Front-page Hacking 

TheFlow has discovered a major exploit called bd-jb for PS3, PS4, and PS5, can be used to load game backups burned to discs

photo_2022-06-10_13-34-33.jpg

One of the PlayStation scene's most notable figures, TheFlow (Andy Nguyen), is back at it again. He's discovered a major exploit that affects not just one PlayStation console, but three. A hackerone report by TheFlow sheds light on five vulnerabilities that range in effectiveness, allowing users to load payloads that can be used to exploit the PlayStation 3, PlayStation 4, and even the PlayStation 5. The exploit is referred to as bd-jb, or the Blu-ray Disc Java Sandbox Escape, and was featured during a panel at this year's hardwear.io security conference.

Below are 5 vulnerabilities chained together that allows an attacker to gain JIT capabilities and execute arbitrary payloads. The provided payload triggers a buffer overflow that causes a kernel panic. Please consider each of the vulnerabilities individually. AFAIK, this is the first exploit chain that is being submitted to you :)
Click to expand...

According to Nguyen's report, a UDF driver can cause an overflow on both the PS4 and the PS5. An exploit chain, aka bd-jb, can then be loaded as the payload as a burned Blu-ray disc. The hack, in summary, will allow users to burn physical discs of game backups, and then play them on their consoles. This affects PlayStation 4 consoles below OFW 9.50, and PlayStation 5 systems that are below OFW 5.0.

With these vulnerabilities, it is possible to ship pirated games on bluray discs. That is possible even without a kernel exploit as we have JIT capabilities.
Click to expand...



TheFlow's panel that discusses the exploit in detail will be uploaded in "a few weeks". The full hackerone report and all of its technical details can be read about below.

Following the initial report, TheFlow made an update to his claims.



:arrow: Source
 
  • Like
  • Love
  • Wow
Reactions: grillmasterxbbq, Dothackjhe, lordelan and 62 others
Click to expand...
D

Deleted member 559230

Well-Known Member
Member
Level 7
Joined
May 12, 2021
Messages
525
Trophies
0
XP
973
Marc_LFD said:
DVD9 discs were expensive back then to burn DVD9 movies and PS2 games (still are) and I can't imagine PS5 (UHD) discs being exactly cheap. Plus, the UHD disc burner.

Cheaper than buying each game? Yeah, I don't doubt, but it's still gonna cost ya.

I'm staying on 9.00 as I'd rather not go back to burning discs. 😅
Click to expand...

Blank Triple Layer UHD discs cost around $20.00 each. One burner is $175.00. However, not all games will need 100GB of space, so it will be possible to buy discs that hold less and cost less.
 
Noctosphere

Noctosphere

Nova's Guardian
Member
Level 27
Joined
Dec 30, 2013
Messages
6,769
Trophies
3
Age
30
Location
Biblically accurate Hell
XP
19,031
Country
Canada
spoggi said:
im pretty sure the 25x25gb works as well
or am i wrong?
Click to expand...
pretty sure even the ps4 (maybe post pro) uses 100gb discs
I say maybe post pro because when the pro got released, pretty much all AAA games supported 4k, so they required 100gb discs to support 4k stuff in case you use it on the pro
 
Marc_LFD

Marc_LFD

Well-Known Member
Member
Level 20
Joined
Nov 3, 2021
Messages
5,711
Trophies
1
Age
34
XP
9,235
Country
United States
chrisrlink said:
question is (for EU only sadly) how is auto updates sony/MS are doing different than forced updates for the WiiU the big N got in trouble for doing it back then why is it diff now?
Click to expand...
I'm not in the EU, but as long as all options are off it shouldn't update.

If it does, Sony should get sued for it.
 
hippy dave

hippy dave

BBMB
Member
Level 34
Joined
Apr 30, 2012
Messages
9,917
Trophies
2
XP
29,899
Country
United Kingdom
Marc_LFD said:
It's like Sega accidentally allowed commercial Dreamcast consoles to play disc backups.

Did I just compare Dreamcast to PS4/PS5? Yup... 😐
Click to expand...
That was amazing - "We have created a unique custom disc format for our console that is unpiratable. In other news, our console supports standard burned discs."
 
