A new update has been released for PPPwn-Luckfox , the low-cost solution for running the PPPwn exploit on PlayStation 4 consoles using the Luckfox Pico card.

This project represents a versatile alternative for users who want to unlock their console with minimal investment, taking advantage of the efficiency of the RV1103 and RV1106 chips.

There are two variants of the PPPwn-Luckfox project : one by developer Harshavardhan A and the other by 0x1iii1ii . Both share the same goal and ensure stable execution of the exploit, differing mainly in the selection of payloads used.

In both versions, the technical basis is based on the C++ porting of the PPPwn exploit by xfangfang , specifically adapted to the Cortex-A7 architecture, making it perfectly compatible with the Luckfox Pico family of devices.

Note: You must set your PPPoE username and password to “ppp” for some features to work properly and for the web server to be operational .

This new version fixes an issue with missing IPv6 options, previously reported by users. In addition, the web configuration interface has been optimized, making it more intuitive and responsive.

The update also includes various minor bug fixes and general refinements. To ensure that some features and the integrated web server work properly, it is essential to configure your PPPoE credentials by setting both your username and password to “ppp”.

Important: After loading GoldHEN, you need to disable the PPPoE Patch option for the web server to work. This feature, present in GoldHEN v2.4b18.2, prevents the web server from starting correctly .

Notes

Currently supports firmwares : 9.00, 9.60, 10.00, 10.01, 11.00.
The average time to complete the PPPwn exploit is about 1-2 minutes, sometimes it loads in less than a minute.
Use xfangfang’s PPPwn nightly build (PPPwn_cpp).

Web Server on NAND Features

Thanks to @harsha-0110for the basic web server scripts and PHP.

The web server is accessible at 192.168.1.1via the PlayStation 4 browser . It allows you to:

Change PPPwn settings.
Turn off your Luckfox device.
Run PPPwn.
Inject payload (make sure to enable BinLoader in GoldHEN).
Enable/disable auto-run at startup (enabled by default).

You can also manually edit the configuration file located in /etc/pppwn/config.json.

Tested versions

Firmware 9.00.
Firmware 9.60.
Firmware 10.00.
Firmware 10.01.
Firmware 10.50.
Firmware 10.70.
Firmware 10.71.
Firmware 11.00.

How it works

The goal is to configure Luckfox Pico to automatically attempt to jailbreak your console, simply wait until the process is complete. Once the exploit is complete, the process will stop.

Supported Cards

As an Amazon Affiliate I earn from qualifying purchases .

Requirements

One of the supported card models.
4GB or above SD card (for Luckfox Pico/Mini A).
Ethernet cable.
USB Type-C cable to power the board.
A USB drive formatted in exFAT32 (to be used only the first time to load GoldHEN).
PC/Laptop for Luckfox setup.

Installation on NAND Flash

Before proceeding, make sure you disable your antivirus software or Windows Defender – this is a false positive and is completely safe.

Use the SocToolKit tool to burn the buildroot image. Follow the official Luckfox tutorial on how to burn SPI NAND Flash images .
Connect your Luckfox device to your PC via USB Type-C port and wait a few minutes until you hear the device connecting sound.
On your PC, open Control Panel -> Network and Internet -> Network and Sharing Center -> Change adapter options. You will find the Remote NDIS based Internet Sharing Device. Right click it and choose Properties.
Double-click Internet Protocol Version 4 (TCP/IPv4). Set the IPv4 address to 172.32.0.100and the subnet mask to 255.255.0.0and click OK.

Access to MobaXterm

Download MobaXterm and unzip it to use.
- Open the MobaXterm remote access software, choose Session -> SSH and enter the static IP address of Luckfox pico as 172.32.0.93.
- After filling in the fields, click OK, enter rootin the login name and luckfoxas password.
At this point, you have successfully connected to Luckfox pico. Download PPPwn-Luckfox from the repository, unzip it and rename the folder to PPPwn-Luckfox. Drag and drop the files to the red highlighted area, it will copy the files to Luckfox.
After you finish copying, paste these commands and follow the instructions:

cd PPPwn-Luckfox 
chmod +x install_NAND.sh 
./install_NAND.sh

After restarting Luckfox, pppwn will start automatically.

Installation on SD card

Download Ubuntu . After downloading, extract one of the zip files according to the Luckfox pico templates.
Burn the image to an SD card. Download SocToolKit and unzip the burning tool.
Open the software and select the chip type.

Luckfox Models	Chip Type
Luckfox Pico Pro/Max	RV1106
Luckfox Pico/Plus/Mini	RV1103

Steps to download firmware for Luckfox Pico on Windows:
- Choose the SD card tool.
- The size of the SD card will be displayed under USB Disk. If it is not displayed, reinsert the card reader.
- Select boot from SD card.
- Import the startup file. (Note: Startup files do not include update.img)
- Click on “Create SD Card”.

Proceed with steps 3, 4, 5 and 6 of Installing on NAND Flash and Accessing MobaXterm

Login to Ubuntu using static IP 172.32.0.70, login: pico, password: luckfox. After login, follow step 7 of Installing on NAND Flash, run the following commands and follow the setup instructions:

cd PPPwn-Luckfox 
chmod +x install_SD.sh 
sudo ./install_SD.sh

Once you restart Luckfox, pppwn will run automatically.

PPPwn-Luckfox Update

Use this command only if you are using an SD card with Ubuntu. Log in to your Luckfox, connect it to the internet, paste this command and configure it again:

cd PPPwn-Luckfox 
sudo ./update.sh

For NAND, you need to manually copy to Luckfox using MobaXterm.

Hardware Installation

Simply connect the LAN cable from the Luckfox Pico to your PS4 and power the Luckfox from the PS4 via a USB Type-C cable or other power sources.

PS4 Setup

Go to Settings and then Network.
Select “Set up Internet connection” and choose “Use a LAN cable”.
Choose “Custom Setting” and select “PPPoE” for IP address settings.
Enter “ppp” as PPPoE User ID and PPPoE Password.
Choose “Automatic” for DNS and MTU settings.
Choose “Do not use” for the proxy server.

Loading GoldHen

For the GoldHen payload, place the file goldhen.bininside a USB drive and plug it into the console. Once loaded for the first time, GoldHen will be copied to the console’s internal HDD and the USB drive will no longer be needed.

To later update the GoldHen payload, repeat the steps above and the new version will be copied to the internal HDD.

Changelog

Make sure to set the PPPoE username and password to “ppp” for the underlying function to work properly and the web server to start without any problems.