Commit Graph

13 Commits

Author SHA1 Message Date
ArabPixel
84e45185b8 Update contribution section in README.md
Added contribution guidelines for language submissions.
2025-11-09 13:51:22 +01:00
ArabPixel
e38e00d3d6 feat:Support for loading payloads using GoldHEN
This commit adds the ability to load payloads using GoldHENs BinLoader by visiting the mirrored http host. Improvements in blocking payloads loading if your firmware is unsupported..
2025-10-03 10:28:58 +02:00
ArabPixel
cea0cd67e5 Added BinLoader 2025-09-10 14:36:46 +02:00
Al Azif
08ecf038c9 Update README.md 2025-09-05 11:41:15 -07:00
Al Azif
0abf863ff2 Removed abc's donation link per abc's request
- Key for wallet is lost
2025-06-08 14:52:24 -07:00
Al Azif
0bfa8c301e Add 7.xx support 2025-06-07 03:06:24 -07:00
Al Azif
c23ef56385 Run linter on everything 2025-06-05 22:38:15 -07:00
Al Azif
a7d1fb183c Initial 9.00-9.60 ROP chain, by @janisslsm
- Will need to be tweaked slightly, but it's currently working
- Thanks to @DrYenyen for testing literally everything
2025-06-05 16:12:57 -07:00
Al Azif
3b37a02a1d Update README.md 2025-06-03 22:27:45 -07:00
Al Azif
a74538dee4 8.00-8.52 are now supported 2025-06-03 17:01:27 -07:00
Al Azif
3ab19c3a0b Push updates...
1. Cleanup/Linting/Tweaks/Fixes/etc
  - Default Prettier config w/ 999 line length
  - Default eslint config "problems" list trimmed down
2. Fixed corrupt pointer cleanup by abc
3. Fixed `ip6po_rthdr` offset for PS5 by abc
4. Verified the number of blocking requests needed to be two by abc
5. Only run kernel exploit once by checking setuid by @JTAG7371
6. Kernel patches from pOOBs4 by @ChendoChap (Ported for 8.00-9.60)
7. Payload loader from pOOBs4 by @ChendoChap
8. Restore syscall 661 (`sys_aio_submit()`) after patching by @janisslsm
9. Add `PROT_READ`, `PROT_WRITE`, `PROT_EXEC` constants for payload loader by @janisslsm

The ONLY things that should need changes are the `/rop/ps4/*.mjs` files (850, 900, and 950).
Firmware 8.00 appears to be stable/have a good success rate now.
2025-06-01 03:46:23 -07:00
Al Azif
3e47ad92a0 Prep for multi-fw and publishing on GitHub
### Added

- `.gitignore` for kpatch output
- Auto detect console type and firmware in `config.mjs`
  - Used elsewhere to determine which offsets/patches/ROP chain are used
- WIP: Add 8.50-9.60 support
  - All offsets found
  - Running into some issue here. Wiped out my JOP chains to redo them...

### Fixed

- Call `lapse.mjs` rather than `code.mjs`
- Makefile for kpatch builds all currently available

### Changed

- Use relative locations rather than absolute
- Changed kpatch binaries to just be shellcode vs full ELFs
  - 5,216 bytes to 257 bytes.
- Build kpatch binaries with `-Os` rather than `-O`
  - 257 bytes to 233 bytes.
- Renamed/Formatted `CHANGELOG.md`, `README.md`, and `LICENSE`
2025-05-12 14:42:31 -07:00
Al Azif
b9f5957555 Initial commit 2025-05-12 14:30:43 -07:00