PS4 Developer Specter on Jailbreak vs CFW, Reversing SPRXs & More

Recently PlayStation 4 developer Specter updated the PS4 Playground 3.55 successor to PS4Console v1.1, and since then he's started Specter's Development Blog to share information and progress with other developers.

Thus far, there are two PS4 Dev entries which we'll link you to below:

• [PS4] Jailbreak vs. Custom Firmware (CFW)
• [PS4] Reversing libkernel.sprx + System Call 593 Note

Here are some recent Tweets from SpecterDev also:

• https://www.icreversing.com/chips

• https://siliconpr0n.org/wiki/doku.php
• https://siliconpr0n.org/map/

 

[PSXHAX]

Here are a few related articles also, sorted by date:

• PS4 ROP SPRX ELF File Archive
• PS4PRX: PS4 SPRX Modules Creation and Loading
• PRXtoSPRX to Convert PS4 PRX to SPRX
• Tiny PS4 Shell for Decrypting SELF / SPRX Files

 

[sped]

@oneman123 I couldn't find any such ftp payload

@PSXHAX thanks, I found that Tiny PS4 shell worked with telnet self2elf for sprx files, it spat out a new file with .ELF as file magic, but my decompiler (hopper for Linux) still doesn't want to load it intelligibly. I assume it needs a custom loader which probably only exist for ida or ghidra at this moment

 

[PSXHAX]

Here's an article on XVortex's PS4 FTP Payload, not sure if @oneman123 uses a 'special' build of it though.

While there are several console plugins for IDA Pro and Ghidra (below, sorted by date), the only mention of Hopper I see is in a post HERE.

• PS3IDA
• PS3IDA Updates
• PS Vita IDA PhysDump Loader
• Vitaldr for IDA Pro Disassembler
• PS4 Kernel Symbols IDA IDC Script
• PS4 NID Resolver IDA Plugin
• DYNLIB IDA Pro Plugin for PS4 User Mode ELFs
• PS4 ELF Loader for IDA Pro with IDC Database Dump Importer
• GhidraPS4Loader PS4 ELF Loader
• GhidraOrbisTools: PS4 Loader with IDA Script Ports
• PlayStation 4 Kernel Loaders for IDA 7.0+
• PS4 Userland Module Loader for IDA
• PS4 Name 2 NID Plugin for IDA 7.0-7.2
• PS4 Kernel Fixup Script for IDA 7.0-7.2
• PS4 IOCTL Nabber for IDA 7.0-7.2
• IDA ConsoleHacking Scripts Repository
• IDA ConsoleHacking Scripts Repo Updates
• PS4 Syscon Firmware Loader for Ghidra
• PS4 NVS Args Extractor IDA Plugin
• PS4 Syscon Loader for IDA 7.0-7.2 & Xorloser's IDA Console Stuff (PS3 / Xbox360)
• PS4 GTA V Native Updater IDA Pro 7.0+ & Ghidra Ethylamine Port
• GhidraOrbis: Updated Ghidra PS4 Loader Plugin

 

[oneman123]

no special build, this feature genuine "dumps self's on-the-fly" or alex made nice dumper