Hacking [Release] PS-Phive! (For PS4 FW 9.00) Exploit Host Menu

Leeful

GBAtemp Member
OP
Developer
Joined
Sep 4, 2015
Messages
1,901
Trophies
1
XP
6,926
Country
United Kingdom
I might as well release v3 for people to test.
I'll release it as beta test (v3b) first and if I dont get any reports of any major bugs I'll in a week or so I'll set it up as just v3 and update the main post.

Same setup instructions as the v2 version. As Always clear your webdata and cookies and erase the flash when flashing the ESP bin to your device.

v3b ESP32-S2 bin download:
http://prb123.ir/ps-phive/PS-Phive!_ESP32-S2_bin_v3.0.zip

v3b Online host for PS4 Browser:
prb123.ir/ps-phive/v3b/index.html

v3b PC SelfHost Files:
http://prb123.ir/ps-phive/PS-Phive!_v3b_PC_SelfHost_Files.zip

Some Notes:
You can enter the ESP setup config page in 3 ways:
1. You can press X before the "running Webkit Exploit Messsage" appears.
Tip: If you are not fast enough to do this just keep repeatedly pressing X when you open the browser and the config page will load.
2. Use the ESP settings button in the PS-Phive! menu.
3. Go to prb123.ir/ps-phive/v3b/esp.html in your PS4 browser. (or your-pc-ip-address/esp.html if you are selfhosting)


You can use the ESP USB exploit in 2 different ways:
[ESP MODE] Connect your PS4 to the PS-Phive! ESP Access point as usual.
[ESP MODE2] Connect your PS4 to the internet via AlAzifs DNS and use the ESP as a connected network device.

To use [ESP MODE2] you must first connect your PS4 to the PS-Phive! ESP Access point and then enter your home wifi details in the ESP config page. After you have done this you can then connect your PS4 with AlAzifs DNS Settings.
 

Leeful

GBAtemp Member
OP
Developer
Joined
Sep 4, 2015
Messages
1,901
Trophies
1
XP
6,926
Country
United Kingdom
@Randqalan I've added an experimental ReEnable ASLR payload that fixes the garbled text in DQHeroes.
It works on my PS4 100% but I'm not sure if it will work for everyone. I'm worried that the offsets might be different for different console regions.

Try it out and let me know if it works for you.
Just load DQH with the latest GoldHEN and check that the inventory items text is garbled.
Close the game, run the ReEnable ASLR payload, load the game again and see if the text is fixed.

Before:
DRAGON QUEST HEROES_ The World Tree's Woe and the Blight Below_20221130035442.png

After:
DRAGON QUEST HEROES_ The World Tree's Woe and the Blight Below_20221130040345.png
 

Ashish999

Well-Known Member
Member
Joined
Oct 24, 2021
Messages
317
Trophies
0
Age
38
XP
1,040
Country
Bangladesh
I might as well release v3 for people to test.
I'll release it as beta test (v3b) first and if I dont get any reports of any major bugs I'll in a week or so I'll set it up as just v3 and update the main post.

Same setup instructions as the v2 version. As Always clear your webdata and cookies and erase the flash when flashing the ESP bin to your device.

v3b ESP32-S2 bin download:
http://prb123.ir/ps-phive/PS-Phive!_ESP32-S2_bin_v3.0.zip

v3b Online host for PS4 Browser:
prb123.ir/ps-phive/v3b/index.html

v3b PC SelfHost Files:
http://prb123.ir/ps-phive/PS-Phive!_v3b_PC_SelfHost_Files.zip

Some Notes:
You can enter the ESP setup config page in 3 ways:
1. You can press X before the "running Webkit Exploit Messsage" appears.
Tip: If you are not fast enough to do this just keep repeatedly pressing X when you open the browser and the config page will load.
2. Use the ESP settings button in the PS-Phive! menu.
3. Go to prb123.ir/ps-phive/v3b/esp.html in your PS4 browser. (or your-pc-ip-address/esp.html if you are selfhosting)


You can use the ESP USB exploit in 2 different ways:
[ESP MODE] Connect your PS4 to the PS-Phive! ESP Access point as usual.
[ESP MODE2] Connect your PS4 to the internet via AlAzifs DNS and use the ESP as a connected network device.

