70 matches found
ps5-uart
24 pin header near salina EDM-010 emc header 1 5v 2 5v 3 gnd 4 gnd 5 emc gpio a1. pulling low at emc boot causes emc rom to enter uart shell @ 460800 6 uart rx emc 115200 7 uart tx emc 115200 8 3v3, goes low when emc resets 9 0v? 10 gnd 11 titania uart0 tx efc fw: 460800, eap fw: 691200 12 titani...
CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-
Poc for CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5- Usage: 1-press share button and make screenshot 2-with ftp go to path:/user/avcontents/photo/NPXS20001/NPXS20001/XXX/ you will find screenshot that you make. 3-copy it to pc and run it with makepng.py it will output poc.png 4-rename i...
Byepervisor
Byepervisor Summary PS5 hypervisor exploit for = 2.xx firmware. Two vulnerabilities and exploit chains are contained in the repo, they are independent of each other and either can be used. One exploit is provided mainly just for preservation /oldjumptableexploit, only the primary exploit chain...
Relapse-Exploit
PS5 Relapse Exploit Supported firmware: 7.00 through 13.60. Usage The default payloads are stored in payloads/ after a successful run, the ELF loader listens on port 9021. Stability notes Webkit may need several attempts, reload the page if the browser stalls. The kernel exploit may hang or panic...
PS5-IPV6-Kernel-Exploit
PS5 3.xx / 4.xx Kernel Exploit Summary This repo contains an experimental WebKit ROP implementation of a PS5 kernel exploit based on TheFlow's IPV6 Use-After-Free UAF , which was reported on HackerOne. The exploit strategy is for the most part based on TheFlow's BSD/PS4 PoC with some changes to...
PS5-UMTX-Jailbreak
PSFree version 1.4.0 PSFree is a WebKit exploit using CVE-2022-22620 to gain arbitrary read/write. vulnerable: PS4 6.xx-9.xx tested 6.00-9.60 PS5 1.xx-5.xx tested 1.00-5.50 CREDITS: anonymous for PS4 firmware kernel dumps janisslsm from ps4-dev on discord.com contributed ROP chain managers for 8....
ps5-pihost
PS5 Pi Host Use Raspberry Pi OS Lite 64-bit, Bookworm or newer with NetworkManager. A 64 GB SD card has ample room. This runs the existing Python host; do not flash the ESP32 binary to the Pi or its SD card. What this does The Pi creates a Wi-Fi network for the PS5. Its DHCP server assigns the...
etaHEN
etaHEN - AIO Homebrew enabler 🚀 Support the Project If you find this project useful and would like to support its continued development, consider buying me a coffee! Building from Source The Source code is provided in the Source code folder under GPLv3 with all the necessary files to build it as...
ps5-umtxdbg
NOTES The bug was found in early december 2020, not by me, but a genius who looked 15mins at fbsd and immediately spotted it 🙇♂️. This c++ impl was made when experimenting with increasing exploit reliability after ps5 kernel added some heap randomization features. setup vm get vm image wget...
schizo-host
relapse PS5 WebKit + kernel exploit chain relapse / aio, fi...
exploit
PS5 Relapse Exploit — by Muhammad Yaser Supported firmware: 7...
ps5-esp32host
PS5 ESP32 Host — Relapse Exploit Supported firmware: 7.00 t...
ps5-pihost
PS5 Pi Host Use Raspberry Pi OS Lite 64-bit, Bookworm or ne...
relapse
PS5 WebKit and Relapse Exploit Supported firmware: 7.00 throug...
Relapse-Exploit-for13.6.0
PS5 Relapse Exploit & 4-Player Multiplayer Subsystem Firmware...
PS5_Relapse_Exploit_selfhost
Relapse on CasaOS This repository packages Relapse-Exploit...
Relapse-Exploit
PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...
Relapse-Exploit
PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...