THREAD: PS4Lib - (4.05/4.55/5.05) | Real Memory Editing | [SERVER/CLIENT] | v1.1
  1. 02-07-2018, 06:55 PM
    BISOON's Avatar
    BISOON
    Maggbot timeout!
    BISOON's Avatar
    BISOON
    Maggbot timeout!
    536
    Posts
    10,912
    Reputation
    Apr 2014
    NextGenUpdate
    Hello everybody after a while being away for a long time Smile

    Recently I got my PS4 (4.05) and thanks for everyone who spent his effort to make this happen on 4.5 and also we will not forget who is working on useful things for this community.
    I spent the past two days looking for PS4API to control over the app memory using desktop tools/rtms, and unfortunately I got some but seems not worked with me or not stable enough (I am not underestimating their work, I really respect what they have done) also no new commits or updates on their projects for a long time.

    As I promised you guys I've finished the client side library in c# to make it easy for people who interested in making RTM tools. also demo app included for demonstration.

    A Brief Examples:

    Instantiate the PS4API object:
    PS4API PS4 = new PS4API();


    Connect to target:
    PS4.ConnectTarget("192.168.0.0");


    Disconnect from target:
    PS4.DisconnectTarget();


    Attach to game process:
    PS4.AttachProcess();


    Detach Process:
    PS4.DetachProcess();


    Notify:
    PS4.Notify(222, "Hello World!");


    Write to memory:
    PS4.SetMemory(0x0000000000000000, new byte[]{0x00,0x00});


    Read from memory:
    byte[] buffer = PS4.GetBytes(0x0000000000000000, Cool Man (aka Tustin);


    Extension Class Examples:
    Spoiler:

    Reading


    Read and return an signed integer 16,32 or 64 bits:

    Int16 var16 = PS4.Extension.ReadInt16(0x000000000);
    Int32 var32 = PS4.Extension.ReadInt32(0x000000000);
    Int64 var64 = PS4.Extension.ReadInt64(0x000000000);


    Read and return an unsigned integer 16,32 or 64 bits:

    UInt16 var16 = PS4.Extension.ReadUInt16(0x000000000);
    UInt32 var32 = PS4.Extension.ReadUInt32(0x000000000);
    UInt64 var64 = PS4.Extension.ReadUInt64(0x000000000);


    Read and return float(s):

    float varFloat = PS4.Extension.ReadFloat(0x000000000);
    float[] varFloats = PS4.Extension.ReadFloats(0x000000000, 3);


    Read and return double:

    double vardouble = PS4.Extension.ReadDouble(0x000000000);


    Read and return string:

    string varstring = PS4.Extension.ReadString(0x000000000);


    Writing


    Write an signed integer 16,32 or 64 bits:

    PS4.Extension.WriteInt16(0x000000000, 0x1122);
    PS4.Extension.WriteInt32(0x000000000, 0x11223344);
    PS4.Extension.WriteInt64(0x000000000, 0x112233445566778Cool Man (aka Tustin);


    Write an unsigned integer 16,32 or 64 bits:

    PS4.Extension.WriteUInt16(0x000000000, 0x1122);
    PS4.Extension.WriteUInt32(0x000000000, 0x11223344);
    PS4.Extension.WriteUInt64(0x000000000, 0x112233445566778Cool Man (aka Tustin);


    Write float(s):

    PS4.Extension.WriteFloat(0x000000000, 1.25f);
    PS4.Extension.WriteFloats(0x000000000, new float[]{1.0f, 2.0f, 3.0f});


    Write double:

    PS4.Extension.WriteDouble(0x000000000, 1.7E+3);


    Write string:

    PS4.Extension.WriteString(0x000000000, "Hello World!");






    GUI:
    You must login or register to view this content.



    * I added the Extension class from PS3Lib by You must login or register to view this content. for two reasons, first is to save my time, second is to make it easy for people who already familiar with that awesome lib.




    TODO:

    • more system functions.
    • Improve TCP communications.
    • Improve memory allocation.
    • multi-users.
    • process dump
    • process list
    • debugger


    Changelogs:
    Spoiler:

    PS4API - SERVER

    Spoiler:

    1.1
    - More process name (default_mp.elf, eboot.bin etc)
    - Fixed attach problem

    1.0
    initial version

    PS4Lib - CLIENT

    Spoiler:

    1.0
    initial version




    Open sourced PS4 Tools created using PS4Lib.dll:
    Spoiler:


    • PS4API for NetCheat You must login or register to view this content.
    • GTA5 Native Caller You must login or register to view this content.
    • Orbis Assembler You must login or register to view this content.
    • PS4 Notification tool by Vultra You must login or register to view this content.




