Just a heads up that some sites have been touting the release of some PS4 PUP/PKG extracting tools lately. The “release”, by developer Keyaku, is actually a repackaging of tools that have been circulating on the net since at least February 2014.
Now, it is likely that the dev just imported all those files in his github without any bad intention, but a low quality scene site claimed this is a new release so I had to set the record straight here, in particular since a more trusted site (hackinformer) also picked up on the info today.
So, yeah, the following tools have been around for a while, and described as this:
pupunpack: splits PS4UPDATE.PUP and exposes inner PUP files (encrypted). unpkg: unpacks retail/debug PKG files while collecting data and dumping internal files (mostly a C port of flat_z’s Python script, at the moment).
See this article from GregoryRasputin (back when he was still staff on ps4hax), which dates back to 2014, and talks about the same release by a guy nicknamed RetroA at the time. GregoryRasputin pointed out at the time that the code had been obviously stolen from Hykem and flat_z. Same code more than 2 years later, being advertised as a new release.
Again, I don’t think developer Keyaku did anything wrong here, I’d rather blame low quality scene sites that don’t check their sources. I’m not talking about hackinformer (we all make mistakes, I have my share of mistakes too), but the low-quality site they used as their source, which has been a constant source of misinformation and unverified rumors in my experience.
With that being said, you can download the source code from the original 2014 leak here.