PS3 WebKitSploit and PS3 Playground WIP Github Forks by Esc0rtd3w

Following his PS3 OFW PSID Dump Tool Tutorial and recent d0 / d1 pdb file findings PlayStation 3 developer @esc0rtd3w (Twitter) set up some new work-in-progress Github forks for a PS3 WebKitSploit and PS3 Playground port.

Download: ps3-webkitsploit-master.zip / PS3 WebKitSploit GIT / ps3-playground-master.zip / PS3 Playground GIT / Websploit.org / PS3 Playground Test Page / PS3 Webkit POC / PlayStation 3 Browser Investigation

The PS3 WebKitSploit is based on original PS4 code from Cryptogenic and qwertyoruiopz focusing on PS3 3.xx / 4.xx code execution, while the PS3 Playground WebKit exploit port is based on CTurt and Cryptogenics PS4 code.

From the README.md file, to quote: PS3 Playground

A collection of PS3 tools and experiments using the WebKit, Flash, and other options.
We are only testing on firmware 4.81 only at the moment.

THIS REPO IS FOR THE PUBLIC PS3 COMMUNITY TO EXPLORE AND TEST ON THEIR OWN

OUR TEAM IS CURRENTLY WORKING ON THIS PROJECT PRIVATELY AND WILL UPDATE WHEN FINISHED!

FOR A LIVE DEMO WITH PUBLIC TESTS TO TRY OUT, PLEASE VISIT: http://www.websploit.org/ps3/ps3-playground/test/

There are a lot of files here for reference and exploration.

Once more testing has been done, these will be cleaned up over time.

CREDITS:

Inspired by original work from CTurt (https://github.com/CTurt/PS4-playground/) and Cryptogenic (https://github.com/Cryptogenic/PS4-Playground-3.55)

Spoiler: Original (Outdated) Information

If anyone can lend him a hand on Github that would be much appreciated, and cheers to @B7U3 C50SS, @Bultra and @spyro2670 for the heads-up in the PSXHAX Shoutbox earlier today!

 

[esc0rtd3w]

@esc0rtd3w would love a free 1.76 PS4 to test on!!!

 

[lobimagobi]

@lobimagobi You cant just come here and tell people what they have to do. He wants to work on ps3? this is his choice.

If you really want him to stop "wasting his time" and start working on the ps4 for you, get @esc0rtd3w a ps4.

Cry some mooore

I'm a Web dev. I can't help with low level stuff

 

[AhmadMoemen2003]

Cry some mooore

I'm a Web dev. I can't help with low level stuff

Yeah, but PS3 isn't low level, it's just has an advanced security (ECDSA, as far as I remember) and the security of PS3 is more advanced than the PS4's one, so how is the PS3 is low level? And if it's low level, how easy can it be?

Sorry for the n00bish answer, but I want to show mine.

I'd like to ask @esc0rtd3w about something, How's your progress?
And how long does it take to make a special thing like this?

 

[lobimagobi]

Is this a joke? Finding exploits is very low-level work and I don't want to mess with C when executing payloads

 

[AhmadMoemen2003]

Is this a joke? Finding exploits is very low-level work and I don't want to mess with C when executing payloads

It's some fine thing you explained it, but if you don't mess up at this 'low level' work, then don't mess up in this thread if you're helpless here.

 

[lobimagobi]

RIP english RIP brain

 

[defense]

RIP english RIP brain

Ahmad is right, stop.

 

[lobimagobi]

Wanna join the crytrain m9?

Thanks. Classic because I know that I am right and I know much more than you about this stuff so yeah.

 

[defense]

Thanks. Classic because I know that I am right and I know much more than you about this stuff so yeah.

Sure you do, and I stand corrected. What Ahmed said was wrong. Didn't read his post properly.

Bombob is right, stop asking for stuff. If you want it do it yourself. There's plenty of books on the internet that could help you figure this stuff out.

 

[AhmadMoemen2003]

Sure you do, and I stand corrected. What Ahmed said was wrong. Didn't read his post properly.

Bombob is right, stop asking for stuff. If you want it do it yourself. There's plenty of books on the internet that could help you figure this stuff out.

Screw this argument, bombob got the right thing, Shall we ask @esc0rtd3w about his project?

RIP english RIP brain

English wasn't capital, you got TRIGGERED.