Feels great when an idea can finally be tested and works out after like a year :)
Shouts to ChendoChap for working out the ROP chain. Protip: staying < 3.00 is a good idea.
In my presentation @hardwear_io I talked about how underestimated data-only attacks can be. Here's an example: decrypting system files by sending messages to the PSP with just kernel arb. read/write :)
Here's a case of ChatGPT solving a @dayzerosec spot the vuln challenge (though it also gets a false positive on thinking there's a directory traversal)
You don't even have to prompt it to write safe concurrent code.. it really do be time to pack it all up exploitation is dead
Me: mom I want anakin skywalker
mom: no son we have anakin skywalker at home
anakin skywalker at home:
For those interested in a webkit PS5 kernel exploit implementation, it's on track to be ready soon - stay on 4.03 :)
Still wanna do some cleanup and such but a lot of the major work is done. Obv without @theflow0 this wouldn't be possible :P. 1/2
Replying to @ShinyQuagsire
I made an emoji from these artistic master pieces thx
PPPoE bug patch in PS4. As can be seen, patched in 9.03 on the right. Probably not worth attempting to exploit this on PS4 as it won't move firmware forward. Also probably would end up less stable than exFAT exploit because mbuf zone corruption kinda sucks.
Memory usage explodes - and still does unfortunately. For a sample of a large scale project, here's the linux kernel being indexed (it probably would have went higher but I had to kill it because my system was brought to almost a standstill)
















