Is there a way to run the XVortex (4.05) exploit as a standalone exploit and then inject payloads manually just like when we run the Specter and IDC exploits?

XVortex released an FTP payload for 4.55 btw if you would like to add it to your tool.

Is there a way to ping you without having to create an issue here?

There seems to be an issue with the new Live Host (108.61.128.158), clicking on any of the exploits is not doing anything.

Also, there seems to be a glitch in the new UI where it displays odd shapes when putting the cursor between the top exploit buttons (try between IDC and Specter and between Specter and Stooged) after visiting the About page and then going back to the main page.

Microsoft Windows Defender finds a virus in ps4-exploit-host.exe in latest release (0.3.19):

Trojan:Win32/Occamy.B
Alert level: Severe

More info here: https://www.microsoft.com/en-us/wdsi/threats/threat-search?query=trojan:win32/occamy.b&2147725576&page=1&showall=false&sortby=relevance&sortdir=desc&size=10

WTF!!!! Stay away from this!

Can you make 2 version for the payload of xvortex, the last version work but sometimes turns off the console...

I am stuck on these :
This warning comes up after i select specter.
http://prntscr.com/i4r68e

When i choose OK, then it goes to this screen saying Exploit Successful but then it is stuck here. I cant upload payload from pc. payload sender timed out if i still select the option
http://prntscr.com/i4r6by

I am on version 3.15

Hello, when I start the tool ps4-exploit-host (I downloaded the latest version for windows), I always get the same error: "could not start server, is another program on tcp: 80?"
Port 80 on my PC is always occupied by default, and I do not know how to solve this huge problem, is there a solution?

Hello I have a cheap ex android stick with LibreElec installed inside, and I use it as mediaplayer and torrent server.
I try to copy the linux version, but when I try to execute it using ssh: ./ps4-exploit-host
I have the error:
./ps4-exploit-host: line 1: syntax error: unexpected "("

Any chance to make it working?
Thanks!

Hi Al AZif,

This time i have trouble with the very last build on win 8.1 x64.
When i use idc then hen option, ps4 crash and stop.
It works without problem with 3.19

Many thanks :)

https://www.psxhax.com/threads/dbbackup-bin-payload-backup-ps4-database-to-usb-drive-by-stooged.4146/page-7#post-68158

It's possibl to host the exploit without to change the DNS every time the IP change ?

I am trying to setup the DNS 108.61.128.158 but it doesn't work on PS4 side. I tried to connect both with LAN and WiFi and when I try to open the manuals it says can't connect. I tried with Raspberry Pi 3 with LAN and it works. What could the the reason of this?

PS: When I was testing with Raspberry Pi 3, PS4 shutdown itself when I tested the exploit twice. I tested 5 times with XVortex-HEN

1. Worked.
2. Shutdown.
3. Ps4 froze on main screen.
4. First it gave warning about storage. Next time it failed. Third it shutdown.
5. Worked.

I recently updated from win 3.14 to latest 4.0rc1. before i could change the dns ip for pc with the hello.bin using a hex edit saving then adding it back in the payloads folder.
Now when launching the host.exe it doesn't let my manual dns ip change to go in effect so in return in generates one like it would normally do. How can i change this like i was able to?

4.50 PS4 had the DNS settings set correctly to run non-locally and updated to whatever firmware was on the HDD. "View details" button before update did not show the usual Sony page.

Please leave a disclaimer or something about firmware on the HDD if this was supposed to happen. I wouldn't want anybody else to lose their opportunity for this exploit.

Hi there ...

First of all i'm sure that my issue is not related to your great software.
But i'd like to try to search for help here anyway ...

I was running your tool on a Ubuntu machine and got the message, that UDP 53 was already used.
According to research it's dnsmasq which blocks the port.
Unfortunately i can't just deactivate it, because it's a dependency of network-manager ...

Does anyone probably have any idea, how i could resolve this?

