10.50 / 10.70 / 10.71 and 9.50 / 9.60 Support #23

rafaelflromao · 2024-05-02T01:21:12Z

Added offsets for 10.50 / 10.70 / 10.71 and for 9.50 / 9.60

Tested versions:

@EchoStretch

EchoStretch · 2024-05-02T03:19:41Z

I'm not 100% sure but i search half and they all came up the same.
once I'm done with helping sistro ill update to 10.70 and test

Sulfrix · 2024-05-02T03:28:16Z

Works on 10.71

rafaelflromao · 2024-05-02T03:30:56Z

once im done with helping sistro ill update to 10.70 and test

Works on 10.71

Thank you

amraj007 · 2024-05-02T04:42:29Z

I have 10.70

rafaelflromao · 2024-05-02T05:07:53Z

I have 10.70

Can you test it?

Incineroar · 2024-05-02T05:24:42Z

I haveve 10.50 and I am currently getting my laptop set up to build this so I can test it out for you.

kotn3l · 2024-05-02T05:24:54Z

I have 9.60, gonna test once it's available.

rafaelflromao · 2024-05-02T05:26:58Z

I have 9.60, gonna test once it's available.

Can you build it?

kotn3l · 2024-05-02T05:27:51Z

I have 9.60, gonna test once it's available.

Can you build it?

I think so, but I'll let you know if I need a build.

amraj007 · 2024-05-02T05:27:52Z

I have 10.70

Can you test it?

I don’t know how to do xD

rafaelflromao · 2024-05-02T05:28:30Z

I have 10.70

Can you test it?

I don’t know how to do xD

Do you have Linux?

amraj007 · 2024-05-02T05:34:52Z

I have 10.70

Can you test it?

I don’t know how to do xD

Do you have Linux?

No

Incineroar · 2024-05-02T05:42:21Z

I haveve 10.50 and I am currently getting my laptop set up to build this so I can test it out for you.

Update:

Took a couple attempts but it worked 👍 First attempt failed at scanning for corrupted object and the second attempt was successful.

rafaelflromao · 2024-05-02T05:45:26Z

I have 9.60, gonna test once it's available.

Can you build it?

I think so, but I'll let you know if I need a build.

You can build it from https://github.com/rafaelflromao/PPPwn/

amraj007 · 2024-05-02T05:59:10Z

I haveve 10.50 and I am currently getting my laptop set up to build this so I can test it out for you.

Update:

Took a couple attempts but it worked 👍 First attempt failed at scanning for corrupted object and the second attempt was successful.

Can you try the 10.70

Incineroar · 2024-05-02T06:02:37Z

Can you try the 10.70

I think @EchoStretch was going to test that. I don't really want to update my system and I have everything set up for 10.50 now.

rafaelflromao · 2024-05-02T06:08:53Z

I haveve 10.50 and I am currently getting my laptop set up to build this so I can test it out for you.

Update:

Took a couple attempts but it worked 👍 First attempt failed at scanning for corrupted object and the second attempt was successful.

Can you try the 10.70

If it works on version 1.50 and on version 1.71, the chance of it working on version 1.70 is very high.

fffoo · 2024-05-02T06:10:59Z

I'm gonna test on my 10.50 console too in a minute or two

W-i-n-7 · 2024-05-02T06:11:01Z

tested 8 times on 10.50 ps4 pro
linux mint on vmware workstation

attempts:
1: crashed ps4 and bootlooped a few times
2 & 3: please retry (scanning object failed)
4: started before i tested the connection & failed please retry (scanning object failed)
5: failed please retry (scanning object failed)

--i restarted the ps4--

6: failed please retry (scanning object failed)
7: failed please retry (scanning object failed)
8: crashed ps4 when i unplugged ethernet (scanning object failed)

rafaelflromao · 2024-05-02T06:16:22Z

tested 8 times on 10.50 ps4 pro linux mint on vmware workstation

attempts: 1: crashed ps4 and bootlooped a few times 2 & 3: please retry (scanning object failed) 4: started before i set up the connection & failed please retry (scanning object failed) 5: failed please retry (scanning object failed)

--i restarted the ps4--

6: failed please retry (scanning object failed) 7: failed please retry (scanning object failed) 8: crashed ps4 when i unplugged ethernet (scanning object failed)

tested 8 times on 10.50 ps4 pro linux mint on vmware workstation

attempts: 1: crashed ps4 and bootlooped a few times 2 & 3: please retry (scanning object failed) 4: started before i tested the connection & failed please retry (scanning object failed) 5: failed please retry (scanning object failed)

--i restarted the ps4--

6: failed please retry (scanning object failed) 7: failed please retry (scanning object failed) 8: crashed ps4 when i unplugged ethernet (scanning object failed)

Did you specify the correct firmware version when building?

