PS4 4.01 Jailbreak showcased by Chinese hackers at Geekpwn

[dlevere]

A few hours ago, a video was shared by hackers at the GeekPwn convention in Shanghai, showing what appears to be a 4.01 PS4 Jailbreak.

This is the first time a full fledged exploit is publicly showcased on a firmware higher than firmware 1.76. As of now, the only information publicly available to run a PS4 Jailbreak is for firmware 1.76. PS4 Firmware 4.01 is the latest PS4 Firmware at the time of this writing, so a Jailbreak on this firmware could be a massive breakthrough.

http://wololo.net/2016/10/24/ps4-4-0...wn-convention/

https://chaitin.cn/ps4.html

https://www.psxhax.com/threads/ps4-4...kpwn-2016.932/

[itoikenza]

wow!

[dlevere]

Yesterday, Chinese hackers demonstrated a PS4 Jailbreak on PS4 firmware 4.01, at a big security event in Shanghai. Today, Sony pushed firmware update 4.05 on the PS4.

PS4 Firmware 4.05, suspiciously released after 4.01 Jailbreak demo

[dlevere]

Today, on what appears to be their twitter account they announced that they will disclose to Sony the exploits used in the Jailbreak, per the rules of the GeekPwn hacking contest.

Chaitin Tech has published more videos (this time on YouTube) showcasing their exploit with slightly more details and an English translation. They also confirmed they used FailOverfl0w’s Linux implementation to run their demo. There’s no details on a potential release for this Jailbreak, however.

Chaitin tech: “the bugs we used in the PS4 4.01 Jailbreak will be reported to Sony”

https://twitter.com/ChaitinTech/stat...49072429428737

[dlevere]

After the hackers of Taichin Tech announced they would disclose the exploits to Sony, people were able to find data about the exploit on the FreeBSD mailing list and bug tracker.

Of course, not everyone can do much with this information, but in theory the details of how the bug was fixed should be enough information for people with the right set of skills to cause a kernel panic on the PS4.

More Details surface on the PS4 4.01 Jailbreak, potentially enough for a public release “soon”

Relevant links:

• FreeBSD Security Advisory
• CVE-2016-1885
• Bug fix with details on what was broken

Wondering if you should get a second PS4? Any PS4 you buy new today is guaranteed to ship with a firmware 4.01 or less.

[dlevere]

PDF May Reveal Details on Chaitin Tech PS4 4.01 Jailbreak Exploit

Neochampion2 (aka spars21) shared with PlayStation 4 developers an iOS9_Pegasus_iOS_Kernel_Exploit.pdf file that may reveal details how Chaitin Tech made their PS4 4.01 kernel exploit demonstrated at GeekPwn 2016.

The document from zhengmin1989 contains a technical analysis of the Pegasus exploits on iOS, of which similar attack methods are believed to have been used on the PS4 4.01 Jailbreak kernel exploit.

https://www.psxhax.com/threads/pdf-m...-exploit.1091/

https://github.com/zhengmin1989/Grea...el_Exploit.pdf

https://github.com/zhengmin1989/Grea...el_Exploit.pdf

[dlevere]

Does the PS4 4.01 Jailbreak rely on vulnerabilities used in iOS 9 Trident/Pegasus exploits?

[dlevere]

PS4 Jailbreak 2017: The latest status