Hacker Volodymyr Pikhur has presented an exploit of the PS4’s Rest mode a couple days ago at the Recon Brussels hacking conference. Earlier today, he released the slides and a demo video of his work in action. The slides state he’s been sitting on the exploit for 2 years and decided to disclose it since Sony does not have a bug bounty.

In the Video below, we can see the hacker running an FTP server, among other things, on the PS4 that was hacked in Rest mode.

According to the developer:

The custom Southbridge silicon, responsive for background downloads while main SoC is off, didn’t help to secure Playstation 4. We explain how a chain of exploits combined with hardware attacks will allow code to run in the context of the secure bootloader, extract private keys, and sign a custom kernel.

Posted: Feb 09, 2018 12:28 am
Related Forum: PlayStation Forum

Source: http://wololo.net/2018/02/05/ps4-rest-mode-exploit-revealed-vpikhur-5-xx-firmware/