below with Sony's latest trailer video teaser courtesy of James Hallahan, to quote:
Happy New Year PlayStation Nation! We hope “play more games” is one of your resolutions for the new year, because PlayStation Plus members have some great titles coming in January!
Before we go any further, we are happy to announce that PlayStation Plus members can get Starblood Arena as a bonus game starting January 2 through March 6. This arena combat game was built from the ground up to be played in VR with your PS VR headset*.
Attack, evade, and move in any direction as you compete against pilots from across the galaxy. You’ll fight for glory, credits, and your life.
Now, on to the PlayStation Plus monthly games for January!
First up, we have Deus Ex: Mankind Divided. This sequel follows the immediate aftermath of the Aug Incident, the day when mechanically augmented citizens all over the world were stripped of control over their minds and bodies. This game mixes first-person action, stealth, and RPG-elements to make for an enthralling adventure.
Next, we have Batman: The Telltale Series. Take on the role of Batman, both as the hero and his alter ego Bruce Wayne. Where every choice has a consequence, see what it really means to be the Dark Knight. Another hand-crafted adventure game by the fine folks at Telltale, it is sure to entertain.
This month’s PlayStation Plus lineup also includes:
And there you...
Check out the details below with Sony's latest trailer video teaser courtesy of James Hallahan, to quote:
Happy New Year PlayStation Nation! We hope “play more games” is one of your resolutions for the new year, because PlayStation Plus members have some great titles coming in January!
Before we go any further, we are happy to announce that PlayStation Plus members can get Starblood Arena as a bonus game starting January 2 through March 6. This arena combat game was built from the ground up to be played in VR with your PS VR headset*.
Attack, evade, and move in any direction as you compete against pilots from across the galaxy. You’ll fight for glory, credits, and your life.
Now, on to the PlayStation Plus monthly games for January!
First up, we have Deus Ex: Mankind Divided. This sequel follows the immediate aftermath of the Aug Incident, the day when mechanically augmented citizens all over the world were stripped of control over their minds and bodies. This game mixes first-person action, stealth, and RPG-elements to make for an enthralling adventure.
Next, we have Batman: The Telltale Series. Take on the role of Batman, both as the hero and his alter ego Bruce Wayne. Where every choice has a consequence, see what it really means to be the Dark Knight. Another hand-crafted adventure game by the fine folks at Telltale, it is sure to entertain.
This month’s PlayStation Plus lineup also includes:
- Sacred 3, PS3
- The Book of Unwritten Tales 2, PS3
- Psycho-Pass: Mandatory Happiness, PS Vita (Cross Buy with PS4)
- Uncanny Valley, PS Vita (Cross Buy with PS4)
And there you...