PS4 PS4 Jailbreak 7.02 is now a reality, but various things (like Mira) still need ported to 7.02

When we seen the PS4 6.72 Jailbreak go live from theflow0 's disclosure of a kernel exploit, we knew from reading his reasearch that his findings could work upto 7.02 OFW, but 6.72 OFW became the candidate because the kxploit needed an entry point as well. Thanks to Fire30's previous webkit exploit release to the public, 6.72 then having the complete puzzle that was the natural progression from the previous 5.05 Jailbreak.

Now we have seen developer sleirsgoevy release the needed webkit exploit for 7.02, so now we have the complete puzzle to begin the porting and jailbreaking of the console. Mira and various other things will need to be ported before this new PlayStation 4 Jailbreak is useful but that is the easy work compared to what has been released and is available to us, with a bit of time and patients from the community it appears that 7.02 OFW is the next PS4 jailbreak. This is not a huge jump from 6.72 but should allow for a few more games to be playable on a jailbroken and give user's a few more options when seeking a console to jailbreak. Hackers and developer's are moving up the ladder, but there is still work to be done on 7.02 before its time to consider an update and leave a more polished jailbreak, then for one that is still a work in progress.

Now the developer is trying to get Mira ported & working on the new jailbreak, there has been some progress.. After the dev discovered an issue he accidentally introduced, he was able to get Mira working on 7.02, but there is more test as getting it to run is only part of the war but that battle has been solved. Now, testing homebrew launching and other elements will be next. So stay tuned at the 7.02 jailbreak evolves!!!​

About Contributors

• 
  via twitter
  

  7.02 Full Stack, let the fun begin https://github.com/ChendoChap/ps4-ipv6-uaf
  Many Thanks to Chendo, @Znullptr @Synacktiv, @kd_tech_@Fire30_ @theflow0, @sleirsgoevy and @SpecterDev Also, the Webkit Entrypoint still needs some love, so please be understanding at the success rate and that there is still work that needs to be done!

  
  
  PS4 7.00 - 7.02 Kernel Exploit

  ---

  .​
  
  Summary
  
  In this project you will find a full implementation of the "ipv6 uaf" kernel exploit for the PlayStation 4 on 7.00 - 7.02. It will allow you to run arbitrary code as kernel, to allow jailbreaking and kernel-level modifications to the system. will launch the usual payload launcher (on port 9020). This bug was originally discovered by Fire30, and subsequently found by Andy Nguyen​
  
  Patches Included
  The following patches are applied to the kernel:
  
  1. Allow RWX (read-write-execute) memory mapping (mmap / mprotect)
  2. Syscall instruction allowed anywhere
  3. Dynamic Resolving (sys_dynlib_dlsym) allowed from any process
  4. Custom system call #11 (kexec()) to execute arbitrary code in kernel mode
  5. Allow unprivileged users to call setuid(0) successfully. Works as a status check, doubles as a privilege escalation.
  6. (sys_dynlib_load_prx) patch
  
  Notes
  
  • The page will crash on successful kernel exploitation, this is normal
  • There are a few races involved with this exploit, losing one of them and attempting the exploit again might not immediately crash the system but stability will take a hit.
• 
  Contributors
  
  • Specter - advice + 5.05 webkit and (6.20) rop execution method
  • kiwidog - advice
  • Fire30 - bad_hoist
  • Andy Nguyen - disclosed exploit code
  • SocraticBliss - Shakespeare dev & crash test dummy
  • Znullptr - drunk.dev
  • synacktiv - webkit exploit
  • sleirsgoevy - ^ ported webkit exploit to 7.02 (and add addrof js prim)

Source Code @: github.com/ChendoChap
Twitter: twitter.com/sleirsgoevy / twitter.com/SocraticBliss

PSX-Place.com Discussion: psx-place.com
​

Updates:

• https://twitter.com/Joonie86/status/1340752619224981505
• https://twitter.com/Znullptr/status/1339657209593159680
• PS4 7.02 Jailbreak - Updated Homebrew / Tools / Exploits
  

​

 

how do I know it worked, and what next? how do you install homebrew? is there something like multiman ?

I got a bunch out of memory errors, and once system message, also stop javascript on ps4 pro v7.00 (using ps4-ipv6-uaf-7.00-7.02 on local httpd)

 

dunno on 7.02, but I think it should tell you if it worked. there's nothing like multiman. everything must be installed as a pkg file, which means dumping the game w/ license with app dumper (game must be bootable), using gengp4 to create a cue-like file (don't move the files after making this btw), then lastly orbis (fake pkg generator) with the gen gp4 to make a fake pkg to install on the system. I think I have a tutorial on this. it's not hard, just time-consuming. final fantasy x and x-2 took about two hours from dumping to being on the system.

edit: btw, as it is on 5.05 (what I'm on), it will say "welcome to ps4 hen" or something to that effect if it worked.

 

I got a message 'waiting for payload' and javscript close. presumably it works at that point.
how do you install .pkg? usb or ethernet?

 

usb. I've never tried remote installing with an ethernet cable.

 

is 7.02 stable enought today ?? it seems https://dmiller423.github.io/ is faster than others, just hen2.1.3 and done. But... maybe i should stay on 6.72 ????

