1 00:00:00,040 --> 00:00:06,240 oh hey I'm just playing Mario Kart here oh yeah this is an Xbox controller see 2 00:00:04,319 --> 00:00:11,840 I'm I'm using Linux to emulate it right oh right this is a PS4 yeah I'm running 3 00:00:08,679 --> 00:00:14,719 Linux on my PS4 pretty cool right almost 4 00:00:11,840 --> 00:00:19,279 as cool as our sponsor Zoho CRM Zoho CRM is a 360° solution that offers an 5 00:00:16,840 --> 00:00:26,279 intuitive UI AI predictions and a design studio to help you get your sales done 6 00:00:21,199 --> 00:00:26,279 faster learn more at zoho.com crrm 7 00:00:34,079 --> 00:00:39,120 this exploit humorously named poobs 4 is 8 00:00:37,079 --> 00:00:45,440 a kernel level exploit that makes use of an outof bounds exploit hence the name p 9 00:00:41,879 --> 00:00:48,360 o bs4 play outof bounds station 4 and 10 00:00:45,440 --> 00:00:51,800 playing out of bounds is correct with this exploit you can do all kinds of 11 00:00:50,079 --> 00:00:55,800 crazy stuff from basic stuff like accessing debug menus and loading up 12 00:00:53,680 --> 00:01:01,640 cheats and game trainers all the way up to running a full-fledged Linux install 13 00:00:59,239 --> 00:01:06,119 there it is the PlayStation 4 Pro actually isn't as optimized on this 14 00:01:03,840 --> 00:01:09,280 version of Linux than the PlayStation 4 itself is the hardware is slightly 15 00:01:08,080 --> 00:01:14,080 different so the drivers aren't optimized for the extra horsepower that 16 00:01:11,479 --> 00:01:18,560 the PS4 Pro can provide so it actually ironically runs better on the the 17 00:01:16,320 --> 00:01:23,640 standard PlayStation 4 all right so we load up the web browser Caro host manual 18 00:01:21,280 --> 00:01:28,400 exploit that's the URL there you just punch that in manually if you didn't 19 00:01:24,960 --> 00:01:30,479 have a tab already opened golden v 2.1 20 00:01:28,400 --> 00:01:36,360 there is not enough free system memory trying again there you go so now I get 21 00:01:33,720 --> 00:01:39,600 to insert this USB drive and then click okay on the pop-up notification the 22 00:01:38,119 --> 00:01:43,680 reason why this is a little bit weird is because memory scrambling is a thing to 23 00:01:41,399 --> 00:01:48,640 kind of make it difficult to do this kind of thing so you kind of got to 24 00:01:45,640 --> 00:01:50,560 bruteforce it a little bit then we wait 25 00:01:48,640 --> 00:01:54,159 jailbreak done please remove USB drive and click okay so what's happening when 26 00:01:52,200 --> 00:01:58,280 we put this USB in is due to a programming error in the PS4s version of 27 00:01:56,280 --> 00:02:03,479 webkit the web browser that we're using here we can take a advantage of a buffer 28 00:02:00,799 --> 00:02:07,159 overflow and that's pretty much exactly what it sounds like a buffer is a region 29 00:02:05,640 --> 00:02:13,200 of memory that's used to store data right while it's being moved between locations when too much data is sent to 30 00:02:10,840 --> 00:02:19,000 a buffer it gets written out of bounds which can cause things like crashes blue 31 00:02:15,879 --> 00:02:21,280 screens or the ability to run some 32 00:02:19,000 --> 00:02:25,720 malicious code at the kernel level this USB though uses a buffer overflow to 33 00:02:23,440 --> 00:02:31,879 inject code into the PS4 that allows us to access all sorts of fun things like I 34 00:02:28,680 --> 00:02:34,080 saw retro Arch on the main menu there uh 35 00:02:31,879 --> 00:02:38,519 home RW browser and a whole bunch of other stuff so let's take a look around 36 00:02:35,879 --> 00:02:41,000 and see what this gives us access to now the home brew store I kind of want to 37 00:02:39,720 --> 00:02:44,800 look what see what's in the home brew store PS4 temperature you can make the 38 00:02:43,120 --> 00:02:51,480 fans scream so if I turn the threshold way down ooh getting ready for takeoff yeah 39 00:02:49,480 --> 00:02:54,959 I noticed