TheFloW releases new PPPwn kernel exploit for PS4, works on firmware 11.00

dsakjldas.png

TheFlow has done it again--a new kernel exploit has been released for PlayStation 4 consoles. This latest exploit is called PPPwn, and works on PlayStation 4 systems up to official firmware 11.00, with support for 9.00 as well. The exploit was known about for months, and was eventually patched by Sony in a PS4 firmware update for 11.02, after TheFlow reported the vulnerability on HackerOne.

PPPwn is a kernel remote code execution exploit for PlayStation 4 upto FW 11.00. This is a proof-of-concept exploit for CVE-2006-4304 that was reported responsibly to PlayStation.

Supported versions are:

  • FW 9.00
  • FW 11.00
  • more can be added (PRs are welcome)
The exploit only prints PPPwned on your PS4 as a proof-of-concept. In order to launch Mira or similar homebrew enablers, the stage2.bin payload needs to be adapted.

The GitHub repository is available linked below, with instructions and further details about the exploit. You can also find important information regarding all PlayStation 4 exploits in the GBAtemp PS4 Exploit Guide.



:arrow: Source

:arrow: PlayStation 4 Exploit Guide
 

master801

Well-Known Member
Member
Joined
Feb 24, 2011
Messages
1,167
Trophies
1
XP
2,518
Country
United States
any one can explain to me what this does ? iam on 9.3
Absolutely nothing for now.

Too many people are thinking this proof-of-concept kernel exploit is a jailbreak, but it's not.

This is just an entry point that others will have to implement for anything useful to happen (jailbreak).

Stay at or below 11.00, because another kernel-level exploit will be years, if not longer (or impossible now), to be found.
 

raxadian

Well-Known Member
Member
Joined
Nov 10, 2018
Messages
4,416
Trophies
1
Age
41
XP
4,624
Country
Argentina
Problem with PC games on Windows ect. Is that they're always poorly optimised

Popular games on PC do tend to get mods but yeah is a matter of "playing the game now" or "Playing it years later on PC with mods."

Honesty with Ratchet & Clank: Rift Apart PC release being okay, I see no reason to buy a PS5 when everyone other game I care about is also on Xbox or Windows, and it being on Xbox means a PC release exists or may be coming. Then again I have no Xbox 😀.

If I got a powerful new PC... that would have to use Windows 11 -_-
 

Necron

Lurking~
Member
Joined
Dec 29, 2008
Messages
1,080
Trophies
1
Location
Mi casa
XP
2,367
Country
Chile
I booted up my PS4 the other day to play bloodborne and noticed it was on OFW 7.50. If I want to do this in the future, is there any way to block updates?
 
Last edited by Necron,

tmnr1992

Well-Known Member
Member
Joined
Oct 22, 2016
Messages
339
Trophies
0
XP
2,091
Country
United States
I booted up my PS4 the other day to play bloodborne and noticed it was on OFW 7.50. If I want to do this in the future, is there any way to block updates?

Yeah, just stay offline, there's an option in the settings menu that lets you disable connecting to the internet.
Also check that there are no updates ready to install, if there are you can delete them.
 

Tom Bombadildo

Dick, With Balls
Member
Joined
Jul 11, 2009
Messages
14,580
Trophies
2
Age
29
Location
I forgot
Website
POCKET.LIKEITS
XP
19,264
Country
United States
Absolutely nothing for now.

Too many people are thinking this proof-of-concept kernel exploit is a jailbreak, but it's not.

This is just an entry point that others will have to implement for anything useful to happen (jailbreak).

Stay at or below 11.00, because another kernel-level exploit will be years, if not longer (or impossible now), to be found.
Not really true. PPPWN is a full jailbreak chain in this release for the PS4, the only thing that needs to be done is a payload injector needs to be updated to support this jailbreak and that's it.

GoldHEN is already running on it and in testing phases, just not released to public just yet.




The PS5 version of the exploit, however, will not be a full jailbreak, as while it does get root access, it'll still need a userland exploit to get past some of Sony's newer security measures, so the PS5 release will take a lot more time. I wouldn't be surprised if we don't see GoldHen within a week.
 

