Đang Bẻ, Vui Lòng Đợi...

Trang Payloads

GoldHEN v2.4b18.8 GoldHEN v2.3 Bin Loader

Payload

Game-Dumper Update-Dumper SGU-Dumper MGU-Dumper
ToDex Web-Activator FTP App2USB DB Backup DB Restore
Enable Updates Disable Updates History Blocker Kernel Dumper Module Dumper PS4 Debug
Disable ASLR Exit IDU RIF Renamer Permanent UART WebRTE PS4 Trainer Web function jbdone(){ document.getElementById("menu").style.display = "block"; document.getElementById("progress").style.display = "none"; } function linux_group(){ document.getElementById("lnx").style.display = "block"; document.getElementById("menu").style.display = "none"; document.getElementById("progress").style.display = "none"; } function mods_group(){ document.getElementById("mods").style.display = "block"; document.getElementById("menu").style.display = "none"; document.getElementById("progress").style.display = "none"; } function load_menu(){ document.getElementById("menu").style.display = "block"; document.getElementById("lnx").style.display = "none"; document.getElementById("mods").style.display = "none"; document.getElementById("progress").style.display = "none"; } function allset(){ msgs.innerHTML = LoadedMSG } function load_poc(){ var req = new XMLHttpRequest(); req.responseType = "arraybuffer"; req.open('GET', PLfile); req.send(); req.onreadystatechange = function () { if (req.readyState == 4) { PLD = req.response; var payload_buffer = chain.syscall(477, 0, PLD.byteLength*4 , 7, 0x1002, -1, 0); var pl = p.array_from_address(payload_buffer, PLD.byteLength*4); var padding = new Uint8Array(4 - (req.response.byteLength % 4) % 4); var tmp = new Uint8Array(req.response.byteLength + padding.byteLength); tmp.set(new Uint8Array(req.response), 0); tmp.set(padding, req.response.byteLength); var shellcode = new Uint32Array(tmp.buffer); pl.set(shellcode,0); var pthread = p.malloc(0x10); chain.call(libKernelBase.add32(OFFSET_lk_pthread_create), pthread, 0x0, payload_buffer, 0); allset(); } }; } function load_binloader(){ var payload_buffer = chain.syscall(477, 0x0, 0x300000, 0x7, 0x1000, 0xFFFFFFFF, 0); var payload_loader = p.malloc32(0x1000); var loader_writer = payload_loader.backing; loader_writer[0] = 0x56415741; loader_writer[1] = 0x83485541; loader_writer[2] = 0x894818EC; loader_writer[3] = 0xC748243C; loader_writer[4] = 0x10082444; loader_writer[5] = 0x483C2302; loader_writer[6] = 0x102444C7; loader_writer[7] = 0x00000000; loader_writer[8] = 0x000002BF; loader_writer[9] = 0x0001BE00; loader_writer[10] = 0xD2310000; loader_writer[11] = 0x00009CE8; loader_writer[12] = 0xC7894100; loader_writer[13] = 0x8D48C789; loader_writer[14] = 0xBA082474; loader_writer[15] = 0x00000010; loader_writer[16] = 0x000095E8; loader_writer[17] = 0xFF894400; loader_writer[18] = 0x000001BE; loader_writer[19] = 0x0095E800; loader_writer[20] = 0x89440000; loader_writer[21] = 0x31F631FF; loader_writer[22] = 0x0062E8D2; loader_writer[23] = 0x89410000; loader_writer[24] = 0x2C8B4CC6; loader_writer[25] = 0x45C64124; loader_writer[26] = 0x05EBC300; loader_writer[27] = 0x01499848; loader_writer[28] = 0xF78944C5; loader_writer[29] = 