PS3 WebKitSploit and PS3 Playground WIP Github Forks by Esc0rtd3w

Following his PS3 OFW PSID Dump Tool Tutorial and recent d0 / d1 pdb file findings PlayStation 3 developer @esc0rtd3w (Twitter) set up some new work-in-progress Github forks for a PS3 WebKitSploit and PS3 Playground port.

Download: ps3-webkitsploit-master.zip / PS3 WebKitSploit GIT / ps3-playground-master.zip / PS3 Playground GIT / Websploit.org / PS3 Playground Test Page / PS3 Webkit POC / PlayStation 3 Browser Investigation

The PS3 WebKitSploit is based on original PS4 code from Cryptogenic and qwertyoruiopz focusing on PS3 3.xx / 4.xx code execution, while the PS3 Playground WebKit exploit port is based on CTurt and Cryptogenics PS4 code.

From the README.md file, to quote: PS3 Playground

A collection of PS3 tools and experiments using the WebKit, Flash, and other options.
We are only testing on firmware 4.81 only at the moment.

THIS REPO IS FOR THE PUBLIC PS3 COMMUNITY TO EXPLORE AND TEST ON THEIR OWN

OUR TEAM IS CURRENTLY WORKING ON THIS PROJECT PRIVATELY AND WILL UPDATE WHEN FINISHED!

FOR A LIVE DEMO WITH PUBLIC TESTS TO TRY OUT, PLEASE VISIT: http://www.websploit.org/ps3/ps3-playground/test/

There are a lot of files here for reference and exploration.

Once more testing has been done, these will be cleaned up over time.

CREDITS:

Inspired by original work from CTurt (https://github.com/CTurt/PS4-playground/) and Cryptogenic (https://github.com/Cryptogenic/PS4-Playground-3.55)

Spoiler: Original (Outdated) Information

If anyone can lend him a hand on Github that would be much appreciated, and cheers to @B7U3 C50SS, @Bultra and @spyro2670 for the heads-up in the PSXHAX Shoutbox earlier today!

 

[Jaroslav01]

I meant it for the feature, releasing it on another domain stuff,,, The 3xpl01t isn't there @MrSand

 

[PSXHAX]

I removed the file links from user posts in this thread until we hear from the developer @esc0rtd3w on the leak and if his team has any plans for a 'proper' version, etc.

From what I could find out on it, it was obtained by Stuart#3733 (Skype live: stuak47 and isset_asset on Twitter) on Discord who supposedly hacked @esc0rtd3w somehow and ended up leaking it to others including @xxmcvapourxx who posted it here.

Apparently the leak was an incomplete PS3 4.81 WebKit exploit entry file system for accessing lv1 and lv2 and it doesn't currently work on 3k or 4k models.

Here's to hoping @esc0rtd3w sheds some more light on it!

 

[getthewrap]

Errr, what has happened? Anyone care to bring me up to date? Did the exploit just actually get leaked?

 

[Jaroslav01]

No, read sb, Just useless stuff if you don't understand anything about coding

 

[ShadixAced]

Just wanted to know, is there the IDPS dumper in the exploit pack ?

 

[k9mo]

No there is no idps dumper in it

 

[ayat123]

any hope for ftp/file manager?

 

[isaacelias]

so no webkitexploit for our ps3's?

 

[ayat123]

so bad

 

[getthewrap]

RIP hard work