Hacking qwertyoruiopz release PS4 4.0X webkit userland exploit

[joacosur15]

I think qwertyuiopz (and curt) are trying to reproduce the patched chinese exploit. So people under 4.06 fw will enjoy kernel exploit soon.

 

[akramff]

So now which bundle is useful for such purpose ?
Also so far which bundle is the oldest ?
I need a ps4 slim with the oldest bundle available .
Thanx

 

[kevin corms]

All bundles come with exploitable firmware as of now, however I don't see how this is any better than the 3.55 exploit that went nowhere.

 

[SmellyPirateMonkey]

Good news. Now time to hurry up and wait. I still have a 1.76 ps4 lol

 

[synce]

All bundles come with exploitable firmware as of now, however I don't see how this is any better than the 3.55 exploit that went nowhere.

Same. After all these years only the Chinese managed to do anything and it's patched for good, I highly doubt there will be another chance at that.

 

[Urbanshadow]

Same. After all these years only the Chinese managed to do anything and it's patched for good, I highly doubt there will be another chance at that.

There's an exception, this time. Fail0verflow team did a presentation on last year's 33c3 running linux on 4.05. That means somewhere around the ps4 code in 4.05 (perhaps lower) exists a kernel level unsigned code execution problem obviously the Fail0verflow team exploited.

This entrypoint is very friendly to ROP. It may be possible to reuse this problem with this entrypoint (it also may not!). So if it ends in nothing, it would be a shame, because certainly there's some amount of potential there.

 

[Madikan]

I guess that we'll be able to do the same things we could do with 1.76 but is the exploit consequent enough to do more ?

 

[Deleted member 333767]

Why are people getting excited for this? Without sounding self-entitled (I'm just telling the truth here) 1.76 firmware has had a publicly documented kernel vulnerability since late 2015 and there hasn't been any homebrew developed except a broken linux port in all that time.

We can only hope that the lack of interest and progress in the PS4 scene is due to the rarity of such low firmware units and the ridiculously inflated prices that accompany them.

And besides, this is only a userland exploit, which means they still have to find another exploit to hijack the kernel (and lets be realistic here, everybody wants the illegal stuff that kernel vulnerabilities offer) We've all used userland homebrew like DOOM thousands of times before on our other hacked consoles.

1.76 testkits and devkits are the only things benefiting from anything the PS4 scene has to offer at this time, so have fun paying $1000+ for a devkit whose activation will run out eventually and render it useless.

 

[SimoxTav]

It looks like he achieved the kernel vuln too, lol

https://twitter.com/qwertyoruiopz/status/848405769179602945

 

[Deleted member 333767]

It looks like he achieved the kernel vuln too, lol

https://twitter.com/qwertyoruiopz/status/848405769179602945

Yay! Now we can run...... Nothing but broken linux (again) just like 1.76!

 

[deSSy2724]

For me, it doesnt works on my PS4 Pro 3.70.... all I got is: "out of memory" or something like that.

 

[aos10]

For me, it doesnt works on my PS4 Pro 3.70.... all I got is: "out of memory" or something like that.

Try update to 4.07.

 

[deSSy2724]

Now, it works..... you just need to press the "GO" multiple times, now I receive the following message:

=== exploit succeeded ===
leaked parseFloat at 0x808e9dea0
exploit successful but gadgets are incompatible with this version