PS4/PS5 hacking: How to extract Mono DLLs and EXEs from PS4/PS5 binaries, by Zecoxao
Scene veteran Zecoxao has shared a detailed video on how to extract DLLs and EXE from binaries programmed in the MONO software, on the PS5 or PS4. This is the technique that led to some of the recent DLL dumps on PS5 4.03. These files are not obfuscated, so, once extracted, are easy to analyze for vulnerabilities or more (no need to decompile before reverse engineering).
All credit for the tutorial goes to Zecoxao. The screenshots and instructions in this article are taken directly from his video, which you can find below.
Requirements
- ps4 or ps5 dumps that you will work with: format ‘.dll.sprx’, ‘.exe.sprx’, ‘.sdll’, ‘.sexe’. If you want to extract files from your own console, you will need a hackable PS4 (running firmware 9.00 or lower) or PS5 (running firmware 4.03 or lower). Alternatively, you can get some of the dumped files that have been shared publicly.
- dnSpyEx
- ps4_mono_to_il by SocraticBliss
How to extract PS4/PS5 MONO DLLs/Binaries
- place the ps4_mono_to_il.py file in a folder, and your PS4 dumped files in the same folder (or a subfolder)
- Run the python script, which should convert all compatible files recursively
- Back into your “dump” folder, you will see that all compatible files have been renamed to .dll. You can move those to a new folder.
- Run DnSpy.exe, and open one of your newly extracted DLLs
- You will see that a lot of information is displayed already, including function names
- From there, you can go to file > export in dnSpy. This will let you export the file as a Visual Studio project, and mono C# files, that you can open with your editor of choice
For those who want more detailed instructions, check out Zecoxao’s tutorial video below:
Source: Zecoxao
Merey Liye! Merey Liye! Also, FIRST!
Fitst?
I know it can sound stupid BUT.
Can we execute the exe/dll on a window machine once extracted ?
Possibly, but in isolation, the code of one DLL is probably not that useful. So you’ll need to have it within some kind of emulator/vm or something, a more integrated environment, for it to be any useful.