To use [ESP MODE2] you must first connect your PS4 to the PS-Phive! ESP Access point and then enter your home wifi details in the ESP config page. After you have done this you can then connect your PS4 with AlAzifs DNS Settings.
👍 Thnx a lot 🎉
 

Randqalan

The Wheel of Time Turns
Member
Joined
Jan 25, 2014
Messages
1,004
Trophies
0
Location
M00N Base quanto
XP
1,580
Country
United States
Good to hear. :)
You can also set the payload to auto run when you load GoldHEN if you want.
You think of everything. But should have warning don't cheat or run mod patches once ASLR renable without first disabling it again. I know this but some won't and complain about it.
Post automatically merged:

looks like everything but cheats can run with enable ASLR. :grog:
20221210170238.jpg
DRAGON QUEST HEROES_ The World Tree's Woe and the Blight Below_20221210170034.jpg

Post automatically merged:

Yes scan lines on at 1
Post automatically merged:

Even working for mod patches with enabled.
Enable all of Ghost of Tsushima and working then disabled mod loaded DQW1 and no scramble text and fmv running.😎
 
Last edited by Randqalan,
  • Like
Reactions: xZenithy and Leeful

Ashish999

Well-Known Member
Member
Joined
Oct 24, 2021
Messages
317
Trophies
0
Age
38
XP
1,040
Country
Bangladesh
I might as well release v3 for people to test.
I'll release it as beta test (v3b) first and if I dont get any reports of any major bugs I'll in a week or so I'll set it up as just v3 and update the main post.

Same setup instructions as the v2 version. As Always clear your webdata and cookies and erase the flash when flashing the ESP bin to your device.

v3b ESP32-S2 bin download:
http://prb123.ir/ps-phive/PS-Phive!_ESP32-S2_bin_v3.0.zip

v3b Online host for PS4 Browser:
prb123.ir/ps-phive/v3b/index.html

v3b PC SelfHost Files:
http://prb123.ir/ps-phive/PS-Phive!_v3b_PC_SelfHost_Files.zip

Some Notes:
You can enter the ESP setup config page in 3 ways:
1. You can press X before the "running Webkit Exploit Messsage" appears.
Tip: If you are not fast enough to do this just keep repeatedly pressing X when you open the browser and the config page will load.
2. Use the ESP settings button in the PS-Phive! menu.
3. Go to prb123.ir/ps-phive/v3b/esp.html in your PS4 browser. (or your-pc-ip-address/esp.html if you are selfhosting)


You can use the ESP USB exploit in 2 different ways:
[ESP MODE] Connect your PS4 to the PS-Phive! ESP Access point as usual.
[ESP MODE2] Connect your PS4 to the internet via AlAzifs DNS and use the ESP as a connected network device.

To use [ESP MODE2] you must first connect your PS4 to the PS-Phive! ESP Access point and then enter your home wifi details in the ESP config page. After you have done this you can then connect your PS4 with AlAzifs DNS Settings.
Works like as Charm 🧿
Post automatically merged:

Works like as Charm 🧿
After 2 success 3 times repeatedly restart and shutdown...
Post automatically merged:

Works like as Charm 🧿
Post automatically merged:


After 2 success 3 times repeatedly restart and shutdtOT
Works like as Charm 🧿
Post automatically merged:


After 2 success 3 times repeatedly restart and shutdown...
I m total test 15 times force shutdown 12 times success 3 times..
 
Last edited by Ashish999,

Leeful

GBAtemp Member
OP
Developer
Joined
Sep 4, 2015
Messages
1,901
Trophies
1
XP
6,926
Country
United Kingdom
Works like as Charm 🧿
Post automatically merged:


After 2 success 3 times repeatedly restart and shutdown...
Post automatically merged:


I m total test 15 times force shutdown 12 times success 3 times..
What USB wait times have you tried?
For me, If I'm using [ESP MODE] it works best at 2800. If im using [ESP MODE2] it needs a little longer and I use 2900.

