Category PS4 Jailbreaking       Thread starter PSXHAX       Start date Feb 28, 2018 at 12:07 AM       126,660       239            
Status
Not open for further replies.
Since the PS4 4.55 Kernel Exploit release followed by the PS4 5.01 WebKit Exploit, PlayStation 4 developer @SpecterDev made available on Twitter a fully implemented Cryptogenic PS4 4.55 Kernel Exploit akin to his previous one in that it doesn't contain code related to defeating anti-backups mechanisms... meaning most should take heed of @flatz's advice on Twitter and hold off updating from 4.05 to 4.55 OFW if you lack the necessary skills to port payloads or wait for other forks to surface as in 4.05 first before updating. o_O

According to a screenshot (below) from @Mathieulh on Twitter, PS4 developer m0rph3us1987 shared a ps4_455_holygrail.bin (67.7 KB) private payload containing flat_z's Debug PKG and FSELF code which Rebug developer @Joonie replied to on Twitter with the file's MD5 hash of 38F5E677A543EF93FB9A75096F983F89 for those on the hunt... good luck! :confused:

In the midst of all the PlayStation 4 scene excitement today, PS4 developer qwertyoruiopz still managed to release a PS4Brew full 4.55 PS4 jailbreak followed by a bugfix update in 4.55 PS4 jailbreak v2 with some changes detailed. <3

@Andrew Marques let us know on Twitter that he tested a debug_settings.bin (16.2 KB) 4.55 port done by @2much4u with some enableWebBrowser455.bin (16 KB) and fullDebugSettings455.bin updates (REMINDER: DON'T GO INTO IDU MODE) via Twitter and video footage below. (y)

Finally, Mikeads points out that PS4 developer @Al Azif earlier today changed 4.05 refs to 4.55 in preparation for PS4 Exploit Host updates which should now support 4.55 in this ps4-exploit-host.zip (4.81 MB) build... so to reiterate from CelesteBlue and Mathieulh, give scene devs time to port 4.05 apps and payloads to 4.55 before updating from 4.05 OFW to 4.55 Firmware unless you possess the skills to do it all on your own as nobody knows how long it will be before things like PS4HEN will be publicly available for 4.55 owners. :unsure:

To quote from the README.md: PS4 4.55 Kernel Exploit

Summary

In this project you will find a full implementation of the "bpf" kernel exploit for the PlayStation 4 on 4.55. It will allow you to run arbitrary code as kernel, to allow jailbreaking and kernel-level modifications to the system. This release however, does not contain any code related to defeating anti-backups mechanisms or running homebrew. This exploit does include a loader that listens for payloads on port 9020 and will execute them upon receival.

This bug was discovered by qwertyoruiopz, and can be found hosted on his website here.

Patches Included

The following patches are made by default in the kernel ROP chain:
  1. Disable kernel write protection
  2. Allow RWX (read-write-execute) memory mapping
  3. Syscall instruction allowed anywhere
  4. Custom system call #11 (kexec()) to execute arbitrary code in kernel mode
  5. Allow unprivileged users to call setuid(0) successfully. Works as a status check, doubles as a privilege escalation.
Notes
  • Early stages, so no payloads yet, I may provide a debug menu payload later on in the day.
Contributors

Massive credits to the following:
:arrow: How to migrate from 4.05 to 4.55 OFW for those using PS4 Exploit Host quick guide by Fimo:

1. Download 4.55 retail OFW: https://darthsternie.net/index.php/ps4-firmwares/
2. Save it to your exfat32 usb HD: PS4/UPDATE/PS4UPDATE.PUP
3. Plug the HD on the right port of your PS4, on your PS4 go to settings, upgrade your 4.05 FW
4. On your PC, delete your old ps4-exploit-host and save the new one v0.4.0.1
5. On your PC, run ps4-exploit-host.exe
6. Go back to your PS4, settings/guide, run the 4.55 HEN exploit = done !

Full PS4 4.55 New Jailbreak Setup Tutorial
Cheers to @B7U3 C50SS, @Chaos Kid and @Wultra in the PSXHAX Shoutbox for the news tips today! :beer:
PS4Brew 4.55 Full PS4 Jailbreak, 4.55 Debug Settings Payload Ports.jpg
PS4Brew 4.55 Full PS4 Jailbreak, 4.55 Debug Settings Payload Ports 2.jpg
 

Comments

Status
Not open for further replies.

Taving

Member
Contributor
Hi, I have a question about the payloads, On 4.05 there was a payload to block the update of system. Payload of 4.55 has that function? or not. I fear that my ps4 download the update file. :(

But, good news to us guys.

have a good week!
 

valenroy

Senior Member
Contributor
@Taving You'll have to FTP into the PS4 and delete the file in the updates folder before you can update again. This also means you cannot update to 4.55 as well if you don't delete the file.
 

Mikeads

Senior Member
Contributor
@Taving When you get to DNS Settings select Manual and set the Primary to 165.227.83.145 and the Secondary DNS to 108.61.128.158 or visa-versa. but update blocker will come just to be safe uncheck all your system setting off like internet on in rest mode etc
 
Status
Not open for further replies.
Recent Articles
Mega Man Zero / ZX Legacy Collection Joins New PS4 Games Next Week
Named one of PlayStation's Most-Wanted PS4 Games of early 2020, next week Capcom's Mega Man Zero / ZX Legacy Collection joins the latest PS4 game releases! šŸ¤© Mega Man Zero/ZX Legacy Collection...
Golang Library to Read PS4 Controller Evdev Events by Mrasband
Since covering the PyPS4Controller Linux Module in development, this weekend mrasband made available a Golang Library based on the Go Programming Language designed at Google to read PS4 DualShock...
AppendumPS4 v2.00 for PlayStation 4 v5.05 Preview by DeathRGH
Proceeding the AppendumPS4 v1.0 release, this weekend PlayStation 4 developer @DeathRGH shared via Twitter a preview of the AppendumPS4 v2.00 mod menu in development on his YouTube Channel. šŸ˜...
PS4 Renesas RL78 Debug Protocol Implementation by Fail0verflow
Following the PS4 SysCon Renesas Chip Image and updates by droogie, PS4 Glitch Pinout research via @juansbeck and their PS4 Aux Hax Parts 1-4 today fail0verflow shared with PlayStation 4 scene...
Top