PSXHAX.COM website and domain for sale. Contact Us with your offer!
PSXHAX - PSXHACKS: PSX HAX - PSX HACKS - PLAYSTATION HAX - PLAYSTATION HACKS
Decrypting and Dumping PlayStation 4 UserModules Guide by Zecoxao
PlayStation 4 developer zecoxao shared a guide today on how to decrypt and dump PS4 usermodules with help from skeu. 
To recap for those new, the first decrypted PlayStation 4 game was done by PS4 scene release group EPEEN, and scene group TRSi also sent out a call for decryption testers recently.
Read all about it below, to quote: Tutorial: How to decrypt and dump usermodules
First of all I'd like to say thank you to the person who has allowed me to post this tutorial. His English isn't perfect so he asked me to make this tutorial on his behalf. Thanks, grass skeu
So for this, you'll need:
1- Fire up elf loader on your 1.76 console
2- Let it load all the way up to stage 5 without memory errors!
3- Compile the payload source. You can specify in between:
and
which module(s) you want to decrypt. if you want, you can even decrypt all modules from 1.76 Dump released a while ago! This includes elf, self, prx, sprx, sexe, sdll and eboot.bin.
However, take into notice that you can only decrypt usermodules from disc or psn apps when you have loaded them and minimize them (by pressing ps button), and only from absolute path! (due to npdrm management)
I have left an example:
To recap for those new, the first decrypted PlayStation 4 game was done by PS4 scene release group EPEEN, and scene group TRSi also sent out a call for decryption testers recently.
Read all about it below, to quote: Tutorial: How to decrypt and dump usermodules
First of all I'd like to say thank you to the person who has allowed me to post this tutorial. His English isn't perfect so he asked me to make this tutorial on his behalf. Thanks, grass skeu
So for this, you'll need:
- ps4sdk precompiled
- elf-loader precompiled OR alternatively extreme-modding.de's elf loader (found here)
- the payload source (DumpFile.zip)
- 1.76 console
- fat32 usb pendrive
1- Fire up elf loader on your 1.76 console
2- Let it load all the way up to stage 5 without memory errors!
3- Compile the payload source. You can specify in between:
Code:
ps4KernelExecute((void*)path_self_mmap_check_function, NULL, &ret, NULL);
Code:
ps4KernelExecute((void*)unpath_self_mmap_check_function, NULL, &ret, NULL);However, take into notice that you can only decrypt usermodules from disc or psn apps when you have loaded them and minimize them (by pressing ps button), and only from absolute path! (due to npdrm management)
I have left an example:
Code:
...
SilicaAndPina PS4 Web Browser Crash HENkaku4.tk Webpage Demo
Following the PS4 JailBreak ROP Tool release yesterday and many PS4 WebKit Crash videos, today PlayStation 4 developer @SilicaAndPina ran across another which she linked on her HENkaku4.tk page as a proof-of-concept with a demo below!
Not to be confused with the PlayStation 4 3.55 code execution PS4 HENkaku Exploit, to give the PS4 Web Browser Crash a try, simply:
Below are some related Tweets from SilicaAndPina, and also check out her Silica YouTube Channel for a lot of other kewl demonstration videos.
PS: If you haven't done so already, check out the SPOILER near the bottom of THIS article for a plethora of useful PlayStation file download links from her as well!
Thanks to @PS4HELPER123 for the news in the PSXHAX Shoutbox!
Not to be confused with the PlayStation 4 3.55 code execution PS4 HENkaku Exploit, to give the PS4 Web Browser Crash a try, simply:
- Navigate to HENkaku4.tk on your PS4 (similar PS4 browser test page located at PS4-Expo.NeoCities.org and also PS4Playground.tk)
- Click on the 'Crash The Browser (Ps4)' link (or run PSNS: from the PS4 browser)
- Profit and post your results below if you're feeling froggy
Below are some related Tweets from SilicaAndPina, and also check out her Silica YouTube Channel for a lot of other kewl demonstration videos.
PS: If you haven't done so already, check out the SPOILER near the bottom of THIS article for a plethora of useful PlayStation file download links from her as well!
Thanks to @PS4HELPER123 for the news in the PSXHAX Shoutbox!
ROP Tool Released by Chaitin Tech Used in PS4 Jailbreak Exploit
Following recent research from PlayStation 4 developers into the 4.01 PS4 Jailbreak by Chaitin Tech, today the Chinese PS4 Jailbreaking Team have released an ROP (Return Oriented Programming) tool on their Pro GIT to aid developers in exploiting the PlayStation 4.
Download: pro-master.zip / GIT
PSXHAX Moderator @Centrino points out the GIT work is incomplete, referencing line 41 meaning it only contains partial information and nothing can be done with it by end-users just yet.
In other words, although Chaitin Tech are not teasing, they also are not spoon feeding (giving away their full exploit).
Here is a snippet from #ps4dev on iRC via @Fimo for those interested:
[rck`d] the nonsecure browser has no jit, only the secure browser now (used for PSN store, etc) has JIT
[rck`d] Since some version, the internal browser is compiled WITHOUT jit support, and sys_jitshm_xxx seems to be disabled for unprivileged process
Everyone can draw their own conclusions, but thus far it wouldn't surprise me if the Chinese Team is just a 'smoke and mirrors' scheme as dongle douchbags start re-DRMing the exploit to profit off PS4 sceners... then when people whine they'll direct them to this GIT of incomplete code as a 'free' alternative to their useless 'product' but hopefully I'm mistaken. 
