Hacking Is there a raspberry pi web exploit tutorial?

[StarLord4Ever]

I have a raspberry pi 3 so I was thinking it would be cool to repurpose it for web exploit. Problem is I’m not sure what is the process so if anybody here has done it with their raspberry pi I’d love to know how you did it. Thanks!

 

[KiiWii]

I heard people using kodi as a file server.

So if you have pi set for retro games or anything that has a kodi installation you can host the files on there and share via kodi.

Edit: found this
https://kodi.wiki/view/webserver

 

[Chrushev]

That is kind of a waste, Rpi is way too powerful to be used for this. Do you have a router runnign ddwrt or tomato? You can host on that via this guide https://gbatemp.net/threads/guide-h...o-router-will-work-with-ddwrt-as-well.500314/

Alternatively your router probably supports SAMBA share, you can host it on there as well.

If all else fails you can get one of these for $2.70 and host it on there - https://www.aliexpress.com/item/CH3...etwork-WIFI-Connector-Module/32796455118.html

 

[MostlyUnharmful]

Alternatively your router probably supports SAMBA share, you can host it on there as well.

No can do, SAMBA is SMB not HTTP.

So if you have pi set for retro games or anything that has a kodi installation you can host the files on there and share via kodi.

Errr... no, that's the Kodi GUI exposed via HTTP, you can't host web pages with Kodi.


@StarLord4Ever if you really want to use your RPi in the simplest scenario you would need a web server to host the exploit.

Download and install Raspbian on a SD card, install one web server (Apache, Nginx, Lighttpd, whatever, I would go with Lighttpd) create the path of the "Settings manual" on the web root (/var/www), something like "/var/www/document/en/ps4" (change "en" if you use a different localization), download XVertex Jailbreak + HEN and put the content of the zipped archive in the path you have created, put a file with a line "address=/manuals.playstation.net/127.0.0.1" under the "/etc/dnsmasq.d" dir (if it doesn't work with 127.0.0.1 put the IP address of the RPi), restart the daemons or reboot, note somewhere the IP address of your RPi, use the RPi's IP address as DNS in your PS4 network config, navigate to "Settings" -> "Settings Manual" (or what's called, should be the third entry on the menu IIRC) if the page with the exploit loads, congratulations you were able to follow my instructions...

 

[KiiWii]

Errr... no, that's the Kodi GUI exposed via HTTP, you can't host web pages with Kodi.

Fair enough but I'm 99% sure someone posted a method of hosting files via kodi.

I cannot find it right now, but I wouldnt spout crap intentionally.

 

[MostlyUnharmful]

OK, I would guess they installed the Al Azif tool, as it's coded in Python and it's available in Kodi... ^__^

 

[Sakitoshi]

I used my openwrt powered router to host the wii u exploit, I'm guessing you don't need anything special for the ps4 exploit so you could do that too.

 

[KiiWii]

OK, I would guess they installed the Al Azif tool, as it's coded in Python and it's available in Kodi... ^__^

¯\_(ツ)_/¯

I used my openwrt powered router to host the wii u exploit, I'm guessing you don't need anything special for the ps4 exploit so you could do that too.

Yeah its same process, I used my wifi sd card that I used for wiiu.

 

[MadBob]

I have a RPi3 (Cable) and RPi0 (WiFi) that act as exploit servers, the Pi0 was definitely harder to setup, there is a fairly easy RPi3 setup on PSXHAX just set it up on an 8GB MicroSD and then swap the SD out when you want to use it for something else.

 

[Chrushev]

No can do, SAMBA is SMB not HTTP.



Errr... no, that's the Kodi GUI exposed via HTTP, you can't host web pages with Kodi.


@StarLord4Ever if you really want to use your RPi in the simplest scenario you would need a web server to host the exploit.

