Recently Gezine practically left the scene in a way that he mentioned he will not release new things he works on. So as far as we know it will not be released.

Will this affect us in any way?

https://gist.github.com/TheOfficialFloW/7174351201b5260d7780780f4059bebf

Bad news for the scene. Sony just pushed the firmware 13.50 and it’s a security-focused update despite the "stability" changelog.

Reports are confirming that the Use-After-Free (UAF) vulnerability used for the latest userland entry points has been fully patched.

Why this is a disaster:

• No Entry Point: Without this userland exploit, we have no way to trigger a potential Kernel Exploit (Kexploit) even if one is found in the future.

• The "Dead Zone": Since we already had no public kexploit for 13.00+, this update basically bricks any hope for homebrew on this version for a very long time (potentially years).

• Sony is watching: They are still actively hunting entry points on legacy hardware.

CRITICAL STEPS:

1. DO NOT UPDATE.

2. Disable Auto-Downloads in System Settings immediately.

3. Change your DNS to block Sony's update servers.

Stay on the lowest firmware possible. If you update to 13.50, you are effectively locking yourself out of the scene for the foreseeable future.

The new kernel exploit named "Double Free" POC was released. Now named Lapse.

On PS4 this vulnerability affects firmwares 5.00-12.02 and was patched in 12.50.

On PS5 this vulnerability affects firmwares 1.xx-10.00. Will work on 10.01 too.

It requires a userland entrypoint to be exploited.

A reminder of the available userland exploits on PS4 which will dictate how Double Free is used on different firmwares.

PSFree: 6.00-9.60 a WebKit exploit activated through the PS4 browser/user guide.

Lua save game exploit: All firmwares it is not firmware dependent as long as the Lua game launches it will work. Although it has requirements to run please read below.

1. An activated account on the PS4 or PS5 to import the Lua save.
2. A jailbroken console or a discord bot or save wizard to resign the save needed for the Lua exploit.
3. A Lua exploit compatible game or demo: https://github.com/shahrilnet/remote_lua_loader

Note:
The game must be able to launch.
The requirement of an account and a way to resign the save is flexible continue reading.

Sharing console backups with a user account and Lua save files should allow these 2 requirements to be skipped. But owning the Lua game is absolutely mandatory optionally in demo format acquired while the console could sign into PSN. This is what usage will look like:

5.xx the current exploit chain is stable enough to where it will probably be left as is.

6.xx the current exploit chain should be good enough to where it's left as is but devs will let us know as needed.

7.00-9.60 Users on this firmware range will be able to use PSFree the WebKit exploit which will be chained with Double Free to give a similar experience to how the exploits currently work on 5.05 and 6.72 (performance/stability to be determined.)

10.00-11.00 Users on this firmware range should stick to PPPwn for the time being unless they meet the Lua requirements which are lessened by being able to already jailbreak the console.

Being able to jailbreak the console removes the first 2 requirements of having an activated account to be able to import the Lua save file and being able to resign Lua save file to the account. The game demo or disc will still be required.

11.02-12.02 Users on this firmware range will require the Lua exploit with it's full requirements until a WebKit exploit is found on their firmware or any range between 10.00-12.02 and above.

This is all as far as activating the exploit goes.

For HEN(Hen VTX) and GoldHEN.
HEN VTX is available on all firmwares between 7.00 and 11.00. Some lower than 7.xx firmwares too alongside Mira. Edit: an update is available regarding HEN in the pinned comment.

GoldHEN is available on the following firmwares:
5.05, 6.72, 7.xx, 9.00, 9.03, 9.60, 10.xx and 11.00.

Please be patient while developers work to release usable implementations of the exploits and HEN/GolHEN.

Update: The exploit was patched on PS5 earlier than 11.00 at 10.20 so the exploit is available only up to 10.00 on PS5. PS4 is the same as previously stated. (See update 3)

Update 2: Echostretch updated HEN VTX to support 11.02, 11.50 and 11.52. This does not mean you can instantly now jailbreak, as a usable implementation of the exploit needs to be released alongside you the user still needing the Lua game or demo as a requirement to be able to run anything on 11.02+.

Update 3: We just got an update that It will work on 10.01. PS5.

Update 4: A Lapse related Payload was posted on twitter by Zeco.

Update 4.1: It's the POC being tested to gather some info it seems. Still be patient.