W-i-n-7 · 2024-05-02T06:16:41Z

yes i did

W-i-n-7 · 2024-05-02T06:17:44Z

i have a hunch it was vmware doing something as linux mint was spamming network errors constantly
im installing mint on virtual box at the moment will test with that too

dany1305 · 2024-05-03T09:44:07Z

I have 10.50 version. If i try to do this script on my console, i risk to damage it? Or is only a test to verify that console is compatible with a future jailbreak?

fffoo · 2024-05-03T09:45:09Z

I have 10.50 version. If i try to do this script on my console, i risk to damage it? Or is only a test to verify that console is compatible with a future jailbreak?

Won't damage, only a test.

W-i-n-7 · 2024-05-03T09:45:36Z

I have 10.50 version. If i try to do this script on my console, i risk to damage it? Or is only a test to verify that console is compatible with a future jailbreak?

currently its a PoC (proof of concept)
its a test payload that sends a notification

it wont damage your ps4

goldhen is being ported right now

dany1305 · 2024-05-03T09:53:12Z

Ok thank you.
If goldhen go to port, it's very very good

W-i-n-7 · 2024-05-03T09:56:27Z

@se2crid i upgraded my ps4 from 10.50 to 10.50 with safe mode (reinstall but without losing data?)
and its still not working for me

PierreCsn · 2024-05-03T10:28:36Z

n-pip py

you got me farther than my previous attempt on arch , thanks for the tip about the arch package instead of using pip, now i have this error
``make -C stage1 FW=960 clean && make -C stage1 FW=960
make: Entering directory '/home/pierre/PPPwn/stage1'
make: Leaving directory '/home/pierre/PPPwn/stage1'
make: Entering directory '/home/pierre/PPPwn/stage1'
gcc -c -o start.o start.S
gcc -DSMP -isystem ../freebsd-headers/include -Wl,--build-id=none -Os -fno-stack-protector -DFIRMWARE=960 -c -o stage1.o stage1.c
stage1.c:13:10: fatal error: sys/_lock.h: No such file or directory
13 | #include <sys/_lock.h>
| ^~~~~~~~~~~~~
compilation terminated.
make: *** [: stage1.o] Error 1
make: Leaving directory '/home/pierre/PPPwn/stage1'
I ve a ps4 pro with 9.6 if you need more testing

PierreCsn · 2024-05-03T11:04:53Z

my bad i didnt clone the repo properly

Tested on 9.60 on ps4 pro, took me 8 tries , alot of fail on stage 1 , one crash , and i finally got the ppwned message.
feel free to ask me if you need more tests, kids have been waiting for 18months with no ps4 so i ll help if i can

se2crid · 2024-05-03T11:50:08Z

@se2crid i upgraded my ps4 from 10.50 to 10.50 with safe mode (reinstall but without losing data?) and its still not working for me

Weird, it is confirmd that some people have problems with the exploit not work or it takes 50+ tries for it to work so wait until that fix

W-i-n-7 · 2024-05-03T11:51:24Z

it doesnt work for me at all
i really hope its something fixable

Superredstone · 2024-05-03T13:16:31Z

My 10.71 shuts down after trying the exploit

W-i-n-7 · 2024-05-03T13:17:17Z

My 10.71 shuts down after trying the exploit

try again

Superredstone · 2024-05-03T13:17:47Z

i tried 3 times now, i'm gonna try again and let you know

se2crid · 2024-05-03T15:24:30Z

i tried 3 times now, i'm gonna try again and let you know

some people need to try veryyy many times for it to work

se2crid · 2024-05-03T15:27:25Z

it doesnt work for me at all i really hope its something fixable

I think when LM ports the 11.00 offsets so goldhen works it will be looked into

se2crid · 2024-05-03T18:03:22Z

it doesnt work for me at all i really hope its something fixable

2d96a6c

W-i-n-7 · 2024-05-03T18:06:34Z

it doesnt work for me at all i really hope its something fixable

2d96a6c

whats this? debug settings enabled?

joseashb · 2024-05-03T20:12:53Z

win_7

Still in the works for 11.00

@W-i-n-7 Added

annahana · 2024-05-03T20:24:10Z

Just a question is the 9.60 implementation compatible with SSD upgrad on ps4 because I have the problem that every time on stage 1 CPU corruption 93% the ps4 shuts down with unrepairable SSD corruption that forces me to make a recovery installation of the Firmware.

Hackerpunk1 · 2024-05-03T21:56:58Z

Just a question is the 9.60 implementation compatible with SSD upgrad on ps4 because I have the problem that every time on stage 1 CPU corruption 93% the ps4 shuts down with unrepairable SSD corruption that forces me to make a recovery installation of the Firmware.