A good suggestion is to start with a long wait like 20 seconds (20000) or 10 seconds (10000) and work your way down in 500ms increments. When you get close you can dial it in even more by 100ms increments.

If you have a large wait time set you can get a good idea of when the USB exploit is emulated by watching the countdown timer on the screen.
When the emulated USB is inserted you will see a small pause/stutter on the timer.
It is a good idea to video it on your phone so you can watch it back to easily find the time it happens.

Here is an example I just recorded:

I set the USB wait time to 20000 (20 seconds).
You will see that the pause/stutter happens at 17.0
This means that the USB was detected and the exfathax ran at 3000ms. So I know the best time to set the wait time is around the 3000ms mark.

If you carry on watching the video you will see another pause/stutter at 5.2 seconds. This is not important but it shows the USB was removed after 14800ms.

BTW you will see in the video that the webkit ran in 3 seconds. This was a rare lucky fluke. It does not run that quick every time. LOL


humm, to use latest browser V3 we need to flash a new .bin to the esp32-S2 ?
yes.
 

Ashish999

Well-Known Member
Member
Joined
Oct 24, 2021
Messages
317
Trophies
0
Age
38
XP
1,040
Country
Bangladesh
What USB wait times have you tried?
For me, If I'm using [ESP MODE] it works best at 2800. If im using [ESP MODE2] it needs a little longer and I use 2900.

A good suggestion is to start with a long wait like 20 seconds (20000) or 10 seconds (10000) and work your way down in 500ms increments. When you get close you can dial it in even more by 100ms increments.

If you have a large wait time set you can get a good idea of when the USB exploit is emulated by watching the countdown timer on the screen.
When the emulated USB is inserted you will see a small pause/stutter on the timer.
It is a good idea to video it on your phone so you can watch it back to easily find the time it happens.

Here is an example I just recorded:

I set the USB wait time to 20000 (20 seconds).
You will see that the pause/stutter happens at 17.0
This means that the USB was detected and the exfathax ran at 3000ms. So I know the best time to set the wait time is around the 3000ms mark.

If you carry on watching the video you will see another pause/stutter at 5.2 seconds. This is not important but it shows the USB was removed after 14800ms.

BTW you will see in the video that the webkit ran in 3 seconds. This was a rare lucky fluke. It does not run that quick every time. LOL



yes.

I used 5 sec and ur default 2.9 sec.. but it happens so fury.. ok thnx I tried with 10 or 20 sec.. hopefully it will work...
 
  • Like
Reactions: Leeful

Maupiti

Hacking is so « Nice »
Member
Joined
Sep 16, 2018
Messages
848
Trophies
0
XP
1,920
Country
France
@Leeful , new .bin for esp32-S2 because of no pop up ? no press ?
Works for me as for now, on ps4 Pro 9.00, really great job , will do some more tests if possible.

Nice tought about 2 esp modes :bow: and the menu to set the esp
 
Last edited by Maupiti,

Leeful

GBAtemp Member
OP
Developer
Joined
Sep 4, 2015
Messages
1,901
Trophies
1
XP
6,926
Country
United Kingdom
@Leeful , new .bin for esp32-S2 because of no pop up ? no press ?
Works for me as for now, on ps4 Pro 9.00, really great job , will do some more tests if possible.

Nice tought about 2 esp modes :bow: and the menu to set the esp
The new v3 bin has the no notifiaction exfathax image (by @mrdude, thanx for that).
It also has new functions so that the ESP can communicate with the PS-Phive! v3 menu and vice versa.



Just curious , what best usb wait times setup for esp32 ?
It can be different for each user depending on their equipment.
If its not working well as is, start at somethig high like 10000 or even 20000 then dial it down to get to a number that works best for you. For me 2800-2900 works best.
I described some more tips in the post here.
 
General chit-chat
Help Users
    Sonic Angel Knight @ Sonic Angel Knight: Okay, I had spaghetti :P