  • Like
  • Haha
Reactions: raxadian, gisel213, tatumanu and 1 other person

Site & Scene News

Go to forum More news

Popular threads in this forum

Nintendo Switch firmware update 18.0.1 has been released

New static recompiler tool N64Recomp aims to seamlessly modernize N64 games

Nintendo officially confirms Switch successor console, announces Nintendo Direct for next month

TheFloW releases new PPPwn kernel exploit for PS4, works on firmware 11.00

Nintendo takes down Gmod content from Steam's Workshop

Name the Switch successor: what should Nintendo call its new console?

A prototype of the original "The Legend of Zelda" for NES has been found and preserved

Anbernic reveals specs details of pocket-sized RG28XX retro handheld

General chit-chat
Help Users
  • SylverReZ @ SylverReZ:
    They probably said "Hey, why not we combine the two together and make a 'new' DS to sell".
  • Veho @ Veho:
    It's a DS Lite in a slightly bigger DS Lite shell.
     +1
  • Veho @ Veho:
    It's not a Nintendo / iQue official product, it's a 3rd party custom.
     +1
  • Veho @ Veho:
    Nothing special about it other than it's more comfortable than the Lite
    for people with beefy hands.
     +1
  • Jayro @ Jayro:
    I have yaoi anime hands, very lorge but slender.
  • Jayro @ Jayro:
    I'm Slenderman.
  • Veho @ Veho:
    I have hands.
  • Veho @ Veho:
    king-shark-hand.gif
    +1
  • BakerMan @ BakerMan:
    imagine not having hands, cringe
     +1
  • AncientBoi @ AncientBoi:
    ESPECIALLY for things I do to myself :sad:.. :tpi::rofl2: Or others :shy::blush::evil:
     +1
  • The Real Jdbye @ The Real Jdbye:
    @SylverReZ if you could find a v5 DS ML you would have the best of both worlds since the v5 units had the same backlight brightness levels as the DS Lite unlockable with flashme
  • The Real Jdbye @ The Real Jdbye:
    but that's a long shot
  • The Real Jdbye @ The Real Jdbye:
    i think only the red mario kart edition phat was v5
  • BigOnYa @ BigOnYa:
    A woman with no arms and no legs was sitting on a beach. A man comes along and the woman says, "I've never been hugged before." So the man feels bad and hugs her. She says "Well i've also never been kissed before." So he gives her a kiss on the cheek. She says "Well I've also never been fucked before." So the man picks her up, and throws her in the ocean and says "Now you're fucked."
     +2
  • AncientBoi @ AncientBoi:
    :O:ohnoes::lol::rofl::rofl2:
  • BakerMan @ BakerMan:
    lmao
  • BakerMan @ BakerMan:
    anyways, we need to re-normalize physical media

    if i didn't want my games to be permanent, then i'd rent them
     +1
  • BigOnYa @ BigOnYa:
    Agreed, that why I try to buy all my games on disc, Xbox anyways. Switch games (which I pirate tbh) don't matter much, I stay offline 24/7 anyways.
  • AncientBoi @ AncientBoi:
    I don't pirate them, I Use Them :mellow:. Like I do @BigOnYa 's couch :tpi::evil::rofl2:
     +1
  • cearp @ cearp:
    @BakerMan - you can still "own" digital media, arguably easier and better than physical since you can make copies and backups, as much as you like.

    The issue is DRM
  • cearp @ cearp:
    You can buy drm free games / music / ebooks, and if you keep backups of your data (like documents and family photos etc), then you shouldn't lose the game. but with a disk, your toddler could put it in the toaster and there goes your $60

    :rofl2:
  • cearp @ cearp:
    still, I agree physical media is nice to have. just pointing out the issue is drm
  • rqkaiju2 @ rqkaiju2:
    i like physical media because it actually feels like you own it. thats why i plan on burning music to cds
  • cearp @ cearp:
    It's nice to not have to have a lot of physical things though, saves space
     +1
  • AncientBoi @ AncientBoi:
    Nor clothes 🤮 . Saves on time, soap, water and money having to wash them. :D
    AncientBoi @ AncientBoi: Nor clothes 🤮 . Saves on time, soap, water and money having to wash them. :D