Necron

Lurking~
Member
Joined
Dec 29, 2008
Messages
1,080
Trophies
1
Location
Mi casa
XP
2,367
Country
Chile
Yeah, just stay offline, there's an option in the settings menu that lets you disable connecting to the internet.
Also check that there are no updates ready to install, if there are you can delete them.
It seems this is the only option for now haha. However I'm using my steam deck to remote play, but the updates don't auto install, so there doesn't seem to be any troubles if left downloaded.
 

kevin corms

Well-Known Member
Member
Joined
Feb 21, 2015
Messages
1,015
Trophies
0
Age
40
XP
1,782
Country
Canada
Anything exciting homebrew wise yet? Might track down a ps4 if its useful for more than just pirating games. I much prefer to play ps4 games on a ps5 if I can.
 

master801

Well-Known Member
Member
Joined
Feb 24, 2011
Messages
1,167
Trophies
1
XP
2,518
Country
United States
Not really true. PPPWN is a full jailbreak chain in this release for the PS4, the only thing that needs to be done is a payload injector needs to be updated to support this jailbreak and that's it.

GoldHEN is already running on it and in testing phases, just not released to public just yet.

Yeah, and right now publicly, PPPwn does nothing for end-users, which was my entire point.

It's not useful as it is right now.

Do you still have to use a usb to enable homebrew?
Are you talking about 9.00 where the USB has to be used to boot into HEN?

If so, then no. This exploit uses the ethernet port instead.
 
  • Like
Reactions: duffman2k

ChibiMofo

Elon Musk is my dog
Member
Joined
Jan 29, 2019
Messages
711
Trophies
0
XP
2,869
Country
Canada
You can get a fairly decent PC for about $700 now.
There hasn't been a time this century when you couldn't get a fairly decent PC for about $700. My $850 PC from 2020 still runs all the latest games at acceptable framerates with RT and has better backwards compatibility with Nintendo, Xbox and Sony games than real hardware thanks to exceptional emulation. Would I have been better off with a PS5 for $200 less?

LMFAO!
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
  • BigOnYa @ BigOnYa:
    Biomutant looks cool tho, may have to try that
  • Quincy @ Quincy:
    Usually when such a big title leaks the Temp will be the first to report about it (going off of historical reports here, Pokemon SV being the latest one I can recall seeing pop up here)
  • K3Nv2 @ K3Nv2:
    I still like how a freaking mp3 file hacks webos all that security defeated by text yet again
  • BigOnYa @ BigOnYa:
    They have simulators for everything nowdays, cray cray. How about a sim that shows you playing the Switch.
  • K3Nv2 @ K3Nv2:
    That's called yuzu
    +1
  • BigOnYa @ BigOnYa:
    I want a 120hz 4k tv but crazy how more expensive the 120hz over the 60hz are. Or even more crazy is the price of 8k's.
  • K3Nv2 @ K3Nv2:
    No real point since movies are 30fps
  • BigOnYa @ BigOnYa:
    Not a big movie buff, more of a gamer tbh. And Series X is 120hz 8k ready, but yea only 120hz 4k games out right now, but thinking of in the future.
  • K3Nv2 @ K3Nv2:
    Mostly why you never see TV manufacturers going post 60hz
  • BigOnYa @ BigOnYa:
    I only watch tv when i goto bed, it puts me to sleep, and I have a nas drive filled w my fav shows so i can watch them in order, commercial free. I usually watch Married w Children, or South Park
  • K3Nv2 @ K3Nv2:
    Stremio ruined my need for nas
  • BigOnYa @ BigOnYa:
    I stream from Nas to firestick, one on every tv, and use Kodi. I'm happy w it, plays everything. (I pirate/torrent shows/movies on pc, and put on nas)
  • K3Nv2 @ K3Nv2:
    Kodi repost are still pretty popular
  • BigOnYa @ BigOnYa:
    What the hell is Kodi reposts? what do you mean, or "Wut?" -xdqwerty
  • K3Nv2 @ K3Nv2:
    Google them basically web crawlers to movie sites
  • BigOnYa @ BigOnYa:
    oh you mean the 3rd party apps on Kodi, yea i know what you mean, yea there are still a few cool ones, in fact watched the new planet of the apes movie other night w wifey thru one, was good pic surprisingly, not a cam
  • BigOnYa @ BigOnYa:
    Damn, only $2.06 and free shipping. Gotta cost more for them to ship than $2.06
  • BigOnYa @ BigOnYa:
    I got my Dad a firestick for Xmas and showed him those 3rd party sites on Kodi, he loves it, all he watches anymore. He said he has got 3 letters from AT&T already about pirating, but he says f them, let them shut my internet off (He wants out of his AT&T contract anyways)
  • K3Nv2 @ K3Nv2:
    That's where stremio comes to play never got a letter about it
  • BigOnYa @ BigOnYa:
    I just use a VPN, even give him my login and password so can use it also, and he refuses, he's funny.
  • BigOnYa @ BigOnYa:
    I had to find and get him an old style flip phone even without text, cause thats what he wanted. No text, no internet, only phone calls. Old, old school.
    K3Nv2 @ K3Nv2: @BigOnYa...