Another team is working on a PS5 14.10 jailbreak! All the research code is pub… · @qwerty__cs · TwKit

@qwerty__cs

Another team is working on a PS5 14.10 jailbreak! All the research code is public! ZiggyVall’s PS5-14.10-Research includes probe scripts, on-console test logs, and detailed analysis: 1. Two native threads attempted to delete the same AIO requests across 30 rounds, with 480 requests in total. Both threads reported successful deletion for 65 of them. 2. Follow-up testing showed that a kernel lock ensured each object was actually freed only once. A three-thread UAF attempt was also blocked by reference counting. 3. The write-up then pivots to memory reuse, exploring whether leftover kernel pointers can be recovered from freed objects to bypass KASLR. Check out the code and on-console test logs for yourself. Project link in the comments ⬇️⬇️⬇️

曝光 1301 · 评论 3 · 点赞 15 · 书签 1