Resource icon

PS4 PS4 HDD Decryption Helper 2025-10-29

Download
Overview Extra info Updates (6) History Discussion
Berion

Berion

Developer
Berion submitted a new resource:

PS4 HDD Decryption Helper - Bunch of bash scripts for automate PS4 HDD decryption, mounting and unmounting.

Big thanks for @rj017 for painful QA phase and for @Thefirebeast for EAP and samples from his console!

Bunch of bash scripts for automate PS4 HDD decryption, mounting and unmounting.
  1. Unpack them in Your home dir, don't change any folder or file names.
  2. Drop EAP Key into /keys dir as "eap_key.bin".
  3. Drop ufs (optionally) kernel module in apps dir.
  4. Run mounter script.
  5. Have fun under /storage (root privileges needed).
  6. Run umounter script.
Click to expand...

Read more about this resource...

ps4hdd_script_dir-png.38491
 
Last edited:
Berion updated PS4 HDD Decryption Helper with a new update entry:

PS4 HDD Decryption Helper (2023-03-02)

  • Fixed "PS4 HDD Umounter" for current version of umount (script now trying unmount from both: devices and mount points).
  • Fixed newest Ubuntu family compatibility (changed path variable from "~/" to "${HOME}").
  • Added "Unattended PS4 HDD Mounter" scripts for users which know what they doing ;) and/or want to make activator.
  • Added "PS4 HDD Tasker" with one untested and dangerous option. :P
  • Added changelog and license files.
Click to expand...

Read the rest of this update entry...
 
Nice work man! I had my PS4's HDD crash on me today and I wonder, do the eap_key.bin stay the same if I format a new drive?
Was hoping to regain the key by using a temporary drive and hopefully copy my progress to a new drive.
 
@jacobsson Yes. Key will always be the same on this mother board.

So You can do that, of course. :] Remember to use "Micro" script version, because I'm not sure if all others are fine, so this one mounts as read only user partition alone. I have got HDD image from one of nice people here around half year ago, but still didn't find time to update script due to PS2 stuff and wanted solved first UFS2 writing issue before I will touch PS4 stuff again. ^^

Yet I'm interesting in feedback, and I can send You test script (also read only) but for all partitions from second half of HDD (EAP encrypted, or maybe You also have SAMU key?).

To copy stuff on new HDD, You need PFS containers with e.g saves but also databases I believe.

Forgot to mention, once You will mount it, could You perform this for me and send me this file?
Code: 
tree -a ${HOME}/ps4/storage/hdd/user >> ${HOME}/ps4hdd_p27_list.txt
This can help me to make Backuper script.
If tree will complain about permission, add "sudo" before "tree".
 
Last edited:
PS4 HDD Decryption Helper (2023-12-13)
  • Fixed some partitions mounting fs type, proper key choosing etc. in various of scripts.
  • Fixed "PS4 HDD Umounter" (missing one of mapper to remove).
  • Fixed "PS4 HDD Tasker" script (fixing bootlop caused by broken unpacked updates and/or broken fs).
  • Added "PS4 HDD Mounter (Read Only)" script.
  • Added "PS4 HDD Keygen" script for keys related stuff (for now only reversing byte order in EAP HDD Key from kernel dump).
  • Added "Reporter" script helping for issues reporting.
  • Added "Updater" script for checking toolkit updates.
  • Removed "Micro" scripts because they are replaced by Read Only versions.
  • Cosmetic changes in some scripts.
  • By default partitions encrypted by SAMU aren't decrypting and mounting (because they are not tested by me).
  • Changed "eap_key.bin" and "samu_key.bin" to "eap_hdd_key.bin" and "samu_hdd_key.bin". In addition, now script expecting also "eap_kernel_key.bin".
 
I'm not sure if someone can help me with my case here. I have a PS4 but can't boot it up anymore, so I don't have any decryption key. Is it possible to access the SSD and simply copy the save file from it? Thanks.
 
@eric812 To decrypt data You need key for its decryption. ;] You cannot retrieve it from dead console with exception of making image of SFLASH if this is so called Fat model, from which EAP HDD Key can be extracted. However, this still not allow You retrieve saves because those are encapsulated in encrypted containers which only this console can decrypt (we don't know how to get key needed for such task).
 