Thank you very much and @Al-Azif thank you very much for creating this fine tool :-)

Hey,

The program ps4-exploit-host doesn't work on my Windows 10 and I don't know why. I run the program and it's just crashes down without any errors. The same is for start.py
Python version is 3.6.4, but I've tried many of them already.

@Al-Azif Hope you can help me:)

I can't seem to run the new version on Ubuntu 17.10. Can you tell me the command that I need?
Thanks

Please update
Mozilla/5.0 (PlayStation 4 4.55) AppleWebKit/537.78 (KHTML, like Gecko)
to
Mozilla/5.0 (PlayStation 4 4.55) AppleWebKit/601.2 (KHTML, like Gecko)

Need to rewrite the handler to support other filetypes and other exploit packages out of the box. Ideally it should only serve from valid user guide URLs. Would also be nice to check/block (Send 403) for directory traversal attempts.

I test you file with my PC on LAN and u have an error : Unable to find LAN IP

Can you solve this problem please ?

Hey!
I just update the ps4 to 4.55 and start your exploit but I have a lot of crashes when I click on HEN. Can you fix it somehow?

PS4 ip:10.137.137.4
PS4 subnet mask:255.255.255.0
PS4 default gateway:10.137.137.2(this is my computer IP)
PS4 DNS:same as you
PS4 Proxy : dont use
when I execute start.py , crash
how to set?

┌────────────────────────────────────────────────────────┐
│ PS4 Exploit Host by Al Azif │
└────────────────────────────────────────────────────────┘

DNS server thread is running...
ERROR: Could not start server, is another program on tcp:80?
Press any key to exit...

I can get to the landing page, and click thru to the exploit list, but when i try to open any of the payloads, i get the error:

typeerror: undefined is not a constructor (evaluating 'new window.rop()')

i'm running on macos with python 3.6
tried the ol' reboot and clear ps4 cookies etc

FYI. Windows 10 newest virus detection update claims that occamy.b is a trojan virus (severe) and quarantines the file from both 3.20 and the latest version.

Using the Xvortex-Dumper exploit with my slim PS4 on 4.05 firmware, the system keeps crashing. Every time I select that payload from the menu, the PS4 has a kernel panic, whistles, and cuts off.

I don't have this issue with .20 of the host. That one had the payloads built in. This one has them separate. Maybe having the dumper payload separate causes the PS4 to crash? Because when the payloads were separate, I had this same issue. With the hosts that had the payloads built in, I haven't had this issue.

https://github.com/LightningMods/PS4-HEN-Update-Blocker-Payload

thanks

Hi!
A built-in FTP payload generator does not work for some reason. I've tried every exploit - no luck.
But! When I use my own payload with hex-edited ip - it works fine! So I assume it has something to do with automatic ip patcher...

Console's output windows shows correct ip address though...
>> Payload Sent!
>> Connect at 10.10.10.82:1337

Could you please add the perma web browser payload?

Thanks

Known Issues

• Cosmetic Issue: Selection width in settings modal (Language: HTML and CSS)
  • This is a flexbox rendering issue (Setting the width to auto in the css makes it legible but it should be full width)
• BUG (<5.05): Circle button does not work correctly on subsequent uses after closing the browser for the first time
  • This is because window.history becomes immutable in certain cases
  • Bypassing the themeless-redirect and theme-loader, just loading on the PlayStation domains, has the same error
  • Built "Failsafe" option, if window.history.state is null, add [Back] button and rework modal triggers

Pre-v0.5.2

• Update README.md and FAQ.md

0.5.2

• Fix API Calls (Language: Python)
  • GET
    • /api/menu (JSON)
    • /api/serverip (Plain)
    • /api/themes (JSON)
    • /api/pkglist (JSON)
    • /api/settings/view (JSON)
    • /api/static (Plain)
    • /debug/var/* (200 Plain or 404 Empty)
    • /debug/varclear (None)
    • /debug/clearlogs (None)
  • POST
    • /api/settings/edit (JSON -> JSON)
    • /debug/jserrorlog (JSON -> NONE)
    • /debug/filedump
    • /debug/filedelete
    • /debug/vardump
    • /debug/var/* (Plain -> Plain)