Anyhow, to quote from the README.md: PRO: PROgramming ROP like a PRO
This is a crappy tool used in our private PS4 jailbreak. Since some version, the internal browser is compiled WITHOUT jit support, and sys_jitshm_xxx seems to be disabled for unprivileged process. We have to write the kernel exploitation in ROP, like what has been done in HENKaku jailbreak.
Build
Download: pro-master.zip / GIT
PSXHAX Moderator @Centrino points out the GIT work is incomplete, referencing line 41 meaning it only contains partial information and nothing can be done with it by end-users just yet.
In other words, although Chaitin Tech are not teasing, they also are not spoon feeding (giving away their full exploit).
Here is a snippet from #ps4dev on iRC via @Fimo for those interested:
[rck`d] the nonsecure browser has no jit, only the secure browser now (used for PSN store, etc) has JIT
[rck`d] Since some version, the internal browser is compiled WITHOUT jit support, and sys_jitshm_xxx seems to be disabled for unprivileged process
Everyone can draw their own conclusions, but thus far it wouldn't surprise me if the Chinese Team is just a 'smoke and mirrors' scheme as dongle douchbags start re-DRMing the exploit to profit off PS4 sceners... then when people whine they'll direct them to this GIT of incomplete code as a 'free' alternative to their useless 'product' but hopefully I'm mistaken. Anyhow, to quote from the README.md: PRO: PROgramming ROP like a PRO
This is a crappy tool used in our private PS4 jailbreak. Since some version, the internal browser is compiled WITHOUT jit support, and sys_jitshm_xxx seems to be disabled for unprivileged process. We have to write the kernel exploitation in ROP, like what has been done in HENKaku jailbreak.
Build
Code:
pip install...
Sony Announces PlayStation 4 Yakuza 6 Edition Limited Bundle
Recently Sony announced that a PlayStation 4 Yakuza 6 Edition Limited Bundle is coming to Japan on December 8th, with details below translated from Gematsu.com, as follows:
The “PlayStation 4 Yakuza 6 Starter Limited Pack,” due out on December 8 for 35,980 yen, will include a 500 gigabyte Jet Black PlayStation 4, a copy of Yakuza 6, and a Yakuza 6 original PlayStation 4 theme.
The “PlayStation 4 Yakuza 6 Edition,” also due out on December 8, will be available in 500 gigabyte and one terabyte options for 33,480 yen and 38,480 yen, respectively.
In total, the bundle includes a Jet Black PlayStation 4, a Yakuza 6-style top cover, a Yakuza 6 original PlayStation 4 theme, and Yakuza 6 original design packaging.
Pre-orders will begin at the Sony Store on October 26 at 10:00 JST.
The “PlayStation 4 Yakuza 6 Starter Limited Pack,” due out on December 8 for 35,980 yen, will include a 500 gigabyte Jet Black PlayStation 4, a copy of Yakuza 6, and a Yakuza 6 original PlayStation 4 theme.
The “PlayStation 4 Yakuza 6 Edition,” also due out on December 8, will be available in 500 gigabyte and one terabyte options for 33,480 yen and 38,480 yen, respectively.
In total, the bundle includes a Jet Black PlayStation 4, a Yakuza 6-style top cover, a Yakuza 6 original PlayStation 4 theme, and Yakuza 6 original design packaging.
Sony Licensed PS4 Controllers: Razer Raiju and Nacon Revolution
If the PlayStation 4's DualShock 4 (DS4) seems a little too vanilla for your style, check out these new Sony officially licensed third-party professional PS4 controllers coming this holiday season- the Razer Raiju and Nacon Revolution!
Here's a summary of each PS4 pro controller straight from Andrew Mason:
Razer Raiju
The Razer team’s extensive knowledge in developing eSports peripherals made them an ideal partner to create a tournament-grade controller for PS4.
Designed for conquering professional eSports tournaments, the Razer Raiju is equipped with advanced controller customisation and ergonomics. Its features include:
Developed with the eSport player in mind, the Nacon team of industrial designers and engineers collaborated with pro-gamers to develop the Revolution Pro Controller to meet a wide range of their gameplay needs.
Thanks to this collaboration, the Revolution Pro Controller features include:
Here's a summary of each PS4 pro controller straight from Andrew Mason:
Razer Raiju
The Razer team’s extensive knowledge in developing eSports peripherals made them an ideal partner to create a tournament-grade controller for PS4.
Designed for conquering professional eSports tournaments, the Razer Raiju is equipped with advanced controller customisation and ergonomics. Its features include:
- Two extra bumpers and two extra detachable triggers
- Built-in control panel on the front of the controller
- Trigger-stop switches and hair trigger mode for ultra-fast trigger responses
- Two custom profiles which you can instantly switch between and modify
- 3.5mm headset jack and dedicated headset volume and mic mute controls
- Detachable analog stick rubber caps which provide extra grip during intense gaming sessions
- Compatibility with all PS4 systems via the braided 3m-long USB cable – detachable for easy storage
Developed with the eSport player in mind, the Nacon team of industrial designers and engineers collaborated with pro-gamers to develop the Revolution Pro Controller to meet a wide range of their gameplay needs.
Thanks to this collaboration, the Revolution Pro Controller features include:
- 46° amplitude dual analogue sticks, enhanced with innovative firmware for advanced eSports accuracy and reach
- Four extra shortcut buttons
- Eight-way directional pad
- Four custom profiles – all configurable via the companion PC application, enabling players to: re-map buttons, assign macros to the four shortcut controls and adjust analog and trigger sensitivity
- Two internal compartments with six additional weights – for a tailored balance and feel
- Compatibility with all PS4 systems via the 3m-long secure connection USB cable – detachable for easy storage