Hacking New exploit disclosed by theflow0 on hackerone

[nikeymikey]

Theflow0 is back with another exploit, don't know how useful it will be but the summary on hackerone says it can be used in conjunction with a webkit to dump and run pirated games.

#943231 SOCK_RAW sockets reachable from Webkit process allows triggering double free in IP6_EXTHDR_CHECK (hackerone.com)

The poc.c seems to be missing so maybe this isn't a full disclosure.....yet. It also mentions a ps4.c so i guess we just wait and see what happens next

 

[viggen66]

Probably this can make possible to dump new games who knows, there are some advanced users who know what this means some how,

 

[godreborn]

someone said that the exploit was patched on 8.00, so we may have a 7.51 exploit possible. I think the webkit exploit goes up that high.

 

[viggen66]

I think everybody has wishful thinking for "the last of us 2" being dumped

 

[godreborn]

if it goes high enough, the ghost of tsushima may also be dumpable.

 

[phonemonkey]

if it goes high enough, the ghost of tsushima may also be dumpable.

More downloads. Fook me.

 

[Aussie_]

More downloads. Fook me.

Only 10% of us will update the rest will still stay on 5.05 and expect backports

 

[phonemonkey]

Only 10% of us will update the rest will still stay on 5.05 and expect backports

Yeah, well I'm stuck on 7.02. No plans to upgrade though either way.

 

[ov3rkill]

Yay! Now, only time can tell when will this will usable in the jack sparrow scene.

 

[TR_mahmutpek]

IIRC, didn't he say ''HERE IS YOUR EXPLOIT AND FUCK YOU'' to scene? It's weird that he found an exploit, again..

 

[Andalitez]

IIRC, didn't he say ''HERE IS YOUR EXPLOIT AND FUCK YOU'' to scene? It's weird that he found an exploit, again..

Yeah I think that was on twitter

 

[Aussie_]

IIRC, didn't he say ''HERE IS YOUR EXPLOIT AND FUCK YOU'' to scene? It's weird that he found an exploit, again..

Not weird at all, he claimed another 10k, its for his own benefit finding flaws / exploits, sharing the exploits to the community after getting upset by comments by Mr Rasputin is another thing, thankfully he made another agreement with Sony to share part of the exploit publicly.

 

[viggen66]

Issue here is that only the basis of the exploit is disclosed not the code theflow used to showcase Sony the kernel works.

 

[magico29]

Only 10% of us will update the rest will still stay on 5.05 and expect backports

Keep dreaming, there is 0 reason to stay on 5.05, enjoy .

 

[isoboy]

Put my PS4 in the box at firmware 8.0.0 when I set up my PS5. I expect it to be hacked sooner or later.

 

[arfgh]

not clear yet, is it fw 8.00 involved yes or no ?

 

[nikeymikey]

Keep dreaming, there is 0 reason to stay on 5.05, enjoy .

There was no reasi t stay on 5.05 when the 6.72 exploit came around, that was just as stable as 5.05. Most people don't bother updating because the exploit is not as stable blah blah, but imo thats just pointless. Im have updated every time, the 7.02 exploit isn't that stable but its pretty quick to run each time and in my case usually only take a few attempts. At least it doesn't KP all the time like the 6.72 did when it failed
As soon as the new chained attack is released ill be updating again to 7.55

 

[magico29]

There was no reasi t stay on 5.05 when the 6.72 exploit came around, that was just as stable as 5.05. Most people don't bother updating because the exploit is not as stable blah blah, but imo thats just pointless. Im have updated every time, the 7.02 exploit isn't that stable but its pretty quick to run each time and in my case usually only take a few attempts. At least it doesn't KP all the time like the 6.72 did when it failed
As soon as the new chained attack is released ill be updating again to 7.55

At least somebody understand me, keep rocking.

 

[godreborn]

not clear yet, is it fw 8.00 involved yes or no ?

from what I've heard, it was patched on 8.00. I don't think the webkit exploit works on 8.00 either.

 

[Aussie_]

Keep dreaming, there is 0 reason to stay on 5.05, enjoy .

You misunderstood, was making a joke about the people who still wont update from 5.05.
I updated to Leeful's v4 or 5 when HEN was added. Planning to update again on wknd and try Night-King & Hakkuraifu since both have good feedback..