PSFree version 1.5.1

PSFree is a collection of exploits for the PS4 console. The main focus of the repo is for the PS4, but we try to make things portable to PS5.

Features

Auto-detection: Automatically detects console type and firmware version (via src/config.mjs).
WebKit Exploit (PSFree): Entry point via the console's web browser.
Kernel Exploit (Lapse): Escalates privileges to kernel level.
Payload Loader: After successful kernel exploitation listens for a payload on port 9020.
Docker Support: This repository is now fully dockerized, allowing PSFree to be hosted easily without manual dependency setup.

Quickstart (Docker Compose)

clone the repo

git clone https://zit.zo0.zip/zo0/PSFree-Enhanced-Dockerized
cd PSFree-Enhanced-Dockerized

Build the docker image with

docker build -t psfe:latest .

Create a Docker compose file docker-compose.yml

services:
  webapp:
    image: psfe:latest
    container_name: psfe
    ports:
      - "52721:52721"
    restart: unless-stopped

Run the container with

docker compose up -d

Now you can reach it under

http://<host-ip>:52721

Vulnerability Scope

	PSFree	Lapse
PlayStation 4	6.00-9.60	1.01-12.02
PlayStation 5	1.00-5.50	1.00-10.01

Supported by this Repository

This table indicates firmware versions for which the current version of this repository provides a functional and tested exploit chain.

	PSFree	Lapse
PlayStation 4	7.00-9.60	7.00-9.60
PlayStation 5	N/A	N/A

Note: Support for other firmwares listed in the "Vulnerability Scope" table may, or may not, be actively being worked on or may have been supported in previous versions of this repository. Please check CHANGELOG.md for historical support.

TODO List

~~Blackscreen/Save issue with certain games~~ Issue is patched post-exploit
- Determine root cause and fix more directly
lapse.mjs: Just set the bits for JIT privs
view.mjs: Assumes PS4, support PS5 as well
Add PS5 support

Additional features

Language switcher
HEN flavor selector
GoldHEN version selector
Descriptive payload selection
Unsuported payload loading protection
Load payloads with GoldHEN's BinLoader through a mirrored http host
Up to date

Contribution

You can :

look at the languages folder and PR your language!
improve the host by modefying, updating or adding new features!

Copyright and Authors:

AGPL-3.0-or-later (see LICENSE). This repo belongs to the group anonymous. We refer to anonymous contributors as "anonymous" as well.

Credits:

anonymous for PS4 firmware kernel dumps
Check the appropriate files for any extra contributors. Unless otherwise stated, everything here can also be credited to us.

3.0 KiB Raw Permalink Blame History