    Bugs:
    Only one bug, if I try to read more than 1000000 length the browser got crashed, due the memory allocation in the server. it will be fixed soon.
    feel free to comment below any bugs to fix. also your feedback is valuable. <3




    You must login or register to view this content.
    You must login or register to view this content.
    You must login or register to view this content.
    You must login or register to view this content.








    Credits:

    CTurt -> the SDK.
    Specter -> exploit implementation.
    IDC, xvortex, 2much4u, iMCSx
    All of You reader, supporter, haters, ...etc
    and who else I missed (feel free to message me for the Credits)
    Last edited by BISOON ; 06-09-2018 at 04:49 PM. Reason: 5.05

  2. The Following 36 Users Say Thank You to BISOON For This Useful Post:

    , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

  3. 02-07-2018, 07:11 PM
    Frosty's Avatar
    Frosty
    <span style="background:url(http://i.imgur.com/HzdClzs.gif);font-weight:bold;color:white;">Olaf The Snowman</span>
    Frosty's Avatar
    Frosty
    <span style="background:url(http://i.imgur.com/HzdClzs.gif);font-weight:bold;color:white;">Olaf The Snowman</span>
    8,989
    Posts
    84,101
    Reputation
    Dec 2011
    NextGenUpdate
    Originally Posted by BISOON View Post
    Hello everybody after a while being away for a long time Smile

    Recently I got my PS4 (4.05) and thanks for everyone who spent his effort to make this happen on 4.5 and also we will not forget who is working on useful things for this community.

    I spent the past two days looking for PS4API to control over the app memory using desktop tools/rtms, and unfortunately I got some but seems not worked with me or not stable enough (I am not underestimating their work, I really respect what they are done) also no new commits or updates on their projects for a long time.

    So today I just pushed my PS4API server project into github for contribution, or for testing purposes.
    The client side not finished yet due the lack of time, so I will create the client lib based on the PS3Lib By iMCSx components (if he doesn't mind Drack) to make it easy for people who already has created PS3 rtm tools and to make it simple for updating PS3 tools to PS4 ( only changing the addresses will be enough) and the RPC as well if needed.

    Installation

    use CTurt's PS4 SDK from You must login or register to view this content.. then follow the instructions on how to add the sdk path to your environment.

    Usage

    char sendCommand(char command, void* args);


    commands:

    • 'a' attach to game process ( eboot.bin ) and the process will continued.

    • 'c' continue the process.

    • 'd' detach the process.

    • 's' suspend the process.

    • 'u' resume the process.

    • 'k' kill the process (seems not works)

    • 'n' send notification with text.

    • 'r' read memory.

    • 'w' write memory.



    args:

    • 'a'(void);
    • 'c'(void);
    • 'd'(void);
    • 's'(void);
    • 'u'(void);
    • 'k'(void);
    • 'n'(char text[]);
    • 'r'(unsigned int length, unsigned long int address);
    • 'w'(unsigned int length, unsigned long int address, char data[]);





    TODO:

    • more system functions.
    • Improve tcp communications.
    • Improve memory allocation.
    • multi-threaded.
    • process dump
    • process list
    • debugger


    Bugs:
    No unknown bugs as far as I know already tested on IDC exploit page, and worked smoothly using nc/.bin
    feel free to comment below any bugs to fix. also your feedback is valuable. <3

    You must login or register to view this content.


    Credits:
    CTurt -> the SDK.
    Specter -> exploit implementation.
    IDC, xvortex, 2much4u
    who else I missed (feel free to message me for the Credits)


    I wonder if someone could get the debug menu for Uncharted 4, UC1/2/3 or TLoU, like was done for PS3.
  4. 02-07-2018, 07:29 PM
    NGM's Avatar
    NGM
    Bounty hunter
    NGM's Avatar
    NGM
    Bounty hunter
    185
    Posts
    715
    Reputation
    Nov 2013
    NextGenUpdate
    here we go, nice work
  5. The Following User Thanked NGM For This Useful Post:


  6. 02-07-2018, 07:46 PM
    RF0oDxM0Dz's Avatar
    RF0oDxM0Dz
    You talkin to me?
    RF0oDxM0Dz's Avatar
    RF0oDxM0Dz
    You talkin to me?
    512
    Posts
    19,076
    Reputation
    Oct 2014
    NextGenUpdate
    Good shit
  7. The Following User Thanked RF0oDxM0Dz For This Useful Post:


  8. 02-08-2018, 03:51 AM
    Hydrogen's Avatar
    Hydrogen
    Super Mod
    Hydrogen's Avatar
    Hydrogen
    Super Mod
    5,369
    Posts
    91,470
    Reputation
    Aug 2015
    NextGenUpdate
    Originally Posted by BISOON View Post
    Hello everybody after a while being away for a long time Smile

    Recently I got my PS4 (4.05) and thanks for everyone who spent his effort to make this happen on 4.5 and also we will not forget who is working on useful things for this community.

