CTurt Manages Kernel Exploit on PS4

Discussion in 'PS4 - Hacking & Homebrew' started by Tom Bombadildo, Dec 6, 2015.

  1. CIAwesome526

    CIAwesome526 Im ugly and im proud

    Member
    1,242
    2,254
    Mar 25, 2014
    United States
    The Lake, Kalos Region
    Alpha FTW
     
    GalladeGuy likes this.
  2. BORTZ

    BORTZ You get a hat, and YOU get a hat!

    Supervisor
    GBAtemp Patron
    BORTZ is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    11,706
    14,711
    Dec 2, 2007
    United States
    Pittsburgh
    I would just love to see older emulators ported or written for the PS4. That would be great. But I am not going out of my way to get a low FW PS4.
     
  3. Believ3r

    Believ3r Advanced Member

    Newcomer
    50
    5
    Dec 30, 2014
    Legend, I was looking for a list like this
     
  4. SmellyPirateMonkey

    SmellyPirateMonkey GBAtemp Fan

    Member
    438
    118
    Sep 18, 2015
    United States
    I saw this on twitter. Great news. Glad I've only updated one of my ps4s lol
     
  5. Believ3r

    Believ3r Advanced Member

    Newcomer
    50
    5
    Dec 30, 2014
    I can't seem to find any of the bundles mentioned above in Australia
     
  6. mech

    mech ♥️♥️♥️♥️♥️♥️♥️♥️

    Member
    4,909
    3,159
    Oct 26, 2014
    Vanuatu
    wow the killzone bundle has jumped up to £409 on Amazon and sold 8 in the last 2 days :blink: glad i got mine the other month now when it was half that price :P
     
  7. Believ3r

    Believ3r Advanced Member

    Newcomer
    50
    5
    Dec 30, 2014
    Cturt said he will stop further "research" on his Twitter
     
  8. mech

    mech ♥️♥️♥️♥️♥️♥️♥️♥️

    Member
    4,909
    3,159
    Oct 26, 2014
    Vanuatu
    yup, all came to a stop. shame really.
     
  9. zecoxao

    zecoxao GBAtemp Fan

    Member
    339
    739
    Dec 25, 2013
    i wonder why he deleted this picture :P
    <snip>
     
    Last edited by zecoxao, Dec 18, 2015
  10. mech

    mech ♥️♥️♥️♥️♥️♥️♥️♥️

    Member
    4,909
    3,159
    Oct 26, 2014
    Vanuatu
    did he release enough for someone to carry on with this? i noticed his twitter account is locked too?
     
  11. bajul

    bajul Member

    Newcomer
    35
    4
    Aug 26, 2015
    Indonesia
    so no dev make CFW?
     
  12. Xenon Hacks

    Xenon Hacks GBAtemp Guru

    Member
    7,114
    3,410
    Nov 13, 2014
    United States
    what picture did a mod remove it or did you edit? pm me if so.

    — Posts automatically merged - Please don't double post! —

    Also this reeks of C&D
     
  13. zecoxao
    This message by zecoxao has been removed from public view by Sicklyboy, Dec 21, 2015, Reason: Post removed at staff discretion -Sickly.
    Dec 18, 2015
  14. Believ3r

    Believ3r Advanced Member

    Newcomer
    50
    5
    Dec 30, 2014
    welp back to the drawing board
     
  15. Tom Bombadildo
    OP

    Tom Bombadildo Honk!

    pip Contributor
    GBAtemp Patron
    Tom Bombadildo is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    10,795
    10,901
    Jul 11, 2009
    United States
    I forgot
    Multiple devs were aware of the kernel exploit he used, it's entirely possible he's shared info on his RAM dump technique.

    Judging by how his Twitter got locked down, I imagine he might've gotten a C&D on his work. :unsure:


    EDIT: CTurt has announced he'll be stopping PS4 development, however he has posted a detailed explanation of how to get the kernel exploit working on 1.76 on his github

    http://cturt.github.io/ps4-3.html

    It's safe to say this isn't the last we'll see of this exploit, and now that he's published some details on how to get it working, I imagine we'll see something neat here soon.
     
  16. CTurt

    CTurt Advanced Member

    Member
    73
    102
    May 3, 2015
    If you actually read my posts, you'd see that I never claimed to have done it alone.

    I've always been thankful for the help I've received, from my initial announcement:

    Continuing through to my write-up:

    I never "stole" anyone else's work. It is true since this was my first experience with any kind of kernel exploitation that I relied on multiple "hints" from others, but I also used a lot of my own ideas, and spent a huge amount of time debugging the exploit on FreeBSD, and porting to PS4.

    For example, first of all, it is compiled using my SDK (which resolves the necessary userland functions like sysctl), and the exploit is triggered using my "PS4-playground" ROP framework (to setup memory). All PS4 specific addresses and offsets were discovered/calculated directly by myself: the Xpage address, sys_sendto address, and the td_critnest offset (over several hours of tedious brute forcing).

    This is the opinion shared by all developers who were involved:

    And finally, I never "leaked" anything. The only thing I have published (and ever plan on releasing) is the "kernel exploitation" article written by myself, which was published with the prior approval of everyone who was involved.

    The only thing I regret doing is announcing that I had the kernel exploit working, without first asking for flatz consent, even though we had the kernel exploit working on FreeBSD before flatz had any involvement with us. This is the reason that flatz was angry with me for a short period of time, in a private chat, which should never have been leaked.

    Please don't spread untrue rumours about me.
     
    Last edited by CTurt, Dec 21, 2015
    canariobr, Moraduke, M4RWiN and 12 others like this.
  17. Goku Junior

    Goku Junior GBAtemp Advanced Fan

    Member
    951
    288
    Dec 27, 2013
    Argentina
    Buenos Aires, Argentina
    My PS4 is in 3.10 firmware, I'm not updating anymore!. My little brother only plays PES 2016, but if it weren't by him, my PS4 would be in 2.50 firmware...
     
  18. PR0r

    PR0r GBAtemp Regular

    Member
    103
    32
    Jun 28, 2009
    Is there any indication of this being further developed or used in any way?
     
  19. CTurt

    CTurt Advanced Member

    Member
    73
    102
    May 3, 2015