Firmware Dumper

This is a kernel-mode payload to dump PS4 system files required by Obliteration. Only 11.00 is currently supported. Please note that the current version is intended for development use only. You will need a new dump when we release Obliteration to the end-users.

Setup

Plug a USB drive with free space at least 2 GB to the PS4 and make sure the PS4 can write some files to it. You can test this by copy some game screenshots to it to see if it success without any errors.

Running

You need to use TheFloW PPPwn with --stage2 pointed to firmware-dumper.bin like the following:

sudo python3 pppwn.py --interface=enp0s3 --fw=1100 --stage2=firmware-dumper.bin

Wait for a notification Dump completed!. This can take longer than 20 minutes depend on how fast is your USB drive and you need to keep your PS4 on until it is finished then shutdown the PS4 (not putting it into rest mode). Once the PS4 completely shutdown unplug the USB drive to grab firmware.obf.

Building from source

Prerequisites

• Rust on nightly channel
• Python 3

Install additional Rust component

rustup component add --toolchain nightly rust-src llvm-tools

Build

./build.py

Development

You need to install x86_64-unknown-none for rust-analyzer to work correctly:

rustup target add x86_64-unknown-none

The payload must not exceed 0x4000 bytes due to limitation of PPPwn. It might be possible to increase this limit but I have not tried yet. AFAIK the only possible issues for increasing this limitation is it have more chance for UDP fragmentation to be out of order on the kernel side.

License

MIT