zauceee / PPLGPwn

A method of executing PPPwn through rooted LGTV's.
GNU General Public License v3.0
48 stars 14 forks source link

PPLGPwn

A method of executing PPPwn through rooted LGTV's. This method is using the C++ version of PPPwn, made by xfangfang, the link to the repo it's this one: https://github.com/xfangfang/PPPwn_cpp

It provides a new way of jailbreaking your PS4, using a rooted LGTV. For more information of which firmwares are supported, visit the link above.

image

Changelog v1.2 -- 16/05/2024

Requirements

How can I do it?

Firstly you'll need to root your LGTV, the root itself it supported by a couple of models, check both exploits to see if your TV is capable of doing so, more steps on how to root it and activate SSH aswell are available there:

Root my TV: https://rootmy.tv/

Dejavuln: https://github.com/throwaway96/dejavuln-autoroot

Secondly, after you jailbreak your own TV (ironic on how we use a jailbroken TV to jailbreak another device lol), you will need to run the install.sh present in the releases tab on your TV, do it thru this command:

wget https://github.com/zauceee/PPLGPwn/releases/download/v1.2/install.sh && source ./install.sh

Connect your PS4 to your TV through the Ethernet port, and go in your PS4 set up LAN > PPPoE, and the exploit should be working!

How can I execute this with just a click of a button?

  1. Head to the Homebrew Store app and download LG Input Hook

  2. Open the LG Input Hook and head to the link the app gives you in a device that has a web browser (you can also do this in your TV, but it will take more time)

  3. Setup this custom Execute action to any button you'd like:

cd /media/internal/downloads/PPLGPwn && chmod +x ./run.sh && ./run.sh
  1. Save your changes

And done! The button you setup with the custom action will know execute the exploit everytime you press it!

NOTES

!! This exploit is made for TV's with the armv7 or aarch64 architectures, I'm unsure if it works on any other different arch, to know your TV chip architecture run uname -m !!

!! This exploit stage2 runs LightningMod's load from usb payload !!

Proudly 🇵🇹 <3

Thanks to the OpenLGTV and the RootMyTV communities that gave us this TV Jailbreak Also a thanks to everyone in the PS4 jailbreaking community that gave us the exploits! And also thanks to all the contributors!