I think that the kernel panic is what triggers the issue where you're sent to safe mode. Try switching back to a HDD and see if the same happen. I also did upgrade my PS4 with an SSD yesterday, and installed 9.60 from recovery. So far everything seems to be working as intended.

I also noticed that depending on the host machine, the exploit reliability greatly varies, if the machine is too slow, it will fail as it will take a lot of time to send the instructions and scan back.

Try reducing the variables such as Antivirus disabled and unnecessary apps closed on Windows
Use a faster host or even change distro if needs be. On about 15 attempts, only 1 passed on a dual-core machine (Celeron N3060), changing to a better machine (i5 7200U), the exploit runs without failing. I shall test the same machines on Windows and report back.
NOTE: Both machine got 8GB RAM and SSD.
Also exploit seems to run better on Linux Mint than Ubuntu 22.04/24.04 & Manjaro (from my experience)

If I find anything else, I shall let you guys know.

Fastball2880 · 2024-05-03T23:22:43Z

Just a question is the 9.60 implementation compatible with SSD upgrad on ps4 because I have the problem that every time on stage 1 CPU corruption 93% the ps4 shuts down with unrepairable SSD corruption that forces me to make a recovery installation of the Firmware.

Just a question is the 9.60 implementation compatible with SSD upgrad on ps4 because I have the problem that every time on stage 1 CPU corruption 93% the ps4 shuts down with unrepairable SSD corruption that forces me to make a recovery installation of the Firmware.

I think that the kernel panic is what triggers the issue where you're sent to safe mode. Try switching back to a HDD and see if the same happen. I also did upgrade my PS4 with an SSD yesterday, and installed 9.60 from recovery. So far everything seems to be working as intended.

I also noticed that depending on the host machine, the exploit reliability greatly varies, if the machine is too slow, it will fail as it will take a lot of time to send the instructions and scan back.

Try reducing the variables such as Antivirus disabled and unnecessary apps closed on Windows

Use a faster host or even change distro if needs be. On about 15 attempts, only 1 passed on a dual-core machine (Celeron N3060), changing to a better machine (i5 7200U), the exploit runs without failing. I shall test the same machines on Windows and report back.
NOTE: Both machine got 8GB RAM and SSD.

Also exploit seems to run better on Linux Mint than Ubuntu 22.04/24.04 & Manjaro (from my experience)

If I find anything else, I shall let you guys know.

I don't think this will be dependent on the speed of the CPU, amount of RAM and version of Linux distribution. The only thing that it's dependent on is the CPU architecture because it must be on AMD64 and uses gcc as its compiler to run the exploit, from the make command.

More info - https://gcc.gnu.org/install/prerequisites.html

Fastball2880 · 2024-05-03T23:30:27Z

I also hope that this will be supported on ARM processors but there's no news for now to run it. I heard reports that it can be run on OpenWRT.

Loafdude · 2024-05-03T23:45:22Z

The python script will run on arm but you need to compile the payloads on an x86
(or cross compile, or compile in a x86 docker container but its easy to compile on x86)

Fastball2880 · 2024-05-04T00:05:38Z

The python script will run on arm but you need to compile the payloads on an x86
(or cross compile, or compile in a x86 docker container but its easy to compile on x86)

I was thinking the same as you'll build the binary either way. I'll try that on an Amlogic processor in the future. Great thinking.

se2crid · 2024-05-04T07:04:42Z

win_7

Still in the works for 11.00

@W-i-n-7 Added

added to what?

se2crid · 2024-05-04T07:05:28Z

it doesnt work for me at all i really hope its something fixable

2d96a6c

whats this? debug settings enabled?

It is payloaded loader for 11.00 that is now done, now we wait for goldhen port

W-i-n-7 · 2024-05-04T07:06:18Z

and then we wait for them to be ported to 9.03 through 10.71

greetingstraveler · 2024-05-04T19:33:23Z

Did over 15 failed attempts on a 9.60 console that had "Quick Initialize" done like a week ago.
Got stuck on either Stage1 "[*] Waiting for LCP configure request..." or Stage1 "[+] Scanning for corrupted object... failed".

Did a "Full Initialize" earlier today and it went through in first try afterwards, similar to #23 (comment)

Console: CUH-2216B
FW: 9.60
OS: Lubuntu 24.04

Done on a 2015 Asus X553MA .

