Front-page

TheFloW releases new PPPwn kernel exploit for PS4, works on firmware 11.00

dsakjldas.png

TheFlow has done it again--a new kernel exploit has been released for PlayStation 4 consoles. This latest exploit is called PPPwn, and works on PlayStation 4 systems up to official firmware 11.00, with support for 9.00 as well. The exploit was known about for months, and was eventually patched by Sony in a PS4 firmware update for 11.02, after TheFlow reported the vulnerability on HackerOne.

PPPwn is a kernel remote code execution exploit for PlayStation 4 upto FW 11.00. This is a proof-of-concept exploit for CVE-2006-4304 that was reported responsibly to PlayStation.

Supported versions are:

  • FW 9.00
  • FW 11.00
  • more can be added (PRs are welcome)
The exploit only prints PPPwned on your PS4 as a proof-of-concept. In order to launch Mira or similar homebrew enablers, the stage2.bin payload needs to be adapted.
Click to expand...

The GitHub repository is available linked below, with instructions and further details about the exploit. You can also find important information regarding all PlayStation 4 exploits in the GBAtemp PS4 Exploit Guide.



:arrow: Source

:arrow: PlayStation 4 Exploit Guide
 
  • Like
  • Love
  • Haha
Reactions: Subtle Demise, ChibiMofo, thetechguy95 and 37 others
Click to expand...
M

master801

Well-Known Member
Member
Level 11
Joined
Feb 24, 2011
Messages
1,164
Trophies
1
XP
2,516
Country
United States
scroeffie1984 said:
any one can explain to me what this does ? iam on 9.3
Click to expand...
Absolutely nothing for now.

Too many people are thinking this proof-of-concept kernel exploit is a jailbreak, but it's not.

This is just an entry point that others will have to implement for anything useful to happen (jailbreak).

Stay at or below 11.00, because another kernel-level exploit will be years, if not longer (or impossible now), to be found.
 
  • Like
Reactions: zfreeman and scroeffie1984
raxadian

raxadian

Well-Known Member
Member
Level 15
Joined
Nov 10, 2018
Messages
4,416
Trophies
1
Age
41
XP
4,620
Country
Argentina
Spider_Man said:
Problem with PC games on Windows ect. Is that they're always poorly optimised
Click to expand...

Popular games on PC do tend to get mods but yeah is a matter of "playing the game now" or "Playing it years later on PC with mods."

Honesty with Ratchet & Clank: Rift Apart PC release being okay, I see no reason to buy a PS5 when everyone other game I care about is also on Xbox or Windows, and it being on Xbox means a PC release exists or may be coming. Then again I have no Xbox 😀.

If I got a powerful new PC... that would have to use Windows 11 -_-
 
Necron

Necron

Lurking~
Member
Level 11
Joined
Dec 29, 2008
Messages
1,080
Trophies
1
Location
Mi casa
XP
2,366
Country
Chile
I booted up my PS4 the other day to play bloodborne and noticed it was on OFW 7.50. If I want to do this in the future, is there any way to block updates?
 
Last edited by Necron,
tmnr1992

tmnr1992

Well-Known Member
Member
Level 10
Joined
Oct 22, 2016
Messages
339
Trophies
0
XP
2,090
Country
United States
Necron said:
I booted up my PS4 the other day to play bloodborne and noticed it was on OFW 7.50. If I want to do this in the future, is there any way to block updates?
Click to expand...

Yeah, just stay offline, there's an option in the settings menu that lets you disable connecting to the internet.
Also check that there are no updates ready to install, if there are you can delete them.
 
Tom Bombadildo

Tom Bombadildo

Dick, With Balls
Member
Level 27
Joined
Jul 11, 2009
Messages
14,580
Trophies
2
Age
29
Location
I forgot
Website
POCKET.LIKEITS
XP
19,263
Country
United States
master801 said:
Absolutely nothing for now.

Too many people are thinking this proof-of-concept kernel exploit is a jailbreak, but it's not.

This is just an entry point that others will have to implement for anything useful to happen (jailbreak).

Stay at or below 11.00, because another kernel-level exploit will be years, if not longer (or impossible now), to be found.
Click to expand...
Not really true. PPPWN is a full jailbreak chain in this release for the PS4, the only thing that needs to be done is a payload injector needs to be updated to support this jailbreak and that's it.

GoldHEN is already running on it and in testing phases, just not released to public just yet.




The PS5 version of the exploit, however, will not be a full jailbreak, as while it does get root access, it'll still need a userland exploit to get past some of Sony's newer security measures, so the PS5 release will take a lot more time. I wouldn't be surprised if we don't see GoldHen within a week.
 
  • Like
Reactions: gnmmarechal, yoshi_nysa and zfreeman
Necron

Necron

Lurking~
Member
Level 11
Joined
Dec 29, 2008
Messages
1,080
Trophies
1
Location
Mi casa
XP
2,366
Country
Chile
tmnr1992 said:
Yeah, just stay offline, there's an option in the settings menu that lets you disable connecting to the internet.
Also check that there are no updates ready to install, if there are you can delete them.
Click to expand...
It seems this is the only option for now haha. However I'm using my steam deck to remote play, but the updates don't auto install, so there doesn't seem to be any troubles if left downloaded.
 
kevin corms

kevin corms

Well-Known Member
Member
Level 9
Joined
Feb 21, 2015
Messages
1,015
Trophies
0
Age
40
XP
1,782
Country
Canada
Anything exciting homebrew wise yet? Might track down a ps4 if its useful for more than just pirating games. I much prefer to play ps4 games on a ps5 if I can.
 
