Beginning to end PPPwn troubleshooting.
More info and extra stuff in the future.
- Troubleshooting on windows is not straightforward but you can try the following things.
- Confirm your ethernet adapter is NOT bridged with anything.
- Try changing the Npcap version to an older one.
- Confirm your ethernet adapter is functional by going into device manager and looking at "netword adapters" if there are any issues try reinstalling your adapter driver.
- If using Python preferably go to C++ otherwise make sure Python , Pip and Scapy are installed.
- Try a different windows device as sometimes no matter what you do issues cannot be resolved without reinstalling windows.
- If using a USB to Ethernet adapter the adapter may just not be compatible
- If you get an error that says Packet.dll not found then make sure Npcap is installed and if it is from C:\Windows\System32\Npcap copy the file Packet.dll to the same location as the pppwn.exe C++ implementation for the GUI you are using.
- Failed to get IP when pressing on "Test Internet Connection" Usually a PC side issue look above for troubleshooting or check your PS4 internet settings by looking below.
On your PS4
- Go to Settings and then Network
- Select Set Up Internet connection and choose Use a LAN Cable
- Choose Custom setup and choose PPPoE for IP Address Settings
- Put in anything as Username and Password it is recommended for it to be 1 letter that's the same in both fields for better compatibility.
- Choose Automatic for DNS Settings and MTU Settings
- Choose Do not use for Proxy Server
- Go back and be ready to press on Test internet connection
- Sometimes if you get no IP or are stuck on "[*] Waiting for PADI..." you need to redo these settings and test again.
Format a usb drive to exFAT
Copy the goldhen.bin file onto your usb drive for Goldhen
Copy the payload.bin file onto your usb drive For VTX
Then plug the usb into your PS4
If when the jailbreak is retrying it becomes stuck it can indicate a bad ethernet cable.
Do not bridge your Ethernet and WiFi adapters and do not share network across them this can lead to deeper issues and althought it may give you an IP address on the PS4 it will not give you progress past "[*] Waiting for PADI...".
- Stuck on "[*] Waiting for PADI..." Make sure you are calling the correct ethernet interface.
- Stuck on "[*] Waiting for PADI..." Make sure the PS4 and PC(or other device) are connected via ethernet.
- Stuck on "[*] Waiting for PADI..." Make sure the PS4 internet settings are correctly set up and go to Settings>Network and press on "Test Internet Connection"
- Stuck on "[*] Waiting for PADR..." If using a usb to ethernet adapter it may not be compatible or simply try restarting the exploit proccess.
- Stuck on "[*] Waiting for PADR..." Reinstall Ethernet driver on Windows.
- Stuck on any of the below simply try restarting the exploit proccess.
- Stuck on "[*] Waiting for PADI..." And the PS4 cannot obtain an IP address check the ethernet port on your PS4 and Laptop or PC running the exploit.
- Stuck on "[*] Waiting for PADI..." And the PS4 cannot obtain an IP address replace the ethernet cable.
- If you get an error "The procedure entry point PacketGetMonitorMode could not be located in dynamic link library" move pppwn.exe or the GUI and all it's other files to a folder not under the OneDrive path.
- If you get Libcap or similar errors it may be a driver issue find the driver for your laptop or desktop motherboard Ethernet controller delete the current one and install the one you got.
- If you do not get Libcap errors but are still stuck here it may be a driver issue find the driver for your laptop's or desktop motherboard's Ethernet controller delete the current one and install the one you got.
[+] pppoe_softc: 0xffffabd634beba00
[+] Target MAC: xx:xx:xx:xx:xx:xx
[+] Source MAC: 07:ba:be:34:d6:ab
[+] AC cookie length: 0x4e0
[] Sending PADO...
[] Sending PADS...
[] Waiting for LCP configure request...
[] Sending LCP configure ACK...
[] Sending LCP configure request...
[] Waiting for LCP configure ACK...
[] Waiting for IPCP configure request...
[] Sending IPCP configure NAK...
[] Waiting for IPCP configure request...
[] Sending IPCP configure ACK...
[] Sending IPCP configure request...
[] Waiting for IPCP configure ACK...
[*] Waiting for interface to be ready...
[+] Target IPv6: fe80::2d9:d1ff:febc:83e4
[+] Heap grooming... done or xx%
simply try restarting the exploit proccess.
- For more look at Windows Desktop side troubleshooting
- Any issues here usually result in a kernel panic=console shutting down.
- Console persistently shutting down at "[*] Waiting for IPCP configure ACK..." or "[+] Scanning for corrupted object..." try changing the Npcap version to an older one if on Windows.
- If on a Mac try a windows device......
