From ce296a4363a5f6183607974cd12fe9f018c9c533 Mon Sep 17 00:00:00 2001 From: Kameleon <77245601+kmeps4@users.noreply.github.com> Date: Sat, 27 Jan 2024 22:32:08 -0600 Subject: [PATCH] Update README.md --- README.md | 35 +++++++++++++++++++++++++++++++++-- 1 file changed, 33 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 0b8bb49..6ca1cf3 100644 --- a/README.md +++ b/README.md @@ -1,2 +1,33 @@ -# PSFree -PSFree WebKit Exploit for PS4 6.xx to 9.60 and PS5 1.xx to 5.xx +PSFree version 1.4.0 + +PSFree is a WebKit exploit using CVE-2022-22620 to gain arbitrary read/write. + +vulnerable: +* PS4 6.xx-9.xx (tested 6.00-9.60) +* PS5 1.xx-5.xx (tested 1.00-5.50) + +CREDITS: +* anonymous for PS4 firmware kernel dumps + +* janisslsm from ps4-dev on discord.com + * contributed ROP chain managers for 8.5x and 9.0x + * contributer of the ROP chain manager for 9.5x + * Helped in figuring out the size of JSC::ArrayBufferContents and its needed + offsets on different firmwares. + +* barooney from ps4-dev on discord.com + * contributer of the ROP chain manager for 9.5x + +* CelesteBlue from ps4-dev on discord.com + * Helped in figuring out the size of WebCore::SerializedScriptValue and its + needed offsets on different firmwares. + * figured out the range of vulnerable firmwares + +* Kameleon_ from ps4-dev discord + * Asked people to test 1.3.0 (beta) on other firmwares and reported if the + peformance boost worked (reports from 6.72-9.60). + +* Quentin Meffre (@0xdagger) and Mehdi Talbi (@abu_y0ussef) for the 6.xx + buildBubbleTree() UaF exploit that served as the framework for the exploit. + +* Maddie Stone for the CVE writeup