## https://sploitus.com/exploit?id=DF3C9DB2-D8D6-51EC-9BD7-F6DB32DFA817
# PS4 9.00 jailbreak host (GoldHEN, offline-caching)
Built by **SirHumza**. The minimal correct setup: the PSFree + Lapse WebKit
exploit with **GoldHEN** served as `payload.bin`. The PS4 browser caches the
whole page (via the `applicationCache` manifest in `cache.html`), so after the
first online jailbreak it re-runs **offline** later — no re-host needed.
## Run
```bash
cd exploits/9.00
sudo python3 -m http.server 80 # port 80 (needs sudo on macOS/Linux)
# or without sudo: python3 -m http.server 8080
```
On the PS4 browser go to: `http://:80/`
- First load caches the exploit to the PS4 (the page redirects to `cache.html`
to install the offline cache). Later loads work with no internet.
- GoldHEN is delivered automatically as `payload.bin` (the exploit fetches it).
## What's inside
- `exploits/9.00/` — PSFree + Lapse chain (bekahen/900, AGPL-3.0). Caching intact.
- `exploits/9.00/payload.bin` — GoldHEN 2.3 for 9.00.
That's the whole host: a static file server. Swap `payload.bin` for any other
9.00 `.bin` (e.g. a fan payload) if you want something else injected.
## Credits
- **SirHumza** — host author, bundling, payload list, and offline-caching fix.
- **bekahen/900** — PSFree + Lapse WebKit chain (AGPL-3.0).
- **GoldHEN** — GoldHEN 2.3 homebrew payload.
- **Storm21CH/PS4-FW9.00-Exploit-Menu** — 67 payload collection (GoldHEN, fan, FTP, app2usb, update-blocker, Mira, OrbisTB, kernel dump, GTA mods, RDR2, Linux emu, etc.).
- **Feyzee61/ps4jb** — multi-firmware fallback chain (in `exploits/all/`).
- **toxxic407/PS4-fan-control-payloads** — fan-speed payloads.
See `exploits/9.00/LICENSE`, `exploits/9.00/COPYING`, and `exploits/all/LICENSE` for each project's license.