Sponsored Links

Sponsored Links

PlayStation 4 FW Update 1.5 (PS4UPDATE.PUP) & PS4 Updatelist XML Out


Sponsored Links
60w ago - Following up on the initial PS4 Firmware 1.50 Update details, today Sony PlayStation 4 hacker SKFU has made available the PS4UPDATE.PUP and Recovery file link and analysis, which comes shortly after some ps4-updatelist.xml files were made public by B7U3 C50SS as well.

Download: [Register or Login to view links] / [Register or Login to view links] (Mirror) / [Register or Login to view links] (Mirror #2) / [Register or Login to view links] / [Register or Login to view links] (Recovery - Mirror) / [Register or Login to view links] by flat_z / PS4PUP.exe (Compiled) by PSGamer24 / [Register or Login to view links] / [Register or Login to view links] / [Register or Login to view links] / [Register or Login to view links] by xerpi / PS4PUP.exe v3 (Compiled) by PSGamer24 / [Register or Login to view links] / [Register or Login to view links] by Hykem / PS4PUP.exe v4 (Compiled) by PSGamer24 / [Register or Login to view links] (Compiled EXE) by $n!pR / [Register or Login to view links] (based on [Register or Login to view links]) / [Register or Login to view links]

To quote: PlayStation 4 - Update File Analysis

Hey guys,

Here comes a short analysis of the PlayStation 4 update files. Available at:

  • PS4 Update File: [Register or Login to view links] (Size in Bytes: 322,831,872)
  • PS4 Recovery Update File: [Register or Login to view links] (Size in Bytes: 901,133,312)

Best regards,

- SKFU

Update: The update files were removed from the SONY update server. Since it is unclear if this was firmware version 1.00 or 1.50, let's hope there was some mistake made by SONY here which helps us in future

  • Firmware .PUP - c64d11f839ac8628176941b99fd3670e
  • Recovery .PUP - 6f4d6afe98dd7297c70aa4d6e7e5482b

Update #2: It appears Frumix (via neogaf.com/forum/showpost.php?p=87942869&postcount=1) also discovered the same thing, who states the following additional details:

PS4 1.5 Update File is apparently up on update servers #1

  • Update file (308 MB)
  • Recovery file (859 MB)

Just like on PS3, it seems it's the same file across all regions (data in the american xml seems to be erroneous somehow). Not sure what you might need it for this early, but here you go. Update if old.

IMPORTANT: If you're unsure what to do with any of this, wait until official Sony page goes online.

According to Sony's Shuei Yoshida confirmed that the PS4 1.50 System Update won't be included on PlayStation 4 game discs.

When asked if the servers fail on launch day, Yoshida answered with "No" outright. He also stated that games will not insert the update, so users will have to download it from the Internet.

From Sony PlayStation 4 hacker flat_z (via pastie.org/private/4wgojewhp2pq7declhkhw) comes a Python script to extract embedded .PUPs from the PS4 container, as follows:

[Register or Login to view code]

An updated and commented UnPKG Python Script revision by flat_z (via psdevwiki.com/ps4/Talk:PKG_files) as well:

[Register or Login to view code]

Table Entry Hashes (SHA-256)

The first entry in the index table points to a block of hashes (Using Amazon Instant Video: UP2064-CUSA00130_00-AIV00000000000US.pkg for this example).

[Register or Login to view code]

Offset: 0x00002CA0 Length: 0x00000220

[Register or Login to view code]

First hash is blank, can't hash the table of hashes. The remaining hashes are for each of the remaining Index Table Entries.

i.e the second entry in the Index Table should have a SHA-256 matching the following:

[Register or Login to view code]

For those curious:

  • Normal firmwares have 3 PUPs inside.
  • Recovery firmwares have 4 PUPs inside.
  • Debug firmwares have 5 PUPs inside.

Everything is encrypted after that, even the selfs, so might take a while until we see runable x86/64 code appearing from the PUPs.

