PlayStation 4 OFW 9.00 Jailbreak released, can reportedly affect PS5 consoles as well

ps4-slim-and-pro-image-block-01-en-23jul20.png

There's a new PlayStation 4 exploit in town--PS4 scene developers have released pOOBs4, a new kernel exploit that affects consoles on firmware 9.0.0. According to the pOOBs4 GitHub page, this exploit functions a little differently from previous PS4 jailbreak methods; you'll need a dedicated USB drive with the jailbreak software, which you'll insert into the system at a specific time during the process. The hack can also work on the PlayStation 5, claims the team, but triggering it isn't possible yet, and they recommend that users don't try to mess with their PS5 consoles until more information is available on how it affects that system. Currently, any PS4 that is on OFW 9.0.0 or below is exploitable using this method.

In this project you will find an implementation that tries to make use of a filesystem bug for the Playstation 4 on firmware 9.00. The bug was found while diffing the 9.00 and 9.03 kernels. It will require a drive with a modified exfat filesystem. Successfully triggering it will allow you to run arbitrary code as kernel, to allow jailbreaking and kernel-level modifications to the system. will launch the usual payload launcher (on port 9020).

The instructions and jailbreak file itself can be downloaded from the source below. Useful homebrew tools Mira and GoldHEN have also been updated to work with this new version.

  • You need to insert the USB when the alert pops up, then let it sit there for a bit until the ps4 storage notifications shows up.
  • Unplug the USB before a (re)boot cycle or you'll risk corrupting the kernel heap at boot.
  • The browser might tempt you into closing the page prematurely, don't.
  • The loading circle might freeze while the webkit exploit is triggering, this means nothing.
  • This bug works on certain PS5 firmwares, however there's no known strategy for exploiting it at the moment. Using this bug against the PS5 blind wouldn't be advised.

:arrow: Source
 

godreborn

Welcome to the Machine
Member
Joined
Oct 10, 2009
Messages
38,471
Trophies
3
XP
29,180
Country
United States
same here not wrecking an all digital console for it just to be banned
I may still exploit my system, just won't be in the scene. Same douche bags from the ps3 scene were in the ps4, and I don't think I can take their efaming bullshit in another scene. If people would read something, they'd know their full of shit and they wouldn't praise them.
 

tabzer

This place is a meme.
Member
Joined
Feb 15, 2019
Messages
5,844
Trophies
1
Age
39
XP
4,911
Country
Japan
I don't care about the games, have 0 saves for pirated games after all these years. Are you wanting to know what to do with your system?

Yeah, pretty much. I've got like 5 cfw systems which all contribute something unique. My PS4Pro is collecting dust.

Ugh, they can never seem to release one for the latest firmware, and that's really annoying to most users. :/
Wonder if this whole "don't update if you want HB" thing is gonna catch on..
 

godreborn

Welcome to the Machine
Member
Joined
Oct 10, 2009
Messages
38,471
Trophies
3
XP
29,180
Country
United States
Yeah, pretty much. I've got like 5 cfw systems which all contribute something unique. My PS4Pro is collecting dust.
You can get your eap key with your sfash0 from the dev partition, just requires python, pip, and 2 dependencies. You can backup saves or activate your account once those have been updated, use ps4 saves on ps5, even change accounts if you're ever afraid of being banned, delete your notifications.db from system_data/priv/mms to remove traces of what you've installed, backup the other 3 databases, can even hex edit it to change user id's. Backup and restore trophies, I guess psx and ps2 games, but it's not perfect.
 

tabzer

This place is a meme.
Member
Joined
Feb 15, 2019
Messages
5,844
Trophies
1
Age
39
XP
4,911
Country
Japan
You can get your eap key with your sfash0 from the dev partition, just requires python, pip, and 2 dependencies. You can backup saves or activate your account once those have been updated, use ps4 saves on ps5, even change accounts if you're ever afraid of being banned, delete your notifications.db from system_data/priv/mms to remove traces of what you've installed, backup the other 3 databases, can even hex edit it to change user id's. Backup and restore trophies, I guess psx and ps2 games, but it's not perfect.
Okay. So maybe playing around with/editing saves or potential mods to ps3 games would be the unique uses of a JB PS4. For the most part, I was already able to move my saves from PS4 to PS5--but there was a time that changing their linked accounts would have been appealing.
 

Tomato123

Well-Known Member
Member
Joined
Feb 8, 2020
Messages
734
Trophies
1
Location
England
XP
2,539
Country
United Kingdom
The question might be a bit silly, but you don´t need a working disc drive for this, do you??
It's actually less silly than you think because I think you can't do certain things without one, updating being one of them if I remember correctly. However, you should be fine to jb it and install your... 'legal' backups.
 
  • Like
Reactions: jnl1

maoex

Member
Newcomer
Joined
Apr 10, 2021
Messages
7
Trophies
0
Age
49
XP
46
Country
Germany
I know the warning with the usb stick. but now i wake the consele up from rest mode, kernel panic, reboot and i become these "Kernel Heap" error, but i didnt put usb stick inside. i hope its not bricked forever... ??
Thx for reply
 
  • Wow
Reactions: k7ra

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
  • SylverReZ @ SylverReZ:
    @mthrnite, Cheetah Girls, the sequel to Action 52's Cheetah Men.
    +2
  • Psionic Roshambo @ Psionic Roshambo:
    Pokemon Black I played that one a lot
  • K3Nv2 @ K3Nv2:
    Honestly never messed with Pokémon on ds much
  • mthrnite @ mthrnite:
    I played pokemon once, was bored, never tried again
  • Psionic Roshambo @ Psionic Roshambo:
    Oh Dragon Quest IX
  • K3Nv2 @ K3Nv2:
    Spent like 5 hours on switch one never touched it again
  • Psionic Roshambo @ Psionic Roshambo:
    Sentinel of the stary skies
  • K3Nv2 @ K3Nv2:
    Ds is 20 years old this year
  • Psionic Roshambo @ Psionic Roshambo:
    So MJ no longer wants to play with it?
  • K3Nv2 @ K3Nv2:
    He put it down when the 3ds came out
  • SylverReZ @ SylverReZ:
    @K3Nv2, RIP Felix does great videos on the PS3 yellow-light-of-death.
  • Jayro @ Jayro:
    Eventhough the New 3DS XL is more powerful, I still feel like the DS Lite was a more polished system. It's a real shame that it never got an XL variant keeping the GBA slot. You'd have to go on AliExpress and buy an ML shell to give a DS phat the unofficial "DS Lite" treatment, and that's the best we'll ever get I'm afraid.
    +1
  • Jayro @ Jayro:
    The phat model had amazingly loud speakers tho.
    +1
  • SylverReZ @ SylverReZ:
    @Jayro, I don't see whats so special about the DS ML, its just a DS lite in a phat shell. At least the phat model had louder speakers, whereas the lite has a much better screen.
    +1
  • SylverReZ @ SylverReZ:
    They probably said "Hey, why not we combine the two together and make a 'new' DS to sell".
  • Veho @ Veho:
    It's a DS Lite in a slightly bigger DS Lite shell.
    +1
  • Veho @ Veho:
    It's not a Nintendo / iQue official product, it's a 3rd party custom.
    +1
  • Veho @ Veho:
    Nothing special about it other than it's more comfortable than the Lite
    for people with beefy hands.
    +1
  • Jayro @ Jayro:
    I have yaoi anime hands, very lorge but slender.
  • Jayro @ Jayro:
    I'm Slenderman.
  • Veho @ Veho:
    I have hands.
    Veho @ Veho: +1