PPwn-Luckfox v1.2.1 ps4 update hack 11.00

Developer 0x1iii1ii follows in the footsteps of Harshavardhan A by updating the first revision of PPPwn-Luckfox, the economical alternative to run the PPPwn exploit on PlayStation 4 consoles using small Linux cards known as Luckfox Pico.

This project, based on theflowtheflow’s original work, leverages the executable re-write of PPPwn in C++ for Cortex-A7 by xfangfang, compatible with the Luckfox Pico series RV1103/RV1106 chips.

The update introduces a web interface accessible from the PlayStation 4 console browser at 192.168.1.1. .

The new features allow you to change the PPPwn settings, turn off the Luckfox device, run PPPwn, inject payloads (making sure that BinLoader is enabled in GoldHEN) and manage self-execution at startup, which is activated by default.

You can also manually edit the configuration file in /etc/pppwn/config.json. . Custom buildroot and PPPwn files are also available for download.

Notes

It currently supports firmware : 9.00, 9.60, 10.00, 10.01, 11.00.
The average time to complete the PPPwn exploit is about 1-2 minutes, sometimes charge in less than a minute.
Use xfangfang’s PPPwn nightly build night (PPPwn-cpp).

Features of the Web server on NAND

Thank you to @harsha-0110for basic web server and PHP scripts.

The web server is accessible at the address 192.168.1.1through the PlayStation 4 browser. It allows to:

Change the settings of PPPwn.
Turn off the Luckfox device.
Perform PPPwn.
Inject payload (be sure to enable BinLoader in GoldHEN).
Enable/deactivate self-execution at startup (activated by default).

In addition, the configuration file located in can also be manually modified /etc/pppwn/config.json. .

Versions tested

Firmware 9.00.
Firmware 9.60.
Firmware 10.00.
Firmware 10.01.
Firmware 11.00.

Operation

The goal is to configure Luckfox Pico to try to automatically jailbreak the console, just wait until the process is completed. Once the exploit is completed, the process will stop.

Supported cards

As an Amazon Affiliate, I receive a gain from eligible purchases.

Requirements

Luckfox Pico/Pro/Max/Plus/Mini B.
Ethernet cable.
USB Type-C cable to power the card.
A USB drive formatted in exFAT32 (only for first use to charge GoldHEN).
PC/Laptop for Luckfox configuration.

Installation on NAND Flash

Before proceeding, be sure to turn off your antivirus or Windows Defender software: it is a fake positive and it is completely safe.

Use the SocToolKit tool to burn the buildroot image. Follow the official Luckfox tutorial on how to burn SPI NAND Flash images.
Connect the Luckfox device to the PC via the USB-type C port and wait a few minutes until you hear the connection sound of the device.
On your PC, open Control Panel – Network and Internet – Network and Sharing Center – Edit Card Options. You will find the Remote NDIS-based Internet sharing device. Right click and choose Properties.
Double-click Internet Protocol version 4 (TCP/IPv4). Set IPv4 address to 172.32.0.100and the subnet mask up 255.255.0.0and click OK.

Sign in to MobaXterm

DownloadMobaXtermand decompress it to use it.
- Open the MobaXterm remote access software, choose Session – SSH and enter the Luckfox pico static IP address as 172.32.0.93. .
- After filling in the fields, click OK, enter rootin the login name and luckfoxas a password.
At this point, you are successfully connected to Luckfox pico. Download PPPwn-Luckfox from the repository, unzip it and rename the folder in PPPwn-Luckfox. . Drag and drop files into the area highlighted in red, will copy the files to Luckfox.
After you have finished the copy, paste these commands and follow the instructions:

cd PPPwn-Luckfox
chmod +x install-NAND.sh
./install-NAND.sh

After the Luckfox restarts, pppwn will start automatically.

Installation on SD card

Download the Ubuntu. After downloading it, pull out one of the zip files according to Luckfox pico models.
Burn the image to an SD card. Download SocToolKit and unzip the burning tool.
Open the software and select the chip type.

Luckfox models	The Type of Chip
Luckfox Pico Pro / Max	RV1106
Luckfox Pico/Plus/Mini	RV1103

Steps to download the firmware for Luckfox Pico on Windows:
- Choose the SD card tool.
- The size of the SD card will appear under USB Disk. If it does not appear, re-enter the card reader.
- Select boot from SD card.
- Import the boot file. (Note: Startup files do not include update.img)
- Click on “Create SD Card”.

Continue Steps 3, 4, 5, and 6 Installation to NAND Flash and MobaXterm Access

Access Ubuntu using static IP 172.32.0.70, login: pico, password: , password: luckfox. . After logging in, follow Step 7 of the Installation to NAND Flash, run the following commands and follow the configuration instructions:

cd PPPwn-Luckfox
chmod +x install-SD.sh
sudo ./install.SD.sh

Once Luckfox has restarted, pppwn will run automatically.

PPPwn-Luckfox Update

Use this command only if you are using an SD card with Ubuntu. Access your Luckfox, connect it to the Internet, paste this command and configure it again:

cd PPPwn-Luckfox
sudo ./update.sh

For NAND, you need to manually copy to Luckfox using MobaXterm.

Installation of the hardware

Simply connect the LAN cable from the Luckfox Pico to the PS4 and power the Luckfox from the PS4 via a USB Type-C cable or other power sources.

Configuration of the PS4

Go to Settings and then on Network.
Select “Configure Internet Connection” and choose “Use a LAN” cable.
Choose “Custom Settings” and select “PPPoE” for IP address settings.
Enter “ppp” as a PPPoE user ID and PPPoE password.
Choose “Automatic” for DNS and MTU settings.
Choose “Do not use” for the proxy server.

Loading with GoldHen

For the GoldHen payload, place the file goldhen.bininside a USB drive and connect it to the console. Once loaded for the first time, GoldHen will be copied to the console’s internal HDD and the USB drive will no longer be needed.

To then update the GoldHen payload, repeat the steps described above and the new version will be copied to the internal HDD.

Changelog v1.2.0

Adding Web Server Features to NAND. Thank you to @harsha-0110for basic web server and PHP scripts.

You can access the web server at the address 192.168.1.1through the PlayStation 4 browser. This allows you to:

Change the settings of PPPwn.
Turn off the Luckfox device.
Perform PPPwn.
Inject payload (ensure to enable BinLoader in GoldHEN).
Activate or deactivate self-execution at startup (activated by default).

You can manually edit the configuration file located in /etc/pppwn/config.json. . Custom buildroot images and PPPwn files can be downloaded here. Any bugs found can be reported by opening an issue.