this patch installer these will just show your installed applications and their version numbers 40 00:02:53,640 --> 00:03:01,959 which is helpful and then you would just have to like Drop files in over FTP or 41 00:02:58,879 --> 00:03:04,879 you can use a USB so this is the main 42 00:03:01,959 --> 00:03:08,840 downside of this particular exploit is that it's already been patched this is 43 00:03:07,159 --> 00:03:14,560 something that requires an older version of the PlayStation 4's firmware and if 44 00:03:11,560 --> 00:03:16,840 you go on PSN to download games or 45 00:03:14,560 --> 00:03:24,519 updates or even play online it'll force you to update in order to basically be 46 00:03:20,519 --> 00:03:27,239 one with the Sony and if you update you 47 00:03:24,519 --> 00:03:31,720 no longer have access to any of this so as of Dying Light 2 there are still 48 00:03:29,799 --> 00:03:36,680 major releases coming out that you can still play with this version of the 49 00:03:34,000 --> 00:03:39,640 system software but yes despite the fact that it can run these new games you're 50 00:03:38,159 --> 00:03:43,760 not going to be able to play online not through PSN yeah right not through PSN 51 00:03:42,080 --> 00:03:48,040 any game that supports local multiplayer you can uh basically forward your land 52 00:03:46,519 --> 00:03:52,319 right the home RO store I wanted to see what's available in there okay so why is 53 00:03:50,200 --> 00:03:57,439 twitch and Prime video and crunchy roll and Plex even on here when we obviously 54 00:03:55,239 --> 00:04:01,120 have access to those through the PSN well the PSN is not available to you 55 00:03:59,400 --> 00:04:06,319 anymore and those apps actually do have a check in them that makes it so that 56 00:04:03,280 --> 00:04:08,640 you have to use the PSN to launch them 57 00:04:06,319 --> 00:04:11,680 so what this does is gives you the version of the app that has that check 58 00:04:10,079 --> 00:04:16,320 disabled and therefore you can just log in with your Twitch account or your crunchy roll account or your Amazon 59 00:04:14,439 --> 00:04:20,160 account uh let's see what else do we have here test application yep that 60 00:04:18,040 --> 00:04:24,160 sounds about right Dead Island Riptide Dev menu Edition so this is the kind of 61 00:04:22,120 --> 00:04:29,560 stuff that you can get with this you can get patches or versions of apps that 62 00:04:26,840 --> 00:04:32,759 have been modified or tweaked to give you you access to things that for 63 00:04:31,280 --> 00:04:37,120 example the developers would have used during development modding your console 64 00:04:34,840 --> 00:04:41,479 basically turns it into a PC in terms of what you can do with your games like 65 00:04:39,360 --> 00:04:46,120 we've got retro Arch here we've got PS4 Explorer that's a file manager I believe 66 00:04:43,759 --> 00:04:50,880 PSN enabler yeah that's a troll app halflife blue shift o that's on here is 67 00:04:49,199 --> 00:04:54,919 that a Dreamcast emulator yeah right cast so what have we got installed let's 68 00:04:53,280 --> 00:05:01,400 try River raid is this like the old Atari River raid yeah this is absolutely 69 00:04:58,840 --> 00:05:07,000 River raid uh with some very interesting music I'm not quite sure what this is 70 00:05:03,520 --> 00:05:08,520 all about I I like this like this is 71 00:05:07,000 --> 00:05:12,479 probably not legally distinct from arar's River raid but it's here and this 72 00:05:11,000 --> 00:05:16,080 was somebody's project something something that somebody decided hey you 73 00:05:14,400 --> 00:05:21,840 know it sounds like a good like a really fun idea let's take some assets from the 74 00:05:19,080 --> 00:05:26,199 unity store and uh recreate this old arcade game that's the kind of thing 75 00:05:23,560 --> 00:05:29,120 that Homebrew has always kind of had go back to the web browser go back to the 76 00:05:27,880 --> 00:05:34,000 web