Note
The PS4 version requires very specific circumstances to work. Workarounds are included below.
Before proceeding, ensure the following:
-
Netflix (with license) installed on your PS4 below the latest version
- If you have an existing jailbreak, simply install the vulnerable version for your region EU US JP
- This is useful if you can’t get BD-JB or are stuck using PPPwn.
- If you are on the latest firmware, you can downgrade Netflix via MITM by downloading from PSN.
You cannot jailbreak, but you will be prepared if a new kernel exploit releases.
-
PS4 Firmware version must be between 8.00 and 12.02 (required for the Lapse exploit)
Need help? Ask me on Discord
- Python
- mitmproxy
- Internet access
Warning
Downgrading is experimental and may not work for you. If you accidentally update to 1.59 you cannot downgrade with MITM. Extended storage images are planned
Note
If your previous Netflix version is above 1.53. You will need an existing Jailbreak to fix the "Please update the application" notification. FTP into /user/download/CUSA00XXX (whichever region you are in) and delete "download0_info.dat"
# Install mitmproxy
pip install mitmproxy
# Start the downgrade proxy
mitmproxy -s downgrader.py --ssl-insecureConsole Instructions
Before continuing. set up your Internet connection and when it asks for proxy, click use, then input the local IP of the computer running mitmproxy
On your PS4:
-
Go to Netflix on the home screen
-
Press Options on your controller
-
Select Check for Updates
Set your proxy in ps4 network settings to this:
Note
Address: 172.105.156.37
Port: 42069
Then simply open Netflix
mitmproxy -s proxy.pyThen simply open Netflix on your PS4. (Exploit initialization takes ~30 seconds.)
Note
If PS4 kernel panics, or lapse fails; restart the console and try again.
if Netflix crashes, just restart Netflix
Once complete, the exploit will look for a payload in /data/payload.bin if it is not found it will look on the root of a plugged in USB drive for a file named payload.bin and will automatically copy it to /data/payload.bin.
after initial exploit, USB is no longer needed.
if payload is not found on either the USB or /data/payload.bin, a binloader will spawn on port 9021 for you to send via netcat or equivalent
- HelloYunho for all the advise on porting lapse, and latest fw downgrade method
- c0w-ar for working primitives and ROP chain
If you run into issues, feel free to message me on Discord!