PS4 Jailbreaker Qwertyoruiopz Confirms 4.50 Kernel Read / Write Access!

Last week PlayStation 4 developer qwertyoruiopz made available a JailbreakMe PS4 4.0x Webkit exploit for OFW 3.55 through 4.07, and over this weekend he received an invite from the Rebug Team while sharing progress updates leading to confirmation of a 0day 4.50 kernel exploit obtaining R/W (Read / Write) access!

His latest JailbreakMe PS4 4.0x (Mirror via @X41) update states the exploit supports all non-4.50 Firmware, but specifically targets 4.06 currently due to ROP gadgets being hardcoded.

To recap, those on PS4 1.76 Firmware were able to make use of the Kernel Exploit Source Code that progressed to a PS4 BadIRET PoC finally leading to the 1.76 PS4 Dlclose Exploit.

For those on PS4 Firmware 4.07 or below you can use the JailbreakMe PS4 4.0x Exploit to gain userland access, and users on System Software 4.50 can rest assured a 0day 4.50 kernel exploit also exists although there is no user-level entry point for 4.50 OFW reported publicly as of yet.

Also keep in mind PlayStation 4 scene developers may decide to hold off disclosing the 0day PS4 4.50 kernel exploit much like the PS4 Pro 0day Exploit that was confirmed by Mathieulh until Sony patches it, so for the moment as usual the safest bet may be holding off making any System Software updates.

Finally keep an eye on the PS4 Dev Working Exploits page for an updated listing of PlayStation 4 WebKit / Userland and Kernel Exploits.

Thanks to @DoxyMarket, @hyndrid, @joona70, @mcmrc1, @Plankton, @sealab, @vettegast, @X41 and @xxmcvapourxx for the tips in the PSXHAX Shoutbox!

 

[SwordOfWar]

How can they confirm the kernel exploit works on 4.50 if they have no entry point to test it? Are they just guessing that its unpatched because the exploit is new, or do people behind the scenes have a 4.50 entry point exploit and just keeping it secret?

 

[MadMan467]

How can they confirm the kernel exploit works on 4.50 if they have no entry point to test it? Are they just guessing that its unpatched because the exploit is new, or do people behind the scenes have a 4.50 entry point exploit and just keeping it secret?

Good question. I think its because it is a 0day exploit. I also think they said that it SHOULD work, so not 100% confirmation.

 

[Ashford]

Good to see that scene isnt dead!
Keep the good work boyz

 

[Chaos Kid]

while this isn't a 100% there is always holes in the kernel and other areas allowing access. Sony will patch this guaranteed. using an old system for new is never a good recommendation.

 

[Thisismrnameles]

4.07 would be the last possible thing?

no

 

[Ni9ht]

may soon we have good news

 

[vtaker]

I'm on 4.50 already. Ps4 pro Boost mode baited me into updating But it sounds promising that there is kernel access in 4.50.

 

[endimetal]

I'm on 4.50 already. Ps4 pro Boost mode baited me into updating But it sounds promising that there is kernel access in 4.50.

I have no courage to do exploit on my 4.50 ps4 slim. But my biggest wish I can install pkg manually on 4.50... (in my dream)

 

[shagon36]

does it work on ps4 ofw 4.07???

 

[kuroko1]

does it work on ps4 ofw 4.07???

Yes.