browser we're going to get some trainers Running Oh trainers I like 77 00:05:31,440 --> 00:05:40,639 those those are available on PC too so you're going to go to web go to web RTE 78 00:05:36,919 --> 00:05:43,639 the blue boy PS4 trainer for now let's 79 00:05:40,639 --> 00:05:46,000 go with the Last of Us Part Two and uh 80 00:05:43,639 --> 00:05:48,759 do some training see now so now that you're here just you can leave it okay 81 00:05:47,880 --> 00:05:55,000 and we're going to go back to the web browser back to the web browser so the last of us is running yeah ps4t 82 00:05:52,960 --> 00:05:59,240 trainer.com one thing you might notice here is in the top left corner under PS4 83 00:05:57,120 --> 00:06:04,440 trainer we've got an IP address if we go to PS for trainer.com on our smartphone 84 00:06:01,720 --> 00:06:10,440 or a laptop or even a desktop we could punch that IP address into that and then 85 00:06:07,160 --> 00:06:13,360 actually load exploits from there so we 86 00:06:10,440 --> 00:06:18,479 can enable the dev menu we can enable infinite items and infinite silencer 87 00:06:15,800 --> 00:06:25,720 ammo too why not L3 plus Right Touch there it is there's the dev menu uh 88 00:06:22,000 --> 00:06:27,319 weapons gun cocking aiming accuracy I I 89 00:06:25,720 --> 00:06:32,919 don't know how much of this I want to play with cuzz this this is this is a 90 00:06:30,240 --> 00:06:37,880 deep Dev menu let me tell you that right now I read The Cutting Room floor all 91 00:06:35,039 --> 00:06:42,560 the time most Dev menus do not have all this stuff so let's unpause that L3 and 92 00:06:40,080 --> 00:06:49,599 R3 wo I like she's meditating this is the Sky 93 00:06:45,919 --> 00:06:53,080 Box oh you can see what was that oh 94 00:06:49,599 --> 00:06:55,039 there's some water oh okay cool she's 95 00:06:53,080 --> 00:07:00,120 displaying dominance with two hammers one in her hand and one just kind of 96 00:06:57,560 --> 00:07:03,599 floating there back there the little mini animations that she's doing those 97 00:07:01,800 --> 00:07:06,879 are done but she's going back to the T POS because that's the default animation 98 00:07:05,199 --> 00:07:11,639 State this is the kind of stuff that I love I love de de menu stuff it shows 99 00:07:09,120 --> 00:07:16,319 you how the game was actually made gun cocking tunables stealth delay combat 100 00:07:14,440 --> 00:07:22,360 delay so you can choose how quickly the gun uh visualize bullet spread yep 101 00:07:19,720 --> 00:07:26,759 Mario camera I'm supposed to have infinite ammo here yep I don't have 102 00:07:24,680 --> 00:07:30,639 anything in reserve but I can keep shooting 103 00:07:28,000 --> 00:07:35,039 forever and of course I can go into no clip mode to just go wherever I want oh 104 00:07:33,000 --> 00:07:40,000 is is the camera supposed to turn like that when you move with just the left 105 00:07:37,280 --> 00:07:44,960 stick wait left C left stick no that's Mario camera then oh yeah now we still 106 00:07:42,720 --> 00:07:51,400 have the Last of Us Part Two into this console right 107 00:07:47,360 --> 00:07:54,080 now yep no disc but we got it off the 108 00:07:51,400 --> 00:07:59,919 disc oh the 60 FPS patch was made with love by Lance McDonald ooh this game is 109 00:07:56,879 --> 00:08:01,560 normally locked to 30 the PS4 wasn't 110 00:07:59,919 --> 00:08:05,039 capable of going much higher than that I think you can you can apply this patch I 111 00:08:03,599 --> 00:08:08,280 was reading up about it earlier you can apply it but you're not going to get 60 112 00:08:06,840 --> 00:08:12,879 the physics were tied to the frame rate in the original bloodborne oh that's 113 00:08:11,120 --> 00:08:20,080 good yeah when physics are tied to the frame rate that's always horrible so if 114 00:08:16,400 --> 00:08:22,199 if you just removed the FPS lock then 115 00:08:20,080 --> 00:08:28,879 the game would just run faster this patch must