PS3 WebKitSploit and PS3 Playground WIP Github Forks by Esc0rtd3w

Following his PS3 OFW PSID Dump Tool Tutorial and recent d0 / d1 pdb file findings PlayStation 3 developer @esc0rtd3w (Twitter) set up some new work-in-progress Github forks for a PS3 WebKitSploit and PS3 Playground port.

Download: ps3-webkitsploit-master.zip / PS3 WebKitSploit GIT / ps3-playground-master.zip / PS3 Playground GIT / Websploit.org / PS3 Playground Test Page / PS3 Webkit POC / PlayStation 3 Browser Investigation

The PS3 WebKitSploit is based on original PS4 code from Cryptogenic and qwertyoruiopz focusing on PS3 3.xx / 4.xx code execution, while the PS3 Playground WebKit exploit port is based on CTurt and Cryptogenics PS4 code.

From the README.md file, to quote: PS3 Playground

A collection of PS3 tools and experiments using the WebKit, Flash, and other options.
We are only testing on firmware 4.81 only at the moment.

THIS REPO IS FOR THE PUBLIC PS3 COMMUNITY TO EXPLORE AND TEST ON THEIR OWN

OUR TEAM IS CURRENTLY WORKING ON THIS PROJECT PRIVATELY AND WILL UPDATE WHEN FINISHED!

FOR A LIVE DEMO WITH PUBLIC TESTS TO TRY OUT, PLEASE VISIT: http://www.websploit.org/ps3/ps3-playground/test/

There are a lot of files here for reference and exploration.

Once more testing has been done, these will be cleaned up over time.

CREDITS:

Inspired by original work from CTurt (https://github.com/CTurt/PS4-playground/) and Cryptogenic (https://github.com/Cryptogenic/PS4-Playground-3.55)

Spoiler: Original (Outdated) Information

If anyone can lend him a hand on Github that would be much appreciated, and cheers to @B7U3 C50SS, @Bultra and @spyro2670 for the heads-up in the PSXHAX Shoutbox earlier today!

 

[PSXHAX]

i have an IP address log, and what do ya know...Stuart is in UK and last IP address on my mega account in UK

If you PM me the IPs I'll check them against the database here to see if there are any matches that may lend us a clue.

I'm not familiar with Skype really but according to online resolvers the Skype user 'stuak47' (Twitter) reverse-email lookup goes back to 'teroristuak47 AT yahoo.com' with no matches here.

Probably unrelated but of note, the Skype user 'stu.ak47' is a known scammer, etc in a bunch of Google search results.

 

[B7U3 C50SS]

Just doesn't quite make sense does it? I look at it the same way i look at mainstream media. It's not news anymore. Just entertainment. Look at it like that and you'll never be disappointed.

isn't it supposed to be entertainment? that's why the console exists anyway.....

 

[aray276]

ohh damme it are you sure yo lost your file @esc0rtd3w?

 

[esc0rtd3w]

If you PM me the IPs I'll check them against the database here to see if there are any matches that may lend us a clue.

I'm not familiar with Skype really but according to online resolvers the Skype user 'stuak47' reverse-email lookup goes back to 'teroristuak47 AT yahoo.com' with no matches here.

Probably unrelated but of note, the Skype user 'stu.ak47' is a known scammer, etc in a bunch of Google search results.

i sent pm. thanks

@aray276 i didn't "lose" files....what is this, Grandma's Boy!?!?! haha

the files were archived copies that were synced to MEGA from my laptop

 

[aray276]

ok thanks @esc0rtd3w i still hope fore your job cause i have one ps3 slim cech 2507a that cant to downgrade and i waiting for your exploit done

 

[getthewrap]

i sent pm. thanks

@aray276 i didn't "lose" files....what is this, Grandma's Boy!?!?! haha

the files were archived copies that were synced to MEGA from my laptop

It's good to know that your work hasn't permanently lost. I wish you luck in finding whomever stole your code.

 

[PSXHAX]

i sent pm. thanks

Sent you a PM back, will follow-up tomorrow early afternoon

 

[RebugUsr]

OH MY GOD. this is going to kill me, is better than a latino novels hahahahaah.

@esc0rtd3w i hope you recover all your files and continue with the exploit
Venezuela trust in you! HAHAHAH

 

[aray276]

esc0rtd3w this is yours and no one can't pattern that it is they're job... you are great man and every body knows that

 

[esc0rtd3w]

its the whole team to give credit and all involved.......which will be revealed very shortly.

we are releasing what we have on GitHub so no scumbag can make any money from it.

it is what it is. The community can use it as a base.