Hacking Possible To Hack OFW 7.55

[susi91]

Didn't noticed that the december 0day is a webkit thing, but ok, then I hope it works up to 7.02 at least

 

[godreborn]

it doesn't, not according to what it says. it says 6.xx.

--------------------- MERGED ---------------------------

https://www.blackhat.com/eu-20/brie...xploiting-a-webkit--day-in-playstation--21212

 

[MikeTheKnight2016]

it doesn't, not according to what it says. it says 6.xx.

Where are you getting the info on the 0 day?

Disregard, looks like you updated your post at the same time I posted my query.

 

[godreborn]

the last sentence of the first paragraph suggests sony has patched it, since it mentions "disclosure."

 

[susi91]

it doesn't, not according to what it says. it says 6.xx.

--------------------- MERGED ---------------------------

https://www.blackhat.com/eu-20/brie...xploiting-a-webkit--day-in-playstation--21212

There is still hope that it's unpatched
Take a look at this tweet:

https://mobile.twitter.com/abu_y0ussef/status/1310815011942666240

 

[godreborn]

There is still hope that it's unpatched
Take a look at this tweet:

https://mobile.twitter.com/abu_y0ussef/status/1310815011942666240

what I don't like is that they couldn't get it to work on 7.xx. what is the reason? you can play around with stuff like a few syscalls with webkit only, but you can't do shit with it. no piracy or game backups for sure.

 

[MikeTheKnight2016]

what I don't like is that they couldn't get it to work on 7.xx. what is the reason? you can play around with stuff like a few syscalls with webkit only, but you can't do shit with it. no piracy or game backups for sure.

I may mis-understand this, but I thought a webkit exploit would allow you to deliver remote code execution via the browser. Wouldn't that mean you could do more than syscalls?

(-- I am asking not arguing --)

 

[godreborn]

I've tried just webkit exploits back on 4.07 when there was a kernel exploit for 4.05. you can't do shit with it. you have to have a kernel exploit on top of it.

 

[Maupiti]

I’ve been using @Leeful ’s v10 host on 6.72, and I have to say the stability it’s top notch. Very very impressive!

I’m also currently using V10 and so far, very stable...on PS4 pro CUH-7216b..cached...

 

[MikeTheKnight2016]

I've tried just webkit exploits back on 4.07 when there was a kernel exploit for 4.05. you can't do shit with it. you have to have a kernel exploit on top of it.

Ah, that makes sense.

 

[godreborn]

here's what it looks like (took some pics):

--------------------- MERGED ---------------------------

you can deploy some stuff, but you really can't do shit. @KiiWii and @Leeful 's stuff doesn't work or anything.

 

[susi91]

They didn’t succeed in porting could mean everything, its not that bad for now
Probably a job for Sleirsgoevy
The last kernel one from theFlow works up to 7.02, so maybe thats the webkit for it

 

[KiiWii]

@godreborn offsets change, syscalls get nerfed, and gadgets no longer work. Unfortunately there isn’t a one for all solution.

CB made quickhen for 3.xx-5.05 but he had to rewrite and modify newer webkit to work on older versions, and apparently after 5.05 you need another exploit altogether to get anything working (possibly badhoist).

 

[godreborn]

there's probably a webkit exploit (possibly in private). I don't know why the playstation scenes are like that. based on what hackers have said, the ps4's exploit is weak. they just don't share for some reason.

 

[KiiWii]

there's probably a webkit exploit (possibly in private). I don't know why the playstation scenes are like that. based on what hackers have said, the ps4's exploit is weak. they just don't share for some reason.

why just web entrypoint

 

[MikeTheKnight2016]

there's probably a webkit exploit (possibly in private). I don't know why the playstation scenes are like that. based on what hackers have said, the ps4's exploit is weak. they just don't share for some reason.

The exploit is weak, meaning exploits are hard to find?

 

[godreborn]

TheFlow has gotten a lot of flak for telling Sony, but I respect the man. it's his time, and I know from my friends bguerville and escargot (can never remember how to spell his name) that hen on the ps3 took 7+ months to develop. imagine doing that for nothing in return.

--------------------- MERGED ---------------------------

The exploit is weak, meaning exploits are hard to find?

no, the ps4 has a tone of weak points.

 

[MikeTheKnight2016]

I can see that. 7+ months is a lot of coding time.

I'm a .NET fanatic/developer, but I don't think you can do much hacking with .NET, lol

 

[KiiWii]

@godreborn you mean escortdew? Lol

 

[godreborn]

I think the ps4 uses freebsd. as a joke, TheFlow linked to a lot of known exploits with it asking for help. that's one way to know what's going on with the system, knowing what security it uses.

--------------------- MERGED ---------------------------

@godreborn you mean escortdew? Lol[/QUOTE

yes, he mentioned it's his car of choice plus drink of choice in one name. that's what he told me.