have been an actual Endeavor 116 00:08:25,240 --> 00:08:32,000 to put together made with love actually 117 00:08:28,879 --> 00:08:33,399 60 FPS I mean it seems mostly 60 you can 118 00:08:32,000 --> 00:08:38,000 see that the save file has already been tampered with uh yeah cuz you have a 119 00:08:35,839 --> 00:08:42,399 million blood Echoes wow 120 00:08:50,240 --> 00:08:56,600 yep well that's enough how about we go and uh we we go and do some cheats 121 00:08:54,640 --> 00:09:01,480 cheats yes cheats would be good bloodborne oh God which version do we 122 00:08:58,480 --> 00:09:04,360 have probably the latest right so start 123 00:09:01,480 --> 00:09:12,680 Speed go infinite health infinite health yep infinite stamina uh infinite stamina 124 00:09:07,600 --> 00:09:12,680 yep spe R1 R2 yes thank 125 00:09:16,680 --> 00:09:23,920 you well that's the 126 00:09:20,720 --> 00:09:26,000 video you know it's it is what it is uh 127 00:09:23,920 --> 00:09:30,040 maybe I should have used the other oh no did the system totally crash now janky 128 00:09:28,160 --> 00:09:35,880 software can some sometimes crash but you don't have to worry about that at LTT Store.com our servers are always 129 00:09:33,839 --> 00:09:40,399 there for you and for me and for everybody else who wants to get cool 130 00:09:37,160 --> 00:09:44,000 merch like uh a Wan hoodie real nice 131 00:09:40,399 --> 00:09:46,440 just like this Linux Linux yes I said 132 00:09:44,000 --> 00:09:50,320 Linux coming back to the Caro host manual exploit here we've got multiple 133 00:09:48,200 --> 00:09:57,760 different flavors of Linux here up to 5 GB down to 1 gab what is that basically 134 00:09:54,360 --> 00:09:59,480 you're telling the PS4 how much memory 135 00:09:57,760 --> 00:10:04,680 it's going to still have after you start running Linux so 1 gab would actually 136 00:10:02,079 --> 00:10:09,720 allocate more memory to Linux than to the PlayStation 4 now if I do this it'll 137 00:10:07,839 --> 00:10:15,279 probably error the first couple times I try it 1 gab is usually not enough but 138 00:10:12,600 --> 00:10:20,360 let's try it failed to load file yeah okay so now I need to try again I think 139 00:10:18,640 --> 00:10:24,680 it's that it just doesn't have enough memory well no usually we'll throw like 140 00:10:21,920 --> 00:10:29,040 a there we go yeah there we go do a terminal console yay console what 141 00:10:27,240 --> 00:10:34,160 desktop environment oh we have we've got no and everything here but the default 142 00:10:31,200 --> 00:10:38,120 is lxde for obvious reasons uh lxde is a lot more lightweight all right we've got 143 00:10:36,040 --> 00:10:43,959 Linux and a Linux terminal yeah check this out it's actually just straight up 144 00:10:41,000 --> 00:10:47,519 Linux so like we've got full Chrome here we can go to Ltd 145 00:10:45,360 --> 00:10:52,560 store.com in a much better browser than the one that ships with the PS4 it's 146 00:10:49,360 --> 00:10:54,480 smooth smooth like that plaid flannel I 147 00:10:52,560 --> 00:10:59,839 can use the PlayStation controller like the mouse even works with the touchpad 148 00:10:56,839 --> 00:11:02,240 of course it is running off of USB so it 149 00:10:59,839 --> 00:11:07,360 is going to take a minute to launch now let's skip it it'll keep compiling in 150 00:11:04,360 --> 00:11:09,920 the background okay I mean it's it's not 151 00:11:07,360 --> 00:11:14,760 terrible it's like 40 or 50 yeah it's probably running better than it did on 152 00:11:11,240 --> 00:11:17,240 my uh my PC when I first played it 153 00:11:14,760 --> 00:11:21,000 settings and do 1080p it's not bad it's like 30 154 00:11:19,800 --> 00:11:24,200 something like that there's tearing cuz vsync is not on I imagine when I get 155 00:11:22,800 --> 00:11:30,519 into a fir fight it'll be a little bit different oh that's why we should have 156 00:11:26,720 --> 00:11:34,240 let those shaders compile uhoh 