W-i-n-7 · 2024-05-04T19:35:00Z

i reinstalled the whole fw on a separate ssd i still cant get it to find the corrupted object
i have ruled out everything the issue is in the exploit

annahana · 2024-05-05T10:27:32Z

Tried it 30 times on 9.60 on Ubuntu 24.04 and even try Windows Version 20 times. Every time it stopped on stage 1 93% withe console crash or the check failed afterwards.

Multiple hardware testet

Os Ubuntu 24.04 and Windows 10
Gaming rig with Ryzen 9 7950X3D
Separate testet with Dell Latitude 5580 same OS tests
And an XPS 13 with network USB c adapter no change on behavior.

PS4 model CUH 1004A

Superredstone · 2024-05-05T17:05:46Z

My 10.71 shuts down after trying the exploit

I tried a lot of times in the last 2 days, i tried with a Windows 11 PC and with a Arch Linux laptop, i even tried initializing the PS4. The model is CUH-2216A.

Add 10.50 Support

51b341d

VocalFan mentioned this pull request May 2, 2024

Needs testing but seems 10.50 10.70 and 10.71 are the same #24

Closed

10.50, 10.70 and 10.71 are the same

3f6a44a

Thank you @EchoStretch

rafaelflromao changed the title ~~10.50 Support~~ 10.50 / 10.70 / 10.71 Support May 2, 2024

Update README.md

e8f87ad

Add 9.50 / 9.60 Support

4de6b6b

rafaelflromao changed the title ~~10.50 / 10.70 / 10.71 Support~~ 10.50 / 10.70 / 10.71 and 9.50 / 9.60 Support May 2, 2024

reorder fw versions

4a41483

10.50 / 10.70 / 10.71 and 9.50 / 9.60 Support #23

10.50 / 10.70 / 10.71 and 9.50 / 9.60 Support #23

Conversation

rafaelflromao commented May 2, 2024 • edited Loading

EchoStretch commented May 2, 2024 • edited Loading

Sulfrix commented May 2, 2024

rafaelflromao commented May 2, 2024

amraj007 commented May 2, 2024

rafaelflromao commented May 2, 2024

Incineroar commented May 2, 2024

kotn3l commented May 2, 2024

rafaelflromao commented May 2, 2024

kotn3l commented May 2, 2024

amraj007 commented May 2, 2024

rafaelflromao commented May 2, 2024

amraj007 commented May 2, 2024

Incineroar commented May 2, 2024

rafaelflromao commented May 2, 2024

amraj007 commented May 2, 2024

Incineroar commented May 2, 2024 • edited Loading

rafaelflromao commented May 2, 2024

fffoo commented May 2, 2024

W-i-n-7 commented May 2, 2024 • edited Loading

rafaelflromao commented May 2, 2024 • edited Loading

W-i-n-7 commented May 2, 2024

W-i-n-7 commented May 2, 2024

dany1305 commented May 3, 2024

fffoo commented May 3, 2024 • edited Loading

W-i-n-7 commented May 3, 2024 • edited Loading

dany1305 commented May 3, 2024 • edited Loading

W-i-n-7 commented May 3, 2024

PierreCsn commented May 3, 2024

PierreCsn commented May 3, 2024

se2crid commented May 3, 2024

W-i-n-7 commented May 3, 2024

Superredstone commented May 3, 2024

W-i-n-7 commented May 3, 2024

Superredstone commented May 3, 2024

se2crid commented May 3, 2024

se2crid commented May 3, 2024

se2crid commented May 3, 2024

W-i-n-7 commented May 3, 2024

joseashb commented May 3, 2024

annahana commented May 3, 2024

Hackerpunk1 commented May 3, 2024 • edited Loading

Fastball2880 commented May 3, 2024 • edited Loading

Fastball2880 commented May 3, 2024

Loafdude commented May 3, 2024 • edited Loading

Fastball2880 commented May 4, 2024

se2crid commented May 4, 2024

se2crid commented May 4, 2024

W-i-n-7 commented May 4, 2024

greetingstraveler commented May 4, 2024

W-i-n-7 commented May 4, 2024

annahana commented May 5, 2024

Superredstone commented May 5, 2024

rafaelflromao commented May 2, 2024 •

edited

Loading

EchoStretch commented May 2, 2024 •

edited

Loading

Incineroar commented May 2, 2024 •

edited

Loading

W-i-n-7 commented May 2, 2024 •

edited

Loading

rafaelflromao commented May 2, 2024 •

edited

Loading

fffoo commented May 3, 2024 •

edited

Loading

W-i-n-7 commented May 3, 2024 •

edited

Loading

dany1305 commented May 3, 2024 •

edited

Loading

Hackerpunk1 commented May 3, 2024 •

edited

Loading

Fastball2880 commented May 3, 2024 •

edited

Loading

Loafdude commented May 3, 2024 •

edited

Loading