Hardware Hacking Trinket m0, PS4 hacking

[mrdude]

Has anyone attempted to mod the bootloader on a trinket m0 yet to run ps4 9.0 usb hack? when the chip gets reset pressed twice it can go into usb mode and show up as a fat device, the bootloader could be modded and uploaded with a rasperry pi or another programmer to be able to run the usb exploit, either that or looking at the java code for the ps4 exploit it could be possible to send a payload much like what we do with the switch. Has anyone tried it - if not, now's your turn to be a history maker :-)

https://learn.adafruit.com/adafruit...t-python-circuitpython/uf2-bootloader-details

https://github.com/adafruit/uf2-samdx1

 

[peteruk]

It would be awesome, I would be prepared to purchase a pre built 'ready to go' one if / when this comes about.

Happy New Year to you MrDude - thanks for everything you did on the Switch !

 

[mrdude]

It would be awesome, I would be prepared to purchase a pre built 'ready to go' one if / when this comes about.

Happy New Year to you MrDude - thanks for everything you did on the Switch !

I've not done it, but I had a look at the trinket bootloader code:

https://github.com/adafruit/uf2-samdx1/tree/master/lib/usb_msc

It should be possible, you could probably use the same trinket for doing both the switch and the ps4 - for ps4 the usb reset could be triggered remotely via esp8266 as well, or even just an old usb pen drive - less than 1MB can be used (flashed with winhex), this could be fitted with a switch on vcc or gnd lines to be turned on or off (save the usb port getting stuff inserted and removed all the time)

 

[mrdude]

My bad, seems it can already be done using esp8266 di mini or esp8266 di mini pro

https://www.psxhax.com/threads/ps4-...00u-for-esp8266-d1-mini-pro-by-stooged.10685/

 

[mrdude]

@peteruk,

I've got a spare nodemcu esp8266 kicking about I bought a couple of years ago but never used. I just ordered a small abs hobby box and female usb breadboard connector and some micro usb connectors. I've already got some 1k resistors and npn transistors in the house, so when I'm done I'll post up some pics. Basically this little box will just have a usb cable port where a phone charger cable can be plugged into it and the PS4, that box can act as a web server and usb drive in one - so no need to mess about plugging stuff in and out as it will all be done automatically. You could make your own very easily as well.

 

[peteruk]

@peteruk,

I've got a spare nodemcu esp8266 kicking about I bought a couple of years ago but never used. I just ordered a small abs hobby box and female usb breadboard connector and some micro usb connectors. I've already got some 1k resistors and npn transistors in the house, so when I'm done I'll post up some pics. Basically this little box will just have a usb cable port where a phone charger cable can be plugged into it and the PS4, that box can act as a web server and usb drive in one - so no need to mess about plugging stuff in and out as it will all be done automatically. You could make your own very easily as well.

Sounds great. look forward to seeing your progress

 

[subcon959]

You could also just use a Raspberry Pi Zero W https://github.com/PaulJenkin/PS4RaspberryPi

 

[lotus78]

I realy can recommend the Pi solution - it works great, and you have all options in your home network - perfect!

 

[mrdude]

You could also just use a Raspberry Pi Zero W https://github.com/PaulJenkin/PS4RaspberryPi

Interesting I didn't know about this one. I already have a pi 4b 8gb which can be used. Probably this can also be used on older pi's as well using a usb wifi dongle. Nice find.

I see how to manually manually mount a usb image on the pi for those that are interested:
https://magpi.raspberrypi.com/articles/pi-zero-w-smart-usb-flash-drive

 

[subcon959]

For anyone using the pi method, version 8 is being worked on and it looks like you'll be able to update goldhen by just copying the bin file to the sd card.

https://github.com/PaulJenkin/PS4RaspberryPi/commit/496b92fcdc71bee3ede291deba1d6ba83432ca4b

I've been using version 7 and it's been great since you can now add the ps4 and pi to your network instead of using it just as a wifi hotspot.

 

[mrdude]

For anyone using the pi method, version 8 is being worked on and it looks like you'll be able to update goldhen by just copying the bin file to the sd card.

https://github.com/PaulJenkin/PS4RaspberryPi/commit/496b92fcdc71bee3ede291deba1d6ba83432ca4b

I've been using version 7 and it's been great since you can now add the ps4 and pi to your network instead of using it just as a wifi hotspot.

I'm planning on going down the wemos di mini route for the following reasons,

1: This will be permanently attached to the PS4 - no chance of sd card corruption when the ps4 is turned off.
2: Far cheaper to buy - less than £5 for all the parts needed.
3: Near instant boot up, no need to run an O/S
5: Easy to update and wifi updateable - I have python scripts to turn bin files in to java script.
6: Consumes less power than raspberry pi.
7: Smaller than a raspberry pi and can be integrated inside a USB hub.

Still it's good to see people working on alternatives, I was hoping trinket m0 could get some love - but now that I think about it, wemos d1 mini is better as the web server is integrated, I assume you can also cache the bins on ps4 browser to make it even faster to run.

 

[subcon959]

I'm planning on going down the wemos di mini route for the following reasons,

1: This will be permanently attached to the PS4 - no chance of sd card corruption when the ps4 is turned off.
2: Far cheaper to buy - less than £5 for all the parts needed.
3: Near instant boot up, no need to run an O/S
5: Easy to update and wifi updateable - I have python scripts to turn bin files in to java script.
6: Consumes less power than raspberry pi.
7: Smaller than a raspberry pi and can be integrated inside a USB hub.

Still it's good to see people working on alternatives, I was hoping trinket m0 could get some love - but now that I think about it, wemos d1 mini is better as the web server is integrated, I assume you can also cache the bins on ps4 browser to make it even faster to run.

With the D1 mini, are you contained to the WiFi hotspot, or can you also be connected to your home network at the same time like the Pi? I ask because I like not having to switch networks on the PS4 when I want to send pkgs over from my PC.

 

[mrdude]

With the D1 mini, are you contained to the WiFi hotspot, or can you also be connected to your home network at the same time like the Pi? I ask because I like not having to switch networks on the PS4 when I want to send pkgs over from my PC.

You can have the D1 mini set up as an access point + connect if to your home network at the same time. You just need to set up the Pi so it is connected to your router, then set the di mini up so that the ip is on the same range as your pi is (set static IP's on your pi + d1 mini so you don't get confused).

When the pi is on 192.168.0.9 and the di mini is on 192.168.0.10 - they are both on the same network and both use your routers wifi, the ps4 is set up to use the routers wifi, just point the ps4 web browser to 192.168.0.10 and the hack will run.

//-------------------DEFAULT SETTINGS------------------//

//create access point
boolean startAP = true;
String AP_SSID = "PS4-D1-Mini";
String AP_PASS = "password";
IPAddress Server_IP(192,168,0,10);
IPAddress Subnet_Mask(255,255,255,0);

//connect to wifi
boolean connectWifi = true;
String WIFI_SSID = "mrdude";
String WIFI_PASS = "password";

//server port
int WEB_PORT = 80;
//-----------------------------------------------------//

D1 has an admin page where you can update your files + change wifi settings etc.

You can grab the files from here:
https://github.com/stooged/PS4-Server-900u

Also if using arduino IDE -grab this plugin for sending the data files:

https://github.com/esp8266/arduino-esp8266fs-plugin

If you want to block the ps4 from being able to reach ps servers - you can put pi-hole on your raspberry pi and block access with that. You can use these wildcards in the blacklist settings.

(\.|^)playstation\.net$
(\.|^)akadns\.net$

Also here's some decent info if you want to mod the sketch to your own needs for wifi stuff:
https://randomnerdtutorials.com/esp8266-nodemcu-static-fixed-ip-address-arduino/

 

[peteruk]

@mrdude I fully understand you're not going to open up a shop selling these pre built and flashed, however if you do end up eventually with a spare or two could I please be considered to buy one from you.

 

[mrdude]

@mrdude I fully understand you're not going to open up a shop selling these pre built and flashed, however if you do end up eventually with a spare or two could I please be considered to buy one from you.

I've ordered some parts from china - so maybe they will be here in a month or so. I have made a prototype on a breadboard, which took less than a minute to knock up - I just used a nodemcu esp8266 that I had kicking about and a female usb breadboard socket to put the usb drive into, and a female micro sd socket to power up and send data to the ps4, with a phone charger cable. Also needed was 1 NPN transistor and one 1k ohm resistor and a couple of jumper cables. What is it that you can't do yourself to make one? If you can't solder you could just use a breadboard, if it's software - the links posted already have working software. If loads of people were interested, I could get some circuit boards printed up that would plug into the wemos d1mini as a shield

 

[mrdude]

@subcon959

I forgot to say, you can disable access mode and still connect to the esp server - check your routers logs and it will automatically assign an ip to the wemos d1, you can set a static ip in your routers config pages based on MAC address. For example - with access point turned off, but wifi turned on, my router assigns the wemos d1 - http://192.168.0.31/, so I just need to point the ps4 browser to that address instead of what you set in the access point menu.

