New hack for PS4 and maybe PS5?

[raxadian]

"Longtime console hacker CTurt has blasted what he calls an "essentially unpatchable" hole in the security of the PS4 and PS5, detailing a proof-of-concept method that should allow for the installation of arbitrary homebrew applications on the consoles.

CTurt says he disclosed his exploit, dubbed Mast1c0re, to Sony via a bug bounty program a year ago without any sign of a public fix. The method exploits errors in the just-in-time (JIT) compilation used by the emulator that runs certain PS2 games on the PS4 (and PS5). That compilation gives the emulator special permissions to continually write PS4-ready code (based on the original PS2 code) just before the application layer itself executes that code.
Advertisement

By gaining control of both sides of that process, a hacker can write privileged code that the system treats as legitimate and secure. "Since we're using the JIT system calls for their intended purpose, it's not really an exploit, just a neat trick," CTurt said of a since-patched JIT exploit on the PS4's web browser."
source: https://arstechnica.com/gaming/2022...-ps5-exploit-that-is-essentially-unpatchable/

 

[KiiWii]

We mentioned this in the AIO PS4 hacking thread yesterday, it looks promising

 

[godreborn]

We mentioned this in the AIO PS4 hacking thread yesterday, it looks promising

do you need klonoa 2 or any ps2 game?

 

[raxadian]

do you need klonoa 2 or any ps2 game?

Read the linked article, you need an already hacked PS4 and a disc PS2 to PS4 game.

 

[KiiWii]

do you need klonoa 2 or any ps2 game?

Any PS2 game should work depending on the base games emulation configuration. Turns out Klonoa works with the donor games cfg just fine.

 

[Viri]

Why do we still get new hacks for PS4/PS5, but none for Switch? I just want to ditch my OG Switch for a hacked OLED, without spending 200 dollars on a mod chip.

 

[KiiWii]

Why do we still get new hacks for PS4/PS5, but none for Switch? I just want to ditch my OG Switch for a hacked OLED, without spending 200 dollars on a mod chip.

Different devs have different interests. Maybe if Nintendo paid a bounty and allowed for release after disclosure….

 

[remlei]

Read the linked article, you need an already hacked PS4 and a disc PS2 to PS4 game.

no your not. you need to purchase that specific game (OKAGE: Shadow King). as it said, it works on latest firmware.

once you have that, its just a matter of injecting a exploited save file (will probably require save signing, either using a hacked ps4 or ps4 save wizard) to get the hack working.

 

[Tomato123]

no your not. you need to purchase that specific game (OKAGE: Shadow King). as it said, it works on latest firmware.

once you have that, its just a matter of injecting a exploited save file (will probably require save signing, either using a hacked ps4 or ps4 save wizard) to get the hack working.

The important thing is that this exploit is in the PS2 emulator, not the specific game. A lot of known exploits exist for PS2 games which this could work with. OKAGE is simply the game used as an example since it has a fairly simple save game buffer overflow exploit which is perfect for this purpose.

 

[raxadian]

The important thing is that this exploit is in the PS2 emulator, not the specific game. A lot of known exploits exist for PS2 games which this could work with. OKAGE is simply the game used as an example since it has a fairly simple save game buffer overflow exploit which is perfect for this purpose.

Basically any PS2 to PS4 game disc whose PS2 version has a know exploit could work and technically any PS2 to PS4 game whose save can be hacked on a hacked PS4 could work, but that would take more effort.

 

[Tomato123]

Basically any PS2 to PS4 game disc whose PS2 version has a know exploit could work and technically any PS2 to PS4 game whose save can be hacked on a hacked PS4 could work, but that would take more effort.

It's not that any PS2 game on the PS4/5 can. Those save systems must have some sort of programming error in them that allows loading in more data than the buffer set aside for it in memory. But security in stuff like this wasn't exactly too high so there's always a chance there is something in a game on a disc that runs in this emulator which would allow permenant access to a userland exploit. There are also more entry points than the save files, but save files are easy to work with so they're preferred.

 

[metroid maniac]

I didn't even realise there were PS2 -> PS4 emulated games on discs.

 

[raxadian]

I didn't even realise there were PS2 -> PS4 emulated games on discs.

Is Okami for PS4 that or a remake? It basically looks like the PS2 game with a fancy filter.

 

[Tomato123]

Is Okami for PS4 that or a remake? It basically looks like the PS2 game with a fancy filter.

I think Okami was a remake and isn't emulated.