PS3 WebKitSploit and PS3 Playground WIP Github Forks by Esc0rtd3w

Following his PS3 OFW PSID Dump Tool Tutorial and recent d0 / d1 pdb file findings PlayStation 3 developer @esc0rtd3w (Twitter) set up some new work-in-progress Github forks for a PS3 WebKitSploit and PS3 Playground port.

Download: ps3-webkitsploit-master.zip / PS3 WebKitSploit GIT / ps3-playground-master.zip / PS3 Playground GIT / Websploit.org / PS3 Playground Test Page / PS3 Webkit POC / PlayStation 3 Browser Investigation

The PS3 WebKitSploit is based on original PS4 code from Cryptogenic and qwertyoruiopz focusing on PS3 3.xx / 4.xx code execution, while the PS3 Playground WebKit exploit port is based on CTurt and Cryptogenics PS4 code.

From the README.md file, to quote: PS3 Playground

A collection of PS3 tools and experiments using the WebKit, Flash, and other options.
We are only testing on firmware 4.81 only at the moment.

THIS REPO IS FOR THE PUBLIC PS3 COMMUNITY TO EXPLORE AND TEST ON THEIR OWN

OUR TEAM IS CURRENTLY WORKING ON THIS PROJECT PRIVATELY AND WILL UPDATE WHEN FINISHED!

FOR A LIVE DEMO WITH PUBLIC TESTS TO TRY OUT, PLEASE VISIT: http://www.websploit.org/ps3/ps3-playground/test/

There are a lot of files here for reference and exploration.

Once more testing has been done, these will be cleaned up over time.

CREDITS:

Inspired by original work from CTurt (https://github.com/CTurt/PS4-playground/) and Cryptogenic (https://github.com/Cryptogenic/PS4-Playground-3.55)

Spoiler: Original (Outdated) Information

If anyone can lend him a hand on Github that would be much appreciated, and cheers to @B7U3 C50SS, @Bultra and @spyro2670 for the heads-up in the PSXHAX Shoutbox earlier today!

 

[Wultra]

@UmarDaBest559 should be able to answer that for you as he's a hacker

 

[LightningMods]

Yes, and no way at all fake make sure to give him ALL your exploits he will NOT make them public he is very trustworthy

 

[esc0rtd3w]

I'm new to most of this and just a question. What can you use to find these exploits/vulnerabilities on PS3. Just a little question. Thanks to whoever can answer.

we mostly used webkit tests from source and researching webkit/chromium CVE numbers.

the PS3 is easy to crash, lots of bugs. Lots of ways to freeze and cause craziness to happen. The difficult part is using that crash to your advantage.

just to give you an idea of how much work has gone into it just to get where we are currently, myself and the others spend around 10+ hours each day testing, researching, testing, testing, testing, writing code, testing, testing, etc!

 

[UmarDaBest559]

Latest fw woohoo

 

[ItZzVast]

we mostly used webkit tests from source and researching webkit/chromium CVE numbers.

the PS3 is easy to crash, lots of bugs. Lots of ways to freeze and cause craziness to happen. The difficult part is using that crash to your advantage.

just to give you an idea of how much work has gone into it just to get where we are currently, myself and the others spend around 10+ hours each day testing, researching, testing, testing, testing, writing code, testing, testing, etc!

Thanks. Are there like some guides or something?

 

[esc0rtd3w]

Thanks. Are there like some guides or something?

the PS3 Playground repo is a good place to start. Lots of docs to read and different things for exploration and testing, including the WebKit source for PS3.

The limited documentation for PS3 specific WebKit and other untapped browser areas make it more difficult, plus being PowerPC, but that is basically what we started with.

also check previous posts for info and links to other useful items

 

[twostepmic]

How is the testing going esc0rtd3w? we all know your working hard to bring exploits. Just wanted to know what the progress is.

 

[ShadixAced]

I'm going to create bubbles.

*powerPC is like a mac. use CVE's that were found on Macs*

 

[esc0rtd3w]

How is the testing going esc0rtd3w? we all know your working hard to bring exploits. Just wanted to know what the progress is.

no new progress other than what has been recently posted already.

 

[Piper2603]

Maybe i am a little bit stupid, but what can we make with the websploit? Can we jailbreak a Super Slim with it? Or is it to put games on a OFW 4.81? I am a little bit confused