PS3 WebKitSploit and PS3 Playground WIP Github Forks by Esc0rtd3w

Following his PS3 OFW PSID Dump Tool Tutorial and recent d0 / d1 pdb file findings PlayStation 3 developer @esc0rtd3w (Twitter) set up some new work-in-progress Github forks for a PS3 WebKitSploit and PS3 Playground port.

Download: ps3-webkitsploit-master.zip / PS3 WebKitSploit GIT / ps3-playground-master.zip / PS3 Playground GIT / Websploit.org / PS3 Playground Test Page / PS3 Webkit POC / PlayStation 3 Browser Investigation

The PS3 WebKitSploit is based on original PS4 code from Cryptogenic and qwertyoruiopz focusing on PS3 3.xx / 4.xx code execution, while the PS3 Playground WebKit exploit port is based on CTurt and Cryptogenics PS4 code.

From the README.md file, to quote: PS3 Playground

A collection of PS3 tools and experiments using the WebKit, Flash, and other options.
We are only testing on firmware 4.81 only at the moment.

THIS REPO IS FOR THE PUBLIC PS3 COMMUNITY TO EXPLORE AND TEST ON THEIR OWN

OUR TEAM IS CURRENTLY WORKING ON THIS PROJECT PRIVATELY AND WILL UPDATE WHEN FINISHED!

FOR A LIVE DEMO WITH PUBLIC TESTS TO TRY OUT, PLEASE VISIT: http://www.websploit.org/ps3/ps3-playground/test/

There are a lot of files here for reference and exploration.

Once more testing has been done, these will be cleaned up over time.

CREDITS:

Inspired by original work from CTurt (https://github.com/CTurt/PS4-playground/) and Cryptogenic (https://github.com/Cryptogenic/PS4-Playground-3.55)

Spoiler: Original (Outdated) Information

If anyone can lend him a hand on Github that would be much appreciated, and cheers to @B7U3 C50SS, @Bultra and @spyro2670 for the heads-up in the PSXHAX Shoutbox earlier today!

 

[NTarchidevil]

can't waitttttttt

 

[getthewrap]

Well, you are going to have to wait.

 

[NTarchidevil]

How long?

 

[ShadixAced]

If it can help, I am rewriting the server.py on Python3.

I only need to resolve a problem with __init__.py. Because i have changed from SimpleHTTPServer to class PS3WebServer(http.server) and now it tells me this : TypeError: module.__init__() takes at most 2 arguments (3 given)

 

[Jaroslav01]

U just had to install Python 2.7 and everything works perfectly

 

[ShadixAced]

Yes I already know that, it was coded for Python2, but I've changed some things and it appears to work, just need to deal with this.

 

[isaacelias]

I'm having this error when I open on my ps3 index_cex_nand.html :

The string variable named usb_fp_rosdump could not be located in range 0x80278000 - 0x8038xc000

then my ps3 needs hard reset to work again.

Any ideas?

 

[zant]

Damn leakers, you always go and spoil it for everybody. Just let the team work in peace! Releasing an unfinished exploit is dangerous to end users and it harms the morale of the people doing the hard work, all for 10 minutes of scene fame? Come on...

 

[isaacelias]

I'm not looking for scene fame like the guys who post pictures of kernel exploits on ps4, I'm just doing it for research

 

[kevlion]

just dont end up destroying your ps3