0xBAEE894C; loader_writer[30] = 0x00001000; loader_writer[31] = 0x000025E8; loader_writer[32] = 0x7FC08500; loader_writer[33] = 0xFF8944E7; loader_writer[34] = 0x000026E8; loader_writer[35] = 0xF7894400; loader_writer[36] = 0x00001EE8; loader_writer[37] = 0x2414FF00; loader_writer[38] = 0x18C48348; loader_writer[39] = 0x5E415D41; loader_writer[40] = 0x31485F41; loader_writer[41] = 0xC748C3C0; loader_writer[42] = 0x000003C0; loader_writer[43] = 0xCA894900; loader_writer[44] = 0x48C3050F; loader_writer[45] = 0x0006C0C7; loader_writer[46] = 0x89490000; loader_writer[47] = 0xC3050FCA; loader_writer[48] = 0x1EC0C748; loader_writer[49] = 0x49000000; loader_writer[50] = 0x050FCA89; loader_writer[51] = 0xC0C748C3; loader_writer[52] = 0x00000061; loader_writer[53] = 0x0FCA8949; loader_writer[54] = 0xC748C305; loader_writer[55] = 0x000068C0; loader_writer[56] = 0xCA894900; loader_writer[57] = 0x48C3050F; loader_writer[58] = 0x006AC0C7; loader_writer[59] = 0x89490000; loader_writer[60] = 0xC3050FCA; chain.syscall(74, payload_loader, 0x4000, (0x1 | 0x2 | 0x4)); var pthread = p.malloc(0x10); // { chain.fcall(window.syscalls[203], payload_buffer, 0x300000); chain.fcall(libKernelBase.add32(OFFSET_lk_pthread_create), pthread, 0x0, payload_loader, payload_buffer); } chain.run(); LoadedMSG = "Bin Loader Launched ..."; alert("Waiting for Payload... Send it using the PS4 IP and port 9020"); allset(); } function loadScript(path) { var xhr = new XMLHttpRequest(path); xhr.open("GET", path, false); xhr.send(''); return xhr.responseText; } for(var i=40; i<=75; i=i+5){ var select = document.getElementById("tempC"); var option = document.createElement("OPTION"); select.options.add(option); option.text = i; option.value = i; } tempC.value=60; function load_linux1gb(){ msgs.innerHTML="Linux Loader 1GB Launched ..."; setTimeout(loadScript("netcat.js") +loadScript('malloc.js') +loadScript('rop2.js') +loadScript('syscalls.js') +loadScript('syscalls2.js') +loadScript('Linux-1gb.js') +loadScript('jbc_loader.js') +loadScript('relocator.js'),1500); } function load_linux2gb(){ msgs.innerHTML="Linux Loader 2GB Launched ..."; setTimeout(loadScript("netcat.js") +loadScript('malloc.js') +loadScript('rop2.js') +loadScript('syscalls.js') +loadScript('syscalls2.js') +loadScript('Linux-2gb.js') +loadScript('jbc_loader.js') +loadScript('relocator.js'),1500); } function load_linux3gb(){ msgs.innerHTML="Linux Loader 3GB Launched ..."; setTimeout(loadScript("netcat.js") +loadScript('malloc.js') +loadScript('rop2.js') +loadScript('syscalls.js') +loadScript('syscalls2.js') +loadScript('Linux-3gb.js') +loadScript('jbc_loader.js') +loadScript('relocator.js'),1500); } function load_linux4gb(){ msgs.innerHTML="Linux Loader 4GB Launched ..."; setTimeout(loadScript("netcat.js") +loadScript('malloc.js') +loadScript('rop2.js') +loadScript('syscalls.js') +loadScript('syscalls2.js') +loadScript('Linux-4gb.js') +loadScript('jbc_loader.js') +loadScript('relocator.js'),1500); } function load_linuxPS4Pro1gb(){ msgs.innerHTML="Linux Loader 1GB Launched ..."; setTimeout(loadScript("netcat.js") +loadScript('malloc.js') +loadScript('rop2.js') +loadScript('syscalls.js') +loadScript('syscalls2.js') +loadScript('LinuxPro-1gb.js') +loadScript('jbc_loader.js') +loadScript('relocator.js'),1500); } function load_linuxPS4Pro2gb(){ msgs.innerHTML="Linux Loader 2GB Launched ..."; setTimeout(loadScript("netcat.js") +loadScript('malloc.js') +loadScript('rop2.js') +loadScript('syscalls.js') +loadScript('syscalls2.js') +loadScript('LinuxPro-2gb.js') +loadScript('jbc_loader.js') +loadScript('relocator.js'),1500); } function load_linuxPS4Pro3gb(){ msgs.innerHTML="Linux Loader 3GB Launched ..."; setTimeout(loadScript("netcat.js") +loadScript('malloc.js') +loadScript('rop2.js') +loadScript('syscalls.js') +loadScript('syscalls2.js') +loadScript('LinuxPro-3gb.js') +loadScript('jbc_loader.js') +loadScript('relocator.js'),1500); } function load_linuxPS4Pro4gb(){ msgs.innerHTML="Linux Loader 4GB Launched ..."; setTimeout(loadScript("netcat.js") +loadScript('malloc.js') +loadScript('rop2.js') +loadScript('syscalls.js') +loadScript('syscalls2.js') +loadScript('LinuxPro-4gb.js') +loadScript('jbc_loader.js') +loadScript('relocator.js'),1500); } function load_goldhenbeta(){ LoadedMSG = "GoldHEN v2.4b18.8 Loaded ..."; PLfile = "goldhen_2.4b18.8.bin"; load_poc(); } function load_goldhen23(){ LoadedMSG = "GoldHEN v2.3 Loaded ..."; PLfile = "goldhen_2.3.bin"; load_poc(); } function load_Gdumper(){ LoadedMSG = "Game-Dumper Loaded ..."; PLfile = "dumperG.bin"; load_poc(); } function load_Udumper(){ LoadedMSG = "Update-Dumper Loaded ..."; PLfile = "dumperU.bin"; load_poc(); } function load_SGUdumper(){ LoadedMSG = "Separate Game and Update Dumper Loaded ..."; PLfile = "dumperSGU.bin"; load_poc(); } function load_MGUdumper(){ LoadedMSG = "Merged Game and Update Dumper Loaded ..."; PLfile = "dumperMGU.bin"; load_poc(); } function load_todex(){ LoadedMSG = "ToDex Loaded ..."; PLfile = "todex.bin"; load_poc(); } function load_ftp(){ LoadedMSG = "FTP Loaded ..." PLfile = "ftp.bin"; load_poc(); } function load_app2usb(){ LoadedMSG = "App2USB Loaded ..." PLfile = "app2usb.bin"; load_poc(); } function load_dbackup(){ LoadedMSG = "DB Backup Loaded ..." PLfile = "backup.bin"; load_poc(); } function load_dbrestore(){ LoadedMSG = "DB Restore Loaded ..." PLfile = "restore.bin"; load_poc(); } function load_enablebUpdates(){ LoadedMSG = "Enable Updates Loaded ..." PLfile = "enable-updates.bin"; load_poc(); } function load_disableUpdates(){ LoadedMSG = "Disable Updates Loaded ..." PLfile = "disable-updates.bin"; load_poc(); } function load_historyBlocker(){ LoadedMSG = "History Blocker Loaded ..." PLfile = "history-blocker.bin"; load_poc(); } function load_kernelDump(){ LoadedMSG = "Kernel Dumper Loaded ..." PLfile = "kernel-dumper.bin"; load_poc(); } function load_moduleDump(){ LoadedMSG = "Module Dumper Loaded ..." PLfile = "module-dumper.bin"; load_poc(); } function load_ps4debug(){ LoadedMSG = "PS4 Debug Loaded ..." PLfile = "ps4debug.bin"; load_poc(); } function load_disbAslr(){ LoadedMSG = "Disable ASLR Loaded ..." PLfile = "disable-aslr.bin"; load_poc(); } function load_exitidu(){ LoadedMSG = "Exit IDU Loaded ..." PLfile = "exit-idu.bin"; load_poc(); } function load_rifRen(){ LoadedMSG = "RIF Renamer Loaded ..." PLfile = "rif-renamer.bin"; load_poc(); } function load_permUart(){ LoadedMSG = "Permanent UART Loaded ..." PLfile = "permanent-uart.bin"; load_poc(); } function load_webrte(){ LoadedMSG = "WebRTE Loaded ..." PLfile = "webrte.bin"; load_poc(); } function load_toolbox(){ LoadedMSG = "Orbis-Toolbox Loaded ..." PLfile = "Orbis-Toolbox-900.bin"; load_poc(); } function load_fanthreshold(){ LoadedMSG="Fan Threshold Loaded ..." PLfile = "fan-threshold"+tempC.value+".bin"; load_poc(); } function load_southbridge(){ LoadedMSG = "Payload Loaded ..." PLfile = "southbridge.bin"; load_poc(); } function load_arabicGuy100(){ LoadedMSG = "Arabic Guy v1.00 Loaded ..." PLfile = "arabic-guy100.bin"; load_poc(); } function load_arabicGuy127(){ LoadedMSG = "Arabic Guy v1.27 Loaded ..." PLfile = "arabic-guy127.bin"; load_poc(); } function load_arabicGuy132(){ LoadedMSG = "Arabic Guy v1.32 Loaded ..." PLfile = "arabic-guy132.bin"; load_poc(); } function load_arabicGuy133(){ LoadedMSG = "Arabic Guy v1.33 Loaded ..." PLfile = "arabic-guy133.bin"; load_poc(); } function load_Expulsion(){ LoadedMSG = "Expulsion v4.0 Loaded ..." PLfile = "Expulsion-V4.0-1.38.bin"; load_poc(); } function load_Lamance(){ LoadedMSG = "Lamance v0.9 Loaded ..." PLfile = "Lamance-v0.9-1.38.bin"; load_poc(); } function load_WildeModz132(){ LoadedMSG = "WildeModz-1.32 Loaded ..." PLfile = "WildeModz-1.32.bin"; load_poc(); } function load_WildeModz133(){ LoadedMSG = "WildeModz-1.33 Loaded ..." PLfile = "WildeModz-1.33.bin"; load_poc(); } function load_WildeModz138(){ LoadedMSG = "WildeModz-1.38 Loaded ..." PLfile = "WildeModz-1.38.bin"; load_poc(); } function load_WildeModz146(){ LoadedMSG = "WildeModz-1.46 Loaded ..." PLfile = "WildeModz-1.46.bin"; load_poc(); } function load_WildeModz147(){ LoadedMSG = "WildeModz-1.47 Loaded ..." PLfile = "WildeModz-1.47.bin"; load_poc(); } function load_beefQueef133(){ LoadedMSG = "Beef Queef Mod v1.33 Loaded ..." PLfile = "BeefQueefMod-133.bin"; load_poc(); } function load_beefQueef134(){ LoadedMSG = "Beef Queef Mod v1.34 Loaded ..." PLfile = "BeefQueefMod-134.bin"; load_poc(); } function load_beefQueef138(){ LoadedMSG = "Beef Queef Mod v1.38d Loaded ..." PLfile = "BeefQueefMod-138d.bin"; load_poc(); } function load_beefQueef147(){ LoadedMSG = "Beef Queef Mod v1.47 Loaded ..." PLfile = "BeefQueefMod-Unified-147e.bin"; load_poc(); } function load_Oysters100(){ LoadedMSG = "Oysters Menu v1.00 Loaded ..." PLfile = "OystersMenu-v1.00.bin"; load_poc(); } function load_Oysters113(){ LoadedMSG = "Oysters Menu v1.13 Loaded ..." PLfile = "OystersMenu-v1.13.bin"; load_poc(); } function load_Oysters119(){ LoadedMSG = "Oysters Menu v1.19 Loaded ..." PLfile = "OystersMenu-v1.19.bin"; load_poc(); } function load_Oysters124(){ LoadedMSG = "Oysters Menu v1.24 Loaded ..." PLfile = "OystersMenu-v1.24.bin"; load_poc(); } function load_Oysters129(){ LoadedMSG = "Oysters Menu v1.29 Loaded ..." PLfile = "OystersMenu-v1.29.bin"; load_poc(); }