PS5 Webkit Exploit Allows The Internals of PS5 To Be Investigated
Link to article: https://bit.ly/3KZldG2
PlayStation scene hackers Chendochap and ZNullPtr have released a PS5 Webkit execution toolkit, based on the FontFace Webkit vulnerability. Although not a Jailbreak, this gives people with the right set of skills userland execution tools to dig deeper into the PS5 security, and takes the scene one step further to implementing the known kernel exploit (which would lead to a Jailbreak).
This exploit works on PS5 4.03 only at the moment. Firmwares above 4.03 are patched and have no hopes of getting this specific exploit to run. Lower firmwares are still a possibility, although the hackers mention that 2.00 and lower apparently do not have the vulnerability (as they do not have the vulnerable FontFace code in the first place)
PS5 Jailbreak: The story so far
Late last year, a full PS4 Jailbreak was released, leveraging a webkit Fontface exploit for its userland entry point, and a filesystem bug in the Playstation 4 firmware for privilege’s escalation.
Both the Webkit vulnerability and the kernel exploit have been confirmed to impact the PS5 as well (here and here respectively), leading to strong hopes from the PS5 scene that a PS5 Jailbreak was right around the corner.
A “port” from one console to the other is not a straightforward affair though, as the PS5 is pretty much a black box at this point for the hacking scene, and with Sony undoubtedly adding more security mechanisms to their new generation console.
It’s clear that several hackers have been hard at work trying to transform these vulnerabilities into a full fledged PS5 Jailbreak, as confirmed by today’s release. Significant progress has been made, but this is not an “end user” release at this point.
PS5 Userland Webkit ROP Release and writeup
Once again, we must emphasize that this is not a released intended for End users. It gives people on PS5 4.03 access to ROP execution, which could help them investigate the internals of the PS5. This work relies on the same Fontface Webkit vulnerability as the PS4, but the hackers had to leverage other mechanisms to gain execution access, as explained in the writeup: