PS4 Development Menu (Debug Mode) Enabled on Retail PlayStation 4

Just over a week ago we heard rumors of accessing the PS4 Debug Mode Settings on retail PlayStation 4 consoles, and today scene developer CTurt confirmed it's now possible to access the PS4 Dev Menu on 1.76 retail units thanks to Flat_z!

Download: Enable Dev Menu / PS4-dlclose.zip / PS4-debugmenu.bin (1.0 MB Compiled) via fx0day / PS4-debugmenu.bin (1.0 MB Compiled) via Di_Scala_ / Tutorial by Chaos Kid / PS4-dlclose GIT

From Stuart Fox via Facebook comes a video demo also.

Update: From lezek20 also comes code to enable the more advanced debug menu (dlclose.bin (1.00 MB) compiled by ultradogg), to quote:

*(char *)0xFFFFFFFF833242FD = 0x81;

Just add it into the kernel payload before this part:

writeCr0(cr0);

This could brick your console btw, so be careful!

Update #2: From @j0lama with help from @sealab (Demo video: jgoake.mp4 - 43 MB) via Twitter:
Download: Fully-Enable-Debug-Settings.bin (1 MB)

Fully enable Debug Settings:
*(uint32_t*) 0xFFFFFFFF8269C07Cull=0;
*(uint32_t*) 0xFFFFFFFF8269B56Full=0;

Thanks to B7U3 C50SS and GrimDoe in the Shoutbox for the heads-up!

 

[proskopina]

#include <stdio.h>
#include <stdint.h>


#define BUF_SIZE 256


int main()
{
    char *args[3];
    char *fd[256];

    int  addr;

    addr = 0x1FFFFFFFF0;

    printf("Sploited");

    scanf_s("%d", &addr);

    if (addr < 100){

        printf("cant sploit cus of the length :/");

    }
    else if (addr == 256){

        printf("sploited like a dumb female dog");

    }

    return 0;

}

i like the (return 0

 

[Chaos Kid]

2013

* micromips-opc.c (decode_micromips_operand): Add +T, +U, +V, +W,
    +d, +e, +h, +k, +l, +n, +o, +u, +v, +w, +x,
    +~, +!, +@, +#, +$, +%, +^, +&, +*, +|.
    (MSA): New define.
    (MSA64): New define.
    (micromips_opcodes): Add MSA instructions.
    * mips-dis.c (msa_control_names): New array.
    (mips_abi_choice): Add ASE_MSA to mips32r2.
    Remove ASE_MDMX from mips64r2.
    Add ASE_MSA and ASE_MSA64 to mips64r2.
    (parse_mips_dis_option): Handle -Mmsa.
    (print_reg): Handle cases for OP_REG_MSA and OP_REG_MSA_CTRL.
    (print_insn_arg): Handle cases for OP_IMM_INDEX and OP_REG_INDEX.
    (print_mips_disassembler_options): Print -Mmsa.
    * mips-opc.c (decode_mips_operand): Add +T, +U, +V, +W, +d, +e, +h, +k,
    +l, +n, +o, +u, +v, +w, +~, +!, +@, +#, +$, +%, +^, +&, +*, +|.
    (MSA): New define.
    (MSA64): New define.
    (mips_builtin_op): Add MSA instructions.

Now so ppl understand these are built updates for both 2016 n 2013.
What's going on here they are using mipsel system and using the asm stubs and headers and building on a ppc to build there base compilers which can also be done vice versa aswel.

Now if you head over and grab the advanced chain you wod see how they do this using the asm headers n stubs from mipsel to support floating points via software all done via ppc64

Ps4linux 55GB discs

 

[SorenAlke]

since im so used to being dissapointed ... have at this...

int is_payload_loaded(void) { u64 addr = peekq(0x80000000000004f0ULL);
if((addr>>32) == 0x534B3145) { addr&= 0xffffffff; if(addr && peekq(0x80000000000004f8ULL)) { restore_syscall8[0]= peekq(0x80000000000004f8ULL); // (8*8) restore_syscall8[1]= peekq(restore_syscall8[0]); pokeq(restore_syscall8[0], 0x8000000000000000ULL + (u64) (addr + 0x20)); return 2; }
return 1; }
return 0; }

 

[mcmrc1]

i wish i could understand something

is it possible to say in simple words what this all means ? in a non dev speak

 

[Chaos Kid]

i wish i could understand something

is it possible to say in simple words what this all means ? in a non dev speak

payload for cfw.
ps3 cfw to the latest all based on 3.41 with 4.xx keys ported

 

[mcmrc1]

cool thx ! maybe a mod should add a dev thread for brainstorming and so on....

first i thought it was for ps4 because of ps4 debug thread

 

[SorenAlke]

payload for cfw.
ps3 cfw to the latest all based on 3.41 with 4.xx keys ported

this is all garbage really sad to see all this

 

[proskopina]

what has to do with ps4??

 

[Chaos Kid]

cool thx ! maybe a mod should add a dev thread for brainstorming and so on....

first i thought it was for ps4 because of ps4 debug thread

Both mine above are cuz they are based on updates for the kernel and I also have the opt codes aswel.
I also explained the rest at the bottom on how this is used to make the toolchains for ps4 aswel as the nice linux 55GB.iso

i wish i could understand something

is it possible to say in simple words what this all means ? in a non dev speak

Above Soren is ps4 related which is y I kept it in here

 

[mcmrc1]

ah ok thx for the info