Berion said:
@eric812 To decrypt data You need key for its decryption. ;] You cannot retrieve it from dead console with exception of making image of SFLASH if this is so called Fat model, from which EAP HDD Key can be extracted. However, this still not allow You retrieve saves because those are encapsulated in encrypted containers which only this console can decrypt (we don't know how to get key needed for such task).
Click to expand...

So if I have a dead ps4 pro (it will only boot in safe mode and all options except formatting the hdd are greyed out) I can't in any way decrypt the hdd and access the files stored in it? I have some very precious photos and videos that I would love to be able to retrieve.
 
You can extract EAP HDD key from sflash0/NOR dump - you can get this with hardware flasher such as CH341a.

However, some of newer firmwares have updated the keys and tools like ps4-wee-tools will generate invalid decryption keys if console was running such firmware.
 
I'm not sure if this is fw dependent but just model dependent. Key for this SFLASH section decryption is needed to retrieve EAP HDD Key. AFAIK, this key cannot be changed so it is strictly hardware dependent.

If console booting to safe mode and want format HDD, it is not dead. Make sector by sector image of HDD on PC and allow PS4 to format drive. You will need FW package for reinstallation (larger) not updating (smaller one).
 
So basically I should make an image of the ps4 hdd on pc (or an external hdd? since my pc doesn't have that much storage), then dump the sflash and get the sflash key, which then allows me to get the eap hdd key? Then I can access sector 27 on the disk image using your toolkit? But why do I need to format the drive? And why hack the console?
 
You don't need to format the HDD.

Make the image of the HDD in order to prevent any potential data loss.

Dump the sflash - then use tools to extract EAP key from the dump (ex. ps4-wee-tools).

Use the extracted EAP key with Berion's PS4 HDD Decryption Helper with HDD image - done.
 
@Lorenzo Jabber How and on what media or place You will make disk image it doesn't matter (it is important to be sector by sector one, raw, without any dumb containers or compressed). You even do not need to if You do not plan use Your PS4 anymore.

To read EAP HDD Key You need hack console (can be done on all models and all hacked firmwares, latest is 9.00, newer are yet unhackable) or retrieve it from SFlash (works on limited spectrum of motherboard models AFAIK).

If You want restore Your console to working state, You need reinstall firmware, which means format HDD, which means loosing all data written on it (that's why I suggested making his image first). At least based on Your post, console is not dead, just HDD logic structure is for sure.

- - -
Colek said:
Use the extracted EAP key with Berion's PS4 HDD Decryption Helper with HDD image - done.
Click to expand...
To use disk image, user must attach it to loop device (eg. "sudo losetup -f ps4hdd.raw && lsblk"). However, PS4HDH unlikely to PS3HDH will not work with "/dev/loop*" without modifying script. All schemes matching to "/dev/sd*" only.
 
Last edited:
Since an sflash dump is too complicated for me, how do you get the eap key after you jailbreak the console on fw 9.00? Is there a guide for it? Thanks.
 
@Lorenzo Jabber I'm sorry for late answer. Somehow I missed Your post.

For PS4 based on Aeolia and Belize, You can extract it from sflash0 dump (in upcomming PS4HDH will be Keygen script for that), which can be made eg. via FTP. Or grabbed from Linux.
 
Berion updated PS4 HDD Decryption Helper with a new update entry:

PS4 HDD Decryption Helper (2024-07-27)

  • Added custom toolkit path variable. It no longer has to be "${HOME}/ps4", but the user must change it in line no.8 in ALL scripts if they want a different path than default.
  • Added support for "/dev/loop*". However, do not use loop27 because it's used for broken GPT data recovery scenario.
  • Added support for broken/missing/overwritten etc. partition table (only for user partition).
  • Added support for sorted partition list in GPT table (order 1-15 instead 1..31). [NOT TESTED]...
Click to expand...

Read the rest of this update entry...
 
@Colek Do you know of any way to get the eap key directly from the console without extracting it from sflash0? I've been told that I can't extract it because I will get an invalid key due to my ps4 southbridge model (my ps4 model is cuh-7116b and I'm on 7.02).
 
You must log in or register to reply here.

Similar threads

Back
Top