0.5.3

• Default Theme Tweaks (Language: HTML, CSS, and JS)
  • Add "Always Use Redirect" option
  • Remove tabindex from buttons when modal is open
  • DPad to select dropdown menu buttons
  • Build Alert/News system, toasts need to stack/slide up
  • Popstate Handler for browser's "Back Button" (For PC Browsers)
  • Update Bootstrap or go back to 3.3.7 for compatibility (?) or remove it completely
    • Use Bootstrap for overlays. Just us Bootstrap more in general vs custom CSS
  • Choose better Colors/Typefaces/Sizes/etc
  • New images for holidays and rotational
• Allow for rpi.html and ps4update.html customization (Language: Python)
• RPI Tweaks (Language: HTML, CSS, and JS)
  • Add smart validation
  • Add parsed "smart" responses vs raw JSON
  • Add exists page
  • Pagify PKG list
  • Add saved/source URLs

My router is also doing wi-fi; I don't have a separate wi-fi card on my PC. So I couldn't run this on my PC.

I tried it on Android. Pydroid 3 will provide a way to run Python 3.6. However, running it on Android requires root and the ability to create a portable hotspot.

I have a tablet which is rooted but cannot create a portable hotspot (Samsung disabled it for non-phone-carrier tablets) and I have a phone which can create a portable hotspot but which is not rooted.

Hey, would it be possible to create a version of your tool that runs as a proxy server instead of a fake DNS? Then the exploit would be accessed through the browser instead of the User Guide page.

The reason I need this is because I use Internet Connection Sharing on my Desktop so it is already running as a DNS Server, so I'm unable to run your tool on my Desktop.

Thanks

I'm having trouble getting either of the FTP payloads to work (on IDC). They send successfully but I can't FTP to my PS4 afterwards. What I noticed is that the only time I was able to FTP to my PS4 (FTP w/ decryption payload), I got Debug Settings as well. When I don't get Debug Settings after sending the FTP payload, I can't FTP to my PS4. So it's as if the payload is failing to send most of the times.

Any ideas/tips to get it to work? Should I reboot between tries? Should I wait after executing the exploit or should I send the payload immediately? Should I try FTPing while the User Guide page is still open on the exploit or should I close it first?

Any help would be appreciated.

Thanks

Please add : ps4_455_holygrail .bin

i created ftp paylod and sent it.
Now how do i connect to it? do i have to launch it from somewhere in the ps4? i tried connecting using filezilla it does not work.

Hello,

My sincere apologies for placing this request in the issues section, I didnt see a place of requests/questions.

Is there a way to host this on a python web server on android phone and apply the xvortex-hen to ps4 by any chance. I know someone has managed to do this but they had to root their phone and run a thr start.py via a pyhton mobile app

This would be awesome

Getting an error when trying to launch the ARM release on arch:

Traceback (most recent call last):
File "start.py", line 597, in
File "start.py", line 553, in main
File "start.py", line 477, in menu_header
UnicodeEncodeError: 'ascii' codec can't encode characters in position 0-57: ordinal not in range(128)
[2489] Failed to execute script start

python --version returns 3.6.4

How i run it:

wget & unzip .../v0.3.19/ps4-exploit-host-linux.arm-v0.3.19.zip
chmod +x ps4-exploit-host
sudo ./ps4-exploit-host

New Linux Lubuntu 16 virtual machine with python 3. Running command:
sudo python3 start.py

┌────────────────────────────────────────────────────────┐
│  PS4 Exploit Host                           by Al Azif │
└────────────────────────────────────────────────────────┘
>> PS4UPDATE_RECOVERY.PUP checksum matches   
ERROR: Could not start server, is another program on udp:53?

dnsmasq is running (by default) and using the localhost network. This is stopping fakedns from running because it is trying to attach to all the networks. I have disabled dnsmasq and it works. Does it need to attach to 0.0.0.0 can it be setup to only use a specific network adapter?

