PS4 3.55 WebKit Exploit POC Released!

Published 9th Aug 2016

Version number 3.55 doesn't seem to be a good number for Sony updates...

As you may have noticed, last week I published an article about the Henkaku exploit. Well, the exploit used for Henkaku has been ported over to the PlayStation 4 by Fire30 (if you wish to take a look, you can do so here, however it's fairly advanced and unless you know what you're doing it won't be much use to you).

Although it's currently pretty unstable, it can be used to get module information about the system as well as technical information such as the webkit module's base address and such. ROP also works (using CTurt's "JuStROP" project), however it's kind of limited at the moment because of how unstable the exploit is.

{img=ps4exploit1.png}A snippet of code of the exploit written in JavaScript.{/img}

Many developers, such as myself, have began working on projects based off this exploit (hint hint, there may be some interesting things coming soon), however this doesn't confirm a CFW will be coming to PS4 3.55 anytime soon. A lot of things still need to be done, including the discovery of a kernel exploit to free out of the jail WebKit is in.

While this isn't a "wow the PS4 has been blown wide-open" moment, or even a moment that comes close to the 1.76 exploit, it is a step along the road to all sorts of potential with modding the PS4.