 

[peteruk]

I've ordered some parts from china - so maybe they will be here in a month or so. I have made a prototype on a breadboard, which took less than a minute to knock up - I just used a nodemcu esp8266 that I had kicking about and a female usb breadboard socket to put the usb drive into, and a female micro sd socket to power up and send data to the ps4, with a phone charger cable. Also needed was 1 NPN transistor and one 1k ohm resistor and a couple of jumper cables. What is it that you can't do yourself to make one? If you can't solder you could just use a breadboard, if it's software - the links posted already have working software. If loads of people were interested, I could get some circuit boards printed up that would plug into the wemos d1mini as a shield

I have some health problems that I don't really want to go in to on an open thread, but it makes it difficult for me to do these kinds of things. I mean I don't want to be in any way presumptuous, it was more a case of if after you were finished you had a spare or two hanging about could I be considered to buy it please.

I appreciate all the cool things you do and when I was younger would probably have been able to also.

Keep up the good work

 

[mrdude]

I have some health problems that I don't really want to go in to on an open thread, but it makes it difficult for me to do these kinds of things. I mean I don't want to be in any way presumptuous, it was more a case of if after you were finished you had a spare or two hanging about could I be considered to buy it please.

I appreciate all the cool things you do and when I was younger would probably have been able to also.

Keep up the good work

I'm not going to promise anything ok, and I do hope you are not feeling to ill and had a good new year etc. If I do have any parts left over, it will be in about a months time, so I will pm you if that's the case. Like I say I am not promising anything, so don't take this as letteral - but for parts alone from ebay: (min orders)

1 Wemos D1 mini - £3.50
2 x USB Type A Female Socket Breakout Board 2.54mm Pitch Adapter Connector DIP - £2.59
2 x USB Micro Female Socket Breakout Board 2.54mm Pitch Adapter Connector DIP - £2.25
BC547B NPN General Purpose Transistor Pack of: 5 - £1.55
20 pack - 1/4W Metal Film Resistors 1% 186 values available (20 Pack) 1k ohm - £1.24
1 case - Genuine Hammond Blue & Black ABS Plastic Enclosure Project Box Case - £3.49
1 double sided prototype pcb printed circuit board - £1.50
Micro USB cable - £2

Total: £18.12

That's even before labour or a usb pen drive, (albeit that would give you some spare parts), it would be cheaper just to do it on your own. I had already some spares kicking about so it didn't cost as much, but If I need to order stuff - then it would have cost me probably about what I quoted above. Of course you could do it cheaper by omitting some of the parts above, but when I make stuff I like to make it properly and easy to change parts.

 

[peteruk]

I'm not going to promise anything ok, and I do hope you are not feeling to ill and had a good new year etc. If I do have any parts left over, it will be in about a months time, so I will pm you if that's the case. Like I say I am not promising anything, so don't take this as letteral - but for parts alone from ebay: (min orders)

1 Wemos D1 mini - £3.50
2 x USB Type A Female Socket Breakout Board 2.54mm Pitch Adapter Connector DIP - £2.59
2 x USB Micro Female Socket Breakout Board 2.54mm Pitch Adapter Connector DIP - £2.25
BC547B NPN General Purpose Transistor Pack of: 5 - £1.55
20 pack - 1/4W Metal Film Resistors 1% 186 values available (20 Pack) 1k ohm - £1.24
1 case - Genuine Hammond Blue & Black ABS Plastic Enclosure Project Box Case - £3.49
1 double sided prototype pcb printed circuit board - £1.50
Micro USB cable - £2

Total: £18.12

That's even before labour or a usb pen drive, (albeit that would give you some spare parts), it would be cheaper just to do it on your own. I had already some spares kicking about so it didn't cost as much, but If I need to order stuff - then it would have cost me probably about what I quoted above. Of course you could do it cheaper by omitting some of the parts above, but when I make stuff I like to make it properly and easy to change parts.

Thank you, I probably will give it a go myself... nothing to lose really with the parts being so cheap.

What's the worse that can happen

 

[mrdude]

Thank you, I probably will give it a go myself... nothing to lose really with the parts being so cheap.

What's the worse that can happen

Like I say I am just waiting for parts, will post some pictures up when I am done, it's very easy to make though and hardly needs any skill at all - if you have a soldering iron it will be a breeze to make.

If you want to save some cash,

https://www.ebay.co.uk/itm/233879601835

You could buy this, wemos d1 mini for £4.62 with a protoboard, then you would just need a 1k resistor and a NPN transistor, if you already have a usb thumb drive and usb cable, you could be done for less than £10.