157 00:11:30,519 --> 00:11:36,480 oh that's not good oh come on it never 158 00:11:34,240 --> 00:11:42,560 crashed when I played it so we've got seven gigs of RAM assigned to this VM so 159 00:11:41,079 --> 00:11:50,040 that could also be part of why it crashed okay did it say oh 160 00:11:46,560 --> 00:11:51,959 crap there we go exclusive full screen 161 00:11:50,040 --> 00:11:56,079 uh it does not like that can I play it with the PlayStation controller uh it 162 00:11:53,680 --> 00:11:59,360 doesn't seem wait I can kind of I can use the touchpad 163 00:12:00,720 --> 00:12:06,560 this is terrible stop running away you 164 00:12:04,040 --> 00:12:11,000 coward okay so that's what happens when you try to use the touchpad on the 165 00:12:07,880 --> 00:12:14,000 PlayStation controller give me that Xbox 166 00:12:11,000 --> 00:12:14,000 controller 167 00:12:19,040 --> 00:12:27,920 yeah another one so you might be watching this and 168 00:12:24,079 --> 00:12:30,920 asking yourself why well for the most 169 00:12:27,920 --> 00:12:33,279 part the answer is because we can but 170 00:12:30,920 --> 00:12:37,240 also this is a pretty great way to get more mileage out of a console that's 171 00:12:35,079 --> 00:12:40,760 just Gathering dust or with certain mods and trainers you can get a glimpse 172 00:12:38,680 --> 00:12:44,519 behind the curtain and see how some of your favorite games were made these 173 00:12:42,880 --> 00:12:49,079 kinds of hacks have enabled the lore ravenous from software fans to explore 174 00:12:46,680 --> 00:12:54,360 and discover cut content and development secrets that COI devs would never talk 175 00:12:51,920 --> 00:12:59,199 about so if you have a PS4 that's Gathering dust or maybe You' just love 176 00:12:56,440 --> 00:13:02,880 the chance to Tinker we highly recommend giving this a shot a great place to 177 00:13:01,160 --> 00:13:07,639 start would be watching modded warfare's extensive tutorial guides that were an 178 00:13:04,959 --> 00:13:11,600 invaluable resource for this video you got to love the modding Community just 179 00:13:09,959 --> 00:13:17,160 like I love sponsor Segways like these to Zoho CRM Zoho CRM is a 360° solution 180 00:13:15,399 --> 00:13:20,839 for managing your business's sales marketing and customer service with 181 00:13:18,839 --> 00:13:24,680 their intuitive UI and simple navigation you can Implement their service quickly 182 00:13:22,639 --> 00:13:28,160 and efficiently with minimal disruption to your current processes they offer AI 183 00:13:26,760 --> 00:13:32,720 predictions to help you understand your customer needs so you can see Trends and 184 00:13:30,839 --> 00:13:36,600 purchase patterns by a variety of indicators plus their inbuilt Design 185 00:13:34,720 --> 00:13:39,920 Studio helps you customize your CRM experience to help you spot critical 186 00:13:38,279 --> 00:13:44,360 customer or account information at a glance helping you get your work done 187 00:13:41,880 --> 00:13:48,720 faster Zoho offers flexible contracts transparent pricing and an Ever evolving 188 00:13:46,600 --> 00:13:53,120 product that grows to meet your needs without snowballing costs with over 15 189 00:13:51,440 --> 00:13:58,720 years of experience in the industry and over 250,000 clients Zoho CRM is a great 190 00:13:56,880 --> 00:14:02,320 solution to support you in your customer relation ship management needs get 50% 191 00:14:01,040 --> 00:14:08,079 off your annual subscription when you use code zcrm 550 using the link in the 192 00:14:06,120 --> 00:14:12,160 video description thanks for watching guys I gave Sony a lot of crap about 193 00:14:10,199 --> 00:14:17,759 their integrated browser in this video but Microsoft recently enabled Edge full 194 00:14:14,920 --> 00:14:21,240 fat Edge in their XBox consoles and we did a video on that as well there's a 195 00:14:19,519 --> 00:14:24,519 lot of stuff you can do with that so it's a great video