PS4 Syscon Tools

PS4 Syscon Tools
PS4 Syscon Tools
General
Author	Abkarino, EgyCnq
Type	PC Utilities
Version	2.1.0-beta
License	Mixed
Last Updated	2024/06/08
Links
	Download
	Website
	Source
	Support Author

PS4 Syscon Tools is a comprehensive, free solution designed to manipulate the original PlayStation 4 Syscon chip (Renesas RL78/G13). This toolkit includes both software and hardware components, offering a powerful system for modifying and controlling the PS4’s system controller. The solution consists of two main projects:

PS4 Syscon Tools (Software) – A PC-based client that allows users to manage and interface with the PS4 Syscon Flasher hardware. The software provides a user-friendly interface to control various aspects of the chip.
PS4 Syscon Flasher (Hardware) – A hardware flasher that currently supports the Teensy++ 2.0, Teensy 4.0, and Teensy 4.1 boards, enabling seamless communication with the PS4 Syscon chip.

Features

Syscon Flash Dumps:
- Full (<50 sec).
- Partial (dump any specific block or block range).
- NVS/SNVS only.

Note : the read process here not use the infinty loop method that continue to dump the whole memory content and pass it to TOOL0 like some other tools we use more effecient way that can read immediately any block you want.

Syscon Flash Write:
- Full (<1.5 min).
- Partial (write any specific block or block range).
- NVS/SNVS only.
Syscon Flash Erase:
- Full (<4.3 sec).
- Partial (erase any specific block or block range).
Enable Syscon Debug mode:
- Allow you to only connect 3 wires to read/write your syscon by enabling OCD flag.
Get Syscon Firmware Dump Info:
- Allow you to validate your syscon dump and get its firmware info (version, hash, debug mode status, magic validation).

Note: The process done on the fly so no need to dump the entire syscon and apply the patch then rewrite like some other tools.

Requirements

What you will need ?

Teensy++ 2.0, Teensy 4.0 or Teensy 4.1.
(100 to 200)~ ohm resistor.
wires.
LQFP 64 - 100 Socket Adapter (Optional)
Soldering skills (Mandatory).

Connection Digrams

Please refer to diagrams directory to check the wiring digram for your hardware.

Usage - Tutorial

PS4 Syscon Flasher Full Tutorial (Abkarino's Channel)

Changelog

v2.1.0-beta

Fix bug in Enable Debug Mode function by removing Erase command and using new Extended Write command.
Remove Auto Erase feature, and make erase happen automatically before writing in case of block to be written is not empty.
Code clean up.
Update version to v2.1.0 Beta.

PS4 Syscon Tools v2.0.2 beta + PS4 Syscon Flasher v2.02

PS4 Syscon Tools v2.0.2
- Upgrade .NET framework to .NET framework 8.0 LTS for better support.
- Remove manual connect/disconnect functions.
- Add auto detect for PS4 Syscon Flasher and connect to it automatically once connected to PC.
- Set Get Dump Info function as a default function in case of no PS4 Syscon Flasher detected.
- Set Dump Full Flash function as a default function in case of there is a PS4 Syscon Flasher detected.
- Disable all advanced functions by default and add a new option on Options menu to enable it.
- Add support for newer PS4 Syscon Flasher firmware v2.02.
- Code clean up.
- Update PS4 Syscon Tools to v2.02 Beta.
PS4 Syscon Flasher v2.02
- Make a universal code base for all Teensy models, no more seprate code for each model.
- Code clean up.

PS4 Syscon Tools v1.6 + PS4 Syscon Flasher v2.01

PS4 Syscon Tools v1.6
- Add support for newer PS4 Syscon Flasher firmware v2.01.
- Fix issue that made application lock during dumping process in some cases.
- Fix issue in getting syscon firmware information in some cases.
- Add automatic verify function after for partial firmware writing process.
- Add automatic verify function after for SNVS/NVS writing process.
PS4 Syscon Flasher v2.01
- Optimize and enhance firmware dumping process.
- Fix an issue on Teensy 4.0 & Teensy 4.1 firmware that prevent PS4 Syscon Flasher from glitching non debug mode syscons.
- Code clean up.

PS4 Syscon Tools v1.5 + PS4 Syscon Flasher v2.00

PS4 Syscon Tools v1.5
- Add support for newer PS4 Syscon Flasher firmware v2.00.
- Add an auto connect mode option to allow auto connection to PS4 Syscon Flasher hardware at application launch time.
- Add new option to enable erase functions (now all erase functions are disabled by default).
- Add new option to auto patch debug mode if it is not enabled.
- Add new function to get Syscon dump info by read and validate syscon firmware part (nvs/snvs data will follow).
- Add new write method that is safer and faster than old method (we will auto erase block before writing data to it if it is not a blank block, ,thanks to check blank feature that was added to our flasher firmware).
- Add automatic verify function after writing to syscon.
- Add function to ask user to patch debug mode if it is not patched in the current selected syscon dump to be written.
- Add support to show PS4 Syscon Flasher firmware version on status bar.
- Add about info.
- Code clean up.
PS4 Syscon Flasher v2.00
- Add new enhanced and safer write block method, that minimize the risk specially when handle Boot0 blocks (block 0 to block 3).
- Add method to check if block is blank or not.
- Add method to get chip info.
- Add support for Teensy 4.1.
- Code clean up.

v1.0.1

First Release.

Credits

droogie (https://twitter.com/droogie1xp): For early syscon investigations & identifying original Syscon chip arch.
fail0verflow (https://twitter.com/fail0verflow): For initial Writeup on the syscon attack, actually without their blog we will not be able to do any syscon hacks.
wildcard (https://twitter.com/VVildCard777): For first public implementation for the Syscon glitcher that allow us to dump our Syscon flash and also for helping us a lot during this project development.
DarkNESmonk: For original SysGlitch for Arduino.

External links