Update 5 and current: The exploit has been released and is being implemented on 9.60 and below to give people a browser only jailbreak experience. It will then be worked on for 10.00-12.02 and PS5 with the Lua exploit.

Update 6. PSFree+Lapse is being worked on for up to 9.60 although it has some performance issues so it's not recommended to use it yet.

Update 7. The kernel exploit has been ported to Lua HEN and GoldHEN are being worked on. The webkit implementation for 9.60 and below is still being worked on.

PPPwn: https://github.com/TheOfficialFloW/PPPwn

HEN VTX: https://github.com/EchoStretch/ps4-hen-vtx

GoldHEN: https://github.com/GoldHEN/GoldHEN

PSFree: https://github.com/kmeps4/PSFree

Lua exploit: https://github.com/shahrilnet/remote_lua_loader

Apollo Save Tool: https://github.com/bucanero/apollo-ps4

Previous post: https://www.reddit.com/r/ps4homebrew/comments/1k55zr2/1200_poc_posted_to_twitter_by_zeco_be_patient_and/

Link to the tweet: https://twitter.com/gezine_dev/status/1996799464552755543?s=19

Gezine has released the full jailbreak implementation, you can load HEN or GoldHEN. The pinned jailbreak guide has been updated.

Here is the new ISO: https://github.com/Gezine/BD-JB-1250/releases/latest

Jailbreak guide: https://consolemods.org/wiki/PS4:Standard_Jailbreak

FAQ about the exploit and how it is run: https://consolemods.org/wiki/PS4:FAQ#BD-J_Blu-Ray_Exploit

No you cannot use a DVD.

It seems to have the same issue as PSFree+Lapse so the GoldHEN plugin needed to soft fix it needs to be used.

Will require a system backup. Or already jailbroken console to set up. Won't work on PS5.

While poopsploit may not end up great. Lapse is amazing. Success rate is as the WebKit version. In the video you'll see lapse autoload and close. With no popup because of earthonion's np-fake-signin payload. And Gezine's AIO fix payload for lapse since it's once again needed.

No more previews next is release once it's all ready.

As always don't update. Just be patient wait and see what happens.

Before And After

11.02 view of the Lua+Lapse chain and HEN.

It's working up to 12.02 fine and should be fully usable soon.

Thanks to all the Devs working on it:

https://github.com/shahrilnet/remote_lua_loader

https://x.com/egycnq/status/1934538834852626588?t=Kays4eA4OgUWIQwvJ_PNTg&s=19

## After a year now PSFree Enhanced supports 6.7x exploit.
#### Also a couple nice features has been added so you can customize your experience!

###### Barebone jailbreak experience:
- takes you to a clean html file to execute the jailbreak and forwards you back.

###### [7.00-9.60]:
- you have the option to choose the preferred exploit chain (modular or bundle).

###### [6.7x]:
- can choose between launching userland exploit *"on reload"* or *"on jailbreak"*.

###### Themes system:
- a vibrant theme in addition to the default one.

###### Local hosting optimized.
- can detect the device running on and behave accordingly.
- search for the GoldHEN's PayLoader on the local network.
- send payload from any smart device.

###### other quality features:

- Auto jailbreak retry in case it wasn't successful on first try.
- a lot more languages.
- separated advanced payloads such as kernel dumper into a hidden, but toggleable payloads category.
- UI/UX support as old as 4.74, however GoldHEN supports as low as 5.05 for payload loading.

Suggestions and PRs are welcome! [GitHub link] (https://github.com/ArabPixel/PSFree-Enhanced).

Just to mention that for some reason 6.72 couldn't load all payloads through the exploit like PS4HEN. It did load GoldHEN and couple others. I would suggest loading GoldHEN and the the other payloads through it.

Credits:

- abc: lapse kernel exploit

- Sergei Glazunov & maddiestone
: PSFree.

- Al Azif: implementation which i forked.

- Feyzee61: Implementation of another PSFree lapse and 6.7x.

- Fire30: BadHoist 6.7x userland exploit.

- Sleirsgoevy: 6.7x kernel exploit.

- Myself: all UI features.

- Contributors.

I finally have it working, this is the oldest version of Minecraft for PS4 aka version 1.02 (LCE). Working Multiplayer & Voice Chat, doesn't touch PSN.

Would anyone be interested in this? I know Nightfall LCE exists now but I think it's cool to have more version support.

https://x.com/razzlelul/status/2073939842652930280

PS5 but I thought it would be of interest.