Znullptr on PS4 / PS5 Jailbreak Exploit Development, Seeking Donations

Earlier this month developer @KIWIDOGGIE revealed on Twitter that unlike PS4 the PS5 utilizes (3) stages of security: Webkit (Userland), Kernel level and some additional memory (Hypervisor codenamed Hylonome / VM) protections... while over the weekend developer @zezu420 (aka Znullptr on Twitter) confirmed, "there are going to be more levels of 'jailbreak' for PS5 than for PS4" stating that, "others are working on it as well and maybe there will be disclosure 'soon'."

Since the PS5 Root Keys Were Obtained privately, a PS5 4.03 Kernel Build String alongside PS5 Webkit Execution: 4.03 ROP Userland Exploitation was publicly released in the PlayStation 5 Scene with developer Znullptr noting, "That is the firmware I tested the exploit on, others are vulnerable" referring to 4.03 PS5 OFW (3.20 now included also) as Sony just pushed live 5.00 PS5 OFW last week.

Security Engineer @CTurt also dropped some unspecific hints via Twitter in recent months pertaining to his HackerOne PlayStation Bounties, with the related Tweets included HERE for those who missed them.

In addition to adding PS5 support to a PS4 emulator called PSUV (additional projects at EmuDev.org), speaking on PS4 exploits, the ETA WEN crowd and related frustrations developer Znullptr makes a valid point stating, "everyone is still all about 9.03 even tho 9.00 was just released covering 99% of machines in existence" referring to the pOOBs4 Jailbreak Exploit that hit the PlayStation 4 Scene only a few months ago.

Being tired of contracting and bounties, Znullptr (aka dmiller423 on Github) is currently seeking donations for hardware and further testing... those interested in lending a hand can do so directly to David Miller via:

• DMiller423's Github Sponsor Page
• Znullptr's GoFundMe Page
• Znullptr's Patreon Page
• CashApp: $davidmiller423
• Email: [email protected]
• PayPal: [email protected] [email protected]
• Btc: 3BgHszsWVW2zDpKEmRPuJZbpu7T6usVvYw 34BmDpWkrKFhfTJDxbvBPZqt9JGF2YRsyi
• Eth: 0xA60c8f69bcEfB902F27586db4d2f67419D7ACb2A 0x80f7BEc9b1Ce7253334723e917E5a237cF85A4f8
• Znullptr's uTip Page
• Znullptr's BuyMeACoffee Page

Below are the related Tweets, and always verify the information matches prior to donating in order to avoid potential scammers:

Spoiler: Related Tweets

 

[andisheegold]

@jamesblond007
Should be HV exploit for the ps5

 

[blimblim04]

@jamesblond007
I bet you is for PS5, problem? theflow0 wont disclose any of this.

 

[MoneyT20]

@jamesblond007
If sony paid out that amount it must've been something massive that will never see the light of day. As most kernel exploits are usually submitted while the dev are on active PSN firmware and they usually only get between 5k and 10k (have to demonstrate to get paid).

He was paid out 20k so must've been a big flaw dealing with not only the network but also the integrity of the PS5. Ima guess he found a flaw in the bootloader, a bannerbomb style exploit (yeah Wii days) or a NVME exploit (which makes sense as after Z starts to discuss it a bounty is made).

All speculation mind you.

 

[Ceedlorenzo]

@MoneyT20
You might be right. 20k should be something massive. What if it is similar to nintendo switch too, something that couldn't be patched by a software update. But that could also mean it will never be disclosed

 

[stinger101mg]

woot that sounds like a direct hit, sunk sonys battle ship, hopefully it'll get disclosed soon.

buuuut i doubt something that big will get disclosed anytime soon, however if it does staying on the lowest firmware possible increases your chances of maybe being able to utilize said exploit. here's to hoping..

 

[s0nicTz]

Thanks I wait for 4.03 jailbreak ps5

 

[battlemon]

Any chance someone with knowledge could answer my question on post #31, pretty please?

I need to know if it is worth it for me to wait for a jailbreak or update my console, so I can play online.

 

[jamesblond007]

I've no knowledge but id say PSN access, of the bat is doubtful anytime soon, on a jailbroken PS4 or PS5. You either have a PS4/5 on jailbroken firmware without PSN or a PlayStation 4/5 that cant run exploits but can run PSN on most recent firmware.

Also theflow0 strikes again.. This guy is doing well according to HackerOne he has another exploit making his total in the last 4 months bounty $40.000.00, last exploit closed 1hr ago. Hopefully he will request disclosure & it will benefit the end user.

With talent like that who needs a day job?

 

[MoneyT20]

i think Z is on to a ps5 jailbreak as theflow0 are cashing in on their exploits before its too late.

 

[simonwest]

Yeah theflow0 has received another 10k for PS5 or PS4. Hope a PS5 4.03JB is near to disclosure.