Hacking Docker PPPwn

Davi5Alexander

Davi5Alexander

Member
OP
Newcomer
Level 4
Joined
Apr 29, 2015
Messages
20
Trophies
0
XP
475
Country
United States
PPPwn in Docker

https://github.com/Davi5Alexander/docker_pppwn

This repository contains Docker files to run PPPwn, developed by TheOfficialFloW, easily using an Alpine image. It's ideal for running on a Raspberry Pi with a dedicated USB to Ethernet port for the PS4. PPPwn is a kernel remote code execution exploit for PlayStation 4 up to FW 11.00. It's a proof-of-concept exploit for CVE-2006-4304 that was responsibly reported to PlayStation. I was inspired by PI-Pwn.

Requirements

- Docker installed on your system.
- Ethernet cable.
- USB with GoldHen (only for the first time).

Usage

1. Copy the `Dockerfile.pppwn` and `docker-compose.yml` files.
2. Edit `docker-compose.yml` and change the values of INTERFACE and FIRMWAREVERSION.
3. Run `docker-compose up -d`.
4. Turn on the PS4.

On your PS4 (first time):

1. Insert the USB with `goldhen.bin` into the PS4.
2. Go to Settings and then to Network.
3. Select Set Up Internet Connection and choose Use a LAN Cable.
4. Choose Custom Setup and select PPPoE for IP Address Settings.
5. Enter anything for PPPoE User ID and PPPoE Password.
6. Choose Automatic for DNS Settings and MTU Settings.
7. Choose Do Not Use for Proxy Server.
 
  • Like
Reactions: Djakku and Bumblecito
jmjohnson85

jmjohnson85

Well-Known Member
Newcomer
Level 3
Joined
May 3, 2009
Messages
54
Trophies
1
XP
335
Country
United States
I'm not fully up-to-speed on how the PPPwn exploit works but... If my PS4 is connected via Ethernet to a network switch (which is thereby connected to the docker host), will this just continually try to connect to my PS4 to run the exploit (after the one-time setup of course)?

Edit:
From looking at the script it seems this requires a direct connection from the exploit host using a crossover cable (no network switches...)
 
Last edited by jmjohnson85,
  • Like
Reactions: Bumblecito and Davi5Alexander
Bumblecito

Bumblecito

Well-Known Member
Member
Level 4
Joined
May 25, 2017
Messages
110
Trophies
0
Age
38
XP
413
Country
Mexico
Davi5Alexander said:
PPPwn in Docker

https://github.com/Davi5Alexander/docker_pppwn

This repository contains Docker files to run PPPwn, developed by TheOfficialFloW, easily using an Alpine image. It's ideal for running on a Raspberry Pi with a dedicated USB to Ethernet port for the PS4. PPPwn is a kernel remote code execution exploit for PlayStation 4 up to FW 11.00. It's a proof-of-concept exploit for CVE-2006-4304 that was responsibly reported to PlayStation. I was inspired by PI-Pwn.

Requirements

- Docker installed on your system.
- Ethernet cable.
- USB with GoldHen (only for the first time).

Usage

1. Copy the `Dockerfile.pppwn` and `docker-compose.yml` files.
2. Edit `docker-compose.yml` and change the values of INTERFACE and FIRMWAREVERSION.
3. Run `docker-compose up -d`.
4. Turn on the PS4.

On your PS4 (first time):

1. Insert the USB with `goldhen.bin` into the PS4.
2. Go to Settings and then to Network.
3. Select Set Up Internet Connection and choose Use a LAN Cable.
4. Choose Custom Setup and select PPPoE for IP Address Settings.
5. Enter anything for PPPoE User ID and PPPoE Password.
6. Choose Automatic for DNS Settings and MTU Settings.
7. Choose Do Not Use for Proxy Server.
Click to expand...

I'm about to trying this over local network in a synology nas

Edit: Well It didn't work.

Trying now connected to nas lan1 (it has lan0 and lan1) but it's got stuck on stage1: memory corruption
Tried to ruebuild it but it's cached and i'am unable to make a clean install.

1715496003695.png

Post automatically merged:

Ok, it's working now.

You have to create a folder inside the docker directory and name it docker_pppwn-main
Inside that directory now you have to copy the stages folder with all its files (900 in my case).
You would have something like docker > docker_pppwn-main > stages
1715497791117.png

1715497812537.png

1715497461984.png
 
Last edited by Bumblecito,
Davi5Alexander

Davi5Alexander

Member
OP
Newcomer
Level 4
Joined
Apr 29, 2015
Messages
20
Trophies
0
XP
475
Country
United States
Bumblecito said:
I'm about to trying this over local network in a synology nas

Edit: Well It didn't work.

Trying now connected to nas lan1 (it has lan0 and lan1) but it's got stuck on stage1: memory corruption
Tried to ruebuild it but it's cached and i'am unable to make a clean install.

View attachment 436689
Post automatically merged:

Ok, it's working now.

