PSXHAX.COM website and domain for sale. Contact Us with your offer!
PS4 / PS5 Scene Devs on AMD Server Vulnerabilities for November 2021
Following the 9.00 PS4 WebKit Exploit / 4.03 PS5 WebKit Exploit, Full Chain Exploit Rumored and Root PS5 Keys Obtained yesterday Twitter lit up once again with various PS4 Scene / PS5 Scene developers taking interest after Mark Ermolov's Intel Processor Advisory disclosure of a non-damaging way to extract the security fuses (Chipset + EPID root keys) from the Intel platforms proceeded by Volodymyr Pikhur's AMD Server Vulnerabilities for November 2021 security bulletin. 
For those unfamiliar with Volodymyr Pikhur (aka VPikhur)'s past contributions in the PlayStation 4 Scene, some highlights include being credited for PS4 Southbridge Processor work with EAP / EMC (PS5 EMC UART Pinouts) via side-channel analysis, glitching and ROM recovery in his PS4 IPL AES + HMAC Key Recovery project, a...
For those unfamiliar with Volodymyr Pikhur (aka VPikhur)'s past contributions in the PlayStation 4 Scene, some highlights include being credited for PS4 Southbridge Processor work with EAP / EMC (PS5 EMC UART Pinouts) via side-channel analysis, glitching and ROM recovery in his PS4 IPL AES + HMAC Key Recovery project, a...
PS4 9.00 & PS5 WebKit Exploit by Sleirsgoevy, Kernel Exploit Required!
Earlier this week PS4Scene developer @sleirsgoevy expressed interest in feedback of his FontFaceSet Vulnerability PoC based on the previously released code, and today he shared a PS4 WebKit Exploit (Github) on 9.00 Firmware... which has also been confirmed by @zecoxao via Twitter among others as a userland entry point on the latest PS5 Firmware 4.03 Update! 
As usual, it's currently not advisable by scene developers to update neither your PS4 nor PS5 consoles... remember this is only a WebKit Exploit, and that a Kernel Exploit (KEX) is also required for a full PS4 Jailbreak or PS5 Jailbreak release.
As usual, it's currently not advisable by scene developers to update neither your PS4 nor PS5 consoles... remember this is only a WebKit Exploit, and that a Kernel Exploit (KEX) is also required for a full PS4 Jailbreak or PS5 Jailbreak release. - PS4 WebKit Exploit on 9.00 Firmware (& PS5) Test Page via KameleonRe / PS4 OSS WebKit / PS5 OSS WebKit
Sleirsgoevy Interested in PS4 9.00 Reports on FontFaceSet Vulnerability PoC
After last week's barrage of WebKit vulnerabilities including CVE-2021-1879, CVE-2021-30858 with PlayStation 5 Test results, more PS4 & PS5 Testing alongside CVE-2021-30797 developer @sleirsgoevy (Github) shared on Twitter a FontFaceSet Vulnerability Proof-of-Concept (PoC) temporarily hosted for those in the PlayStation 4 Scene to try stating he's "Especially interested in reports from 9.00" PS4 firmware.
- vdsina.sleirsgoevy.dynv6.net:8081 (PoC Test Page) /
sender.exe(133 KB - GIT) by sleirsgoevy (BTW just finished another something-to-browser port. Remote package installation over NetCat! Well, not actually...) / sender.exe (Fixed) (147 KB) / sender.exe (276 KB - bgft-sender.exe updated for GoldHEN loader)
PS4 WebKit Vulnerable to Slow_Path_Profile_Catch (CVE-2021-30797)
Following confirmation of the PlayStation 4 WebKit Vulnerability, PlayStation 5 WebKit Vulnerability and even more reports of PS4 / PS5 WebKit Vulnerabilities the latest testing by Zellix67 on Twitter affecting Sony's PS4 WebKit now includes a JavaScriptCore: Uninitialized Register in Slow_Path_Profile_Catch (CVE-2021-30797) courtesy of ifratric via Project Zero.
PlayStation 4 Scene developer @Al Azif commented on Twitter: "So to everyone thinking the webkit vulnerabilities will lead to a exploit soon, there were 3 prior vulnerabilities that nothing was ever done with. It's neat making a list of ones that work, but..."
Additionally, @zecoxao reminds those asking for new PS4 Jailbreak exploits on Twitter: "you need to have patience
" noting "if you're really that desperate, just get a PS4 on 7.55 and below 
" while stating that "sleirs is currently checking the font face one" ...so fingers crossed on @sleirsgoevy's (Twitter)...
PlayStation 4 Scene developer @Al Azif commented on Twitter: "So to everyone thinking the webkit vulnerabilities will lead to a exploit soon, there were 3 prior vulnerabilities that nothing was ever done with. It's neat making a list of ones that work, but..."
Additionally, @zecoxao reminds those asking for new PS4 Jailbreak exploits on Twitter: "you need to have patience
" noting "if you're really that desperate, just get a PS4 on 7.55 and below " while stating that "sleirs is currently checking the font face one" ...so fingers crossed on @sleirsgoevy's (Twitter)...
WebKit Heap-Use-After-Free in EventHandler KeyEvent for PS4 / PS5
But wait, there's more! Yup, yet another PS4 WebKit / PS5 WebKit vulnerability surfaces... developer @Al Azif summarizes it best on Twitter simply stating, "Add it to the every growing list of webkit exploits that work 7.55+ 
"
This time the userland vulnerability is a WebKit: heap-use-after-free in EventHandler::keyEvent as reported by glazunov via Project Zero with NazkyYT supplying the source link alongside a browser test page set up by Zellix67 while crediting on Twitter KameleonRe for the script.
not advisable to update neither your PS4 nor PS5 consoles.
Looking forward to great progress in both the PS4Scene and PS5Scene, and cheers to ashrafasansol on Twitter for the screenshot below!
...
"This time the userland vulnerability is a WebKit: heap-use-after-free in EventHandler::keyEvent as reported by glazunov via Project Zero with NazkyYT supplying the source link alongside a browser test page set up by Zellix67 while crediting on Twitter KameleonRe for the script.
- Webkit Heap-Use-After-Free Test Page (Click on the third button "Webkit heap-use-after-free" and press "ok" and then do "R1")
not advisable to update neither your PS4 nor PS5 consoles.Looking forward to great progress in both the PS4Scene and PS5Scene, and cheers to ashrafasansol on Twitter for the screenshot below!
...