Download and install Raspbian on a SD card, install one web server (Apache, Nginx, Lighttpd, whatever, I would go with Lighttpd) create the path of the "Settings manual" on the web root (/var/www), something like "/var/www/document/en/ps4" (change "en" if you use a different localization), download XVertex Jailbreak + HEN and put the content of the zipped archive in the path you have created, put a file with a line "address=/manuals.playstation.net/127.0.0.1" under the "/etc/dnsmasq.d" dir (if it doesn't work with 127.0.0.1 put the IP address of the RPi), restart the daemons or reboot, note somewhere the IP address of your RPi, use the RPi's IP address as DNS in your PS4 network config, navigate to "Settings" -> "Settings Manual" (or what's called, should be the third entry on the menu IIRC) if the page with the exploit loads, congratulations you were able to follow my instructions...

I dont see what would prevent you from opening an HTML file via SAMBA share.

 

[haojiezhu]

Try PiXploitHost from c0d3m4st4 (https://twitter.com/c0d3m4st4):

https://github.com/c0d3m4st4/PiXploitHost/blob/master/README.md

His guide is based on Raspbian Jessie. Don't know if it works with Stretch. If it doesn't work, here are the last Jessie-based Raspbian image file and NOOBS installer:

http://downloads.raspberrypi.org/raspbian/images/raspbian-2017-07-05/
http://downloads.raspberrypi.org/NOOBS/images/NOOBS-2017-07-05/

Also because RetroPie (https://retropie.org.uk/) is based on Raspbian, you can just follow his guide and host exploits on an existing RetroPie setup. You can either quit to command line from EmulationStation UI (hold ESC after quitting EmulationStation) or use SSH client on computer or phone.

 

[MostlyUnharmful]

I dont see what would prevent you from opening an HTML file via SAMBA share.

For starters, PS4 web browser doesn't have support for the "file:" protocol (or at least out of the box didn't worked for me, from what I know it supports HTTP only) and second, I'm not aware that PS4 can access SMB shares, would be surprised otherwise.

 

[solitaire4eva]

¯\_(ツ)_/¯



Yeah its same process, I used my wifi sd card that I used for wiiu.

I use your all in one hosting package on my Zsun wifi adapter plugged into the PS4 and it works great!
Thanks for taking the hard work out of setting things up!

I have 2 RP3 just sitting around, I'm going to tinker with that with all of the methods I see posted in thread.

 

[KiiWii]

I use your all in one hosting package on my Zsun wifi adapter plugged into the PS4 and it works great!
Thanks for taking the hard work out of setting things up!

I have 2 RP3 just sitting around, I'm going to tinker with that with all of the methods I see posted in thread.

No problem at all, glad its useful

Please do let me know how it goes, I could add it to the guide

 

[f10]

Hello,

I just find this: https://gist.github.com/Al-Azif/765740019c45b9a49cbf739609cadda7
It's allow to the Raspberry (i use a RPi 2 with wifi dongle) to host wifi server with PS4 hack.
It's work very fine with the latest version of Rasbian Lite.
Thanks to Al-Azif for his great work !!!
I hope this is useful...
f10

 

[solitaire4eva]

Hello,

I just find this: https://gist.github.com/Al-Azif/765740019c45b9a49cbf739609cadda7
It's allow to the Raspberry (i use a RPi 2 with wifi dongle) to host wifi server with PS4 hack.
It's work very fine with the latest version of Rasbian Lite.
Thanks to Al-Azif for his great work !!!
I hope this is useful...
f10

Thanks for sharing I will try this out! Haven't been able to find anything that works with RP3 easily like the other methods.

 

[StarLord4Ever]

I want to thank everyone in this thread and give a quick status update on where I am now. Since I posted original thread I have used esp8266 which is really easy to host the 4.55 exploit.

But I really love my pi devices so I ended up getting a raspberry pi zero w and I learned how to make it it's own wifi hot spot, no internet, and host the 4.55 web exploit and send various payloads.

If anyone is interested in doing that, I can write up a tutorial.