Basically you need to find two payloads:
- MiraLoader_Orbis_MIRA_PLATFORM_ORBIS_BSD_900.bin (a payload that executes other payloads which were built with Orbis SDK)
- LinuxLoader-900-4gb.bin (or other, depends on how much video memory do you need)
Once GoldHEN 2.3 is loaded, you need to determine your PS4 local IP address and enable BinLoader server in GoldHEN menu (if you switch from Wifi to LAN, you need to re-enable/restart the BinLoader server). Once done, you're ready to send the payload chain, e.g. with OpenBSD netcat:
# load the MiraLoader
nc -q0 192.168.1.10 9090 < MiraLoader_Orbis_MIRA_PLATFORM_ORBIS_BSD_900.bin
# once MiraLoader is loaded, you need to send the compatible payload to the 9021 port
nc -q0 192.168.1.10 9021 < LinuxLoader-900-4gb.bin
where
192.168.1.10
is your PS4 local IP
-q0
is needed to close the netcat connection once the payload is sent.
There is also an ability to use curl with HTTP POST method, but unfortunately I haven't managed to use it. GoldHEN notifies that the payload was uploaded, but no further reaction. I tried curl 192.168.1.10:9090 -v -d@- < MiraLoader_Orbis_MIRA_PLATFORM_ORBIS_BSD_900.bin
. There is also no proper documentation for this.
In addition there is an Android app that tries to jailbreak PS4 within the same WiFi network: https://github.com/rareranger/ps4jbandroid
I wish this information to appear on Wiki: https://ps4linux.com/ps4-linux-documentation-aio/#Step_2_Load_Linux_Payload_for_PS4