- Console shutdown at "[*] Waiting for IPCP configure ACK..." happens occasionally on its own but if it persists try changing to a different IPV6 for the exploit settings usually marked by "old" or "Stable". Or for the GUI in this guide type in
4141:4141:4141:4141or1111:1111:1111:1111in the custom ipv6 field - If you get Libcap or similar errors it may be a driver issue find the driver for your laptop's or desktop motherboard's Ethernet controller delete the current one and install the one you got.
- If you do not get Libcap errors but are still stuck here it may be a driver issue find the driver for your laptop's or desktop motherboard's Ethernet controller delete the current one and install the one you got.
-
If persistently stuck on the below
[+] STAGE 2: KASLR defeat
[*] Defeating KASLR...
[+] pppoe_softc_list: 0xffffffff884de578
[+] kaslr_offset: 0x3ffc000 -
Any issues here usually result in a kernel panic=console shutting down.
- Troubleshooting from Stage1 also applies here.
- Console shutdown happens occasionally on its own but if it persists try changing to a different IPV6 for the exploit settings usually marked by "old" or "Stable". Or for the GUI in this guide type in
4141:4141:4141:4141or1111:1111:1111:1111in the custom ipv6 field - If on a Mac try a windows device...... or if already on windows try changing the Npcap version to an older one.
- If you get Libcap or similar errors it may be a driver issue find the driver for your laptop's or desktop motherboard's Ethernet controller delete the current one and install the one you got.
- If you do not get Libcap errors but are still stuck here it may be a driver issue find the driver for your laptop's or desktop motherboard's Ethernet controller delete the current one and install the one you got.
- Any issues here usually result in a kernel panic=console shutting down.
[+] STAGE 3: Remote code execution
[] Sending LCP terminate request...
[] Waiting for PADI...
[+] pppoe_softc: 0xffffabd634beba00
[+] Target MAC: xx:xx:xx:xx:xx:xx
[+] Source MAC: 97:df:ea:86:ff:ff
[+] AC cookie length: 0x511
[] Sending PADO...
[] Waiting for PADR...
[] Sending PADS...
[] Triggering code execution...
[] Waiting for stage1 to resume...
[] Sending PADT...
[] Waiting for PADI...
[+] pppoe_softc: 0xffffabd634be9200
[+] Target MAC: xx:xx:xx:xx:xx:xx
[+] AC cookie length: 0x0
[] Sending PADO...
[] Waiting for PADR...
[] Sending PADS...
[] Waiting for LCP configure request..
[] Sending LCP configure ACK...
[] Sending LCP configure request...
[] Waiting for LCP configure ACK...
[] Waiting for IPCP configure request...
[] Sending IPCP configure NAK...
[] Waiting for IPCP configure request...
[] Sending IPCP configure ACK...
[] Sending IPCP configure request...
[] Waiting for IPCP configure ACK... - Console shutdown happens ocasionally on its own but if it persists try changin to a different IPV6 for the exploit settings usually marked by "old", "Stable", "new" or "beta".
- If issues persist recheck all your files and etc.
- The script will also tell you if you have chosen incorrect firmware files and it usually results in a kernel panic on the PS4.
- If you get
[+] STAGE 4: Arbitrary payload execution
[*] Sending stage2 payload...
[+] Done! - But only get the "PPPwned" message then there is an issue with the payload on the USB or HDD.
- Reformat the USB to EXFAT and put "goldhen.bin" or "payload.bin" Goldhen or VTX Hen respectively.
- If no matter what you do the bin file does not load either factory reset the console or replace the HDD or try from a different device.
- The script will also tell you if you have chosen incorrect firmware files and it usually results in a kernel panic on the PS4.
- If you do not get Libcap errors but are still stuck here it may be a driver issue find the driver for your laptop's or desktop motherboard's Ethernet controller delete the current one and install the one you got.
- If you get Libcap or similar errors it may be a driver issue find the driver for your laptop or desktop motherboard Ethernet controller delete the current one and install the one you got.
- If you get: Error sending packet: send error: PacketSendPacket failed: A device attached to the system does not work properly. (31)[ERROR: or if after **[+] Done! the jailbreak is not loading Then Kaspersky or another Antivirus is blocking the jailbreak uninstall it disabling it will not help.
- Additionally you may get some random errors here and there they are usually because of incorrect interface, incorrect files (result in kernel panic), incorrect firmware selection or occasionally incomplete dependencies.
-
You may get some random errors here and there they are usually because of incorrect interface, incorrect files (results in kernel panic), incorrect firmware selection or occasionally incomplete dependencies.
-
Very rarely the ethernet cable can cause issues too.
-
If you get Libcap or similar errors it may be a driver issue find the driver for your laptop or desktop motherboard Ethernet controller delete the current one and install the one you got.