PlayStation 4 – Firmware 4.05 – System Dump
Simple Person has dumped the Filesystem via FTP on FW 4.05 for everyone to examine the files.
PS4 Model: CUH-1116A
Firmware: 4.050.000
Dumped: 29-12-17
Files: 1.301
Size: 961 MB
Zecoxao shared a 4.05 Kernel Dump for Developers.
Download
PS4 4.05 Payload WIP for Game Modding, UART Enabler and RandTool
Read more at
PS4 4.05 Payload WIP for Game Modding, UART Enabler and RandTool
Continuing in the
holiday rush since the
4.05 PS4 Kernel Exploit release, we've now seen a
4.05 Kernel Dump and
Rizzo Signatures for 4.05 surface alongside some code (below) that scene developers can use for a payload to kick off
PS4 4.05 game modding from
Skillsofcape (aka @01cedric) following his work on the
WEBRTM Game Mod Project.
image:
https://www.psxhax.com/styles/default/xenforo/clear.png
:veryhappy:
Next up, since the
PS4 Fat, Slim and Pro Serial / Flash Pinouts were documented PlayStation 4 scene developer
VVildCard777 turned up the heat after his
PS4 Debug Settings Demo by sharing some UART Enabler 4.05 payload code (below) for developers interested in
making use of the
PS4 UART for further research.
image:
https://www.psxhax.com/styles/default/xenforo/clear.png
The
PS4 PUP Unpacker also continues getting
updated from
Zer0xFF, while PlayStation 4 developer @zecoxao announced on
Twitter that
Zer0Tolerance discovered the method Sony uses for generating "metadata" in lv1 fselfs.
image:
https://www.psxhax.com/styles/default/xenforo/clear.png
:-D
4.05 Kernel
Code:
proc_rwmem > 0xFFFFFFFF9F0B3BB0
Enjoy Game Modding on 4.05
image:
https://www.psxhax.com/styles/default/xenforo/clear.png
(-:
image:
https://www.psxhax.com/styles/default/xenforo/clear.png
[img src="
https://www.psxhax.com/styles/default/xenforo/clear.png" class="mceSmilieSprite mceSmilie164" alt="<3>
proc_rwmem on 4.05 (for payload usage)
image:
https://www.psxhax.com/styles/default/xenforo/clear.png
(-:
Code:
#define KERN_PROC_RWMEM 0x0ABBB0 int(*proc_rwmem)(int addr, int len) = NULL; proc_rwmem = (void *)&ptrKernel[KERN_PROC_RWMEM];
Happy Modding
image:
https://www.psxhax.com/styles/default/xenforo/clear.png
[img src="
https://www.psxhax.com/styles/default/xenforo/clear.png" class="mceSmilieSprite mceSmilie164" alt="<3>
kern_ptrace on 4.05 (for payload usage)
image:
https://www.psxhax.com/styles/default/xenforo/clear.png
(-:
Code:
#define KERN_PTRACE 0x0AC230 int(*ptrace)(int req, int pid, void *argsAddr, int data) = NULL; ptrace = (void *)&ptrKernel[KERN_PTRACE];
Happy Modding
image:
https://www.psxhax.com/styles/default/xenforo/clear.png
[img src="
https://www.psxhax.com/styles/default/xenforo/clear.png" class="mceSmilieSprite mceSmilie164" alt="<3>
Disable Process ASLR 4.05 (Not tested):
Code:
*(uint16_t *)0xFFFFFFFF9F28E202 = 0x63EB; #define DISBL_PROC_ASLR 0x286202
uart enabler for 4.05
image:
https://www.psxhax.com/styles/default/xenforo/clear.png
(-:
Code:
uint16_t *securityFlags = (uint64_t *)(kernel_base+0x2001516); *securityFlags = *securityFlags & ~(1 << 15); *(char *)(kernel_base + 0x186b0a0) = 0;
right, i only solder 1 wire (tx on ps4) and attach gnd wire to hdd cage, then using like 5$ uart to usb i listen on arduino (serial montor). very simple.
Zer0Tolerance found the method Sony uses for generating the "metadata" in lv1 fselfs. Documentation Soon
fun fact: they use a random generator
Download:
randtool-master.zip /
GIT
From the
README.md file:
randtool
Implementation of the algo used to generate lv1 fselfs "metadata"
Thanks to @DarkElementPL, @FabOne, @raedoob, @Trojaner and @Wultra for the news tips in the
PSXHAX Shoutbox earlier today!
image:
https://www.psxhax.com/styles/default/xenforo/clear.png
:lovewins:
image:
https://www.psxhax.com/attachments/...e-modding-uart-enabler-and-randtool-jpg.3479/
Read more at
PS4 4.05 Payload WIP for Game Modding, UART Enabler and RandTool
Google