Here it is. Thanks to everyone mentioned earlier. Be warned stability is not great, something to be improved on for sure.
Specter
1,189 posts
Interested in Security and Exploit Development. Nano is the one true text editor.
- I'm releasing the WebKit code execution RCE I spoke of yesterday targetting PS4 6.20 firmware. Gadgets and potentially the code execution strategy will need to be adjusted for lower firmwares. Have fun :)
- The 5.05 kernel exploit stack is now released! It includes the kexploit and autolaunches homebrew patches and mira. On subsequent page loads it listens for payloads. Source is up here
- Within the next few weeks there will be a PS4 5.05 full stack release including tools for homebrew development. Some other tools will be dropped as time goes on. Don’t update your <= 5.05 consoles if you care about homebrew. Hope to see cool stuff soon :)
- For those interested in a webkit PS5 kernel exploit implementation, it's on track to be ready soon - stay on 4.03 :) Still wanna do some cleanup and such but a lot of the major work is done. Obv without @theflow0 this wouldn't be possible :P. 1/2
- Took me a bit longer than I'd hoped - but the PS4 5.05 Kernel Exploit writeup has now been published :). If you have any suggestions for clarity or corrections, please add the issue to the GitHub repo or reply them to this tweet. github.com/Cryptogenic/Ex…
- Feels great when an idea can finally be tested and works out after like a year :) Shouts to ChendoChap for working out the ROP chain. Protip: staying < 3.00 is a good idea.
- The 6.50 FW update seems to have patched a WebKit exploit I wrote up a month or so ago. I may drop the exploit soon so if you're a dev that wants to play with WebKit don't update :)
- PS5 Kernel Exploit v1.01. Some recent changes I made + Chendo's original stability improvements have stability high now at about 80-90%. There's also some other nice improvements + a WIP ELF loader :)
- Hope everyone had a Merry Christmas! Here's the 4.05 kernel exploit, fully implemented. Enjoy! Write-up coming soon!
- The PS4 4.55/FreeBSD BPF kernel exploit writeup is now up on my GitHub repo! The bug is present on any system running FreeBSD such that you have privileges (which we did on PS4). Could be used on other systems for root to ring0 code execution. github.com/Cryptogenic/Ex…