Incorporate DnsFaker into the script rather than starting a subprocess. This should allow better error checking and stop a hanging process.

I am on Firmware 4.55. I have followed every instruction very carefully. I am currently using the v0.4.0.1. I have used the hosted locally method. I ran the "Hen" exploit. I checked the debug settings and its there. I installed a package from the debug settings, but when i tried to run the game, i got an error.

Is the --autosend supposed to automatically send the given payload from when you launched start.py when you access the User's Guide?

I am using the most current version. I have my PS4 being exploited and working fine after I select xvortex hen from the menu that comes up.

I want it so that when I go into the user's guid that xvortex-hen.bin is automatically sent to the PS4, and I don't have to select it from the menu each time.

I assumed this would be accomplished by python start.py --autosend xvortex-hen.bin

But it does not work, with the above, I still get the menu when I go to User's Guide each time.

If I run python start.py --autosend and an invalid bin, it complains and says ERROR: Autosend payload not found. So it seems to find xvortex-hen.bin when I do it properly, it is just not auto-sending.

I also tried the pre-compiled x64 binary package, with the same results trying to use --autosend.

Am I doing something wrong?

since it just came out :D

Hi Al-Azif,

First a thousand thanks for all your hard work !!!

I'm working on a guide for beginner and I came across this post on wololo site.

Wololo give an hard coded example in the end by modifying "start.py" in order to work in pure local network with no internet connection. I have the same issue because i connect pc and ps4 together with one cable.

I search a little and test a simple code under windows found on stackoverflow which seems to work in all case.

print((([ip for ip in socket.gethostbyname_ex(socket.gethostname())[2] if not ip.startswith("127.")] or [[(s.connect(("8.8.8.8", 53)), s.getsockname()[0], s.close()) for s in [socket.socket(socket.AF_INET, socket.SOCK_DGRAM)]][0][1]]) + ["no IP found"])[0])

It would be so awesome if you could fix this little issue in next release.

Many many thanks again :)

The script needs testing on various platforms to check for incompatibility issues. I'll do my best to make it work on as wide a range of current platforms possible.

Please include:

• OS
• Version (7/8/10, Kernel, etc)
• Python Version
• Application Version (Release v0.X.X, git clone master, git clone next-get, etc)
• Running with Admin/Root rights?
• Method of running (Command Line, Double Click, etc)
• Program Output

or anything else you can think of

Could you create an apk binary too?

start.py dont work for me the cmd window open and close and on command line in cmd, i have this message :

This must be run by root as it requires port 53 & 80

root@dwnldr:ps4-exploit-host# python3 start.py
Traceback (most recent call last):
File "start.py", line 577, in
main()
File "start.py", line 538, in main
menu_header()
File "start.py", line 473, in menu_header
print('\u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510')
UnicodeEncodeError: 'ascii' codec can't encode characters in position 0-57: ordinal not in range(128)

root@dwnldr:ps4-exploit-host# echo $LANG
en_US.UTF-8

This is happening for git 82bb2bb, and also for 3.13

Yeah im running this in Raspbian GNU/Linux 8

Just got my PS4 Pro on 4.55 and HEN works. But, when I try to use the built in dumper payload for the new exploit host, I get through message that it started, but no message to plug anything in or that it's starting the dump. Why?

Here's a video of my problem. I even tried to use HEN first THEN the dumper payload, but still nothing.

https://youtu.be/LsvAo4oFw4o

When running my PIA VPN Client, the executable detects my DNS IP as the IP associated with the virtual network instead of my LAN IP.

Is there any way you can provide the option of manually specifying the DNS IP address or some other work around? Thank you!

Hello,
even if you remove the daemon arg
I can leave it in 'always running background state' using the & operator ?
./ps4-exploit-host &

Thanks

My FW is 4.07. I add 4.07 Exploit to exploit directory and successfuly exploit it.
But I can't send payload. when I try send payload [Debug_Setting] I got "ERROR: Payload sender timed out" ERROR.
Any Suggestion?