The PS4Webkit Project: An Attempt to Fabricate a 4.xx PS4 Web Exploit

After lots of news articles about PS4 Linux and the fact it is not going to see a release because of drama; I got to the idea to make an exploit together with the community.

Presenting the PS4webkit project!

• So what is this "project" all about?

My plan is to develop a webkit/userland exploit with the help of the whole community, it pretty unlikely to succeed but hey! we can always try.​

• But how can I contribute?

Simple, if you have any research, write-up's, CVE's, code or anything that could be usefull to other contributors, commit it on the github or paste it into the comments on this thread​

• Are there any rules you need to follow?

Just to keep all code clean and as stable as possible there are some thing's you must not do to the code:

1. Add credit's to your code (Full ASCII banner are not allowed, but a single line comment mentioning you is allowed if you have written a big piece of code)
2. Don't commit code if you don't know what it does, seriously, leave it to the real devs (if any will ever join )
3. Post research and code in their respective branch

• So where is the github?

The project github is located at https://github.com/kazookid0/PS4webkit

Let's try to make something out of it. (btw plz no hate i tried lol)​

 

[Radio]

Exploit for 4.05???? Not even gonna try and find one for 4.07??

 

[PSXHAX]

I like this idea. The worst that can happen is nothing. Then we're still in the same situation as now. Plenty of upside though.

That was my thought exactly

 

[SockNastez]

Exploit for 4.05???? Not even gonna try and find one for 4.07??

Lol we aren't elite hackers we are just a group of people with possibly enough knowledge to crack the answer on 4.XX and 3.XX possibly. The thing is we KNOW the exploit exists on 4.05.

 

[Sametto Chan]

Lol we aren't elite hackers we are just a group of people with possibly enough knowledge to crack the answer on 4.XX and 3.XX possibly. The thing is we KNOW the exploit exists on 4.05.

If Sony is bigger problem, then sony will be update to 5.00 lmao. o-o

 

[Radio]

Man I hope PS4 GIFLIB is a thing...

 

[Heltrix]

perfect idea man its a fact that a team can do much more/faster work then just people separately! Keep it up!

 

[yota1979]

For my contribute i try to test this and I'd like to share with you because i don't have knowledge in programming and webkit

My PS4 is on firmware 4.00

I use this exploit
WebKit - TypedArray.fill Memory Corruption

You can find here an example and download the html page to test:
https://www.exploit-db.com/exploits/40183/

When I try to execute from the browser of PS4 on this page I have this :

1) The browser tell me if i'd like to stop the javascript ( but I don't sto and continue to execute)
2) After some time ( few second) i have and error in the browser ( the first image with the error with "undefinied is not a function "
3) After that the PS4 go into black screen ( I don't think is a reboot but a crash of the browser) and after few second the ps4 come back with the message of error in the system ( the 2nd image).

​

I don't know if if this is usable as webkit exploit for this project.

Happy new year 2017 at all!

 

[SSShowmik]

Hopefully it's a memory crash which might prove useful. So you think the browser crashed but there were no reboots right? Well lets see what people that know this stuff have to say about it. Happy new year guyz. it's already 2017 over here.

 

[yota1979]

Yeah I think there is no reboot because the ps4 remaining on black screen I think for 7/8 sec. and after I have directly the error posted above.

 

[Seedlord]

I can confirm @yota1979 for Firmware 4.05. But there is no Blackscreen after "undefined is not a function...." its loading a bit and going back to browser with blank html page (the one with the exploit). The exploit writer says there are "three places that code can be excuted". Does anyone know how to do so?

And i also tested some older Exploits from here:

• Run test #1 (Garbage) Press on d-pad to see error – tested (3.15, 3.50 – OK)
• Run test #2 (Time) – tested: 3.15-3.50 (fail), 2.50-3 (blank screen)
• Run test #3 (DOM document focus) – tested (3.15, 3.50 – OK)

#1 and #3 is also working on 4.05. It says "There is not enough free system memory".

So is this a working exploit? What can we do with them?