PS4 EAP Kernel Dumps & Standalone PS4 Exploit Host RPi Installer

Following the PS4 Rest Mode REcon Demo and Slideshow PDF of Volodymyr Pikhur's presentation comes some PS4 EAP Kernels from 1.01, 1.76 and 4.05 OFW via notzecoxao for developers alongside a Standalone RPi installer for PS4 Exploit Host (no router, no switch) by @Al Azif who's currently working on improving it further with wifi and by eliminating the PS4 to change settings.

Download: eap_kernel_101.bin / eap_kernel_176.bin / EAP Kernels.zip (8.31 MB - Mirror) / EAP Kernels.zip (Mirror #2) / RPi Installer for 4.55 / PiXploitHost GIT / PS4-EAP-KEY-DUMPER-672.bin (6.6 KB)

Below are some related Tweets including a PS2Reality MediaPlayer (PS2 Emulation) PS4 demo video from BigBoss, and to quote from the README.md: Standalone RPi installer for ps4-exploit-host (No router, no switch)

1. Have a fresh install of Raspiban Lite on your RPi
2. Connect you RPi to a network with internet access
3. Run this command on you RPi:
   

   `curl -L https://goo.gl/4bvW9P | sudo bash -s`

4. Your device will restart automatically
5. Run an ethernet cord directly between RPi and PS4
6. On the PS4 setup the network as follows:
   • Set Up Internet Connection
   • Use a LAN Cable
   • Custom
   • Manual
     • IP Address: 7.7.7.8
     • Subnet Mask: 255.255.255.0
     • Default Gateway: 7.7.7.7
     • Primary DNS: 7.7.7.7
     • Secondary DNS: 7.7.7.7
   • Automatic
   • Do Not Use
7. Load the User's Manual

Github: https://github.com/c0d3m4st4/PiXploitHost / Spanish Guide

EAP Internal Partition Key is at kernel_base + 0x258CCD0 on 4.55 kernel
Cheers to both @oneman123 and @SSShowmik for the heads-up in the PSXHAX Shoutbox earlier today!

 

[Trojaner]

true @kastor81 ... but for learning everything is useful

 

[bombob]

The very first Raspberry Pi should be enough for that, but if you want it dirt cheap, you could use RPi Zero W (which is about 10 GBP I think) and instead of using an ethernet cord you could setup your RPi as an ad-hoc wifi network. It's probably a little more complicated that downloading and executing a bash script, but it's doable. I've got my home automation (homebridge + homeassistant), an instagram API bot and a GPIO christmas light controller set up on Raspberry Pi Zero W and it runs flawlessly.

Be aware that you need to have a usb wifi dongle for that though, as it only natively supports a micro-USB connection and is a little of a female dog to setup without a monitor.

I think the zeroW already has integrated wifi. Why would you add another wifi usb dongle ?

 

[Fernandez]

Sorry, I was quoting a post about Pi Zero (the non-W) version, so I added that it needs a dongle. Somehow the quote didn't show up...

So to clarify: Pi Zero - you need a dongle, Pi Zero W - you don't need one.

 

[robertusit]

in my opinion, a raspberry pi to excute exploit, is wasted.

Better make a web server on rpi, then use a local html page to execute exploit, and you can use rpi in meantime to download or do other stuff.

For now i use web page of a site that contain exploit, anyway better way is a offline solution, and i looking for it, but a rpi stuck only for that is a pity, because rpi can make a lot of things, and in this way can do only one.

 

[PLAYER 1]

why not windows 10?
pi3 can run it.

 

[73n1x69]

Guys someone can translate the matter of the "EAP Kernels" for us, common mortals?

What does this imply for the scene?

 

[sdlc]

why not windows 10?
pi3 can run it.

Windows 10 IoT for RPi (only 2&3) have mass limitations unlike "PC version"(x86\x64).
Linux (NOOBS\Raspbian\Kali e.t.c) more flexible (build-in apps repository, automatisation, open source e.t.c.)

Guys someone can translate the matter of the "EAP Kernels" for us, common mortals?

What does this imply for the scene?

Non-WebKit exploit find (FW 4.55+), way to find keys for signing CFW PUP.

 

[manix19]

Also would like a brief description what are EAP Kernels and what are they used for.

 

[Mohammed tlm]

GUYS IS THERE ANY HOPE FOR A CFW!??

 

[kastor81]

it's the only way to find the keys and sign the kernel, and if you start from 4.05 it would be advantageous