Loading PS4 Payload from a Blu-ray (Server-less Option) BD-J

Since @XVortex created a java payload version of PS4HEN that doesn't require you to push it using a PC, thanks to his web/java version, I have searched for a way to get this working without a web server needed.

It comes to my mind that PS4 supports BD-J (for Java) for it's Blu-ray Live (BD-Live) and that it has persistent storage and ability to do virtual storage as well.

The process is simple:

• create a menu for Blu-ray to call ps4-hen-vtx that will load payload.js and the rop.js
• burn the Blu-ray disc (create an iso)
• play back in PS4 and click on the menu to load the payload

I will be playing with this more this weekend, but meanwhile, if @XVortex or someone else wants to give a try, go ahead. That will be a perfect so the PS4 is independent of a web server.

More info here ; http://www.oracle.com/technetwork/articles/javame/bluray-142687.html

 

[misthalu]

I managed to find a link to the files you need to get started:

Blu Ray Java

Note: I didn't upload these files, but I got the "Minimal BD-J DevKit for PS3" from another site way back, so I'm fairly sure it's the same thing. Along with the devkit there are also 3 example Xlets. Should be all you need.

Good luck!

 

[Al Azif]

@misthalu If you have a PS4 that's never been activated on PSN, the web browser is locked. Which is why we need the DNS, it redirects the PS4 user's manual URL to the exploit page. There is a payload to unlock the browser but you need to be able to access a webpage to send the payload. Meaning this BD-J method, just running the server, won't work for people who don't have the browser unlocked already.

You have proven this method will work for people with an unlocked browser though. They just need to use a DNS method to unlock their browser first. Drop me a message if you need any info, or if you aren't working on it... or if you are interested in a collab or something. Because if no one else does this I'll probably jump on it after I finish this little RPi script.

Edit: But I have a HTTP server working with the exploits already, gonna try the BD parts tomorrow.

 

[bluemeanie23]

any chance u will be releasing the pi script would love to giv it a go

 

[Al Azif]

@bluemeanie23 https://gist.github.com/Al-Azif/fe2ae67a2fb06cc136580b1e923c7aac

Working on a wifi version and eliminating the need to set the settings on the PS4 right now.

 

[doublespace]

Utopia BootCD and PSXChange say hello

 

[misthalu]

@misthalu If you have a PS4 that's never been activated on PSN, the web browser is locked. Which is why we need the DNS, it redirects the PS4 user's manual URL to the exploit page. There is a payload to unlock the browser but you need to be able to access a webpage to send the payload. Meaning this BD-J method, just running the server, won't work for people who don't have the browser unlocked already.

I see.
Two thoughts here.
1: Are you sure the browser insists on opening that particular page, if it's called via Runtime.exec()? Maybe the BD-J could call Runtime.exec("WebKit http://127.0.0.1:4444") after starting the webserver? Worth a try.
2: I've never tried implementing a DNS server, but I see no reason why the BD-J Xlet can't contai a DNS server too. A quick search gave me http://www.dnsjava.org/ but I bet there are more examples out there.

You have proven this method will work for people with an unlocked browser though. They just need to use a DNS method to unlock their browser first. Drop me a message if you need any info, or if you aren't working on it... or if you are interested in a collab or something. Because if no one else does this I'll probably jump on it after I finish this little RPi script.

I won't be working on it. Too busy with job and other project, and I don't own a PS4 to test on either. (Had to visit a mate to test first time).

More useful links
Old archived discussion forum: http://markmail.org/search/?q=[BD-J-DEV]
Very useful. Has helped me a lot. Keep the [BD-J-DEV] tag in the search field when searching.

I also found useful info on https://www39.atwiki.jp/bd-j/
It seems to have moved to http://urojima.com/ now though.
I of course used Google Translate, and it seems the author has been kind enough to include a translation option on the new page itself now. Very nice.
If he's migrated all the info from the old page onto the new page, then there's a lot of useful info there too. Lots of samplecode on various topics.

I also got the "HD Cook Book" (http://hdcookbook.jovial.com/), but you probably don't wanna be spending that kind of money on the project to buy the book.

 

[Chaos Kid]

this is quite obvious how it was done it all goes back to this thread >>

https://www.psxhax.com/threads/ps4-linux-on-3-50-via-blu-ray-drive-with-bdlive-bug-by-00001234.469/

it's a simple remap as you can see this guy just changed the download script to point at an iso but with no way could it be loaded.

basically when you start bdlive the file is downloaded to the system but cause Charles is in the middle and the disc is paused it can be changed to whatever you want.
once you change the script you can load it within exceptions if this guy was creative he would have used the actual files and pointed to a booter like bootp for example.

it does give alot of freedom but one thing I learned just cause it's labelled bd-j/bdlive don't mean it has to be used for that there is other things that can be done

 

[misthalu]

Something else that might be useful:

I've heard that JavaME *** 3.0 for Windows can compile the BD-J and create the Blu-ray Disc ISO or folder in one go - that should be quite handy, eh?

I haven't tested this myself though, because only the Windows version should be able to do this, and I'm running Linux.

But if anyone wanna give it a go, do report back whether this is true or not.

http://www.oracle.com/technetwork/java/javame/javamobile/download/***/java-me-***-3-0-1849684.html

Spoiler

 

[Chaos Kid]

y not try using wine in between the lines? I use arm and a virtual machine from time to time the easiest way for this kinda support when needed which requires wine to run but it does work with windows files

 

[misthalu]

Because I have my own setup that works the way I want it to.

A slightly longer explanation: Back in 2012 when I began looking into BD-J there were no software players for Linux that could play Blu-ray. So I had to use an external device for testing; which ended up being the Dune HD Smart D1. I've set up NetBeans to copy to the Dune device after compiling, so I just have to press Enter on the remote to test.

But sure, if Wine works for you, then why not.