Self hosting pOOBs4 and goldhen

[asdfmann]

Hello,

I am running a local webserver to host pOOBs4 and after successful exploitation, it asks me to send the payload. In that way, it works as it should. But I have to walk from my PC to my PS4 and back to get the payload to the PS4.
I know of course, that there are several exploit pages that just push the payload automatically after the exploit, but I couldn't find out, how to easily change the payload. Whenever there's a new version of GoldHEN, I had to update the whole exploit package, and maybe it took some time for it to even release.

So, how do I accomplish this? Put exploit and payload next to each other (maybe with some preparation of either), and not let the page command me me to stand up from my lazy butt?

Help please and have a good time :3

 

[eemcm2]

nobody seems to know how to do it or nobody wants to share how it's done. I had the same query a while back and no one responded.

 

[remlei]

its different between hosts, some of them is tightly integrated on jb.js file some of them calls it on separate file that is also a js, and some of them calls the raw bin file.

to know how it works, you basically view the source code, after all its just html, if you want to know how it works, its there, its just a matter if you can read the code or not. If you cant, well its not their problem anymore.

also, stooged's ESP32-S2 selfhosting repo for 9.00 jailbreak have the ability to put your own payloads on it, so if you think one of those payload is already outdated, simple just delete the old file and upload the newer one.

 

[asdfmann]

Well I don't know JS and HTML that well, but I guess other than some problems with syntax, I might be able to figure it out.

I looked at the source code of one of these pages once, and it was an intimidating mess of binary data, so I didn't look into it further. I just thought there was a way to do it with ps4 exploit host, as it already has a place to put payloads.
Thank you both for your answers.

 

[godreborn]

if you mean adding something in, the easiest way is just to rename something that exists, like another hen if that's what you're adding, then overwrite the original file. the js and html is for like putting it in addition to and the text mostly. this should work for any host.

 

[Smiths]

I have used Leeful's host on my Pi for a while.


https://github.com/Leeful/leeful.github.io/tree/master/9v4

Just copy and source files to your web server. As far as autoloading Goldhen, there's a variable in the html that's the bin file converted to an array, which I have a python file I use to update it.

This is vague because I'm just replying quickly but I'll try to remember to update this post with more info and files, but I 100% self host Leeful's files with the latest Goldhen autoloading after the USB prompt

this is the quicky python code i use to convert a BIN to an array that i then paste in index.html in the "var PL1 = []" part.

import os,sys
file_name = sys.argv[1]
file = open(file_name,"rb")
with open(file_name + '.txt','w') as f2:
    sys.stdout = f2
    print(list(file.read()))

i just run "python golden.bin" and it makes "goldhen.bin.txt" and that's the array Leeful's host uses.

I attached the index.html I'm using that has the latest Goldhen as that variable.

 

[asdfmann]

As I said, I'm not too knowledgeable about JS in particular, but there should be a way to
#include just that blob. And that would be exactly what I want. Thank you

 

[remlei]

but there should be a way to
#include just that blob.

here's a al_azif 9.00 jailbreak host (so all credits goes to al_azif for this one).

just replace that payload.bin to whatever to your liking. no need to edit the source files just to update the payload.bin file.

 

[RobbieTheELK]

Does anyone have leefuls 9.0 selfhost with goldhen 2.2.2?
I dont want the trainers and everything else as it takes a while to load.
just Goldhen, and standard HB tools like FTP/DisableUpdates/Etc

 

[romanaOne]

here's a al_azif 9.00 jailbreak host (so all credits goes to al_azif for this one).

just replace that payload.bin to whatever to your liking. no need to edit the source files just to update the payload.bin file.

This method really deserves a necrobump. I'm surprised there was so little interest. There is no mention of how to host your own payloads in the sticky at the top of the PS4 forum....

Well, I just got a PS4 (9.0FW) and this still works great. I just replaced payload.bin with the right goldhen.bin, grabbed an ethernet cable, set up a static IP (NO DNS at all), and installed apache (which is no big deal) on an old Manjaro laptop and threw the files in the /srv/http and browsed to it with the PS4 web browser. Zero chance of accidental upgrade, not relying on wacky DNS servers in Outer Mongolia....

 

[laz305]

Anybody good with esp32 hosts that can help me update mine with new PSFree? Don’t look like a just drag&drop job lol