POOBS4 Buildroot PS4 9.00 Exploit Web Server / USB Emulation by Shivelight

Proceeding the PS4PiZero / PS4RaspberryPi project, PlayStation 4 Scene developer @Shivelight (Twitter) recently made available via Github a pOOBs4 Buildroot Web server and USB emulation project for the PS4 9.00 pOOBs4 Jailbreak Exploit with Orange Pi Zero / Orange Pi Zero LTS support initially and additional boards including Raspberry Pi Zero W / Raspberry Pi Zero 2 W to be added as stock arrives.

Download: pOOBs4 buildroot (Latest Version) / pOOBs4-buildroot-main.zip / GIT

Spoiler: Depreciated

Here are further details from the README.md: pOOBs4 buildroot

Introduction

This repository contains buildroot external tree for building a minimal Linux image to host pOOBs4 web server and emulate its exfathax USB.

Building

Clone the repository and buildroot version 2021.11:

git clone https://github.com/Shivelight/pOOBs4-buildroot
git clone -b 2021.11 --depth 1 git://git.buildroot.net/buildroot

Configure buildroot to use BR2_EXTERNAL tree and start building. Replace <boardname> with your board defconfig available in configs/ directory or from the Supported Board section:

cd buildroot
make BR2_EXTERNAL=../pOOBs4-buildroot/ <boardname>_poobs4_defconfig
make

The final image is saved here output/images/sdcard.img.

Supported Board

If you have a board that is not listed, feel free to contribute!

Below is the currently supported board with defconfig ready use.

• Orange Pi Zero / Orange Pi Zero LTS [ orangepi_zero_poobs4_defconfig ]
• Raspberry Pi Zero W [ not yet ]
• Raspberry Pi Zero 2 W [ not yet ]
• your board?

Note: You need a board with a USB OTG port for exfathax emulation. All boards listed should have a built-in USB OTG port unless stated otherwise.

not yet: I'm willing to build and test, but currently don't have any and still waiting for restock

Installing

Download the image for your board from the release page or build it yourself. Then write the image to your SD card using dd:

sudo dd if=output/images/sdcard.img of=/dev/sdX bs=4M

Alternatively, you can use:

• USBImager on Windows/Mac/Linux
• balenaEtcher on Windows/Mac/Linux
• Rufus on Windows

Updating

This section is here to warn you to backup any customization you made or, better yet, fork this repo and do your customization there. Writing image to SD card destroy its existing content.

To update see Installing.

Running

Insert SD card and plug the board into PS4 using the USB OTG port. You don't need another power cable; your board will draw power from PS4. It may take 30 seconds to boot up for the first time. Afterward, it should only take ≤5 seconds.

Note: SuperSpeed USB (USB 3.1 Gen 1), which PS4 uses, has a maximum power output of 5V/0.9A. Consider this.

Connecting PS4 to the board

Follow these steps to connect your PS4 to the board:

1. On your PS4 go to Settings -> Network -> Set Up Internet Connection -> Use Wi-Fi -> Custom
2. Select pOOBs4 on the list
3. When asked for the password, input: 12345678
4. Now, for each step, select:
   1. IP Address Settings: Automatic
   2. DHCP Host Name: Do Not Specify
   3. DNS Settings: Automatic
   4. MTU Settings: Automatic
   5. Proxy Server: Do Not Use
5. You are set!

Running the exploit

You can run the actual pOOBs4 exploit either by visiting http://10.0.0.1/ from the PS4 browser or from Settings -> User's Guide/Helpful Info -> User's Guide. The host is based on Leeful's 9v4 (w/ GoldHEN v2.0b2), slightly modified to use the USB emulation.

Payload

Use Payload Guest.

Accessing the board

You can SSH/SFTP to the board using the root user; the board IP is set to 10.0.0.1 (wlan) by default.

ssh [email protected]

The root user does not have a password. You can set a new password if you want using passwd.

Cheers to MSZ_MGS on Twitter and perou64 for the heads up earlier on!

 

[Cybereu]

I have an orange pi zero at home but I use it for Octoprint and a Banana pi zero that was waiting its moment to shine... but I don't have that know-how to do everything manual darkdevil said, so I should wait for Shivelight or buy another OPI0.

 

[DubZeroSP]

Good stuff!

 

[Shivelight]

@Cybereu Just want to confirm, it is Banana Pi M2 Zero right? Tracked here.

I'm currently in intense schedules so I will be slower for providing support. I have prepared Action to help with building image tho.

 

[Cybereu]

@Shivelight
You're right, it's Banana Pi m2 Zero.
Take your time, I don't want to mess up your responsibilities.

 

[Shivelight]

@Cybereu There is a PR by DanielVolz here. You can find the image I build here if you want to try it.

 

[ukinami]

Raspberry pi 4

Thanks

 

[Shivelight]

Release candidate 0.5.0 on dev branch. No new feature, only new supported board. Although there is automatic jailbreak discussion, and everything needed is already there, we just need to utilize it.

New supported board:

• Banana Pi M2 Zero*
• Raspberry Pi 4 Model B
• Raspberry Pi Zero W
• Raspberry Pi Zero 2 W

*Image/defconfig is tested

dev branch builds can be downloaded on the Actions tab.

You can read the Versioning on the README.

cc @ukinami

 

[MasterMouse]

Sorry all, Linux noob here.

[root@Ansible-Target-1 buildroot]# make BR2_EXTERNAL=/root/pOOBs4-buildroot/configs/orangepi_zero_poobs4_defconfig
Makefile:194: *** '/root/pOOBs4-buildroot/configs/orangepi_zero_poobs4_defconfig': no such file or directory.  Stop.
[root@Ansible-Target-1 buildroot]# pwd
/root/buildroot
[root@Ansible-Target-1 buildroot]#

What am i doing wrong

 

[Shivelight]

@MasterMouse should have been

make BR2_EXTERNAL=/root/pOOBs4-buildroot orangepi_zero_poobs4_defconfig

I can see where it could be wrong/not clear enough. I will update the readme to add a clear example. Thanks for asking.

 

[MasterMouse]

Yeah and i was missing a bunch of compile modules. I noticed i was missing the space there, which lead me too all the missing make modules. This may be the second make ive run in my life

Compiler seems to run fine now its running for a few mins already.
Thanks for the prompt reply and hard work obviously