PS4 [Guide] How to decrypt & dump usermodules by grass skeu

Scene Contributor zecoxao has posted a Tutorial by grass seku (@wskeu), for decrypting & dumping PS4 usermodules


​

• A quote from zecoxao
• Requirements
• Steps

• 
  
  
  [Guide] How to decrypt & dump PS4 usermodules
  by grass skeu
  
  First of all i'd like to say thank you to the person who has allowed me (zecoxao) to post this tutorial. His english isn't perfect so he asked me to make this tutorial on his behalf. Thanks, grass skeu ​
  
  
  ​
• 
  So for this, you'll need:
  
  • ps4sdk precompiled
  • elf-loader precompiled OR alternatively extreme-modding.de's elf loader (found here)
  • the payload source
  • 1.76 console
  • fat32 usb pendrive

  ​
  
  
• 
  
  Steps:
  
  1- Fire up elf loader on your 1.76 console
  2- Let it load all the way up to stage 5 without memory errors!
  3- Compile the payload source. You can specify in between:​
  and
  
  which module(s) you want to decrypt. if you want, you can even decrypt all modules from 1.76 Dump released a while ago! This includes elf,self,prx,sprx,sexe,sdll and eboot.bin. However, take into notice that you can only decrypt usermodules from disc or psn apps when you have loaded them and minimize them (by pressing ps button), and only from absolute path! (due to npdrm management)
  
  I have left an example:
  
  so, the elf will be written to usb0 (rightmost port), but you can specify others
  
  
  4. run listener (if you want, this is optional):​
  where ps4 ip is your local ip (mine is 192.168.1.72)
  
  
  5. finally send payload:​
  specifying the path to the payload and the ip. if the payload fails to be executed with out of memory error just stabilize on stage 5 WITHOUT restarting console and try again.
  
  Any doubts please ask. And all credits go to grass skeu for this awesome trick
  
  Just a small note. segment 0x6fffff01 cannot be "decrypted" from game eboots because... it's a plaintext segment in encrypted file
  Just add it to the end of the elf.
  

Source: playstationhax.xyz​

 

Now we just need to figure out the last little part of the eboot to be able to fully decrypt the games and it seems a scene group has done just that but has not made it public knowledge just yet

 

And what you gonna do with decrypted game? As far as i know we can't run anything (homebrew) even while we are having that damn kernel exploit on 1.76...

 

This even excluding translations in some not so rare cases.. Not enough for me. But yeah for someone else game modding can be a point.