M

master801

Well-Known Member
Member
Level 11
Joined
Feb 24, 2011
Messages
1,164
Trophies
1
XP
2,516
Country
United States
Tom Bombadildo said:
Not really true. PPPWN is a full jailbreak chain in this release for the PS4, the only thing that needs to be done is a payload injector needs to be updated to support this jailbreak and that's it.

GoldHEN is already running on it and in testing phases, just not released to public just yet.
Click to expand...

Yeah, and right now publicly, PPPwn does nothing for end-users, which was my entire point.

It's not useful as it is right now.

duffman2k said:
Do you still have to use a usb to enable homebrew?
Click to expand...
Are you talking about 9.00 where the USB has to be used to boot into HEN?

If so, then no. This exploit uses the ethernet port instead.
 
  • Like
Reactions: duffman2k
ChibiMofo

ChibiMofo

Elon Musk is my dog
Member
Level 12
Joined
Jan 29, 2019
Messages
711
Trophies
0
XP
2,868
Country
Canada
PotatoStatic said:
You can get a fairly decent PC for about $700 now.
Click to expand...
There hasn't been a time this century when you couldn't get a fairly decent PC for about $700. My $850 PC from 2020 still runs all the latest games at acceptable framerates with RT and has better backwards compatibility with Nintendo, Xbox and Sony games than real hardware thanks to exceptional emulation. Would I have been better off with a PS5 for $200 less?

LMFAO!
 

Site & Scene News

Go to forum More news

Popular threads in this forum

Nintendo Switch firmware update 18.0.1 has been released

Nintendo officially confirms Switch successor console, announces Nintendo Direct for next month

TheFloW releases new PPPwn kernel exploit for PS4, works on firmware 11.00

New static recompiler tool N64Recomp aims to seamlessly modernize N64 games

Delta emulator now available on the App Store for iOS

Nintendo takes down Gmod content from Steam's Workshop

Name the Switch successor: what should Nintendo call its new console?

A prototype of the original "The Legend of Zelda" for NES has been found and preserved

General chit-chat
Help Users
  • K3Nv2 @ K3Nv2:
    Thanks for signing up at LinusTechTips
  • QuarterCut @ QuarterCut:
    :O
  • QuarterCut @ QuarterCut:
    holey shmoley!
  • BigOnYa @ BigOnYa:
    Your credit card has been charged. Thank you.
  • K3Nv2 @ K3Nv2:
    Your screwdriverPlus will arrive in three weeks
     +1
  • QuarterCut @ QuarterCut:
    K64_Waddle_Dee_Artwork_1.jpg

    my reaction to such information
     +2
  • BigOnYa @ BigOnYa:
    Press 1 for English. Press 2 for Pig Latin. Or press 3 to speak to a representative.
  • BakerMan @ BakerMan:
    guys, i need help, i got into an argument about what genre radioactive is, and i forgot who made it
  • Sicklyboy @ Sicklyboy:
    4
  • Sicklyboy @ Sicklyboy:
    @BakerMan, Imagine Dragons
  • BakerMan @ BakerMan:
    370
    +1
  • Sicklyboy @ Sicklyboy:
    Dragon deez nuts across yo face GOTEEM
  • Sicklyboy @ Sicklyboy:
    https://www.youtube.com/watch?v=ktvTqknDobU
  • Sicklyboy @ Sicklyboy:
    lmao now I realize that was probably the joke in the first place
     +1
  • BakerMan @ BakerMan:
    IMAGINE DRAGON DEEZ NUTS ACROSS YO- FUCK HE BEAT ME TO IT
  • BigOnYa @ BigOnYa:
    You have selected 4 - Death by Snu Snu, please stand by...
     +1
  • BakerMan @ BakerMan:
    lucky bastard
     +1
  • Sicklyboy @ Sicklyboy:
    hahahaha I'm half way through a bag off my Volcano and my tolerance is way down because I haven't been smoking much lately, so I was a little slow to catch that that was what your angle was 🤣🤣
     +1
  • Sicklyboy @ Sicklyboy:
    Also I was just excited to know a music reference for once (I am the LAST person in the world that you want on your trivia team)
     +2
  • K3Nv2 @ K3Nv2:
    Bummer webos 7.4 isnt working with dejavuln-autoroot
  • Sicklyboy @ Sicklyboy:
    PS4 right? I think that's what mine's on. Or 5.6, maybe.
  • K3Nv2 @ K3Nv2:
    @Sicklyboy,
    https://www.youtube.com/watch?v=BIeljeDINqk&t=609s
  • K3Nv2 @ K3Nv2:
    [!] Installation failed (devmode_enabled not recognized)
  • K3Nv2 @ K3Nv2:
    0.5 seemed to work whatever lol i wont bitch
  • Alysh_Graham @ Alysh_Graham:
    Hehehe
    Alysh_Graham @ Alysh_Graham: Hehehe