JailbreakMe PS4 4.0x: PS4 4.0x WebKit RCE Exploit by Qwertyoruiopz!

Following the PS4 Playground for Firmware 3.55 and PS4 3.55 File Browser, today PlayStation 4 developer qwertyoruiopz made available a PS4 4.0x WebKit RCE Exploit dubbed JailbreakMe PS4 4.0x with details via Twitter below!

PS4 Link (click go 3 times): http://rce.party/ps4/ / local rce.rar (3 KB) via Nesterwork / Local RCE v2.rar (6 KB) via Nesterwork / Local rce v3.rar (12 KB) via Nesterwork

According to the developer's Tweets below, the bug used is a stack uninit read yielding UaF and the actual exploit does nothing but give you read/write/infoleak arbitrary JS object primitives.

He also confirmed the exploit won't work on PS4 4.50 as Sony updated WebKit past a vulnerable version unfortunately, but it's still an entry point for those on PlayStation 4 OFW 3.55 through 4.07.

That said, if you give it a try on a PlayStation 4 under 4.50 and receive a ffff000000000539 error prompt it's expected output for the exploit's success.

Spoiler: Related Twitter Tweets

Cheers to @DarkElementPL, @DoxyMarket, @hyndrid, @ryan111, @toni1988 and @vettegast for sharing the news in the PSXHAX Shoutbox!

 

[PSXHAX]

Here is a WIP compatibility list from @PixelButts:

 

[Jhonny]

3.55 confirmed work

 

[SpecterDev]

To all the people saying this is Pegasus, no this is not the Pegasus exploit. It utilizes garbage collection in the same way, but it does not abuse defineProperties().

 

[sp0k]

now expect racer to show up and confirm that this is the exploit which worked until 4.5beta

anyway if this will lead just to Linux and not CFW then it will end up the same as 1.76 hack...

 

[hector09]

Don't update higher than 4.05.

Why? isnt it the same thing? 4.05 and 4.07 i mean as Centrino said we have read/write access up to 4.07

 

[MaSsAcReuR]

Can you let me know how to use the browser when you never connected your PS4 to the PSN?

 

[GR33N TR14NG73]

I understand that but my question is should it be better to just update to 4.07 and do the exploit or just stay in 3.70

Thank you

I wasnt replying to your question i was asking my own for anyone to answer. To answer your question in my opinion i would update only if you really want to play those games otherwise stay on 3.70

 

[PSXHAX]

Can you let me know how to use the browser when you never connected your PS4 to the PSN?

There are a few work-arounds for 1.76 that may be of use depending on which version you have:

• PS4 1.76: Permanent Internet Browser Mod
• LudicrousBeach's Recompiled PS4 Dlclose Exploit Web Browser Patch
• Enabling PS4 1.76 Internet Browser Without Signing Into PSN Guide

 

[GR33N TR14NG73]

U can 100% via safe mode

​

Thx I dont currently have it in my poseesion so thats why i asked

 

[MaSsAcReuR]

There are a few work-arounds for 1.76 that may be of use depending on which version you have:

• PS4 1.76: Permanent Internet Browser Mod
• LudicrousBeach's Recompiled PS4 Dlclose Exploit Web Browser Patch
• Enabling PS4 1.76 Internet Browser Without Signing Into PSN Guide

Thanks but they all seem to be for the fw 1.76. I have a PS4 Pro under fw 3.55