You have to create a folder inside the docker directory and name it docker_pppwn-main
Inside that directory now you have to copy the stages folder with all its files (900 in my case).
You would have something like docker > docker_pppwn-main > stages
View attachment 436694
View attachment 436696
View attachment 436691
Click to expand...
Sorry, I didn't do a test without my custom volume. I already fixed it. You can rebuild the image using docker compose build --no-cache
 
Last edited by Davi5Alexander,
  • Like
Reactions: Bumblecito
garbaj

garbaj

Active Member
Newcomer
Level 2
Joined
May 11, 2023
Messages
37
Trophies
0
XP
211
Country
Fiji
Davi5Alexander said:
PPPwn in Docker

https://github.com/Davi5Alexander/docker_pppwn

This repository contains Docker files to run PPPwn, developed by TheOfficialFloW, easily using an Alpine image. It's ideal for running on a Raspberry Pi with a dedicated USB to Ethernet port for the PS4. PPPwn is a kernel remote code execution exploit for PlayStation 4 up to FW 11.00. It's a proof-of-concept exploit for CVE-2006-4304 that was responsibly reported to PlayStation. I was inspired by PI-Pwn.

Requirements

- Docker installed on your system.
- Ethernet cable.
- USB with GoldHen (only for the first time).

Usage

1. Copy the `Dockerfile.pppwn` and `docker-compose.yml` files.
2. Edit `docker-compose.yml` and change the values of INTERFACE and FIRMWAREVERSION.
3. Run `docker-compose up -d`.
4. Turn on the PS4.

On your PS4 (first time):

1. Insert the USB with `goldhen.bin` into the PS4.
2. Go to Settings and then to Network.
3. Select Set Up Internet Connection and choose Use a LAN Cable.
4. Choose Custom Setup and select PPPoE for IP Address Settings.
5. Enter anything for PPPoE User ID and PPPoE Password.
6. Choose Automatic for DNS Settings and MTU Settings.
7. Choose Do Not Use for Proxy Server.
Click to expand...
Amazing idea and excellent work! Thanks for sharing!
 
  • Like
Reactions: Davi5Alexander

Site & Scene News

Go to forum More news

Popular threads in this forum

I have a very simple question

Hacking  Docker PPPwn

Should I buy

Early Build of Mortal Kombat Returns ported to PS4

Beat 'Em & Eat 'Em: RediXXX - A PS4 remake of the 1982 Atari 2600 Classic

Hacking Feedback Gaming Others  Need cheat codes for dragon Ball z kakarot fun PlayStation 4

PS4Pro Jailbreaked 6.72 HD to SSD replace

(Homebrew) PSFREEDOOM for PS4 and PS5 release

General chit-chat
Help Users
  • light27 @ light27:
    hm
  • light27 @ light27:
    fun fact
  • light27 @ light27:
    the first time i ever played on a wii u EVER was when I was getting my ear tubes removed
  • light27 @ light27:
    i was playing wii party
  • light27 @ light27:
    u*
  • light27 @ light27:
    but i only got to play for like
  • light27 @ light27:
    3 seconds
  • light27 @ light27:
    younger me would've never thought that I would have a wii u now
  • Xdqwerty @ Xdqwerty:
    @light27, i wanted a Wii u as a kid when i watched a Mario kart 8 commercial on tv
  • Xdqwerty @ Xdqwerty:
    https://youtu.be/ICjgg5eEFSw?si=qyxHdElodJEeR3aS
  • Psionic Roshambo @ Psionic Roshambo:
    I had a Wii-U it sucked lol
  • Psionic Roshambo @ Psionic Roshambo:
    Even hacked it sucked lol
  • The Real Jdbye @ The Real Jdbye:
    nah the Wii U wasn't bad
     +1
  • The Real Jdbye @ The Real Jdbye:
    the hardware is good
  • Psionic Roshambo @ Psionic Roshambo:
    The controller sucked
  • The Real Jdbye @ The Real Jdbye:
    it has good games, just not enough of them
     +1
  • ColdBlitz @ ColdBlitz:
    the indie games on wii u were amazing though
  • ColdBlitz @ ColdBlitz:
    and also some of nintendo's first party games
  • ColdBlitz @ ColdBlitz:
    some of the best selling games on the switch are wii u ports (that are priced way too high
    like come on 60 for a game thats a decade old??)
     +1
  • Xdqwerty @ Xdqwerty:
    @ColdBlitz, i forgot breath of the wild released for the Wii u
  • The Real Jdbye @ The Real Jdbye:
    $60 for a game that's a decade old might be unheard of on PC but actually is not uncommon on consoles
     +1
  • The Real Jdbye @ The Real Jdbye:
    especially Nintendo because they only ever lower the price of games when they do a greatest hits/platinum hits/players choice re-release
  • Xdqwerty @ Xdqwerty:
    @The Real Jdbye, and the HD collections released for 7th gen consoles too
  • The Real Jdbye @ The Real Jdbye:
    but they don't seem to have done any of those for the switch yet and maybe never will
  • ColdBlitz @ ColdBlitz:
    I think we all forgot breath of the wild released for the wii u tbh
     +1
    ColdBlitz @ ColdBlitz: I think we all forgot breath of the wild released for the wii u tbh +1