 

found this on reddit:

1. Host the small ChendoChap jailbreak on your own webserver; put these files on your webserver: https://github.com/ChendoChap/ps4-ipv6-uaf/tree/7.00-7.02 sleirsgoevy is working hard and will release his big jailbreak later.
2. Open your hosted website with your PS4 browser and keep closing "out of memory" windows until it says "waiting for payload" (if it says "reboot", do reboot for stability)
3. Get HEN from this sketchy link (https://twitter.com/znullptr/status/1339657209593159680?s=21) and send the .bin file as said payload with a netcat program to your PS4 over your network
4. Go to system settings and debug settings
5. If you want to install PKGs, they must be on the root folder of an exfat-formatted USB device

edit: it works!
happy camper

 

is 7.02 stable enought today ?? it seems https://dmiller423.github.io/ is faster than others, just hen2.1.3 and done. But... maybe i should stay on 6.72 ????

afaik, most 7.02 games work on 6.72 without backport, so it depends. kp is less likely on 7.02, but it's far less stable, so it may take several minutes to get success.

 

afaik, most 7.02 games work on 6.72 without backport, so it depends. kp is less likely on 7.02, but it's far less stable, so it may take several minutes to get success.

kernel panics is the key, if someone could compare in person 6.72 vs 7.02 and share experiences ... if it takes a minute more or less, thats not too relevant i think.

 

when do 'kernel panics' occur?
what would be best way to configure http server on linux, so that it automatically sends payload after successful exploit?

 

when do 'kernel panics' occur?
what would be best way to configure http server on linux, so that it automatically sends payload after successful exploit?

just use dmiller423 host to send load the payload.

the only thing that is PIA with 7.02 is loading multiple payloads, unfortunately the things like app2usb and ps4 temperature (fan threshold payload) app is not yet a thing in 7.02 so I need to suffer about 5 minutes of my time just to get those exploits running worse is around 15-20mins. but if your fine with HEN, I think the longest time I spend on it enabling the exploit is around 1-2 minutes.

 

Any news on 7.02 backports for 6.72?

 

Any news on 7.02 backports for 6.72?

most games don't need them. what determines whether a backport is needed is the sdk used. you can find sdk with ps4 pkg viewer.

 

hello all, i'm a long time jb ps3 duder, just more or less dipping my head into the state of the jb ps4 since I was recently gifted one for free (on 7.00 currently). I think I got the overall gist of where it's at right just from going thru the threads and watching a few vids. I just wanted to ask for general consensus out there. Is it worth holding out on updating and keeping it at 7.00 for now? From what I was gathering 7.02 is the latest but with some stability issues when booting up HEN? Any tips or advice is appreciated!

 

hello all, i'm a long time jb ps3 duder, just more or less dipping my head into the state of the jb ps4 since I was recently gifted one for free (on 7.00 currently). I think I got the overall gist of where it's at right just from going thru the threads and watching a few vids. I just wanted to ask for general consensus out there. Is it worth holding out on updating and keeping it at 7.00 for now? From what I was gathering 7.02 is the latest but with some stability issues when booting up HEN? Any tips or advice is appreciated!

I would just update. 7.55 might be around the corner, but since it uses the same webkit exploit, it will probably suffer from the same problems as 7.02. I'm still on 5.05, because there are a lot of frustrating things with 6.72 (kernel panics) and 7.02 (takes a while to get exploit going and there's no rest mode). there's really no point in staying on 7.00. full cfw seems unlikely, so these sorts of exploits are possibly the best we can hope for. however, I've heard that there are some exploits that don't rely on the webkit, but they're in private. if those are more stable, I don't know.

 

I've tried rest mode on 7.00 and it seems to work. but, I've closed all apps first.

yeah it takes a lot of 'out of memory' and such tries. can that be fixed?

 

probably over time, but afaik, there's nothing the user can do to force it to work. the only thing I know of is not to have anything plugged into the usb slot. if you can get into rest mode, don't do it in game either, and that goes for any firmware. I've heard those two things can prevent at least crashes or kernel panics.

 

Hi. Can someone please explain something... I was used to the way ps3 was hacked and know for ps4 know is different. I have mine in 5.05, but what I don't understand is, should I stay there and backport, or since 6.72 came out or even this, should I upgrade? I know not always a newer firmware means a more stable os, so would it be recommended just to stay in 5.05 or upgrade to any of the next jailbreak options? Thanks!!!

 

Hi. Can someone please explain something... I was used to the way ps3 was hacked and know for ps4 know is different. I have mine in 5.05, but what I don't understand is, should I stay there and backport, or since 6.72 came out or even this, should I upgrade? I know not always a newer firmware means a more stable os, so would it be recommended just to stay in 5.05 or upgrade to any of the next jailbreak options? Thanks!!!

personally, I wouldn't update. you're on the golden firmware with about 90% success rate. 6.72 has more like 60% and 7.02 has around 10% with no rest mode. there are few games that don't work backported. you can get a full list from default dnb's github. he made a game database. there's around 25 games iirc that don't work backported, and most of those are junk. more may be backportable with the module downgrader. control is one of those games.