PSXHAX

Earlier this month we saw the PS4 4.55 WebKit Exploit Write-up by PlayStation 4 developer @SpecterDev, and now he announced on Twitter that he's added the PS4 4.55 / FreeBSD BPF kernel exploit writeup to his GitHub repository crediting qwertyoruiop and stating: "The bug is present on any system running FreeBSD such that you have privileges (which we did on PS4). Could be used on other systems for root to ring0 code execution."

Below is an excerpt from it, with the full documentation available on the Github Repo for those interested in learning more about it!

To quote: Conclusion

This was a pretty cool bug to exploit and write-up. While the bug is not incredibly helpful on most other systems as it cannot be exploited from an unprivileged user, it is still valid as a method of going from root to ring0 code execution.

I thought this would be a cool bug to write-up (plus I love writing them anyway) as the attack strategy is fairly unique (using a race condition to trigger an out-of-bounds write on the stack). It's also a fairly trivial exploit to implement, and the strategy of overwriting the return pointer on the stack is an easy method for learning security researchers to understand.

It also highlights how while an attack strategy may be old, perhaps this one being the oldest there is - they can still be applied in modern exploitation with slight variations.

Credits

• qwertyoruiopz

References

• Watson FreeBSD Kernel Cross Reference
• Microsoft Support : Description of race conditions and deadlocks

Thanks to...

Today Sony rolled out a new PlayStation 4 UI update that enhances discoverability across Netflix, Hulu, PlayStation Vue, YouTube, and more resulting in a fresh PS4 TV and video discovery experience for users.

Here's the official announcement straight from Product Marketing Senior Manager Carrie Surtees, to quote:

Starting today, the TV & Video experience on PlayStation 4 is getting a complete refresh in the U.S. The new design puts content front and center, making it easier for you to discover and watch the best movies and TV shows available across your favorite streaming services, such as Netflix, Prime Video, Hulu, and YouTube, in addition to PlayStation Video and PlayStation Vue.

• Browse in one place – You can now find trending content or discover new movies, TV shows, live TV events and user-generated content from your favorite video services in a single place, without jumping in and out of apps. TV & Video is now a central destination for exploring content and easily renting, purchasing, or subscribing to services that give you access to the content you want to watch.

• Featured and Spotlight categories – The ‘Featured’ section shows you a mix of the best content from various video services. We also have a ‘Spotlight’ section that shows you popular content based on a rotating theme, such as “Superheroes” or “Award Season.”

• Personalized YouTube experience – You can link your YouTube account to your PlayStation Network account to get personalized recommendations in the YouTube section. Personalized recommendations for other services are coming soon too!

• Currently trending live channels on PlayStation Vue – The PlayStation Vue section shows you live channels that are most popular now in your area. PS Vue subscribers get one-click access to the livestreams and the content shown will be tailored to your subscription plan.

• Direct app access – With the updated interface, you still have fast access to the video apps you use most, a full list of all available video services, and your PlayStation Store video library in ‘My Videos.’

April is almost here, and with it come Sony's latest offerings for PlayStation Plus subscribers including Mad Max and Trackmania Turbo to be featured next month!

Below is the complete listing from Sony's James Hallahan, to quote:

It's PlayStation Plus time! Here are the free games coming to PlayStation Plus members in April 2018.

First stop: Mad Max for PS4! Developed by Avalanche Studios, you star as the iconic lone warrior surviving a hostile Wasteland. Max Rockatansky's dangerous journey begins after a gang steals his legendary Interceptor. Combining open-world vehicle combat with bone-crunching battles, Mad Max will keep you fully immersed as you fight to get your Interceptor back and make it to the Plains of Silence.

Racing fans will appreciate TrackMania Turbo, a polished PS4 arcade racing game where your goal is to achieve the perfect racing time. You can hone your skills with 200 pre-built tracks, then create and share your own custom tracks to make the competition last forever.

This month's PlayStation Plus lineup also includes:

• In Space we Brawl, PS3
• Toy Home, PS3
• 99 Vidas, PS Vita
• Q*Bert Rebooted, PS Vita (Cross Buy with PS3 and PS4)

Of course, with PlayStation Plus you get a bunch of other benefits: exclusive discounts, online multiplayer, cloud saves, Share Play support and more. Learn more here. And that’s it for April. See you next month!

Today Sony announced that beginning tomorrow those thinking about jumping into the world of virtual reality on PlayStation VR can do so for $299.99 with details below.

Here's the full scoop from PlayStation Marketing VP Mary Yee, to quote:

Starting tomorrow, March 29, we’re reducing the MSRP of PS VR, now starting at $299.99 USD/379.99 CAD (MSRP). This new pricing provides an even greater value for PlayStation fans at a perfect time, with must-play PS VR titles like Moss and Sprint Vector.

There is also plenty to look forward to this year like Firewall Zero Hour, Rick and Morty: Virtual Rick-ality, WipEout Omega Collection, Blood & Truth and many others.

Here are the PS VR bundles included in the MSRP reduction.

PlayStation VR Doom VFR Bundle

$299.99 USD/379.99 CAD (MSRP)
Originally $399.99 USD/499.99 CAD (MSRP)

• Includes a PS VR headset, PlayStation Camera, PS VR Demo Disc 2.0 and the Doom VFR Blu-ray Disc. Doom VFR brings the fast-paced, kinetic gameplay fans of the series love as an all-new virtual reality experience.

PlayStation VR The Elder Scrolls V: Skyrim VR Bundle

$349.99 USD/449.99 CAD (MSRP)
Originally $449.99 USD/579.99 CAD (MSRP)

• Includes the PS VR headset, PlayStation Camera, two PlayStation Move controllers, the PS VR Demo Disc 2.0 and the Skyrim VR core game and all official add-ons. Skyrim VR brings to life the epic open world of The Elder Scrolls in an immersive virtual reality experience.

This year on PS VR it’s all about the content, with more than 180 games and experiences expected to launch by the end of the year, adding to a catalog of 220 PS VR supported titles already available in the U.S. Check out the list of games coming this spring.

Whether you’re into action/adventure, horror, puzzles or racing, PS VR’s deep content lineup will allow you to discover an entirely new world of play.

Following the release of his PS4 AIO v1.6.0, PlayStation 4 developer @MODDEDWARFARE passed along word on Twitter of his latest video detailing how to add custom payloads to your WebKit for PS4 4.55 / 4.05 jailbroken consoles.

From the video details: How to add Custom Payloads to your WebKit (4.55/4.05 Jailbreak)

How to add your custom payloads as buttons in the WebKit exploit to allow you to inject them without a payload injector.

How to host webkit locally:

Download Links:

• ps4-exploit-host: https://github.com/Al-Azif/ps4-exploit-host/releases/latest
• bin2js: bin2js.zip (includes bin2js.zip, Web Base 4.05.zip and Web Base 4.55.zip)