Category PS4 CFW and Hacks       Thread starter PSXHAX       Start date Dec 30, 2017 at 12:38 AM       9,899       13            
Continuing in the holiday rush since the 4.05 PS4 Kernel Exploit release, we've now seen a 4.05 Kernel Dump and Rizzo Signatures for 4.05 surface alongside some code (below) that scene developers can use for a payload to kick off PS4 4.05 game modding from Skillsofcape (aka @01cedric) following his work on the WEBRTM Game Mod Project. :veryhappy:

Next up, since the PS4 Fat, Slim and Pro Serial / Flash Pinouts were documented PlayStation 4 scene developer VVildCard777 turned up the heat after his PS4 Debug Settings Demo by sharing some UART Enabler 4.05 payload code (below) for developers interested in making use of the PS4 UART for further research. :ninja:

The PS4 PUP Unpacker also continues getting updated from Zer0xFF, while PlayStation 4 developer @zecoxao announced on Twitter that Zer0Tolerance discovered the method Sony uses for generating "metadata" in lv1 fselfs. :-D

4.05 Kernel
Code:
proc_rwmem > 0xFFFFFFFF9F0B3BB0
Enjoy Game Modding on 4.05 (-: <3
proc_rwmem on 4.05 (for payload usage) (-:
Code:
#define KERN_PROC_RWMEM 0x0ABBB0 int(*proc_rwmem)(int addr, int len) = NULL; proc_rwmem = (void *)&ptrKernel[KERN_PROC_RWMEM];
Happy Modding <3
kern_ptrace on 4.05 (for payload usage) (-:
Code:
#define KERN_PTRACE 0x0AC230 int(*ptrace)(int req, int pid, void *argsAddr, int data) = NULL; ptrace = (void *)&ptrKernel[KERN_PTRACE];
Happy Modding <3
Disable Process ASLR 4.05 (Not tested):
Code:
*(uint16_t *)0xFFFFFFFF9F28E202 = 0x63EB; #define DISBL_PROC_ASLR 0x286202
Kernel patch to disable process ASLR on 4.05
Code:
*(uint16_t*)(kernelBase + 0x2862D6) = 0x9090;
DSa4cvUX4AIm4I3.jpg

uart enabler for 4.05 (-:
Code:
uint16_t *securityFlags = (uint64_t *)(kernel_base+0x2001516); *securityFlags = *securityFlags & ~(1 << 15); *(char *)(kernel_base + 0x186b0a0) = 0;
right, i only solder 1 wire (tx on ps4) and attach gnd wire to hdd cage, then using like 5$ uart to usb i listen on arduino (serial montor). very simple.
Zer0Tolerance found the method Sony uses for generating the "metadata" in lv1 fselfs. Documentation Soon
fun fact: they use a random generator
Download: randtool-master.zip / GIT

From the README.md file: randtool

Implementation of the algo used to generate lv1 fselfs "metadata"

Thanks to @DarkElementPL, @FabOne, @raedoob, @Trojaner and @Wultra for the news tips in the PSXHAX Shoutbox earlier today! :lovewins:

PS4 4.05 Payload WIP for Game Modding, UART Enabler and RandTool.jpg
 

Comments

aneesh

Senior Member
Contributor
Game modding even before launching actual games ? Fantastic I say.

This proves that there is lot of talent. On fire !!!!
 

alaaltayeb

Senior Member
Contributor
pleassse i buy a new ps4 with 4.05 and i dont know how to run the exploit and debug setting every time i have 3 dots in middle of screen anyone can help
 

LightningMods

Developer
Senior Member
Contributor
@PSXHAX mm. why does it say this or in a PS4 thread? Im just asking because this isnt about PS4 but the PS3 even Zeco said so
Or.. maybe im looking at it in the wrong context?



 

PSXHAX

Staff Member
Moderator
Contributor
Verified
@LightningMods Yep, another case of you forgetting I'm a human being, I'm not perfect, and I'm spending 10+ hours a day here lately trying to keep up so sometimes news and tweets will be combined in articles making them a catch-all for what's happening at the time.

This typically occurs when I'm busy to save time, as I do have a real life beyond PlayStation stuff and with things heating up in the scene I expect combining news, tweets, etc in one post will happen quite often in coming months.

That said, please keep in mind each will not always have a separate article, category, etc for the future so that I don't have to invest more time re-explaining this all over again thanks!
 
Recent Articles
PSPlay: PS4 Remote Play App for Android Devices by Grill2010
Hi, In case someone is interested, after PSJoy which I've released one year ago and following my RemotePlayPrototype open source research project I have developed a new Android app called PSPlay...
PS4 Open-world RPG Shenmue III Joins New Games Next Week
Next week Yu Suzuki's open-world RPG series returns in the legendary Shenmue III on PS4 among the new video game releases! šŸ•¹ PlayStation 4 fans can catch up with Ryo Hazuki in his ongoing quest...
Sony Asks PS4 Players for Feedback Ahead of PS5 Launch Next Year
According to kasual7, Sony recently sent out a survey asking for feedback from PS4 players ahead of the PS5 Launch late next year. šŸ¤” The questionnaire states: Tell us about your time with PS4 -...
Harsh Survival RPG Rust Launches on PlayStation 4 in 2020, PS4 Trailer
Video game developers Facepunch Studios and Double Eleven announced that the harsh survival RPG Rust on PC is slated to launch on PlayStation 4 in 2020 complete with a PS4 announcement trailer...
Top