PS5: Redis server interface Elf released, adds hope for fresh vulnerabilities
PS5 Scene developer Euro Ali has released a payload for the PS5, which allows you to connect to the Redis Server on your hacked PS5. This allows us to run some LUA commands, and opens (small) hopes for a new attack surface on the PS5.
What is Redis Server for PS5?
From Wikipedia:
Redis (Remote Dictionary Server) is an in-memory data structure store, used as a distributed, in-memory key–value database, cache and message broker, with optional durability. Redis supports different kinds of abstract data structures, such as strings, lists, maps, sets, sorted sets, HyperLogLogs, bitmaps, streams, and spatial indices.
In other words, it is a database system. What the PS5 uses it for isn’t widely documented at the moment, although it seems clear some hackers have already looked into it. It is possible the PS5 uses it internally to quickly fetch configuration entries and the like (possibly for games too?). Don’t be fooled by the “key-value database” description on Wikipedia by the way: these aren’t the keys you are looking for, just a generic word used in the database world.
There are a few reasons the Redis server on PS5 could pique hacker’s interest. In particular, the engine could be a new attack surface inside the PS5, as it is known to have had critical vulnerabilities in the past. for example, earlier this year, the popular database engine was the target of a sandbox escape vulnerability, CVE-2022-0543.
PS5 hackers who have looked into Redis server in the past haven’t found anything particularly juicy so far (including CVEs like the one above), and a few prominent names have stated it’s not worth the effort. But I’ve seen very clever people proven wrong in the past 😉 . Plus a new attack surface can be fun for some of us, and it’s been confirmed that the server on the PS5 accepts at the very least basic LUA commands:
Euro Ali has verified that the PS5 runs with version 6.04 of Redis, a fairly old release from Mid-2020.
Download and use the Redis Server Interface
You can download the Redis PS5 Elf file here.
In order to load and run the Elf file on your PS5:
- Run the PS5 exploit (ensure you have the latest version with elf file loader)
- Load the elf file through your favorite netcat client (e.g. Netcat GUI), send it to port 9020
- You should now be able to connect to the PS5 Redis server with any Redis Client
why integrate redis into ps5?
Looks like a convenient way to access data quickly. Possibly for config entries, maybe for game config too? It’s unclear to us what it’s used for.
i was just hoping for a pc sdl project
binloader js with some browser extension in an sdl window on my pc
other than linking a local python database …
i was allso hoping for themes payloads or custom makeovers alike project sandcastle for ios
i use linux so an extra linux payload is welcome for virtual sandcastles …
but allso ./checkrain -cp sandcastle/android mac chromebook etc … dtb payloads
for sdl payload receiver lulz
ps checkout my new rss feed parser pygame… https://github.com/gittadarling/rssfeedpygame
old one allso cmdline and server on linuxnick on github.