PS3 WebKitSploit and PS3 Playground WIP Github Forks by Esc0rtd3w

Following his PS3 OFW PSID Dump Tool Tutorial and recent d0 / d1 pdb file findings PlayStation 3 developer @esc0rtd3w (Twitter) set up some new work-in-progress Github forks for a PS3 WebKitSploit and PS3 Playground port.

Download: ps3-webkitsploit-master.zip / PS3 WebKitSploit GIT / ps3-playground-master.zip / PS3 Playground GIT / Websploit.org / PS3 Playground Test Page / PS3 Webkit POC / PlayStation 3 Browser Investigation

The PS3 WebKitSploit is based on original PS4 code from Cryptogenic and qwertyoruiopz focusing on PS3 3.xx / 4.xx code execution, while the PS3 Playground WebKit exploit port is based on CTurt and Cryptogenics PS4 code.

From the README.md file, to quote: PS3 Playground

A collection of PS3 tools and experiments using the WebKit, Flash, and other options.
We are only testing on firmware 4.81 only at the moment.

THIS REPO IS FOR THE PUBLIC PS3 COMMUNITY TO EXPLORE AND TEST ON THEIR OWN

OUR TEAM IS CURRENTLY WORKING ON THIS PROJECT PRIVATELY AND WILL UPDATE WHEN FINISHED!

FOR A LIVE DEMO WITH PUBLIC TESTS TO TRY OUT, PLEASE VISIT: http://www.websploit.org/ps3/ps3-playground/test/

There are a lot of files here for reference and exploration.

Once more testing has been done, these will be cleaned up over time.

CREDITS:

Inspired by original work from CTurt (https://github.com/CTurt/PS4-playground/) and Cryptogenic (https://github.com/Cryptogenic/PS4-Playground-3.55)

Spoiler: Original (Outdated) Information

If anyone can lend him a hand on Github that would be much appreciated, and cheers to @B7U3 C50SS, @Bultra and @spyro2670 for the heads-up in the PSXHAX Shoutbox earlier today!

 

[Soar18]

@JaroslavN yah it kinda of that simple there no money left to be made on the system while sony is anti everything that doesnt involve money even they are not that stupid to spend thousands of dollars to make a patch for a system that doesnt make them money anymore

Until support for the PS3 is discontinued, it's likely that they'll still patch software-related vulnerabilities since there's still money to be made through the system (Little or not, people still buy offline titles from the PS Store). Any total costs of development and procedures for sending out the update that are 6-digits or under is chump change to that company.

It's not like they care enough about the system to make it a priority though since it's closing in on a year since the last system update, so anyone who checks Scene forums like this would have plenty of time to come across it before (if at all) it's patched. Trying to log into your living room Netflix box-- I mean Ps3, one day, and seeing a 4.82 update required would send a red flag to most people who care about this stuff to go online and Google the last firmware and the word "exploit" first.

 

[ShadixAced]

cannot be done without exposing all of the source code

have patience... good things will come

you will later look back at IDPS extraction as a very minor thing, and you will be able to do that after release anyways

Haha do not worry I am patient, just wanted to know, and if it is not possible without leaking all of the code then no problem about it. XD When it will be released it will be fire.

 

[kountzero]

@esc0rtd3w Quick question, is it looking like, for the 300* upward boxes, that you will have to load a cfw using the same old school method used on psp by hooking into the boot process using the relevant exploit and loading the FW from disk?

Or are you just going down the route of running unsigned code for webman and that's all.

Either would be great as I'd be able to give the wee man my white box without surrendering my disks lol

 

[esc0rtd3w]

@kountzero interesting question... we honestly do not know yet until we brick my 3001 a few times

looks as though only the 43xx will be an issue for full exploitation currently... not 100% sure yet though.

 

[Jaroslav01]

Most of the people (around 55%) have the slim model and not the super slim...

 

[k9mo]

@kountzero interesting question... we honestly do not know yet until we brick my 3001 a few times

looks as though only the 43xx will be an issue for full exploitation currently... not 100% sure yet though.

i have 43xx model but why will it be an issue?

 

[kountzero]

Well that is promising, I had to griddle reflow my old cfw box to do the dtu as it died a while back and the new ps3 I have for the young'n is a white 3008b. I'd much rather just give him the USB drive to play from than the games library.

It's hard enough keeping him away from the ps4 as it is lol

 

[esc0rtd3w]

i have 43xx model but why will it be an issue?

only because minver is higher. i really don't know yet and just assume all models will be supported, but some models may not be able to do everything some can do.

 

[JackTheFroster]

@esc0rtd3w i wonder if you looked at the thread of ModRobert and his Jailbreak progress in 2014.

At least he achieved something but i guess it was more Model-related and with an older firmware... Still HUGE thanks for getting this far on a jailbreak that nobody thought it would come ever. Hope you're keeping us up to date here

 

[B7U3 C50SS]

I still have those dumps.