Post: [3.55] PS4 Playground Released (Open-Source)
08-09-2016, 02:47 AM #1
Specter
Pro Memer
(adsbygoogle = window.adsbygoogle || []).push({}); Introduction

So as most of you who read this section probably know, the other day Fire30 ported the PSVita exploit from HENKaku (originally developed by xyz), and I decided to build a project around this exploit. Where the original POC made you setup a python server on your PC and such, with PS4 Playground, everything works straight through your PS4's Web Browser. It was a bit of an annoyance to make everything work, especially when the exploit would crash the webkit process as soon as it was finished executing, however with some magic I made it work.

I stabilized and cleaned up the exploit a bit, and designed the site, however the credit for the exploit goes to Fire30 and xyz, and the original idea for PS4 Playground as well as the JuSt-ROP project all goes to CTurt. If you have anything to contribute, please feel free to fork the repository and submit a pull request.


Requirements

You will need FakeDNS to spoof manuals.playstation.net, you will also need XAMPP to run an apache host for PS4 Playground to run on. To quote the readme;

Originally posted by another user
You will need fakedns. You also need to edit the dns.conf to point to the ip address of your PC (can be found in cmd/terminal by typing ipconfig/ifconfig), and modify your consoles' DNS settings to point to your PC's address. Then type the following in your terminal;

python fakedns.py -c dns.conf

You will also need to setup xampp on your computer and run Apache on port 80. For the easiest method, in /htdocs, create the '/document/en/ps4' directory and place the files from this repo in there.

When your fake dns is running and you've setup your localhost server in xampp, you can navigate to PS4 -> Settings -> User Guide. It should then show PS4 Playground.



Notes

The exploit will not run correctly all of the time. Sometimes it will stick at stage 4 or webkit will crash before the script is finished. If it doesn't work at first, keep trying until it does, it shouldn't take long.

Refreshing the page after a successful attempt or going to another page will crash webkit. Just hit OK and it will resume to the next action you wanted to perform.

The project isn't 100% complete, it's an on-going work-in-progress.


Preview Images

You must login or register to view this content.



Acknowledgements

Fire30 - The porting of the WebKit Exploit to PS4
Xerpi - Functions in his POC edit that I ported over (these functions made things way easier and more efficient)
XYZ - The original exploit for the PSVita
CTurt - JuSt-ROP, the original PS4 Playground, as well as his work with 1.76.
Red-EyeX32 - Assistance in development


Links

You must login or register to view this content. - You must login or register to view this content.


While the exploit and PS4 Playground aren't incredibly useful at the moment, if and when a kernel exploit is found, things will get a lot more interesting
Last edited by Specter ; 08-11-2016 at 07:16 PM.

The following 39 users say thank you to Specter for this useful post:

/SneakerStreet/, 2much4u, ackendo, ANONY420, anonymous style, Red-EyeX32, BurnMoDzHQ, Creepzoid 0___0, DeezShinyNutz, DMAAR-7777, DMoney750, Dog88Christian, DrZepto, EdiTzZ, EvilDevilReX, Gryphus, Frosty, Geo, Im_YouViolateMe, itzyourboiidann, Joel, Kryptus, LaughTracks, lucasaf01, MOD-RuLeZ, MODZ4FUN420, Mr.Peanut, Nana, Darth Saul, seb5594, Kronos, Jon Snow, STVBDKD, User343234, Vondy Supreme, Xx-GIPPI-xX, xxmcvapourxx, yan88
08-16-2016, 07:06 PM #83
Originally posted by Cryptic View Post
So do I need to do this for a future 'jailbreak' level exploit? If so how do I trick Sony into thinking I'm on the latest version when the updates come?


Using You must login or register to view this content.[/url].
Last edited by Toxic ; 08-16-2016 at 08:52 PM.
08-17-2016, 09:41 AM #84
Originally posted by EyeX32 View Post
Using You must login or register to view this content.[/url].


did you manage to fix the eu side of this psproxy?
08-17-2016, 10:17 AM #85
xNIGHTMAREM0DZx
NextGenUpdate Elite
did anyone notice lately that sony updated there terms of service ? an they could be talking about exploiting the system to stay on a lower firmware
08-17-2016, 12:38 PM #86
Cryptic
Former Staff | Content Manager
Originally posted by EyeX32 View Post
Using You must login or register to view this content.[/url].


Well that addresses the update problem. :p


Do I, or should I do this exploit for future 'jailbreak' level exploits?
08-17-2016, 03:54 PM #87
Specter
Pro Memer
Originally posted by Cryptic View Post
Well that addresses the update problem. :p


Do I, or should I do this exploit for future 'jailbreak' level exploits?


No it's not needed for that, it's mainly for developers and those who are curious, as you can dump modules and memory. From there you can reverse things/explore.
08-17-2016, 03:58 PM #88
Cryptic
Former Staff | Content Manager
Originally posted by Specter View Post
No it's not needed for that, it's mainly for developers and those who are curious, as you can dump modules and memory. From there you can reverse things/explore.


So if this isn't needed for future 'jailbreak' level exploits would it be wise to fake my version to remain on 3.55 should such an exploit one day appear?
08-17-2016, 07:27 PM #89
Originally posted by Cryptic View Post
So if this isn't needed for future 'jailbreak' level exploits would it be wise to fake my version to remain on 3.55 should such an exploit one day appear?


Yes, as most likely that Sony is going to patch it.
08-18-2016, 01:48 PM #90
anthonything
Space Ninja
Originally posted by Hacks4You10 View Post
3.55 is gold


Hi there
08-19-2016, 01:44 AM #91
Any possible way you can let us load the debug menu / add it like you could in older firmware?

Copyright © 2024, NextGenUpdate.
All Rights Reserved.

Gray NextGenUpdate Logo