    I spent the past two days looking for PS4API to control over the app memory using desktop tools/rtms, and unfortunately I got some but seems not worked with me or not stable enough (I am not underestimating their work, I really respect what they are done) also no new commits or updates on their projects for a long time.

    So today I just pushed my PS4API server project into github for contribution, or for testing purposes.
    The client side not finished yet due the lack of time, so I will create the client lib based on the PS3Lib By iMCSx components (if he doesn't mind Drack) to make it easy for people who already has created PS3 rtm tools and to make it simple for updating PS3 tools to PS4 ( only changing the addresses will be enough) and the RPC as well if needed.

    Installation

    use CTurt's PS4 SDK from You must login or register to view this content.. then follow the instructions on how to add the sdk path to your environment.

    Usage

    char sendCommand(char command, void* args);


    commands:

    • 'a' attach to game process ( eboot.bin ) and the process will continued.

    • 'c' continue the process.

    • 'd' detach the process.

    • 's' suspend the process.

    • 'u' resume the process.

    • 'k' kill the process (seems not works)

    • 'n' send notification with text.

    • 'r' read memory.

    • 'w' write memory.



    args:

    • 'a'(void);
    • 'c'(void);
    • 'd'(void);
    • 's'(void);
    • 'u'(void);
    • 'k'(void);
    • 'n'(char text[]);
    • 'r'(unsigned int length, unsigned long int address);
    • 'w'(unsigned int length, unsigned long int address, char data[]);





    TODO:

    • more system functions.
    • Improve tcp communications.
    • Improve memory allocation.
    • multi-threaded.
    • process dump
    • process list
    • debugger


    Bugs:
    No unknown bugs as far as I know already tested on IDC exploit page, and worked smoothly using nc/.bin
    feel free to comment below any bugs to fix. also your feedback is valuable. <3

    You must login or register to view this content.


    Credits:
    CTurt -> the SDK.
    Specter -> exploit implementation.
    IDC, xvortex, 2much4u
    who else I missed (feel free to message me for the Credits)


    Bisoon is back :carling:
  9. The Following User Thanked Hydrogen For This Useful Post:


  10. 02-08-2018, 07:08 PM
    CyberNomadic's Avatar
    CyberNomadic
    Web Developer
    CyberNomadic's Avatar
    CyberNomadic
    Web Developer
    2,443
    Posts
    22,295
    Reputation
    Aug 2010
    NextGenUpdate
    Thanks for this, been patiently waiting! Smile
  11. The Following User Thanked CyberNomadic For This Useful Post:


  12. 02-08-2018, 07:14 PM
    TER152's Avatar
    TER152
    Do a barrel roll!
    TER152's Avatar
    TER152
    Do a barrel roll!
    138
    Posts
    3,863
    Reputation
    Jun 2014
    NextGenUpdate
    Nice one, Thanks.
  13. The Following User Thanked TER152 For This Useful Post:


  14. 02-09-2018, 07:17 PM
    talixme's Avatar
    talixme
    Gobble
    talixme's Avatar
    talixme
    Gobble
    2
    Posts
    30
    Reputation
    Jan 2018
    NextGenUpdate
    So Nice,has Notifications!!!
    I´ll Wait for the app to RTM/peek/poke,my father its a little old but he still loving video games so i cheat it for him

    Thank you so much for this hard work.
  15. The Following User Thanked talixme For This Useful Post:


  16. 02-10-2018, 03:19 AM
    seb5594's Avatar
    seb5594
    <span style="background:url(http://oi60.tinypic.com/amtgtv.jpg);font-weight:bold;color:black;">♥ Proud Former Admin ♥</span>
    seb5594's Avatar
    seb5594
    <span style="background:url(http://oi60.tinypic.com/amtgtv.jpg);font-weight:bold;color:black;">♥ Proud Former Admin ♥</span>
    2,723
    Posts
    64,864
    Reputation
    Jul 2008
    NextGenUpdate
    Nice contribution to the community.
    Looks like there’s coming a wave of RTE solutions Smile
  17. The Following 3 Users Say Thank You to seb5594 For This Useful Post:

    , ,

  18. 02-10-2018, 05:18 AM
    Vince's Avatar
    Vince
    PC Master Race Master Race
    Vince's Avatar
    Vince
    PC Master Race Master Race
    13,148
    Posts
    227,973
    Reputation
    Jan 1970
    NextGenUpdate
    Awesome work, thread stuck for more exposure.
  19. The Following 2 Users Say Thank You to Vince For This Useful Post:

    ,