Finally, from xerpi comes a few revisions of his own PlayStation 4 PUP Extractor (linked above) with details below as follows:

[xerpi] here's my version of a PS4 PUP extractor: pastebin.com/qdgumb8t
[flatz] xerpi, i think SKFU is wrong with the fixed size of header
[flatz] seems like data is aligned to the block size
[flatz] so if you have 20 files for example, then data offset should be 0x400
[xerpi] I've thought this, but I've read that there are a maximum of 10 files
[flatz] i think it is just his assumption
[xerpi] so If there's no file limit, the data would be: 32 + 48*filecount
[xerpi] data offset*
[xerpi] but there's still a reserved space so I don't know if this space will continue existing
[flatz] actually you don't need to calculate data offset
[flatz] just get it from entry table
[flatz] data_offset = block_index * block_size
[flatz] header always start with block_index = 0
[xerpi] right, but as I see block_size is 512
[xerpi] so the first PUP offset (data_offset) will be 512 bytes after the begin of the file
[xerpi] I don't see any dynamic number telling the size of the blocks
[flatz] it is fixed to 512
[flatz] data_offset = align_up(header_size + entry_size * num_entries, 512) where header_size = 0x20, entry_size = 0x30
[xerpi] yes, so I set the general offset to PS4_PUP_HEADER_SIZE + header-]pups[i].offset
[xerpi] ok, so the only static size here is the size of the header of the header (the top part of the header)
[flatz] yep
[flatz] and block size
[xerpi] yeah
[xerpi] It makes sense now, thanks
[flatz] np
[flatz] seems like they use some sort of mapping/paging.. that's why they use fixed-size blocks and padding to make data size multiple of block size
[xerpi] I see
[xerpi] done: pastebin.com/bHXBhTyc
[flatz] great
[xerpi] treat it as an "experiment"
[xerpi] I was bored when I saw this info so I decided to try to do a simple pup extractor
[flatz] i'm too
[xerpi] btw I got to go now, it's a bit late here hahaha
[xerpi] cya

ps4pupextractor v2 by xerpi

[Register or Login to view code]

ps4pupextractor v2 by xerpi

[Register or Login to view code]

ps4pupextractor v3 by xerpi (via xerpi)

[Register or Login to view code]

From Hykem also comes a PS4 PUP Unpacker, as follows:

[Register or Login to view code]

Update #3: As the official PS4 Firmware v1.50 PUP (1.501) is now released, this leak apparently was the PlayStation 4 v1.50 PUP not the v1.501 Update for those wondering.

Update #4: From Habib via harryoke come the PS4 - SLB2 Structure - .PUP KEYS, as follows:

[Register or Login to view code]

SLB PUP Files

These files are contained inside of SLB2 containers. They contain data pertaining to system firmware.

You are able to decrypt inner pup files using the follow keys:

[Register or Login to view code]

0x40 bytes after the magic are encrypted with aes. (256 bits CBC Mode). The new encrypted buffer contains the new erk and riv to be used for the next decryption. The next 0x240 bytes are decrypted with aes. (128 bits CTR Mode). That 0x240 bytes contain a table of information relating to the system files. Each entry in there contains the offset for encrypted sections, sha1 hmac keys, and the erk and riv to decrypt each encrypted section. Each section is decrypted using aes. (128 bits CTR mode).








Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter, Facebook and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene and PlayStation 4 scene updates and fresh homebrew releases!

Comments 48 Comments - Go to Forum Thread »

• Please Register at PS3News.com or Login to make comments on Site News articles.
 
#48 - engkuhs - 9w ago
engkuhs's Avatar
thanks

#47 - omgusux - 11w ago
omgusux's Avatar
Quote Originally Posted by PS3 News View Post
There are a lot of links in this thread, but you may find what you are seeking here: [Register or Login to view links]

Thank you

#46 - GodHandSilva - 11w ago
GodHandSilva's Avatar
some work in ida from my own worst enemy LOL if geohot knew what this was maybe he'd give it a thumbs up

albeit not related to ps4 tho ....

#45 - PS3 News - 11w ago
PS3 News's Avatar
There are a lot of links in this thread, but you may find what you are seeking here: [Register or Login to view links]

#44 - omgusux - 11w ago
omgusux's Avatar
links are broken

 

Sponsored Links

Sponsored Links
Sponsored Links

Sponsored Links







Advertising - Affiliates - Contact Us - PS3 Downloads - Privacy Statement - Site Rules - Top - © 2015 PlayStation 3 News